last executing test programs:

1m54.382790573s ago: executing program 0 (id=7714):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000300)="00000000020001000003a90830332b35", 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000021"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e00000010000000000c9ffff00000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

1m54.29995225s ago: executing program 0 (id=7716):
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x2, 0xb, 0x9}, {0x5, 0x1, 0x1000, 0x9, 0x0, 0xc}, 0x3, 0x4, 0xe6d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x5b0d649c4533b841}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c004}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x18)

1m54.299671702s ago: executing program 2 (id=7717):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300021c000000000003a715cd0c001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b140936aefd5769368f40653727f7526af11d10fafc11b91ced9d4ae3916383fb98fc275e11f5bed4ec3469dd878bea99164e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d6200000000000000030006000000000002000000ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x8800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4, 0x101, 0x4000005, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f00000001c0))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r5, 0x0, 0x8000000000000000}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x8010800000000084)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffffffffffff59, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x400}]}, &(0x7f0000000080)=0x10)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r9}, 0x8)
sendmmsg$inet6(r7, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040)

1m54.264060265s ago: executing program 0 (id=7719):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4)

1m54.261813059s ago: executing program 2 (id=7720):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0x14, 0x0, 0x3, 0x8, 0xff, 0xff, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x3, [0x0, 0x3]}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000"], 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xf}, 0x94)
ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, 0xfffffffffffffffe)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', <r5=>0x0, 0x8000, 0x80, 0x6, 0x200, {{0x3e, 0x4, 0x0, 0x5, 0xf8, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x28, 0x54, 0x0, 0x8, [0x1, 0x7, 0x6, 0x7, 0x9, 0x1000, 0x8, 0xe, 0x0]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0xde, 0x3, 0x0, [{@broadcast, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast2, 0x50}, {@rand_addr=0x64010102, 0x3}, {@rand_addr=0x64010100, 0x4}, {@remote, 0xf}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xfffffff8}, {@multicast1, 0x10002000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @lsrr={0x83, 0x1b, 0xa, [@private=0xa010102, @loopback, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x31}]}, @ssrr={0x89, 0xb, 0x95, [@broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x39, [@rand_addr=0x64010100]}, @generic={0xc, 0x6, "b758ca1d"}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x7, 0x3, "ac"}, {0x5, 0x5, "bc04bb"}, {0x5, 0x12, "2a2da26e21a682d438a0ac915130409d"}, {0x0, 0x3, "e0"}]}, @timestamp={0x44, 0x8, 0x64, 0x0, 0xe, [0xfffffffb]}]}}}}})
sendmsg$can_raw(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000480)=@canfd={{0x2}, 0x39, 0x5, 0x0, 0x0, "99e749d376f7d908043104ac42b8c6f81a6acfc9502e42cfbb1607762b7a8ec24f7fcb768144f41f55646b3cb9e74123e3fd0cf21429ad92a4167ef28ca5e463"}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x6004c850)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

1m54.196334334s ago: executing program 0 (id=7722):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r2, 0x4}, 0x8)
r3 = socket$inet(0x2b, 0x4, 0x0)
listen(r3, 0x9)
sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="b5000000000000eeb0fd79ab818d", 0xe}], 0x1}}], 0x1, 0x0)

1m53.7890803s ago: executing program 2 (id=7728):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x1, 0x7800, 0x4000001, 0x40000004, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0xfff, 0x42, 0x4, 0x0, @rand_addr=0x64010100, @empty}}}}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

1m53.6875931s ago: executing program 2 (id=7730):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xe}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040090}, 0x2004c015)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c4a5}, 0x20000010)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x404c080)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x1}, 0x8)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x20040041)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl1\x00', <r8=>0x0, 0x29, 0x7, 0x5, 0x81, 0x40, @mcast1, @private2, 0x1, 0x0, 0x0, 0x148}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'veth0_vlan\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000900)={'batadv0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', <r14=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a40)=<r15=>0x0, &(0x7f0000000a80)=0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wg0\x00', <r16=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', <r17=>0x0, 0x4, 0xd, 0x0, 0x9, 0x6c, @mcast1, @empty, 0x1, 0x8000, 0x8, 0xb}})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000bc0)={'team0\x00', <r18=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r19=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'erspan0\x00', <r20=>0x0, 0x1, 0x8000, 0x0, 0xfffe0000, {{0x9, 0x4, 0x1, 0x2a, 0x24, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@noop, @ssrr={0x89, 0xf, 0x98, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'team0\x00', <r21=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00', <r22=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f0000000f80)={0x878, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xa, 0x6, 0xb, 0x1}, {0x2, 0xd6, 0x7, 0x1}, {0x1000, 0x2, 0x1, 0x80000001}, {0x2, 0x10, 0x8, 0x6}, {0x8, 0x1, 0x5, 0x3}, {0x3, 0x8, 0x9, 0xffffb56a}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc7}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}]}}, {{0x8, 0x1, r13}, {0x4}}, {{0x8, 0x1, r14}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r18}, {0x14c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x1, 0x8, 0x5}, {0x4, 0xfe, 0x87, 0xffff}, {0x8, 0x1, 0x8, 0x9}, {0x1, 0x5, 0xfa, 0x7ba9}, {0x3, 0xc7, 0xb, 0xdd94}, {0xff81, 0x8, 0x8, 0xffffffff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc0}}, {0x8}}}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

1m53.326598701s ago: executing program 0 (id=7734):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x6c, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x40, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @empty, 0x50}}}}]}]}, 0x6c}}, 0x0)

1m53.279524117s ago: executing program 0 (id=7735):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='erofs_fill_inode\x00', r4, 0x0, 0x8000000000000000}, 0x18)
connect$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3d5, 0x2}, 0x20)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r0)

1m53.169464641s ago: executing program 32 (id=7735):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='erofs_fill_inode\x00', r4, 0x0, 0x8000000000000000}, 0x18)
connect$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3d5, 0x2}, 0x20)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r0)

1m53.128331696s ago: executing program 2 (id=7737):
r0 = socket$inet(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) (async, rerun: 64)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x6, 0x2, 0x1, 0x8, 0xd, 0xb, 0x0, 0x8, 0x3, 0xe, 0x2, 0xc, 0xa, 0xe, 0xb, 0xc], 0x1, [0x0, 0x4, 0x6, 0x3, 0x3, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}}, 0x4)

1m52.978755081s ago: executing program 2 (id=7738):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0xa2e}})

1m52.978467723s ago: executing program 33 (id=7738):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0xa2e}})

1.195208994s ago: executing program 3 (id=9800):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)

1.194846739s ago: executing program 3 (id=9801):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, &(0x7f00000004c0))
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001"], 0x54}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1094, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd644}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff4cd}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7662a5a6c3b83e4c259efb930aeac78ed85075b5dec1bd4e"}}]}, @TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_PUBL={0x4}]}, 0x1094}, 0x1, 0x0, 0x0, 0x40000}, 0x40040)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0x4000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c106}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1ff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)

926.356583ms ago: executing program 3 (id=9802):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x29, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="51f003000750050008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4040010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)

721.197603ms ago: executing program 3 (id=9806):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08000100e000000208000200e000000208000400ac1414aa08000400ac1414aa08000a000100000008000200ffffffff"], 0x48}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e12b0001e0000050401a8000900027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f0000000080)=0xba16, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)

718.860512ms ago: executing program 3 (id=9809):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000340)=0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a3200"], 0xd4}}, 0x40880)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r5)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=<r7=>r6, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r9, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8030)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000001940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="08002bbd7000fbdbdf252d0000000c002d000203aaaaaaaaaaaa08000200", @ANYRES32=r10, @ANYBLOB="06000600022000000c002d000203aaaaaaaaaaaa0861544b40000000"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0xc0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0xfffffffe, 0x1, 0x10000, 0x1, 0xfffffff5})
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11)
socket$inet6_udp(0xa, 0x2, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x3, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0x5, 0x7, 0x2, 0x7, 0x2}], &(0x7f00000005c0)='syzkaller\x00', 0x7ff, 0x85, &(0x7f0000000600)=""/133, 0x40f00, 0x10, '\x00', r1, 0x25, r3, 0x8, &(0x7f00000006c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xb, 0x3, 0x10}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001bc0)=[r3, r3], &(0x7f0000001c00)=[{0x4, 0x4, 0xe}], 0x10, 0x5}, 0x94)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000001d00)={0x0, ""/256, 0x0, <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x0, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x5}}, {0x40}}]}]}, 0x64}}, 0x4000010)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{<r16=>0x0, 0x0, 0x8, 0x8000000000000000, 0xfffffffffffffffb, 0x3, 0xd, 0x1, 0xffff, 0x4, 0x2, 0xb, 0x3, 0x6, 0x5}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000940)={r13, r16, "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", "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"})
socket$netlink(0x10, 0x3, 0x0)

667.40935ms ago: executing program 3 (id=9812):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000400), &(0x7f00000004c0)=""/229}, 0x20)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="14465ac303afc3ac671d38e5cc2ca0857aa5", 0x12}], 0x1}}], 0x1, 0x8000)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000a00)={<r5=>0x0, 0xd911, 0x6, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001a40)={<r6=>0x0, 0x10000, 0x1, [0x4, 0x7, 0x8, 0x9, 0x2], [0x7ff, 0x8000, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x9, 0x0, 0x1, 0x200, 0x8000000000000001, 0x7, 0x8000000000000000, 0x6, 0x4, 0x6, 0xf, 0x3, 0x2, 0xfffffffffffff001, 0x3b3, 0xa, 0x9, 0x2, 0x6, 0x8000000000000001, 0x1e0, 0x8000000000000001, 0x0, 0xfff, 0x6, 0x7, 0x9, 0x7, 0x9, 0x9, 0x0, 0xc283, 0x5, 0xe, 0x8, 0x2, 0xe65, 0x5, 0x5, 0x1400000000000, 0x2, 0x8000000000000000, 0x6, 0xfffffffffffffff8, 0x0, 0x4, 0xfffffffeffffffff, 0x4, 0xa7c, 0xc11, 0x2, 0x79, 0x3, 0xc37, 0x40, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x7, 0x1, 0xffffffffb6c1dbb1, 0x8000000000000001, 0x100000001, 0x6, 0x9, 0x10000, 0x62fd, 0x4, 0x9, 0x8001, 0x3, 0xf0, 0x3, 0xc, 0x5, 0x2, 0x8, 0x9, 0x7f, 0x0, 0x9, 0x3, 0x8c0, 0x0, 0x7, 0xb7a, 0x4, 0x2, 0x8, 0x755, 0x9, 0x6147, 0x1, 0x9, 0x0, 0xff, 0xff, 0xffffffff, 0x200, 0xcaf9, 0x6, 0x6, 0x9, 0x700000000, 0xffffffffffffff0b, 0x4, 0x1ff, 0x100000001, 0x7, 0x50, 0x6, 0x8313, 0x81, 0xffffffffffff8001]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000020c0)={0x4, 0x0, {0x2, @struct={0xffffffff, 0xfffffff8}, r5, 0x8, 0xf3, 0xfff, 0x4, 0x8, 0x8, @usage=0x5, 0x0, 0x4, [0x5, 0x2, 0xfff, 0x980, 0x8]}, {0xe, @usage=0x7, r6, 0x7fff, 0x0, 0xd10f, 0x5, 0x3, 0x4, @struct={0x8, 0x7}, 0x8, 0x7, [0xfff, 0x1, 0x7, 0x7, 0x12b6, 0x9]}, {0x5, @usage=0x7, 0x0, 0x6, 0x2, 0x8, 0x0, 0x100000000, 0x10, @struct={0x3, 0xffffff00}, 0x29, 0x0, [0x4, 0x8000, 0x200, 0x1, 0x38f, 0x6]}, {0x6, 0x9, 0x7fffffff}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r8, r7})
sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x1c}}, 0x0)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="310300000000000000000900000008000300", @ANYRES64=r10], 0x24}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r11)
r12 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r12, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
socket$inet6_icmp(0xa, 0x2, 0x3a)

397.840645ms ago: executing program 4 (id=9819):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000003ed", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000025bd7000fedbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB="0480"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2000c0c0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffff000003e400", @ANYRES32=r9, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08001400"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

334.021ms ago: executing program 1 (id=9821):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x29, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="51f003000750050008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4040010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)

285.907153ms ago: executing program 4 (id=9822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000003c0)=0x40, 0x4)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000000c0)={0x90000009})
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
close(r6)
sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="02030000210000fd"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

228.95877ms ago: executing program 1 (id=9823):
r0 = socket$inet6(0xa, 0x805, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4)
accept4(r3, 0x0, 0x0, 0x0) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000000)={0x0, 0xff65, &(0x7f0000000200)={0x0, 0xffffffe9}, 0x1, 0x0, 0x0, 0x10}, 0x20044095)
sendmmsg$alg(r4, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@iv={0x18}], 0x18, 0x4012}], 0x1, 0x4010) (async)
sendmmsg$alg(r4, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@iv={0x18}], 0x18, 0x4012}], 0x1, 0x4010)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010001fff00000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800800080000000000050009000000000084398be10f9a903c8908668a2e4bfa5040876bf97a07db2a07bf4421a3dc05ee5dfdac261adb1c560e98e87894e997d645480067cde3d4347a4023f6d209a696a9990cf6ca7e1692c3e47a6f9feb97e51c6af64201fc7d0aeb9533000ca241e6afbbf6ce5e7edd8020063aa269ba26a1cb439c8e5d8166f36091e42553010465e42d35d87e9ea610c6f9205e53c3b4de6506dea4fa9b984e64ef6897bbc009b612b1c1f835e923915bbde3af6526cbe05f857a4ba462c40adaa01866e6f721ae42f17d96"], 0x44}}, 0x400c015)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r5=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl1\x00', r5, 0x4, 0xff, 0x0, 0x7, 0x20, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback={0x0, 0xffff888101827518}, 0x7800, 0x20, 0x38dc5865, 0x10001}})
accept4(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80, 0x81800)

166.768127ms ago: executing program 1 (id=9824):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2d}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}, @NFT_MSG_DELFLOWTABLE={0x220, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1ec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd8c}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x6b8, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_EXPRESSIONS={0x61c, 0x12, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x4e0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4d0, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x254, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "e795a9211f80843ca447110e868880bdbad6d43cdcf43a75094d5286ead646af768591e607efcd306ab836c8f406eed49366b31a759378dfa845391d4fd847030c53cf597741b189ce112f5ba525ac9071f8"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "b0aa49b6858b9005b38e5030155226b9c6e75f460daaab600688ac0f67b222ac85b7634c39c66f1398a183e59c8cceabd771416aefeb01e86d2ae727ecde7b938cceaa1f12196225fbb537013caa9de3d84d273dc3538ef7fdfd83d282a24146da2af486a6e7e2e262c7a722261417acdaf9996a6bbf6f5bce5af6d636f419f738b842566301fd81e820a594ebbc7bb0ed816a566929a9cdd75f11d2159fa119fd05d6ea1c045f570abc1e1f78"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x80, 0x1, "db14f5573077ca90dcbb4cb77b3714ba2e261aa2d50dee93017d18c7a2d3c5598e4a16583420e10402394336be9207cca22ebc2f5508e8d882a6f41bf00d8fe251ffc5bf29c545028f6217f903792e31abc556cbc6939fbb153170f247f528e582f99e55f7a0b6594f4640b89f1d08c2bf2d6e2a8bfc32e8ba7d87fd"}, @NFTA_DATA_VALUE={0x75, 0x1, "5554e5baeafe9ab6abe9cde2ae2ce61f2b51b0e46599328e6557c658f158ae30dce84b8672bc2da2279e50dfddee0b885ac538bfceb72b51867853ea0b3fa79848f9e907213204e1dbcdbae30f349bea596ce5fc4716829d39514022c8b021ac1915916c3326a62f4717dc0ee426f6f423"}]}, @NFTA_RANGE_FROM_DATA={0x258, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3b, 0x1, "75bd5cf44efe4d2c42adc59b8ff5bb0f0e6cc8a767dcedda99e91061f8f0fe8d469b42afe3d578aa4aca873cf22114f55aaf2fd4f98cdd"}, @NFTA_DATA_VALUE={0x6d, 0x1, "adeef45afbd29102509508235e6bfa859c602a2bdebb9903d112f91ebc4440ebe60a32d4d4575756c7c329d9684f1c8412229c569bfba13fc42c03c5258cee4ed6dbaa4cb275414b2750a2486fbfc96f587d4b8d14a0a5ba0a36819f0b3e47675632836839bdebd2ba"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x74, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "5e50c511f1a3352db7c3a8f4246237c6bcd4473711720f6a4a90888182c55565c04e795b55f66f44108643e64bbfe96ca039f8f8ff125e0f87dfb6abfd3e7cb8526abe61caafe9512dc890a1753e4800c19742d769a706f3b0f13349dd89fb7890f8671e1fec03fa72f92bd5b2bcdae568e426e6e8f5e4e511f974e50e08c75fcf240c69e276efe13170a030397aca15b3e460650c2ddf136665e4d07b"}, @NFTA_DATA_VALUE={0x6f, 0x1, "cf61b513ff13b6994e419c0fe831de9c42dff3e894a2642e054bb53d6b1f92c7fd0a5ed8d0cc49acf97b0617d90dd41c8af0e6c16997e4ec2ccb0f8eb759813b8b2606dc48c31396f209806a8019bd3cdf6bd6954c1b00f49e0b201c788f8b5a51e950c055629e8faa2281"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x74, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffff}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80000000}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x614c}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x970}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48)

77.314694ms ago: executing program 1 (id=9825):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$packet(0x11, 0xa, 0x300)
sendmsg$inet(r2, &(0x7f0000001340)={&(0x7f0000001000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001040)=[{0x0}], 0x1}, 0x8001)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000f80)=0x4, 0x4)
recvmmsg(r2, &(0x7f0000009000)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xb}], 0x2, 0x40, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000309, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x22, 0x2, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x4c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$packet(0x11, 0xa, 0x300) (async)
sendmsg$inet(r2, &(0x7f0000001340)={&(0x7f0000001000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001040)=[{0x0}], 0x1}, 0x8001) (async)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000f80)=0x4, 0x4) (async)
recvmmsg(r2, &(0x7f0000009000)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xb}], 0x2, 0x40, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000309, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x22, 0x2, 0x2) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x4c) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000002680)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) (async)

74.968081ms ago: executing program 4 (id=9826):
r0 = socket$inet6(0xa, 0x4, 0x800)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x44cc, @private0, 0x10000}, @in6={0xa, 0x4e21, 0xfffffff8, @remote, 0x401}, @in6={0xa, 0x4e21, 0x200000, @remote, 0x1000}], 0x64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1}], 0x3c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10)

72.168613ms ago: executing program 4 (id=9827):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)

71.743684ms ago: executing program 4 (id=9828):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4)
sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xd9c72693ea1cffc6, 0xffff}}, 0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff1b}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x4000080)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r6=>0x0})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf25180000000400308008000300", @ANYRES32=r10, @ANYBLOB="ef7b260f742cc7dad40387e4d3631b4b05373a780dcac005bb23b3dc762c89d8241fa669a19a26d8cd49d4177bb160d536276c4a938c0a2670d39ed930624dcdd3b46ad7935288f51605c8f744036cc9117270e6022a161bab2ff4d67c1bdaf3a9b4caa42d"], 0x20}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000)
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x5c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

71.529428ms ago: executing program 1 (id=9829):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x50)

2.194738ms ago: executing program 1 (id=9830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0xfffffffffffffe42)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/22, 0x16}}], 0x1, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r7, r7, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r10, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

0s ago: executing program 4 (id=9831):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB="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", @ANYBLOB="00d7710000000000000000000000000000008100", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000000000000001000000000000000e00000000000000"], 0x48)
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10051, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)="760732c8f87f96c335870448a8d002e85cdd3985c9683132b15f6cec3319d332ad47e0340b01448fa5", 0x29)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0900000003000000060000000a000341ad8e9e2eae19c4abe02513a7a899000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r3}, &(0x7f00000000c0), &(0x7f00000009c0)}, 0x20)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000900)}], 0x2}}], 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'ip6gretap0\x00', 0x2})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'lo\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x8, 0xc, &(0x7f00000014c0)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r6}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
socket$nl_rdma(0x10, 0x3, 0x14)

kernel console output (not intermixed with test programs):

s unknown, defaulting to 1000
[  383.652816][T28430] syzkaller0 speed is unknown, defaulting to 1000
[  383.721497][T28437] netlink: 'syz.2.7720': attribute type 13 has an invalid length.
[  383.724098][T28437] netlink: 'syz.2.7720': attribute type 17 has an invalid length.
[  383.746109][T28437] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  383.748763][T28437] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  383.751040][T28437] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  383.756379][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.776129][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.780507][T28437] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  383.784240][ T6715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  383.805525][ T5855] lo speed is unknown, defaulting to 1000
[  383.810520][ T5855] syz1: Port: 1 Link ACTIVE
[  383.918088][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.921505][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.068428][ T5855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.201422][T28477] netlink: zone id is out of range
[  384.204945][T28477] netlink: zone id is out of range
[  384.247084][ T5855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  384.458128][ T5840] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.461530][ T5840] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.476111][ T5840] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  384.479624][ T5840] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  384.608339][ T5855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  384.806868][ T5855] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.267546][T28506] __nla_validate_parse: 64 callbacks suppressed
[  385.267556][T28506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7740'.
[  385.381530][T27362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  385.384579][T27362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  385.395273][T27362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  385.399325][T27362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  385.402097][T27362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  385.432997][T28509] lo speed is unknown, defaulting to 1000
[  385.440826][T28509] lo speed is unknown, defaulting to 1000
[  385.454779][ T6092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  385.459989][ T6092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  385.463078][ T6092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  385.468076][ T6092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  385.471053][ T6092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  385.491392][T28513] lo speed is unknown, defaulting to 1000
[  385.502783][T28512] lo speed is unknown, defaulting to 1000
[  385.541575][T28513] lo speed is unknown, defaulting to 1000
[  385.544197][T28509] syzkaller0 speed is unknown, defaulting to 1000
[  385.651893][T28512] lo speed is unknown, defaulting to 1000
[  385.663203][T28513] syzkaller0 speed is unknown, defaulting to 1000
[  385.778533][T28509] chnl_net:caif_netlink_parms(): no params data found
[  385.813984][T28512] syzkaller0 speed is unknown, defaulting to 1000
[  385.874778][T28509] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.881616][T28509] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.883914][T28509] bridge_slave_0: entered allmulticast mode
[  385.886802][T28509] bridge_slave_0: entered promiscuous mode
[  385.894801][T28509] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.897687][T28509] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.900222][T28509] bridge_slave_1: entered allmulticast mode
[  385.903208][T28509] bridge_slave_1: entered promiscuous mode
[  385.949650][T28509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.963342][T28509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.005740][T28509] team0: Port device team_slave_0 added
[  386.009387][T28509] team0: Port device team_slave_1 added
[  386.040524][T28513] chnl_net:caif_netlink_parms(): no params data found
[  386.049145][T28509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.052230][T28509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.063306][T28509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.079191][T28509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.082186][T28509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.093203][T28509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.227941][T28509] hsr_slave_0: entered promiscuous mode
[  386.230540][T28509] hsr_slave_1: entered promiscuous mode
[  386.232941][T28509] debugfs: 'hsr0' already exists in 'hsr'
[  386.234768][T28509] Cannot create hsr debugfs directory
[  386.285810][T28513] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.288599][T28513] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.291457][T28513] bridge_slave_0: entered allmulticast mode
[  386.294552][T28513] bridge_slave_0: entered promiscuous mode
[  386.323692][T28513] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.327437][T28513] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.329986][T28513] bridge_slave_1: entered allmulticast mode
[  386.333811][T28513] bridge_slave_1: entered promiscuous mode
[  386.457942][T28513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.474247][T28513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.513762][T28513] team0: Port device team_slave_0 added
[  386.520588][T28513] team0: Port device team_slave_1 added
[  386.546903][T28513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.549584][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.561153][T28513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.575558][T28513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.578407][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.588115][T28513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.626912][T28509] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  386.634941][T28513] hsr_slave_0: entered promiscuous mode
[  386.638281][T28513] hsr_slave_1: entered promiscuous mode
[  386.640535][T28513] debugfs: 'hsr0' already exists in 'hsr'
[  386.642463][T28513] Cannot create hsr debugfs directory
[  386.644407][T28509] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  386.653243][T28509] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  386.672433][T28509] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  386.839533][T28513] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  386.847267][T28513] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  386.852310][T28513] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  386.856776][T28513] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  386.886411][T28509] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.913261][T28509] 8021q: adding VLAN 0 to HW filter on device team0
[  386.927193][T26153] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.930139][T26153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.938892][T26153] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.941753][T26153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.979195][T28513] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.987631][T28509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.008405][T28513] 8021q: adding VLAN 0 to HW filter on device team0
[  387.016649][T27387] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.019035][T27387] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.026046][T27387] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.028465][T27387] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.084955][T28509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.118904][T28509] veth0_vlan: entered promiscuous mode
[  387.125604][T28509] veth1_vlan: entered promiscuous mode
[  387.142054][T28509] veth0_macvtap: entered promiscuous mode
[  387.148564][T28509] veth1_macvtap: entered promiscuous mode
[  387.161803][T28509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.169736][T28509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.180888][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.188727][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.192493][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.198203][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.223052][T28513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.249403][T26157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.255914][T26157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.296163][T26153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.300681][T26153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.416594][ T6092] Bluetooth: hci1: command tx timeout
[  387.478146][T28513] veth0_vlan: entered promiscuous mode
[  387.484139][T28513] veth1_vlan: entered promiscuous mode
[  387.495293][ T6092] Bluetooth: hci2: command tx timeout
[  387.512870][T28513] veth0_macvtap: entered promiscuous mode
[  387.518438][T28513] veth1_macvtap: entered promiscuous mode
[  387.548387][T28513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.558835][T28513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.567243][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.570518][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.571579][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7753'.
[  387.573935][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.586302][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.648423][T26153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.649261][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7755'.
[  387.650974][T26153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.672570][T26155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.675386][T26155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.687986][T28602] netlink: 'syz.1.7754': attribute type 32 has an invalid length.
[  387.696465][T28604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7756'.
[  387.774371][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7761'.
[  387.821610][T28617] net_ratelimit: 172 callbacks suppressed
[  387.821619][T28617] sock: sock_set_timeout: `syz.4.7739' (pid 28617) tries to set negative timeout
[  387.975408][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.131304][T28642] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7765'.
[  388.964109][T28675] syzkaller0: entered promiscuous mode
[  388.966768][T28675] syzkaller0: entered allmulticast mode
[  389.108712][ T5882] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  389.495282][ T6092] Bluetooth: hci1: command tx timeout
[  389.575380][ T6092] Bluetooth: hci2: command tx timeout
[  390.068621][T28705] lo speed is unknown, defaulting to 1000
[  390.071310][T28705] lo speed is unknown, defaulting to 1000
[  390.164897][T28705] syzkaller0 speed is unknown, defaulting to 1000
[  390.320374][T28716] lo speed is unknown, defaulting to 1000
[  390.323011][T28716] lo speed is unknown, defaulting to 1000
[  390.407447][T28716] syzkaller0 speed is unknown, defaulting to 1000
[  390.523126][T28721] sock: sock_set_timeout: `syz.4.7787' (pid 28721) tries to set negative timeout
[  390.613973][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7788'.
[  390.913844][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7796'.
[  390.958873][T28749] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  391.088269][T28759] lo speed is unknown, defaulting to 1000
[  391.106160][T28759] lo speed is unknown, defaulting to 1000
[  391.171873][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7803'.
[  391.206487][T28759] syzkaller0 speed is unknown, defaulting to 1000
[  391.289467][T28775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7806'.
[  391.292568][T28775] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7806'.
[  391.299869][T28775] netlink: 'syz.3.7806': attribute type 5 has an invalid length.
[  391.306118][T28775] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7806'.
[  391.353269][T28775] lo speed is unknown, defaulting to 1000
[  391.361334][T28775] lo speed is unknown, defaulting to 1000
[  391.402542][T28784] netlink: 'syz.4.7808': attribute type 3 has an invalid length.
[  391.405412][T28784] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7808'.
[  391.439991][T28787] netlink: 'syz.4.7809': attribute type 21 has an invalid length.
[  391.462993][T28775] syzkaller0 speed is unknown, defaulting to 1000
[  391.575256][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.581364][ T6092] Bluetooth: hci1: command tx timeout
[  391.598402][T28804] sock: sock_set_timeout: `syz.4.7813' (pid 28804) tries to set negative timeout
[  391.655882][ T6092] Bluetooth: hci2: command tx timeout
[  391.740159][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7818'.
[  391.913414][T28820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7820'.
[  391.932468][T28822] netlink: 'syz.1.7821': attribute type 1 has an invalid length.
[  391.983954][T28822] 8021q: adding VLAN 0 to HW filter on device bond30
[  392.013919][T28822] bond30: (slave gretap2): making interface the new active one
[  392.024709][T28822] bond30: (slave gretap2): Enslaving as an active interface with an up link
[  392.825570][T28863] netlink: 'syz.4.7832': attribute type 10 has an invalid length.
[  392.828369][T28863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7832'.
[  392.831667][T28863] dummy0: entered promiscuous mode
[  392.837519][T28863] bridge0: port 3(dummy0) entered blocking state
[  392.840911][T28863] bridge0: port 3(dummy0) entered disabled state
[  392.845762][T28863] dummy0: entered allmulticast mode
[  392.852771][T28863] bridge0: port 3(dummy0) entered blocking state
[  392.855014][T28863] bridge0: port 3(dummy0) entered forwarding state
[  392.866858][T28863] netlink: 'syz.4.7832': attribute type 6 has an invalid length.
[  393.665327][ T6092] Bluetooth: hci1: command tx timeout
[  393.738089][ T6092] Bluetooth: hci2: command tx timeout
[  394.293359][T28887] sock: sock_set_timeout: `syz.1.7838' (pid 28887) tries to set negative timeout
[  394.304226][T28890] netlink: 'syz.3.7839': attribute type 7 has an invalid length.
[  394.494902][T28909] lo speed is unknown, defaulting to 1000
[  394.500120][T28909] lo speed is unknown, defaulting to 1000
[  394.603460][T28909] syzkaller0 speed is unknown, defaulting to 1000
[  394.947378][T28928] bond0: option mode: unable to set because the bond device has slaves
[  395.119286][T28935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.220805][T28943] netlink: 'syz.4.7859': attribute type 5 has an invalid length.
[  395.300642][T28946] bond0: option mode: unable to set because the bond device has slaves
[  395.415651][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  395.415664][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  395.527280][T28955] lo speed is unknown, defaulting to 1000
[  395.531882][T28955] lo speed is unknown, defaulting to 1000
[  395.583864][T28963] lo speed is unknown, defaulting to 1000
[  395.705411][T28955] syzkaller0 speed is unknown, defaulting to 1000
[  395.705829][T28963] lo speed is unknown, defaulting to 1000
[  395.882668][T28963] syzkaller0 speed is unknown, defaulting to 1000
[  396.055310][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  396.450657][T28970] __nla_validate_parse: 5 callbacks suppressed
[  396.450671][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7867'.
[  396.454104][T28971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7868'.
[  396.488023][T28975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7869'.
[  396.549697][T28979] netlink: 'syz.4.7867': attribute type 3 has an invalid length.
[  396.552726][T28979] netlink: 'syz.4.7867': attribute type 1 has an invalid length.
[  396.556704][T28979] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7867'.
[  396.668195][T28992] bond0: option mode: unable to set because the bond device is up
[  396.696097][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.723691][T28997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7878'.
[  396.736345][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'.
[  396.851534][T29012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7877'.
[  396.865021][T29013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7877'.
[  396.927471][T29016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7881'.
[  396.932996][T29016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7881'.
[  396.966836][T29018] netlink: 'syz.1.7882': attribute type 9 has an invalid length.
[  396.970730][T29018] netlink: 'syz.1.7882': attribute type 9 has an invalid length.
[  397.284996][T29034] syz_tun (unregistering): left promiscuous mode
[  397.663464][T29063] vlan2: entered promiscuous mode
[  397.668233][T29063] bond0: entered promiscuous mode
[  397.670653][T29063] bond_slave_0: entered promiscuous mode
[  397.673189][T29063] bond_slave_1: entered promiscuous mode
[  397.678423][T29063] vlan2: entered allmulticast mode
[  397.680850][T29063] bond0: entered allmulticast mode
[  397.683178][T29063] bond_slave_0: entered allmulticast mode
[  397.685800][T29063] bond_slave_1: entered allmulticast mode
[  397.759269][T29073] delete_channel: no stack
[  398.592183][T29095] bridge0: port 4(erspan0) entered blocking state
[  398.594538][T29095] bridge0: port 4(erspan0) entered disabled state
[  398.598142][T29095] erspan0: entered allmulticast mode
[  398.600836][T29095] erspan0: entered promiscuous mode
[  398.602899][T29095] bridge0: port 4(erspan0) entered blocking state
[  398.605135][T29095] bridge0: port 4(erspan0) entered forwarding state
[  398.626822][T29095] erspan0: left allmulticast mode
[  398.628533][T29095] erspan0: left promiscuous mode
[  398.630283][T29095] bridge0: port 4(erspan0) entered disabled state
[  398.831490][T29123] vti1: entered promiscuous mode
[  399.591042][T29144] unknown channel width for channel at 909000KHz?
[  399.760616][T29163] lo speed is unknown, defaulting to 1000
[  399.763846][T29163] lo speed is unknown, defaulting to 1000
[  399.858301][T29163] syzkaller0 speed is unknown, defaulting to 1000
[  400.341754][T29196] netlink: 'syz.4.7939': attribute type 21 has an invalid length.
[  400.897348][T29253] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  400.900832][T29253] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  401.068711][T29266] batadv_slave_1: mtu less than device minimum
[  401.118812][T29271] bond0: option mode: unable to set because the bond device has slaves
[  401.382705][T29287] sctp: [Deprecated]: syz.3.7965 (pid 29287) Use of struct sctp_assoc_value in delayed_ack socket option.
[  401.382705][T29287] Use struct sctp_sack_info instead
[  401.859855][T29296] __nla_validate_parse: 33 callbacks suppressed
[  401.859871][T29296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7968'.
[  401.913227][T29298] tipc: Started in network mode
[  401.917449][T29298] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  401.920020][T29298] tipc: Enabled bearer <eth:team0>, priority 0
[  401.928057][T29298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7969'.
[  402.253053][T29310] netlink: 'syz.4.7972': attribute type 1 has an invalid length.
[  402.257785][T29310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7972'.
[  402.260816][T29310] netlink: 'syz.4.7972': attribute type 2 has an invalid length.
[  402.265365][T29310] netlink: 'syz.4.7972': attribute type 1 has an invalid length.
[  402.268012][T29310] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7972'.
[  402.309601][T29316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7975'.
[  402.328169][T29318] netlink: 'syz.4.7974': attribute type 1 has an invalid length.
[  402.341103][T29324] netlink: 'syz.3.7976': attribute type 4 has an invalid length.
[  402.365894][T29318] 8021q: adding VLAN 0 to HW filter on device bond1
[  402.371733][T29319] gretap1: entered promiscuous mode
[  402.378242][T29319] bond1: (slave gretap1): making interface the new active one
[  402.386592][T29319] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  402.392811][T29330] netlink: 'syz.1.7978': attribute type 1 has an invalid length.
[  402.410052][T29330] netlink: 'syz.1.7978': attribute type 1 has an invalid length.
[  402.486659][T29339] netlink: 'syz.1.7981': attribute type 1 has an invalid length.
[  402.489406][T29339] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7981'.
[  402.635202][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7983'.
[  402.797365][T29361] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  402.869724][T29366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7988'.
[  402.873768][T29362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7987'.
[  402.890716][T29362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7987'.
[  402.916436][   T24] tipc: Node number set to 11578026
[  404.039490][T29416] netlink: 'syz.1.8000': attribute type 1 has an invalid length.
[  404.120585][T29426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.123065][T29426] IPv6: NLM_F_CREATE should be set when creating new route
[  404.125925][T29426] IPv6: NLM_F_CREATE should be set when creating new route
[  404.139987][T29426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.155710][T29427] sock: sock_set_timeout: `syz.3.8003' (pid 29427) tries to set negative timeout
[  404.206907][T29429] sock: sock_set_timeout: `syz.1.8005' (pid 29429) tries to set negative timeout
[  404.215505][T29429] netlink: 'syz.1.8005': attribute type 11 has an invalid length.
[  404.618269][T29448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.673328][T29455] bond0: option mode: unable to set because the bond device has slaves
[  404.750681][T29458] sock: sock_set_timeout: `syz.4.8016' (pid 29458) tries to set negative timeout
[  405.226679][T29472] openvswitch: netlink: Message has 16 unknown bytes.
[  405.289666][T29476] bond0: option mode: unable to set because the bond device has slaves
[  405.547353][T29499] sch_fq: defrate 0 ignored.
[  405.558591][T29498] netlink: 'syz.1.8030': attribute type 2 has an invalid length.
[  405.587699][T29501] bond0: option mode: unable to set because the bond device has slaves
[  405.622300][T29505] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  405.655715][   T60] block nbd0: Possible stuck request ffff8880217b8000: control (read@0,1024B). Runtime 240 seconds
[  405.659629][   T60] block nbd0: Possible stuck request ffff8880217b8200: control (read@1024,1024B). Runtime 240 seconds
[  405.661378][T29510] GUP no longer grows the stack in syz.1.8035 (29510): 200000002000-20000000a000 (200000001000)
[  405.663129][   T60] block nbd0: Possible stuck request ffff8880217b8400: control (read@2048,1024B). Runtime 240 seconds
[  405.670385][T29510] CPU: 1 UID: 0 PID: 29510 Comm: syz.1.8035 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  405.670397][T29510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  405.670401][T29510] Call Trace:
[  405.670405][T29510]  <TASK>
[  405.670408][T29510]  dump_stack_lvl+0x189/0x250
[  405.670421][T29510]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.670429][T29510]  ? __pfx__printk+0x10/0x10
[  405.670437][T29510]  ? find_vma+0xe7/0x160
[  405.670451][T29510]  __get_user_pages+0x2a60/0x30b0
[  405.670472][T29510]  ? __pfx___get_user_pages+0x10/0x10
[  405.670483][T29510]  __gup_longterm_locked+0xd66/0x15b0
[  405.670492][T29510]  ? try_grab_folio_fast+0x35b/0x4f0
[  405.670503][T29510]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  405.670513][T29510]  gup_fast_fallback+0x1cd4/0x2260
[  405.670544][T29510]  ? is_bpf_text_address+0x26/0x2b0
[  405.670567][T29510]  ? __pfx_gup_fast_fallback+0x10/0x10
[  405.670574][T29510]  ? stack_trace_save+0x9c/0xe0
[  405.670582][T29510]  ? stack_depot_save_flags+0x40/0x900
[  405.670595][T29510]  ? pin_user_pages_fast+0x4d/0xb0
[  405.670604][T29510]  iov_iter_extract_pages+0x35a/0x5e0
[  405.670615][T29510]  extract_iter_to_sg+0xe46/0x24e0
[  405.670632][T29510]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  405.670648][T29510]  ? __asan_memset+0x22/0x50
[  405.670657][T29510]  af_alg_get_rsgl+0x436/0x810
[  405.670672][T29510]  aead_recvmsg+0x4cc/0x13f0
[  405.670686][T29510]  ? rcu_is_watching+0x15/0xb0
[  405.670699][T29510]  ? __pfx_aead_recvmsg+0x10/0x10
[  405.670710][T29510]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  405.670717][T29510]  ? __pfx_aead_recvmsg+0x10/0x10
[  405.670726][T29510]  sock_recvmsg_nosec+0x186/0x1c0
[  405.670736][T29510]  ____sys_recvmsg+0x3aa/0x460
[  405.670749][T29510]  ? __pfx_____sys_recvmsg+0x10/0x10
[  405.670765][T29510]  ? import_iovec+0x74/0xa0
[  405.670774][T29510]  ___sys_recvmsg+0x1b5/0x510
[  405.670785][T29510]  ? __pfx____sys_recvmsg+0x10/0x10
[  405.670807][T29510]  ? __might_fault+0xb0/0x130
[  405.670817][T29510]  do_recvmmsg+0x307/0x770
[  405.670830][T29510]  ? __pfx_do_recvmmsg+0x10/0x10
[  405.670839][T29510]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  405.670853][T29510]  ? __pfx_do_futex+0x10/0x10
[  405.670867][T29510]  __x64_sys_recvmmsg+0x190/0x240
[  405.670879][T29510]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  405.670887][T29510]  ? rcu_is_watching+0x15/0xb0
[  405.670898][T29510]  ? do_syscall_64+0xbe/0x3b0
[  405.670908][T29510]  do_syscall_64+0xfa/0x3b0
[  405.670915][T29510]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.670923][T29510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.670929][T29510]  ? exc_page_fault+0x9f/0xf0
[  405.670937][T29510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.670943][T29510] RIP: 0033:0x7f0ea3d8ebe9
[  405.670950][T29510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.670956][T29510] RSP: 002b:00007f0ea4cdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  405.670964][T29510] RAX: ffffffffffffffda RBX: 00007f0ea3fb5fa0 RCX: 00007f0ea3d8ebe9
[  405.670969][T29510] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000011
[  405.670974][T29510] RBP: 00007f0ea3e11e19 R08: 0000000000000000 R09: 0000000000000000
[  405.670978][T29510] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  405.670982][T29510] R13: 00007f0ea3fb6038 R14: 00007f0ea3fb5fa0 R15: 00007ffd0cb97ed8
[  405.670993][T29510]  </TASK>
[  405.694773][   T33] audit: type=1804 audit(1754495889.658:18): pid=29510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8035" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=13858 res=1 errno=0
[  405.696876][   T60] block nbd0: Possible stuck request ffff8880217b8600: control (read@3072,1024B). Runtime 240 seconds
[  405.710705][   T33] audit: type=1800 audit(1754495889.658:19): pid=29510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8035" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=13858 res=0 errno=0
[  405.880484][T29525] bond0: option mode: unable to set because the bond device is up
[  406.378740][T29551] lo speed is unknown, defaulting to 1000
[  406.381417][T29551] lo speed is unknown, defaulting to 1000
[  406.470814][T29551] syzkaller0 speed is unknown, defaulting to 1000
[  406.761040][T29573] netlink: 'syz.4.8052': attribute type 3 has an invalid length.
[  407.189704][  T972] IPVS: starting estimator thread 0...
[  407.275473][T29579] IPVS: using max 80 ests per chain, 192000 per kthread
[  407.376353][T29595] bond0: option mode: unable to set because the bond device is up
[  407.459099][T29597] __nla_validate_parse: 14 callbacks suppressed
[  407.459109][T29597] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8060'.
[  407.492288][T29601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8061'.
[  407.540479][T29606] netlink: 'syz.1.8063': attribute type 83 has an invalid length.
[  407.558370][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8064'.
[  407.640983][T29612] bond0: option mode: unable to set because the bond device has slaves
[  407.657641][T29616] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  407.660070][T29616] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  407.691444][T29619] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8069'.
[  407.700803][T29619] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8069'.
[  407.833428][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8072'.
[  407.888197][T29632] netlink: 'syz.1.8073': attribute type 1 has an invalid length.
[  407.890922][T29632] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8073'.
[  407.966632][T29640] sch_fq: defrate 0 ignored.
[  407.997359][T29642] openvswitch: netlink: IP tunnel dst address not specified
[  408.065271][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8078'.
[  408.143375][T29642] netlink: 'syz.1.8076': attribute type 5 has an invalid length.
[  408.150942][T29652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8080'.
[  408.594752][T29671] nftables ruleset with unbound set
[  408.629794][T29673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8087'.
[  408.772548][T29689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.828747][T29689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.883487][T29689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.916697][T29689] macvlan0: entered allmulticast mode
[  408.920665][T29689] veth1_vlan: entered allmulticast mode
[  408.924927][T29689] team0: Port device macvlan0 added
[  409.113440][   T33] audit: type=1800 audit(1754495893.078:20): pid=29701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8096" name="memory.events" dev="tmpfs" ino=590 res=0 errno=0
[  409.220391][T29707] lo speed is unknown, defaulting to 1000
[  409.223047][T29707] lo speed is unknown, defaulting to 1000
[  409.315701][T29707] syzkaller0 speed is unknown, defaulting to 1000
[  409.505352][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.899400][T29733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.901938][T29733] syzkaller0: entered promiscuous mode
[  409.903724][T29733] syzkaller0: entered allmulticast mode
[  410.085737][T29740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.140887][T29740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.195715][T29740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  410.229953][T29740] macvlan0: entered allmulticast mode
[  410.235893][T29740] veth1_vlan: entered allmulticast mode
[  410.239600][T29740] team0: Port device macvlan0 added
[  410.542041][T29745] netlink: 'syz.1.8110': attribute type 1 has an invalid length.
[  410.542074][T29744] netlink: 'syz.1.8110': attribute type 1 has an invalid length.
[  410.567908][T29744] bond31: (slave bridge15): making interface the new active one
[  410.573100][T29744] bond31: (slave bridge15): Enslaving as an active interface with an up link
[  410.577582][T29727] tipc: Resetting bearer <eth:syzkaller0>
[  410.588877][T29727] tipc: Disabling bearer <eth:syzkaller0>
[  410.748918][T29762] netlink: 'syz.1.8116': attribute type 6 has an invalid length.
[  410.784169][T29766] hsr0: entered promiscuous mode
[  410.787612][T29766] hsr_slave_0: left promiscuous mode
[  410.789985][T29766] hsr_slave_1: left promiscuous mode
[  410.803677][T29766] hsr0 (unregistering): left promiscuous mode
[  410.870572][T29771] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004
[  410.919473][T29776] netlink: 'syz.3.8121': attribute type 1 has an invalid length.
[  411.717059][T29792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.771816][T29792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.829400][T29792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.881973][T29792] macvlan0: entered allmulticast mode
[  411.884614][T29792] bond0: entered allmulticast mode
[  411.891276][T29792] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  411.904150][T29792] team0: Port device macvlan0 added
[  411.925784][T29809] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  411.954176][T29813] dummy0: mtu less than device minimum
[  411.957759][T29813] netlink: 'syz.3.8135': attribute type 11 has an invalid length.
[  412.065433][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  412.618578][T29831] __nla_validate_parse: 9 callbacks suppressed
[  412.618587][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8141'.
[  412.706560][T29835] nbd: must specify at least one socket
[  412.708708][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8142'.
[  412.772769][T29837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.829539][T29837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.837392][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8145'.
[  412.886345][T29845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.920784][T29837] veth1_vlan: left allmulticast mode
[  413.810168][T29867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8153'.
[  413.841057][T29869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8154'.
[  413.922950][T29876] netlink: zone id is out of range
[  413.926607][T29876] netlink: zone id is out of range
[  413.930644][T29876] netlink: zone id is out of range
[  413.932379][T29876] netlink: zone id is out of range
[  413.934063][T29876] netlink: zone id is out of range
[  413.936846][T29876] netlink: zone id is out of range
[  413.939324][T29876] netlink: zone id is out of range
[  413.941714][T29876] netlink: zone id is out of range
[  413.943699][T29876] netlink: zone id is out of range
[  413.946072][T29876] netlink: zone id is out of range
[  414.062431][T29884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8159'.
[  414.091828][T29886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8160'.
[  414.095615][T29886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8160'.
[  414.134789][T29888] batadv0: entered promiscuous mode
[  414.138488][T29888] macsec1: entered allmulticast mode
[  414.140931][T29888] batadv0: entered allmulticast mode
[  414.148345][T29888] batadv0: left allmulticast mode
[  414.150819][T29888] batadv0: left promiscuous mode
[  414.180988][T29889] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8161'.
[  414.332248][T29897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8165'.
[  414.340054][T29897] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  414.403849][T29905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.443222][T29907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.460373][T29908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.514870][T29905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.547013][T29905] bond0: left allmulticast mode
[  414.751539][T29917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.754393][T29917] syzkaller0: entered promiscuous mode
[  414.757389][T29917] syzkaller0: entered allmulticast mode
[  414.762811][T29917] tipc: Resetting bearer <eth:syzkaller0>
[  414.766898][T29916] tipc: Resetting bearer <eth:syzkaller0>
[  414.778570][T29916] tipc: Disabling bearer <eth:syzkaller0>
[  414.996854][T29933] netlink: 'syz.4.8177': attribute type 3 has an invalid length.
[  415.073336][T29939] netlink: 'syz.1.8179': attribute type 2 has an invalid length.
[  415.197505][T29949] can: request_module (can-proto-5) failed.
[  415.204521][T29943] sctp: [Deprecated]: syz.1.8180 (pid 29943) Use of struct sctp_assoc_value in delayed_ack socket option.
[  415.204521][T29943] Use struct sctp_sack_info instead
[  415.367613][T29964] bond0: option mode: unable to set because the bond device is up
[  415.423401][T29968] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.707905][T29986] bond0: option mode: unable to set because the bond device has slaves
[  416.002982][T30022] bond0: option mode: unable to set because the bond device has slaves
[  416.954723][T30039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  416.958955][T30040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.014745][T30046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.100717][T30059] syzkaller1: entered promiscuous mode
[  417.102611][T30059] syzkaller1: entered allmulticast mode
[  417.202348][T30065] bond0: option mode: unable to set because the bond device has slaves
[  417.302293][T30079] netlink: 'syz.1.8217': attribute type 1 has an invalid length.
[  417.317685][T30079] bond33: entered promiscuous mode
[  417.319664][T30079] 8021q: adding VLAN 0 to HW filter on device bond33
[  417.437120][T30083] 8021q: adding VLAN 0 to HW filter on device bond33
[  417.439570][T30083] bond33: (slave wireguard0): The slave device specified does not support setting the MAC address
[  417.443026][T30083] bond33: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  417.450663][T30083] bond33: (slave wireguard0): making interface the new active one
[  417.453245][T30083] wireguard0: entered promiscuous mode
[  417.455939][T30083] bond33: (slave wireguard0): Enslaving as an active interface with an up link
[  417.461992][T30083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  417.464505][T30083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  417.488929][T30083] bond33: (slave wireguard1): The slave device specified does not support setting the MAC address
[  417.495332][T30083] bond33: (slave wireguard1): Enslaving as a backup interface with an up link
[  417.623658][T30095] bond0: option mode: unable to set because the bond device has slaves
[  417.753983][T30099] __nla_validate_parse: 17 callbacks suppressed
[  417.753993][T30099] netlink: 45 bytes leftover after parsing attributes in process `syz.4.8222'.
[  417.820853][T30101] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8223'.
[  417.827883][T30101] gretap0: entered promiscuous mode
[  417.833291][T30101] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8223'.
[  417.838464][T30101] 0{X: renamed from gretap0
[  417.843072][T30101] 0{X: left promiscuous mode
[  417.846408][T30101] 0{X: entered allmulticast mode
[  418.117311][T30103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.169593][T30105] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8225'.
[  418.173667][T30106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.223812][T30110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8227'.
[  418.231302][T30106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.407095][T30125] sctp: [Deprecated]: syz.1.8231 (pid 30125) Use of int in max_burst socket option deprecated.
[  418.407095][T30125] Use struct sctp_assoc_value instead
[  418.700320][T30142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8236'.
[  418.776140][T30145] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8237'.
[  418.799547][T30147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8238'.
[  419.576465][T30165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.605625][T30167] lo speed is unknown, defaulting to 1000
[  419.608385][T30167] lo speed is unknown, defaulting to 1000
[  419.631389][T30165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.687322][T30168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.689054][T30167] syzkaller0 speed is unknown, defaulting to 1000
[  419.790203][T30172] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8246'.
[  419.884025][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8249'.
[  420.021260][T30187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.108602][T30187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.148863][T30187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.199349][T30187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.281630][ T5882] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.291090][ T5840] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.317481][ T5840] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.320286][ T5840] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.354857][T30205] netlink: 'syz.3.8255': attribute type 4 has an invalid length.
[  420.358043][T30199] nft_compat: unsupported protocol 5
[  420.423338][T30216] tipc: Started in network mode
[  420.429282][T30216] tipc: Node identity 080211, cluster identity 4711
[  420.431472][T30216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.434015][T30216] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode
[  420.436972][T30216] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode
[  420.442352][T30216] tipc: Resetting bearer <eth:syzkaller0>
[  420.504849][T30223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.562543][T30223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.620191][T30233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.659866][T30223] veth1_vlan: left allmulticast mode
[  421.026343][T30256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  421.445224][ T5855] tipc: Node number set to 134353152
[  422.268674][T30289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.287919][T30293] bond0: option mode: unable to set because the bond device has slaves
[  422.330841][T30289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.392747][T30302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.985906][T30316] tap0: tun_chr_ioctl cmd 1074025678
[  422.988101][T30316] tap0: group set to 0
[  422.990623][T30316] __nla_validate_parse: 11 callbacks suppressed
[  422.990630][T30316] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8288'.
[  423.234111][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8289'.
[  423.270371][T30321] netlink: 'syz.1.8290': attribute type 16 has an invalid length.
[  423.273581][T30321] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8290'.
[  423.387173][T30330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.390678][T30330] syzkaller0: entered promiscuous mode
[  423.392972][T30330] syzkaller0: entered allmulticast mode
[  423.410823][T30330] tipc: Resetting bearer <eth:syzkaller0>
[  423.417518][T30329] tipc: Resetting bearer <eth:syzkaller0>
[  423.428538][T30329] tipc: Disabling bearer <eth:syzkaller0>
[  423.473570][T30336] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  423.478370][T30336] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  423.507913][T30338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8297'.
[  423.661056][T30352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8301'.
[  423.722083][T30356] bridge0: entered allmulticast mode
[  424.515011][T30362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8306'.
[  424.531245][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8305'.
[  424.568028][T30367] net_ratelimit: 119 callbacks suppressed
[  424.568037][T30367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.606712][T30372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8311'.
[  424.607213][T30369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8308'.
[  424.668932][T30376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8308'.
[  424.694679][T30372] team0: Port device team_slave_0 removed
[  424.841022][T30387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.855493][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.898534][T30387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.954729][T30387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.048032][T30401] bond0: option mode: unable to set because the bond device has slaves
[  425.583705][T30441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.639965][T30441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.694373][T30441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  425.869496][T30463] netlink: 'syz.3.8345': attribute type 1 has an invalid length.
[  425.879897][T30463] openvswitch: netlink: Flow key attr not present in new flow.
[  426.029305][T30472] bond0: option mode: unable to set because the bond device has slaves
[  426.070615][T30474] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  426.073886][T30474] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  426.493706][T30507] netlink: 'syz.1.8360': attribute type 1 has an invalid length.
[  426.521074][T30507] 8021q: adding VLAN 0 to HW filter on device bond34
[  426.580184][T30515] pimreg: entered allmulticast mode
[  426.582649][T30515] pimreg: left allmulticast mode
[  426.658943][T30518] netlink: 'syz.1.8364': attribute type 10 has an invalid length.
[  426.733367][T30526] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  426.817244][T30533] lo speed is unknown, defaulting to 1000
[  426.819806][T30533] lo speed is unknown, defaulting to 1000
[  426.899188][T30533] syzkaller0 speed is unknown, defaulting to 1000
[  427.470920][T30564] netlink: 'syz.1.8375': attribute type 1 has an invalid length.
[  427.473534][T30564] netlink: 'syz.1.8375': attribute type 1 has an invalid length.
[  427.505965][T30567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.561299][T30567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.617820][T30567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.650741][T30567] team0: Port device macvlan0 removed
[  428.177635][T30589] tipc: Invalid UDP bearer configuration
[  428.177662][T30589] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  428.188117][T30589] __nla_validate_parse: 27 callbacks suppressed
[  428.188126][T30589] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8387'.
[  428.244855][T30591] bond0: option mode: unable to set because the bond device has slaves
[  428.283111][T30596] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8390'.
[  428.294780][T30596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8390'.
[  428.503275][T30607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8393'.
[  428.513541][T30607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8393'.
[  428.513643][T30608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8393'.
[  428.522387][T30608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8393'.
[  428.888479][T30616] bond0: option mode: unable to set because the bond device has slaves
[  429.000142][T30620] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8398'.
[  429.120562][T30624] netlink: 'syz.3.8400': attribute type 2 has an invalid length.
[  429.504245][T30633] netlink: 'syz.1.8404': attribute type 1 has an invalid length.
[  429.524572][T30633] bond35: entered promiscuous mode
[  429.527469][T30633] 8021q: adding VLAN 0 to HW filter on device bond35
[  429.536417][T30633] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8404'.
[  429.545959][T30633] batadv0: entered promiscuous mode
[  429.547848][T30633] batadv0: entered allmulticast mode
[  429.550605][T30633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.553822][T30633] bond35: (slave batadv0): making interface the new active one
[  429.557477][T30633] bond35: (slave batadv0): Enslaving as an active interface with an up link
[  429.650190][T30633] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8404'.
[  429.950929][T30604] Set syz1 is full, maxelem 65536 reached
[  430.034558][T30663] bond0: option mode: unable to set because the bond device has slaves
[  430.223433][T30689] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode
[  430.234078][T30689] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  430.241078][T30689] netlink: 'syz.4.8421': attribute type 3 has an invalid length.
[  430.244084][T30689] netlink: 'syz.4.8421': attribute type 3 has an invalid length.
[  430.258439][T30696] netlink: 'syz.3.8423': attribute type 15 has an invalid length.
[  430.276668][T30696] netlink: 'syz.3.8423': attribute type 18 has an invalid length.
[  430.359870][T30708] veth0_to_batadv: entered promiscuous mode
[  430.363748][T30708] veth0_to_batadv: entered allmulticast mode
[  430.969135][T30766] sit1: entered promiscuous mode
[  431.100617][T30777] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  431.106985][T30775] IPVS: stopping backup sync thread 30777 ...
[  431.164243][T30780] bond0: option mode: unable to set because the bond device has slaves
[  431.211328][T30782] macvlan1: entered promiscuous mode
[  431.215754][T30782] macvlan1: left promiscuous mode
[  431.312675][T30788] netlink: 'syz.4.8452': attribute type 11 has an invalid length.
[  431.367676][T30794] netlink: 'syz.4.8454': attribute type 1 has an invalid length.
[  431.430441][T30798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.485173][T30798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.520314][T30813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  431.540436][T30798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.650363][T30821] netlink: 'syz.1.8462': attribute type 2 has an invalid length.
[  431.653273][T30821] netlink: 'syz.1.8462': attribute type 1 has an invalid length.
[  431.734510][T30825] bpq0: entered promiscuous mode
[  432.111605][T30829] netlink: 'syz.4.8466': attribute type 11 has an invalid length.
[  432.196532][T30833] netdevsim netdevsim4: Direct firmware load for .
[  432.196532][T30833]  failed with error -2
[  432.200812][T30833] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  432.200812][T30833] 
[  432.386835][T30836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  432.389265][T30836] IPv6: NLM_F_CREATE should be set when creating new route
[  432.392243][T30836] IPv6: NLM_F_CREATE should be set when creating new route
[  432.567593][T30859] RDS: rds_bind could not find a transport for ::ffff:172.20.20.40, load rds_tcp or rds_rdma?
[  432.623885][T30864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.626856][T30864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.629795][T30864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.632238][T30864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.690166][T30871] macvlan2: entered promiscuous mode
[  432.691962][T30871] macvlan2: entered allmulticast mode
[  432.694390][T30871] bond36: entered promiscuous mode
[  432.697440][T30871] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  432.701583][T30871] bond36: left promiscuous mode
[  433.024799][T30911] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  433.077703][T30920] gretap1: entered promiscuous mode
[  433.079510][T30920] gretap1: entered allmulticast mode
[  433.232154][T30950] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  433.242105][T30947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  433.243575][T30952] __nla_validate_parse: 62 callbacks suppressed
[  433.243583][T30952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8507'.
[  433.254935][T30952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8507'.
[  433.288118][T30958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8509'.
[  433.338956][T30963] syzkaller1: entered promiscuous mode
[  433.340867][T30963] syzkaller1: entered allmulticast mode
[  433.344126][T30969] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8513'.
[  433.349675][T30969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8513'.
[  433.353259][T30971] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8514'.
[  433.490950][T30988] nbd: illegal input index -1
[  433.504522][T30987] lo speed is unknown, defaulting to 1000
[  433.508059][T30987] lo speed is unknown, defaulting to 1000
[  433.597698][T30987] syzkaller0 speed is unknown, defaulting to 1000
[  434.102494][T31013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8527'.
[  434.108997][T31013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8527'.
[  434.160217][T31017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8528'.
[  434.265611][T31026] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  434.273288][T31027] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  434.277210][T31027] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  434.284357][T31030] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  434.297752][T31030] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.301656][T31030] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.349400][T31035] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8534'.
[  434.374845][T31035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.049268][T31057] validate_nla: 35 callbacks suppressed
[  435.049281][T31057] netlink: 'syz.1.8541': attribute type 10 has an invalid length.
[  435.247152][T31059] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  435.331503][T31063] bond0: option mode: unable to set because the bond device has slaves
[  435.386868][T31067] netlink: 'syz.3.8545': attribute type 5 has an invalid length.
[  435.389566][T31067] netlink: 'syz.3.8545': attribute type 6 has an invalid length.
[  435.717145][T31098] bond0: option mode: unable to set because the bond device is up
[  435.755293][   T60] block nbd0: Possible stuck request ffff8880217b8000: control (read@0,1024B). Runtime 270 seconds
[  435.759078][   T60] block nbd0: Possible stuck request ffff8880217b8200: control (read@1024,1024B). Runtime 270 seconds
[  435.763067][   T60] block nbd0: Possible stuck request ffff8880217b8400: control (read@2048,1024B). Runtime 270 seconds
[  435.766949][   T60] block nbd0: Possible stuck request ffff8880217b8600: control (read@3072,1024B). Runtime 270 seconds
[  435.860361][T31118] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  435.902865][ T6092] Bluetooth: hci2: link tx timeout
[  435.906615][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  435.911053][ T6092] Bluetooth: hci2: link tx timeout
[  435.912903][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  435.920353][ T6092] Bluetooth: hci2: link tx timeout
[  435.922715][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  435.930795][ T6092] Bluetooth: hci2: link tx timeout
[  435.935019][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  435.939162][ T6092] Bluetooth: hci2: link tx timeout
[  435.941461][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  435.944221][ T6092] Bluetooth: hci2: link tx timeout
[  435.946248][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  435.953296][ T6092] Bluetooth: hci2: link tx timeout
[  435.956399][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  436.090880][   T33] audit: type=1800 audit(1754495920.058:21): pid=31148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8561" name="memory.events" dev="tmpfs" ino=14878 res=0 errno=0
[  436.148699][T31154] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  436.194447][T31164] netlink: 'syz.1.8565': attribute type 15 has an invalid length.
[  436.312933][T31183] geneve2: entered promiscuous mode
[  436.314806][T31183] geneve2: entered allmulticast mode
[  436.323551][T31185] netlink: 'syz.1.8573': attribute type 29 has an invalid length.
[  436.332291][T31185] openvswitch: netlink: Flow key attr not present in new flow.
[  436.378359][T31192] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  436.385200][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  436.467285][T31197] netlink: 'syz.3.8577': attribute type 1 has an invalid length.
[  436.472169][T31197] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:24099
[  436.509464][T31200] netlink: 'syz.1.8573': attribute type 1 has an invalid length.
[  436.628178][T31218] bridge_slave_0: left allmulticast mode
[  436.630164][T31218] bridge_slave_0: left promiscuous mode
[  436.632157][T31218] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.636299][T31218] bridge_slave_1: left allmulticast mode
[  436.638115][T31218] bridge_slave_1: left promiscuous mode
[  436.640030][T31218] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.647939][T31218] bond0: (slave bond_slave_0): Releasing backup interface
[  436.652770][T31218] bond0: (slave bond_slave_1): Releasing backup interface
[  436.661758][T31218] team0: Port device team_slave_1 removed
[  436.666991][T31218] team0: Port device macvlan0 removed
[  436.742445][ T6092] Bluetooth: hci2: link tx timeout
[  436.744163][ T6092] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  436.923714][T31235] netlink: 'syz.3.8589': attribute type 5 has an invalid length.
[  437.185249][T31242] bond0: option mode: unable to set because the bond device is up
[  437.210648][T31244] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  437.534129][T31273] tipc: Resetting bearer <eth:team0>
[  437.538536][T31273] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  437.919495][T31303] netlink: 'syz.4.8615': attribute type 14 has an invalid length.
[  437.975366][ T6092] Bluetooth: hci2: command 0x0406 tx timeout
[  438.341638][T31325] __nla_validate_parse: 59 callbacks suppressed
[  438.341654][T31325] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8622'.
[  438.357158][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8622'.
[  438.361002][T31325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8622'.
[  438.408443][T31335] sctp: [Deprecated]: syz.3.8624 (pid 31335) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.408443][T31335] Use struct sctp_sack_info instead
[  438.416615][T31329] sctp: [Deprecated]: syz.3.8624 (pid 31329) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.416615][T31329] Use struct sctp_sack_info instead
[  438.439225][T31338] netlink: 'syz.1.8626': attribute type 1 has an invalid length.
[  438.442620][T31338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8626'.
[  438.549648][T31347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8629'.
[  438.601523][T31356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8632'.
[  438.671381][T31361] bond0: option mode: unable to set because the bond device is up
[  438.681490][T31358] lo speed is unknown, defaulting to 1000
[  438.685967][T31358] lo speed is unknown, defaulting to 1000
[  438.864429][T31376] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8639'.
[  438.879188][T31358] syzkaller0 speed is unknown, defaulting to 1000
[  438.880327][T31376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8639'.
[  438.887522][T31376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8639'.
[  438.973858][T31388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8642'.
[  438.977643][T31387] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  439.258340][T31409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.380786][T31409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.478442][T31428] syzkaller1: entered promiscuous mode
[  439.480322][T31428] syzkaller1: entered allmulticast mode
[  439.578378][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  439.950848][T31455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.006640][T31459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.055622][ T6092] Bluetooth: hci2: command 0x0406 tx timeout
[  440.534984][T31477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.639596][T31482] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  440.642965][T31477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.907419][T31510] bond0: option mode: unable to set because the bond device has slaves
[  441.279291][T31531] tipc: Invalid UDP bearer configuration
[  441.279318][T31531] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  441.285676][T31530] tipc: Invalid UDP bearer configuration
[  441.285715][T31530] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  441.319941][T31532] validate_nla: 2 callbacks suppressed
[  441.319953][T31532] netlink: 'syz.4.8694': attribute type 10 has an invalid length.
[  441.328183][T31532] bridge0: port 3(dummy0) entered disabled state
[  441.330468][T31532] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.333141][T31532] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.354125][T31532] bridge0: port 3(dummy0) entered blocking state
[  441.356762][T31532] bridge0: port 3(dummy0) entered forwarding state
[  441.359800][T31532] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.362611][T31532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.365448][T31532] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.368422][T31532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.376302][T31532] bridge0: entered promiscuous mode
[  441.378465][T31532] bridge0: entered allmulticast mode
[  441.386318][T31532] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  441.391149][T31536] : renamed from batadv_slave_1 (while UP)
[  441.449655][T31540] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  441.720325][T31567] syzkaller0: entered promiscuous mode
[  441.723774][T31567] syzkaller0: entered allmulticast mode
[  441.787842][T31576] netlink: 'syz.3.8712': attribute type 29 has an invalid length.
[  441.796350][T31576] netlink: 'syz.3.8712': attribute type 29 has an invalid length.
[  441.937498][ T5855] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  441.987224][T31599] netlink: 'syz.4.8722': attribute type 29 has an invalid length.
[  441.993479][T31599] netlink: 'syz.4.8722': attribute type 29 has an invalid length.
[  442.285850][ T5840] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  442.292917][T31626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.297823][T31626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.352167][T31626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.487140][ T5855] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  442.719192][T31641] bond0: option mode: unable to set because the bond device has slaves
[  442.817209][T31649] netlink: 'syz.1.8738': attribute type 10 has an invalid length.
[  442.841106][T31649] team0: Port device 0! added
[  442.924726][T31663] bond0: option mode: unable to set because the bond device has slaves
[  442.927670][T31664] netlink: 'syz.3.8742': attribute type 5 has an invalid length.
[  443.000287][T31670] bond37: entered promiscuous mode
[  443.002350][T31670] 8021q: adding VLAN 0 to HW filter on device bond37
[  443.082433][T31670] bond37 (unregistering): Released all slaves
[  443.122059][T31681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.133776][T31681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.151734][T31685] veth0_to_bridge: entered promiscuous mode
[  443.160665][T31684] veth0_to_bridge: left promiscuous mode
[  443.190606][T31681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.335689][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  443.338437][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  443.505736][T31725] netlink: 'syz.3.8759': attribute type 10 has an invalid length.
[  443.557613][T31729] __nla_validate_parse: 32 callbacks suppressed
[  443.557623][T31729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8762'.
[  443.633802][T31735] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8764'.
[  443.660625][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8765'.
[  443.664784][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8765'.
[  443.768335][T31752] netlink: 'syz.1.8769': attribute type 16 has an invalid length.
[  443.771576][T31752] netlink: 'syz.1.8769': attribute type 17 has an invalid length.
[  443.779120][T31752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  443.784180][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8771'.
[  443.787666][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8771'.
[  443.792449][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8771'.
[  443.799404][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8771'.
[  443.802797][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8771'.
[  443.805935][T31756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8771'.
[  443.873211][T31763] macvtap2: entered promiscuous mode
[  443.875400][T31763] bond0: entered promiscuous mode
[  443.877145][T31763] macvtap2: entered allmulticast mode
[  443.878947][T31763] bond0: entered allmulticast mode
[  443.880845][T31763] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  443.894480][T31763] bond0: left allmulticast mode
[  443.897028][T31763] bond0: left promiscuous mode
[  443.903725][T31767] lo speed is unknown, defaulting to 1000
[  443.912937][T31767] lo speed is unknown, defaulting to 1000
[  443.985695][T31774] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  443.997672][T31774] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  444.065604][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  444.068697][   T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  444.082042][T31777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.113034][T31767] syzkaller0 speed is unknown, defaulting to 1000
[  444.167889][T31777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.284954][T31777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.377049][T31777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.394710][T31807] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  444.398358][T31807] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  444.409062][T31808] bpq0: left promiscuous mode
[  444.448185][ T5882] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.456213][ T5882] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.466378][ T5882] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.476315][ T5882] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.541986][T31819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.612906][T31821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.634511][T31827] openvswitch: netlink: IP tunnel dst address not specified
[  444.699550][T31833] bridge4: entered promiscuous mode
[  444.701795][T31833] bridge4: entered allmulticast mode
[  444.865005][T31851] bond0: option mode: unable to set because the bond device is up
[  445.033363][T31872] : left promiscuous mode
[  445.308062][T31907] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  445.310924][T31907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.373567][T31912] _Z`Ԁ@: entered promiscuous mode
[  445.439560][T31915] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  445.527977][T31923] bond0: option xmit_hash_policy: invalid value (8)
[  445.604141][T31936] pimreg: entered allmulticast mode
[  445.630964][T31941] unsupported nla_type 52263
[  445.640173][T31944] netlink: 'syz.1.8842': attribute type 11 has an invalid length.
[  445.649600][T31944] netlink: 'syz.1.8842': attribute type 11 has an invalid length.
[  445.808694][T31960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  446.616147][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.655517][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  447.951769][T32044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.956606][T32044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.011341][T32044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.572768][T32077] validate_nla: 11 callbacks suppressed
[  448.572778][T32077] netlink: 'syz.1.8877': attribute type 13 has an invalid length.
[  448.578453][T32077] __nla_validate_parse: 34 callbacks suppressed
[  448.578460][T32077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8877'.
[  448.583659][T32080] netlink: 'syz.3.8878': attribute type 1 has an invalid length.
[  448.587190][T32077] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  448.590677][T32080] netlink: 'syz.3.8878': attribute type 2 has an invalid length.
[  448.593335][T32080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8878'.
[  448.622587][T32082] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8879'.
[  448.648301][T32084] netlink: 'syz.1.8880': attribute type 12 has an invalid length.
[  448.774801][T32098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.779888][T32098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.834277][T32098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.952650][T32106] netlink: 596 bytes leftover after parsing attributes in process `syz.4.8886'.
[  449.063919][T32110] bond0: option mode: unable to set because the bond device has slaves
[  449.248482][T32120] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8891'.
[  449.282480][T32122] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8892'.
[  449.382582][   T24] IPVS: starting estimator thread 0...
[  449.427985][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8898'.
[  449.431655][T32134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8898'.
[  449.436878][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8898'.
[  449.439927][T32134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8898'.
[  449.465286][T32130] IPVS: using max 80 ests per chain, 192000 per kthread
[  449.560499][T32148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.564717][T32148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.624201][T32148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.669129][T32158] bond0: option mode: unable to set because the bond device has slaves
[  449.886254][T10528] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  449.893982][T32168] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  449.972413][T10528] nci: nci_rx_work: unknown MT 0x5
[  450.206627][T32177] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  450.214169][T32177] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  450.679965][T32189] netlink: 'syz.1.8913': attribute type 12 has an invalid length.
[  450.853729][T32210] lo speed is unknown, defaulting to 1000
[  450.859930][T32210] lo speed is unknown, defaulting to 1000
[  450.953244][T32225] sctp: [Deprecated]: syz.4.8925 (pid 32225) Use of int in maxseg socket option.
[  450.953244][T32225] Use struct sctp_assoc_value instead
[  450.964936][T32231] netlink: 'syz.4.8925': attribute type 1 has an invalid length.
[  450.968056][T32231] netlink: 'syz.4.8925': attribute type 1 has an invalid length.
[  450.971295][T32231] netlink: 'syz.4.8925': attribute type 1 has an invalid length.
[  450.997181][T32231] 8021q: adding VLAN 0 to HW filter on device bond2
[  450.999683][T32210] syzkaller0 speed is unknown, defaulting to 1000
[  451.104915][T32241] 8021q: VLANs not supported on ip6gre0
[  451.197370][T32243] mac80211_hwsim hwsim37 wlan1: left allmulticast mode
[  451.201976][T32243] netlink: 'syz.3.8929': attribute type 10 has an invalid length.
[  451.209625][T32243] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  454.103067][T32249] __nla_validate_parse: 12 callbacks suppressed
[  454.103078][T32249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8932'.
[  454.177134][T32258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8931'.
[  454.184139][T32258] netlink: 'syz.3.8931': attribute type 19 has an invalid length.
[  454.188828][T32258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8931'.
[  454.192273][T32258] netlink: 'syz.3.8931': attribute type 19 has an invalid length.
[  454.301236][T32262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8936'.
[  454.363464][T32264] lo speed is unknown, defaulting to 1000
[  454.367268][T32264] lo speed is unknown, defaulting to 1000
[  454.448972][T32264] syzkaller0 speed is unknown, defaulting to 1000
[  454.920825][T32271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8938'.
[  454.988652][T32276] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8940'.
[  455.075246][T32285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8944'.
[  455.132110][T32289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8946'.
[  455.176760][T32295] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8949'.
[  455.182839][T32298] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8950'.
[  455.431766][T32323] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode
[  455.434193][T32323] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode
[  456.273741][T32403] netlink: 'syz.3.8983': attribute type 1 has an invalid length.
[  456.299447][T32403] 8021q: adding VLAN 0 to HW filter on device bond1
[  456.325056][T32403] 8021q: adding VLAN 0 to HW filter on device bond1
[  456.328104][T32403] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  456.335262][T32403] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  456.344306][T32411] netlink: 'syz.1.8985': attribute type 2 has an invalid length.
[  456.387625][T32403] veth5: entered promiscuous mode
[  456.390848][T32403] bond1: (slave veth5): Enslaving as an active interface with a down link
[  456.395363][T32403] erspan0: entered allmulticast mode
[  456.400246][T32403] bond1: (slave erspan0): making interface the new active one
[  456.415260][T32403] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  456.418525][T32403] netlink: 'syz.3.8983': attribute type 3 has an invalid length.
[  456.424288][T32403] syz.3.8983 (32403) used greatest stack depth: 18808 bytes left
[  456.438982][T32420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.443358][T32420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.514086][T32420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.646805][T32436] lo speed is unknown, defaulting to 1000
[  456.649528][T32436] lo speed is unknown, defaulting to 1000
[  456.749620][T32436] syzkaller0 speed is unknown, defaulting to 1000
[  456.855192][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  457.253498][T32469] netlink: 'syz.3.9005': attribute type 1 has an invalid length.
[  457.264390][T32469] vlan2: entered allmulticast mode
[  457.266482][T32469] veth1: entered allmulticast mode
[  457.322271][T32475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.329556][T32475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.385185][T32475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.436828][T32484] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  457.440072][T32484] netlink: 'syz.4.9008': attribute type 1 has an invalid length.
[  457.549690][T32495] netlink: 'syz.3.9013': attribute type 32 has an invalid length.
[  457.552338][T32495] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  457.573633][T32495] pim6reg1: entered promiscuous mode
[  457.579544][T32495] pim6reg1: entered allmulticast mode
[  457.792489][T32513] netlink: 'syz.3.9020': attribute type 16 has an invalid length.
[  457.800873][T32513] netlink: 'syz.3.9020': attribute type 17 has an invalid length.
[  458.049885][ T5840] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.052924][ T5840] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.059923][ T5840] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.062668][ T5840] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.175030][T32539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.180301][T32539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.239349][T32539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.851789][T32582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.857545][T32582] syzkaller0: entered promiscuous mode
[  458.859911][T32582] syzkaller0: entered allmulticast mode
[  458.882125][T32582] tipc: Resetting bearer <eth:syzkaller0>
[  458.887414][T32581] tipc: Resetting bearer <eth:syzkaller0>
[  458.931649][T32581] tipc: Disabling bearer <eth:syzkaller0>
[  459.099685][T32602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.103684][T32602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.163391][T32602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.260601][T32613] netlink: 'syz.1.9050': attribute type 7 has an invalid length.
[  459.263306][T32613] __nla_validate_parse: 98 callbacks suppressed
[  459.263313][T32613] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9050'.
[  459.271942][T32613] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  459.305831][T32619] netlink: 'syz.1.9051': attribute type 1 has an invalid length.
[  459.308732][T32619] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9051'.
[  459.360125][T32621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9052'.
[  459.429423][T32627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9054'.
[  459.436646][T32627] netlink: 'syz.1.9054': attribute type 21 has an invalid length.
[  459.439334][T32627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9054'.
[  459.503372][T32635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9058'.
[  459.593635][T32645] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9061'.
[  459.597370][T32645] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9061'.
[  459.628202][T32633] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  460.350808][T32655] netlink: 'syz.4.9065': attribute type 21 has an invalid length.
[  460.353866][T32655] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9065'.
[  460.392669][T32657] netlink: 'syz.1.9066': attribute type 12 has an invalid length.
[  460.396774][T32659] : renamed from batadv_slave_1 (while UP)
[  460.443879][T32659] netlink: 'syz.4.9067': attribute type 7 has an invalid length.
[  460.446750][T32659] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9067'.
[  460.538924][T32680] netlink: 'syz.1.9073': attribute type 21 has an invalid length.
[  460.661159][T32673] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  461.371971][T32708] netlink: 'syz.3.9080': attribute type 21 has an invalid length.
[  461.510047][T32720] netlink: 'syz.3.9089': attribute type 1 has an invalid length.
[  461.629202][T32722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  461.652581][T15236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.667550][T15236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.861943][  T309] netlink: 'syz.1.9104': attribute type 1 has an invalid length.
[  461.991767][  T321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  462.233305][  T331] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  462.468971][  T347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.473056][  T347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.528585][  T347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.551973][  T349] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  463.310547][  T398] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.334362][  T399] bond3: (slave veth5): Enslaving as an active interface with a down link
[  463.363090][  T398] vlan3: entered allmulticast mode
[  463.366730][  T398] veth1: entered allmulticast mode
[  463.371399][  T396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  463.950563][  T381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.506301][  T430] __nla_validate_parse: 32 callbacks suppressed
[  464.506311][  T430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9142'.
[  464.532019][  T434] bond1: (slave erspan0): Releasing active interface
[  464.541039][  T434] bond0: (slave bridge0): Releasing backup interface
[  464.543234][  T434] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  464.551859][  T434] bond0: (slave wlan1): Releasing backup interface
[  464.560869][  T434] bond1: (slave veth5): Releasing active interface
[  464.574135][  T436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9145'.
[  464.600275][  T436] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9145'.
[  464.664498][  T447] validate_nla: 4 callbacks suppressed
[  464.664508][  T447] netlink: 'syz.1.9150': attribute type 1 has an invalid length.
[  464.691582][  T447] 8021q: adding VLAN 0 to HW filter on device bond37
[  464.711529][  T447] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9150'.
[  464.739377][  T447] bond37: (slave veth47): Enslaving as an active interface with a down link
[  464.756937][  T453] netlink: 'syz.3.9153': attribute type 9 has an invalid length.
[  464.760759][  T453] netlink: 'syz.3.9153': attribute type 6 has an invalid length.
[  464.771029][  T447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9150'.
[  464.786481][  T444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.843543][  T462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9155'.
[  464.863315][  T466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.873187][  T466] vti0: entered promiscuous mode
[  464.875761][  T466] vti0: entered allmulticast mode
[  465.011212][  T475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9160'.
[  465.347403][  T498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9168'.
[  465.379137][  T500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9169'.
[  465.477328][  T512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9174'.
[  465.562359][  T525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.640922][  T533] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  465.652362][  T533] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode
[  465.654804][  T533] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode
[  465.659083][  T533] tipc: Resetting bearer <eth:syzkaller0>
[  465.667319][T27382] tipc: Resetting bearer <eth:syzkaller0>
[  465.690742][  T539] openvswitch: netlink: Unknown nsh attribute 0
[  465.692812][  T539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.784342][  T557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.810839][  T555] tipc: Disabling bearer <eth:syzkaller0>
[  465.825631][   T60] block nbd0: Possible stuck request ffff8880217b8000: control (read@0,1024B). Runtime 300 seconds
[  465.829063][   T60] block nbd0: Possible stuck request ffff8880217b8200: control (read@1024,1024B). Runtime 300 seconds
[  465.833069][   T60] block nbd0: Possible stuck request ffff8880217b8400: control (read@2048,1024B). Runtime 300 seconds
[  465.839928][   T60] block nbd0: Possible stuck request ffff8880217b8600: control (read@3072,1024B). Runtime 300 seconds
[  465.911519][  T568] netlink: 'syz.4.9195': attribute type 1 has an invalid length.
[  465.931784][  T572] netlink: 'syz.3.9196': attribute type 1 has an invalid length.
[  465.945942][  T568] 8021q: adding VLAN 0 to HW filter on device bond5
[  465.970354][  T572] 8021q: adding VLAN 0 to HW filter on device bond2
[  465.977182][  T568] vlan4: entered allmulticast mode
[  465.980857][  T568] bond5: (slave vlan4): making interface the new active one
[  465.984043][  T568] bond5: (slave vlan4): Enslaving as an active interface with an up link
[  466.043954][  T581] netlink: 'syz.1.9199': attribute type 21 has an invalid length.
[  466.048434][  T581] netlink: 'syz.1.9199': attribute type 1 has an invalid length.
[  466.114821][  T599] batadv0: entered promiscuous mode
[  466.117736][  T599] hsr1: entered allmulticast mode
[  466.119758][  T599] batadv0: entered allmulticast mode
[  466.122415][  T599] 8021q: adding VLAN 0 to HW filter on device hsr1
[  466.137988][  T599] batadv0: left promiscuous mode
[  466.266646][  T621] netlink: 'syz.4.9215': attribute type 1 has an invalid length.
[  466.301956][  T632] netlink: 'syz.3.9217': attribute type 1 has an invalid length.
[  466.323169][  T632] 8021q: adding VLAN 0 to HW filter on device bond3
[  466.333863][  T629] netlink: 'syz.1.9216': attribute type 2 has an invalid length.
[  466.347826][  T632] vlan2: entered allmulticast mode
[  466.350115][  T632] bond3: (slave vlan2): Opening slave failed
[  466.517400][  T651] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  466.543843][  T655] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  466.936057][  T678] tap0: tun_chr_ioctl cmd 1074025680
[  466.939690][  T678] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  466.944150][  T678] mac80211_hwsim hwsim36 D: renamed from syzkaller0 (while UP)
[  466.948973][  T678] tipc: Disabling bearer <eth:syzkaller0>
[  467.092216][  T688] 8021q: adding VLAN 0 to HW filter on device bond4
[  467.108879][  T688] 8021q: adding VLAN 0 to HW filter on device bond4
[  467.112046][  T688] bond4: (slave vcan2): The slave device specified does not support setting the MAC address
[  467.117871][  T688] bond4: (slave vcan2): Error -95 calling set_mac_address
[  467.160914][  T688] macvlan4: entered promiscuous mode
[  467.163192][  T688] macvlan4: entered allmulticast mode
[  467.166449][  T688] bond4: entered promiscuous mode
[  467.175497][  T688] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  467.187115][  T688] bond4: left promiscuous mode
[  467.297430][  T699] delete_channel: no stack
[  467.308843][  T707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.314243][  T708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.344781][  T711] 0{X: left allmulticast mode
[  467.404311][  T711] 8021q: adding VLAN 0 to HW filter on device team0
[  467.410217][  T711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  467.459489][  T711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.515838][  T711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.573734][  T716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  468.539711][  T787] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  468.539839][ T5882] bond0: (slave bond_slave_0): interface is now down
[  468.554525][ T5882] bond0: (slave bond_slave_1): interface is now down
[  468.560385][ T5882] bond0: (slave bridge0): interface is now down
[  468.573330][ T5882] bond0: now running without any active interface!
[  468.821149][  T792] bridge0: port 3(dummy0) entered disabled state
[  468.823390][  T792] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.825974][  T792] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.832187][  T792] tipc: Resetting bearer <eth:team0>
[  469.031418][  T792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.044285][  T792] batman_adv: batadv0: Interface deactivated: 26
[  469.082664][  T792] macvlan0: left allmulticast mode
[  469.102937][  T792] mac80211_hwsim hwsim38 wlan0: left promiscuous mode
[  469.111261][  T792] vlan2: left promiscuous mode
[  469.113172][  T792] bond0: left promiscuous mode
[  469.114779][  T792] bond_slave_0: left promiscuous mode
[  469.116792][  T792] bond_slave_1: left promiscuous mode
[  469.118734][  T792] bridge0: left promiscuous mode
[  469.120647][  T792] vlan2: left allmulticast mode
[  469.127271][  T792] gretap1: left promiscuous mode
[  469.137596][  T792] sit1: left promiscuous mode
[  469.140779][  T792] geneve2: left promiscuous mode
[  469.142585][  T792] geneve2: left allmulticast mode
[  469.153475][  T792] vlan3: left allmulticast mode
[  469.166971][  T792] vlan4: left allmulticast mode
[  469.168888][  T792] veth1: left allmulticast mode
[  469.210144][T17155] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.219587][T17155] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.237584][T17155] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.246285][T17155] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.331951][  T811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.334514][  T811] syzkaller0: entered promiscuous mode
[  469.337274][  T811] syzkaller0: entered allmulticast mode
[  469.352518][  T811] tipc: Resetting bearer <eth:syzkaller0>
[  469.361709][  T810] tipc: Resetting bearer <eth:syzkaller0>
[  469.378048][  T810] tipc: Disabling bearer <eth:syzkaller0>
[  469.502724][  T822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.598894][ T5882] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  469.602418][ T5882] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  469.614612][ T5882] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  469.618473][ T5882] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  469.708499][  T839] bond0: Device is already in use.
[  470.464086][  T843] __nla_validate_parse: 41 callbacks suppressed
[  470.464096][  T843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9284'.
[  470.489558][  T843] openvswitch: netlink: Unknown nsh attribute 0
[  470.491826][  T843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.572517][  T855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9289'.
[  470.616165][  T857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9290'.
[  470.617189][  T860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9290'.
[  470.781785][  T872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.784274][  T873] syzkaller0: entered promiscuous mode
[  470.786382][  T873] syzkaller0: entered allmulticast mode
[  470.789349][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.792128][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.794875][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.799183][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.802023][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.804731][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.807907][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.810735][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.813562][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.817355][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.820552][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.823462][  T872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.849833][  T872] tipc: Resetting bearer <eth:syzkaller0>
[  470.860929][  T872] tipc: Disabling bearer <eth:syzkaller0>
[  470.928047][  T885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9297'.
[  471.001421][  T899] validate_nla: 10 callbacks suppressed
[  471.001431][  T899] netlink: 'syz.3.9300': attribute type 10 has an invalid length.
[  471.014632][  T899] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  471.016175][  T902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9302'.
[  471.215570][  T924] netlink: 'syz.1.9306': attribute type 1 has an invalid length.
[  471.234583][  T924] bond38: (slave vxcan1): The slave device specified does not support setting the MAC address
[  471.238981][  T924] bond38: (slave vxcan1): Error -95 calling set_mac_address
[  471.280442][  T923] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  471.397159][  T945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9310'.
[  471.540520][  T963] lo speed is unknown, defaulting to 1000
[  471.543156][  T963] lo speed is unknown, defaulting to 1000
[  471.586976][  T971] netlink: 284 bytes leftover after parsing attributes in process `syz.3.9315'.
[  471.653839][  T963] syzkaller0 speed is unknown, defaulting to 1000
[  471.719187][  T982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9319'.
[  471.749890][  T985] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9320'.
[  471.752978][  T985] netlink: 'syz.4.9320': attribute type 1 has an invalid length.
[  471.758570][  T985] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  471.780956][  T994] netlink: 'syz.3.9318': attribute type 13 has an invalid length.
[  471.790108][  T994] netlink: 'syz.3.9318': attribute type 17 has an invalid length.
[  471.809494][  T994] erspan0: left allmulticast mode
[  471.898604][  T994] 8021q: adding VLAN 0 to HW filter on device team0
[  471.931088][  T994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  471.990124][  T994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.069664][  T994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.142073][  T983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.323046][ T1011] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  472.751155][ T1017] netlink: 'syz.3.9325': attribute type 2 has an invalid length.
[  473.134902][ T1037] bond0: (slave bridge0): Releasing backup interface
[  473.137834][ T1037] bridge0: left allmulticast mode
[  473.140758][ T1037] dummy0: left allmulticast mode
[  473.142538][ T1037] dummy0: left promiscuous mode
[  473.144332][ T1037] bridge0: port 3(dummy0) entered disabled state
[  473.149126][ T1037] bridge_slave_0: left allmulticast mode
[  473.150947][ T1037] bridge_slave_0: left promiscuous mode
[  473.153553][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.159775][ T1037] bridge_slave_1: left allmulticast mode
[  473.167212][ T1037] bridge_slave_1: left promiscuous mode
[  473.170586][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.177537][ T1037] bond0: (slave bond_slave_0): Releasing backup interface
[  473.180647][ T1037] bond_slave_0: left allmulticast mode
[  473.183715][ T1037] bond0: (slave bond_slave_1): Releasing backup interface
[  473.188781][ T1037] bond_slave_1: left allmulticast mode
[  473.191982][ T1037] team0: Port device team_slave_0 removed
[  473.196198][ T1037] team0: Port device team_slave_1 removed
[  473.198446][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.201517][ T1037] batman_adv: batadv0: Removing interface: 26
[  473.204501][ T1037] bond1: (slave gretap1): Releasing active interface
[  473.209093][ T1037] bond3: (slave veth5): Releasing active interface
[  473.214426][ T1037] bond5: (slave vlan4): Releasing active interface
[  473.257194][ T1056] netlink: 'syz.4.9335': attribute type 1 has an invalid length.
[  473.270384][ T1056] 8021q: adding VLAN 0 to HW filter on device bond6
[  473.280236][ T1056] bond6: (slave gretap2): making interface the new active one
[  473.283314][ T1056] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  473.341967][ T1067] netlink: 'syz.1.9336': attribute type 4 has an invalid length.
[  473.351496][ T1067] tap0: tun_chr_ioctl cmd 1074812118
[  473.555019][ T1086] netlink: 'syz.4.9341': attribute type 1 has an invalid length.
[  473.595904][ T1095] netlink: 'syz.1.9338': attribute type 10 has an invalid length.
[  473.599203][ T1095] !: entered promiscuous mode
[  473.607348][ T1095] team0: Port device 0! removed
[  473.609791][ T1095] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  474.024826][ T1146] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  474.030834][ T1146] Bluetooth: MGMT ver 1.23
[  474.112852][ T1152] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  474.359545][ T1174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.367239][ T1176] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  474.374134][ T1174] syzkaller0: entered promiscuous mode
[  474.378286][ T1174] syzkaller0: entered allmulticast mode
[  474.383157][ T1176] tipc: Enabling of bearer <ib:vxcan1> rejected, failed to enable media
[  474.416614][ T1173] tipc: Resetting bearer <eth:syzkaller0>
[  474.431550][ T1173] tipc: Disabling bearer <eth:syzkaller0>
[  475.230949][ T1264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.237625][ T1264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.292875][ T1264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  475.472747][ T1280] __nla_validate_parse: 101 callbacks suppressed
[  475.472760][ T1280] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9400'.
[  475.513423][ T1283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9401'.
[  475.551014][ T1288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9404'.
[  475.597555][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9405'.
[  475.676746][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9407'.
[  475.679856][ T1299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9407'.
[  475.893479][ T1308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9410'.
[  475.998629][ T1317] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9414'.
[  476.038905][ T1319] lo speed is unknown, defaulting to 1000
[  476.041610][ T1319] lo speed is unknown, defaulting to 1000
[  476.103903][ T1323] validate_nla: 4 callbacks suppressed
[  476.103912][ T1323] netlink: 'syz.3.9415': attribute type 3 has an invalid length.
[  476.117463][ T1323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9415'.
[  476.132997][ T1323] lo speed is unknown, defaulting to 1000
[  476.212215][ T1319] syzkaller0 speed is unknown, defaulting to 1000
[  476.212600][ T1323] lo speed is unknown, defaulting to 1000
[  476.377784][ T1340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9423'.
[  476.431273][ T1323] syzkaller0 speed is unknown, defaulting to 1000
[  476.519600][ T1355] macvtap3: entered promiscuous mode
[  476.521369][ T1355] team0: entered promiscuous mode
[  476.523050][ T1355] bond15: entered promiscuous mode
[  476.524785][ T1355] bond24: entered promiscuous mode
[  476.527613][ T1355] macvlan0: entered promiscuous mode
[  476.529419][ T1355] macvtap3: entered allmulticast mode
[  476.531167][ T1355] team0: entered allmulticast mode
[  476.532830][ T1355] bond15: entered allmulticast mode
[  476.534554][ T1355] bond24: entered allmulticast mode
[  476.570283][ T1355] 8021q: adding VLAN 0 to HW filter on device macvtap3
[  476.581046][ T1356] team0: left allmulticast mode
[  476.582814][ T1356] bond15: left allmulticast mode
[  476.584782][ T1356] bond24: left allmulticast mode
[  476.586747][ T1356] team0: left promiscuous mode
[  476.588419][ T1356] bond15: left promiscuous mode
[  476.590364][ T1356] bond24: left promiscuous mode
[  476.592118][ T1356] macvlan0: left promiscuous mode
[  476.737791][ T1366] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  476.950404][ T1378] lo speed is unknown, defaulting to 1000
[  476.974782][ T1378] lo speed is unknown, defaulting to 1000
[  477.119769][ T1378] syzkaller0 speed is unknown, defaulting to 1000
[  477.131258][ T1397] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  477.169093][ T1399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.173779][ T1399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.230387][ T1400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.034152][ T1429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.038093][ T1429] syzkaller0: entered promiscuous mode
[  478.040050][ T1429] syzkaller0: entered allmulticast mode
[  478.059277][ T1431] tipc: Resetting bearer <eth:syzkaller0>
[  478.070751][ T1431] tipc: Resetting bearer <eth:syzkaller0>
[  478.083666][ T1431] tipc: Disabling bearer <eth:syzkaller0>
[  478.386355][ T1442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.808484][ T1461] netlink: 'syz.3.9463': attribute type 6 has an invalid length.
[  478.882227][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.892263][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.898421][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.905692][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.912070][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.916969][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.919781][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  478.922463][ T1465] netlink: 'syz.3.9465': attribute type 1 has an invalid length.
[  479.412798][ T1487] siw: device registration error -23
[  479.423879][ T1487] wg1: entered promiscuous mode
[  479.426098][ T1487] wg1: entered allmulticast mode
[  479.513299][ T1489] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  479.856865][T15233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.859381][T15233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.487050][ T1549] __nla_validate_parse: 28 callbacks suppressed
[  480.487059][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9495'.
[  480.502841][ T1548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.508102][ T1548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.511788][ T1548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.518666][ T1548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.524809][ T1548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.529239][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.532912][ T1548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.543453][T10528] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  480.544351][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.549776][ T1548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9493'.
[  480.553206][T10528] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  480.558721][T10528] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  480.561578][T10528] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  480.754643][ T1579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  480.761630][ T1579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  480.827221][ T1591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  482.540157][ T1629] team0: Port device sit3 added
[  482.575797][ T1637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.644814][ T1644] validate_nla: 25 callbacks suppressed
[  482.644828][ T1644] netlink: 'syz.3.9525': attribute type 1 has an invalid length.
[  482.652863][ T1644] netlink: 'syz.3.9525': attribute type 3 has an invalid length.
[  482.657122][ T1646] netlink: 'syz.4.9524': attribute type 3 has an invalid length.
[  482.795575][ T1651] netem: incorrect gi model size
[  482.798319][ T1651] netem: change failed
[  482.807956][ T1655] netem: incorrect gi model size
[  482.815187][ T1655] netem: change failed
[  482.978354][ T1658] netlink: 'syz.3.9529': attribute type 1 has an invalid length.
[  482.981538][ T1658] netlink: 'syz.3.9529': attribute type 1 has an invalid length.
[  483.077705][ T1670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.081634][ T1670] syzkaller0: entered promiscuous mode
[  483.083810][ T1670] syzkaller0: entered allmulticast mode
[  483.089724][ T1670] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  483.121103][ T1670] tipc: Resetting bearer <eth:syzkaller0>
[  483.136288][ T1666] tipc: Resetting bearer <eth:syzkaller0>
[  483.155673][ T1666] tipc: Disabling bearer <eth:syzkaller0>
[  483.619322][ T1731] netlink: 'syz.1.9558': attribute type 1 has an invalid length.
[  483.872095][ T1757] lo speed is unknown, defaulting to 1000
[  483.874731][ T1757] lo speed is unknown, defaulting to 1000
[  484.002307][ T1757] syzkaller0 speed is unknown, defaulting to 1000
[  484.092395][ T1760] netlink: 'syz.4.9567': attribute type 4 has an invalid length.
[  484.171744][ T1775] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  484.241119][ T1780] netlink: 'syz.1.9575': attribute type 4 has an invalid length.
[  484.258048][ T1780] netlink: 'syz.1.9575': attribute type 4 has an invalid length.
[  484.467844][ T1794] lo speed is unknown, defaulting to 1000
[  484.470553][ T1794] lo speed is unknown, defaulting to 1000
[  484.509416][ T1809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.515447][ T1809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.572234][ T1809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.623195][ T1794] syzkaller0 speed is unknown, defaulting to 1000
[  484.623813][ T1814] netlink: 'syz.1.9582': attribute type 4 has an invalid length.
[  485.005730][ T1834] syzkaller0: entered allmulticast mode
[  485.776620][ T1878] __nla_validate_parse: 37 callbacks suppressed
[  485.776634][ T1878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9606'.
[  485.872252][ T1883] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9608'.
[  485.907213][ T1883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9608'.
[  486.103864][ T1900] 8021q: VLANs not supported on v
[  486.152700][ T1904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9614'.
[  486.175776][ T1904] bond39: (slave bridge20): Enslaving as an active interface with an up link
[  486.328478][ T1918] veth0_to_bridge: entered promiscuous mode
[  486.331392][ T1918] veth0_to_bridge: left promiscuous mode
[  486.397513][ T1925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9618'.
[  486.400672][ T1924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9618'.
[  486.406310][ T1925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9618'.
[  486.409347][ T1925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9618'.
[  486.413128][ T1924] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9618'.
[  486.873144][ T1962] lo speed is unknown, defaulting to 1000
[  486.876565][ T1962] lo speed is unknown, defaulting to 1000
[  486.959367][ T1962] syzkaller0 speed is unknown, defaulting to 1000
[  486.961978][ T1963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.396640][ T1969] dvmrp1: entered allmulticast mode
[  487.407650][ T1969] pimreg: left allmulticast mode
[  487.409917][ T1969] dvmrp1: left allmulticast mode
[  487.641422][ T1976] netlink: 316 bytes leftover after parsing attributes in process `syz.1.9629'.
[  487.654497][ T1973] geneve3: entered promiscuous mode
[  487.658855][ T1973] geneve3: entered allmulticast mode
[  487.661412][ T5882] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  487.664622][ T5882] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  487.668848][ T5840] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  487.671510][ T5840] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  487.766271][ T1991] validate_nla: 2 callbacks suppressed
[  487.766285][ T1991] netlink: 'syz.1.9634': attribute type 1 has an invalid length.
[  488.033784][ T2005] Unsupported ieee802154 address type: 0
[  488.218260][ T2019] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  488.649570][ T2024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.846538][ T2028] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  489.016083][ T2038] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  489.019316][ T2038] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  489.093753][ T2040] netlink: 'syz.4.9649': attribute type 1 has an invalid length.
[  489.128633][ T2040] 8021q: adding VLAN 0 to HW filter on device bond7
[  489.289692][ T2065] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  489.437473][ T2083] smc: removing ib device syz0
[  489.483346][ T2087] openvswitch: netlink: IP tunnel dst address not specified
[  490.107597][ T2106] netlink: 'syz.3.9671': attribute type 4 has an invalid length.
[  490.375611][T27386] wlan1: Trigger new scan to find an IBSS to join
[  490.775365][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  490.830221][ T2125] __nla_validate_parse: 14 callbacks suppressed
[  490.830233][ T2125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9676'.
[  491.063990][ T2128] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9677'.
[  491.071486][ T2128] gretap0: entered promiscuous mode
[  491.082054][ T2128] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  491.087199][ T2128] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  491.092519][ T2128] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9677'.
[  491.096808][ T2128] 0{X: renamed from gretap0
[  491.100569][ T2128] 0{X: left promiscuous mode
[  491.102665][ T2128] 0{X: entered allmulticast mode
[  491.110250][ T2128] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  491.195610][ T2146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9681'.
[  491.199136][ T2146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9681'.
[  491.205599][ T2146] netlink: 38 bytes leftover after parsing attributes in process `syz.1.9681'.
[  491.262761][ T2150] 8021q: adding VLAN 0 to HW filter on device bond40
[  491.304197][ T2156] bond0: option arp_validate: invalid value (18446744073491447809)
[  491.312738][ T2158] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  491.322644][ T2158] bond0: (slave bridge0): Releasing backup interface
[  491.332754][ T2158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9686'.
[  491.337829][ T2158] netlink: 'syz.3.9686': attribute type 10 has an invalid length.
[  491.340589][ T2158] mac80211_hwsim hwsim37 wlan1: left allmulticast mode
[  491.346211][ T2158] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  491.358496][ T2158] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  491.362222][ T2158] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  491.369471][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9687'.
[  491.666569][ T2185] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9695'.
[  491.671673][ T2185] netlink: 'syz.1.9695': attribute type 1 has an invalid length.
[  491.693960][ T2185] 8021q: adding VLAN 0 to HW filter on device bond41
[  491.711336][ T2185] bond41: entered promiscuous mode
[  491.854585][ T2199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9701'.
[  491.959644][ T2213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  491.994573][ T2218] bond0: option arp_validate: invalid value (18446744073491447809)
[  492.184307][ T2239] syzkaller1: entered promiscuous mode
[  492.186865][ T2239] syzkaller1: entered allmulticast mode
[  492.568356][ T2277] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  492.570780][ T2277] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  492.577407][ T2277] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.014098][ T2292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.203146][ T2295] netlink: 'syz.3.9734': attribute type 9 has an invalid length.
[  493.207688][ T2295] netlink: 'syz.3.9734': attribute type 7 has an invalid length.
[  493.210793][ T2295] netlink: 'syz.3.9734': attribute type 8 has an invalid length.
[  493.213896][ T2295] sctp: [Deprecated]: syz.3.9734 (pid 2295) Use of struct sctp_assoc_value in delayed_ack socket option.
[  493.213896][ T2295] Use struct sctp_sack_info instead
[  493.221223][ T2296] sctp: [Deprecated]: syz.3.9734 (pid 2296) Use of struct sctp_assoc_value in delayed_ack socket option.
[  493.221223][ T2296] Use struct sctp_sack_info instead
[  493.423140][ T2299] netlink: 'syz.3.9735': attribute type 1 has an invalid length.
[  493.550835][ T2302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.557355][ T2302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.595325][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  493.612261][ T2302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.745252][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.201002][ T2356] netlink: 'syz.1.9755': attribute type 1 has an invalid length.
[  494.204491][ T2356] netlink: 'syz.1.9755': attribute type 1 has an invalid length.
[  494.287703][ T2361] netlink: 'syz.1.9757': attribute type 7 has an invalid length.
[  494.359538][ T2362] bond8: entered promiscuous mode
[  494.361403][ T2362] 8021q: adding VLAN 0 to HW filter on device bond8
[  494.474698][ T2362] bond8 (unregistering): Released all slaves
[  494.615940][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.707635][ T2390] netlink: 'syz.1.9765': attribute type 3 has an invalid length.
[  494.854397][ T2408] syzkaller1: entered promiscuous mode
[  494.856771][ T2408] syzkaller1: entered allmulticast mode
[  494.953842][ T2423] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  494.969065][ T2425] lo speed is unknown, defaulting to 1000
[  494.972745][ T2425] syzkaller0 speed is unknown, defaulting to 1000
[  495.106010][ T2431] lo speed is unknown, defaulting to 1000
[  495.148105][ T2431] syzkaller0 speed is unknown, defaulting to 1000
[  495.268762][ T2439] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  495.509115][ T2446] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  495.896630][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.905342][   T60] block nbd0: Possible stuck request ffff8880217b8000: control (read@0,1024B). Runtime 330 seconds
[  495.909000][   T60] block nbd0: Possible stuck request ffff8880217b8200: control (read@1024,1024B). Runtime 330 seconds
[  495.913422][   T60] block nbd0: Possible stuck request ffff8880217b8400: control (read@2048,1024B). Runtime 330 seconds
[  495.918170][   T60] block nbd0: Possible stuck request ffff8880217b8600: control (read@3072,1024B). Runtime 330 seconds
[  495.972174][ T2458] __nla_validate_parse: 14 callbacks suppressed
[  495.972185][ T2458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9785'.
[  496.051449][ T2467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9786'.
[  496.204596][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.212589][ T2484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9792'.
[  496.216939][ T2486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9793'.
[  496.220522][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.288482][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  496.334774][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9795'.
[  496.532991][ T2516] netlink: 'syz.3.9799': attribute type 26 has an invalid length.
[  496.536634][ T2516] netlink: 'syz.3.9799': attribute type 26 has an invalid length.
[  496.583076][ T2521] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  496.597875][ T2521] lo speed is unknown, defaulting to 1000
[  496.600592][ T2521] syzkaller0 speed is unknown, defaulting to 1000
[  496.733937][ T2521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  496.741019][ T2521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9801'.
[  496.828466][ T2532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9803'.
[  496.874310][ T2535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9804'.
[  496.904771][ T2526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9802'.
[  497.061589][ T2557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9810'.
[  497.194189][ T2571] 8021q: adding VLAN 0 to HW filter on device bond8
[  497.210008][ T2571] 8021q: adding VLAN 0 to HW filter on device bond8
[  497.212660][ T2571] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  497.217241][ T2571] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  497.260703][ T2574] veth9: entered promiscuous mode
[  497.264185][ T2574] bond8: (slave veth9): Enslaving as an active interface with a down link
[  497.275760][T27381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.278979][T27381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.327279][ T2584] bond0: (slave team0): refused to change device type
[  497.789148][ T2634] 0{X: left allmulticast mode
[  497.812078][ T2634] 8021q: adding VLAN 0 to HW filter on device team0
[  497.815275][   T34] INFO: task udevd:10291 blocked for more than 143 seconds.
[  497.816187][ T2634] !: left promiscuous mode
[  497.817888][   T34]       Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0
[  497.823159][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  497.824171][ T2634] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  497.828206][   T34] task:udevd           state:D stack:22264 pid:10291 tgid:10291 ppid:1      task_flags:0x400140 flags:0x00004006
[  497.830090][ T2634] caif:caif_disconnect_client(): nothing to disconnect
[  497.832884][   T34] Call Trace:
[  497.832891][   T34]  <TASK>
[  497.832898][   T34]  __schedule+0x1798/0x4cc0
[  497.832921][   T34]  ? __pfx___schedule+0x10/0x10
[  497.842304][   T34]  ? schedule+0x91/0x360
[  497.843817][   T34]  schedule+0x165/0x360
[  497.845528][   T34]  io_schedule+0x80/0xd0
[  497.847072][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  497.848889][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  497.851015][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  497.852995][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  497.856405][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  497.858236][   T34]  do_read_cache_folio+0x1aa/0x590
[  497.860277][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  497.862732][   T34]  read_part_sector+0xb6/0x2b0
[  497.864927][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  497.868002][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  497.870350][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  497.873158][   T34]  bdev_disk_changed+0x75f/0x14b0
[  497.876936][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  497.879318][   T34]  ? wait_on_inode+0xc0/0x230
[  497.881399][   T34]  blkdev_get_whole+0x380/0x510
[  497.883655][   T34]  bdev_open+0x31e/0xd30
[  497.885538][   T34]  blkdev_open+0x3a8/0x510
[  497.887258][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  497.889375][   T34]  do_dentry_open+0xdf3/0x1970
[  497.891437][   T34]  vfs_open+0x3b/0x340
[  497.893432][   T34]  ? path_openat+0x2ecd/0x3830
[  497.896361][   T34]  path_openat+0x2ee5/0x3830
[  497.898234][   T34]  ? arch_stack_walk+0xfc/0x150
[  497.900333][   T34]  ? __pfx_path_openat+0x10/0x10
[  497.902513][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.904888][   T34]  do_filp_open+0x1fa/0x410
[  497.907108][   T34]  ? __lock_acquire+0xab9/0xd20
[  497.909249][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  497.911443][   T34]  ? _raw_spin_unlock+0x28/0x50
[  497.913574][   T34]  ? alloc_fd+0x64c/0x6c0
[  497.915581][   T34]  do_sys_openat2+0x121/0x1c0
[  497.917631][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  497.920041][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  497.922294][   T34]  ? rcu_is_watching+0x15/0xb0
[  497.924384][   T34]  __x64_sys_openat+0x138/0x170
[  497.926755][   T34]  do_syscall_64+0xfa/0x3b0
[  497.928893][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.931083][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.933516][   T34]  ? exc_page_fault+0x9f/0xf0
[  497.935928][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.938406][   T34] RIP: 0033:0x7fa14e1169a4
[  497.940500][   T34] RSP: 002b:00007ffc80c85e90 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  497.943785][   T34] RAX: ffffffffffffffda RBX: 000055bc73000710 RCX: 00007fa14e1169a4
[  497.947208][   T34] RDX: 00000000000a0800 RSI: 000055bc73021a10 RDI: 00000000ffffff9c
[  497.950688][   T34] RBP: 000055bc73021a10 R08: 0000000000000001 R09: 7fffffffffffffff
[  497.953787][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  497.957424][   T34] R13: 000055bc73011a50 R14: 0000000000000001 R15: 000055bc73000910
[  497.965169][   T34]  </TASK>
[  497.966416][   T34] 
[  497.966416][   T34] Showing all locks held in the system:
[  497.969768][ T2634] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  497.973502][   T34] 3 locks held by kworker/u8:0/12:
[  497.976669][ T2634] chnl_net:chnl_net_open(): state disconnected
[  497.980644][ T2634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  497.982601][   T34]  #0: ffff8881082b6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  497.991708][   T34]  #1: ffff888136624008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  497.996218][   T34]  #2: ffff888136625918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[  498.000021][   T34] 1 lock held by khungtaskd/34:
[  498.002069][   T34]  #0: ffffffff8e139de0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  498.006133][   T34] 2 locks held by getty/5645:
[  498.008127][   T34]  #0: ffff88810cbd60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  498.012152][   T34]  #1: ffffc900026882f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  498.016582][   T34] 1 lock held by udevd/10291:
[  498.018606][   T34]  #0: ffff88810855b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  498.021803][   T34] 2 locks held by syz.1.9830/2638:
[  498.023949][   T34]  #0: ffffffff8f56dbf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  498.027399][   T34]  #1: ffffffff8f508748 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930
[  498.031232][   T34] 3 locks held by syz.4.9832/2644:
[  498.033361][   T34]  #0: ffffffff8fa22c10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  498.036798][   T34]  #1: ffffffff8f508748 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  498.039744][   T34]  #2: ffffffff8e13f878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  498.043258][   T34] 
[  498.044094][   T34] =============================================
[  498.044094][   T34] 
[  498.047487][   T34] NMI backtrace for cpu 0
[  498.047497][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  498.047505][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  498.047510][   T34] Call Trace:
[  498.047513][   T34]  <TASK>
[  498.047516][   T34]  dump_stack_lvl+0x189/0x250
[  498.047527][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  498.047534][   T34]  ? __pfx__printk+0x10/0x10
[  498.047547][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  498.047559][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  498.047570][   T34]  ? __pfx__printk+0x10/0x10
[  498.047579][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  498.047590][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  498.047602][   T34]  watchdog+0xf93/0xfe0
[  498.047612][   T34]  ? watchdog+0x1de/0xfe0
[  498.047622][   T34]  kthread+0x711/0x8a0
[  498.047631][   T34]  ? __pfx_watchdog+0x10/0x10
[  498.047639][   T34]  ? __pfx_kthread+0x10/0x10
[  498.047646][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.047653][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.047660][   T34]  ? __pfx_kthread+0x10/0x10
[  498.047667][   T34]  ret_from_fork+0x3fc/0x770
[  498.047678][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  498.047689][   T34]  ? __switch_to_asm+0x39/0x70
[  498.047702][   T34]  ? __switch_to_asm+0x33/0x70
[  498.047708][   T34]  ? __pfx_kthread+0x10/0x10
[  498.047716][   T34]  ret_from_fork_asm+0x1a/0x30
[  498.047728][   T34]  </TASK>
[  498.047730][   T34] Sending NMI from CPU 0 to CPUs 1:
[  498.097753][    C1] NMI backtrace for cpu 1
[  498.097766][    C1] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  498.097779][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  498.097786][    C1] RIP: 0010:__might_sleep+0x4/0x100
[  498.097804][    C1] Code: c1 0f 8c 3c ff ff ff 48 89 df e8 97 0f 91 00 e9 2f ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48
[  498.097813][    C1] RSP: 0018:ffffc9000368fcd8 EFLAGS: 00000a06
[  498.097824][    C1] RAX: f3f3f300f1f1f1f1 RBX: ffff888041c13698 RCX: dffffc0000000000
[  498.097832][    C1] RDX: ffff888029901cc0 RSI: 0000000000000626 RDI: ffffffff8b8ae8e0
[  498.097839][    C1] RBP: ffffc9000368fd60 R08: ffff888029901cc0 R09: 0000000000000002
[  498.097847][    C1] R10: 0000000000006000 R11: 0000000000000000 R12: 1ffff920006d1f9c
[  498.097855][    C1] R13: 1ffff1100838292f R14: ffffc9000368fd00 R15: dffffc0000000000
[  498.097862][    C1] FS:  000055555ca3e500(0000) GS:ffff8881a3c79000(0000) knlGS:0000000000000000
[  498.097896][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  498.097903][    C1] CR2: 00007ffd0cb96f98 CR3: 000000010d84e000 CR4: 00000000000006f0
[  498.097936][    C1] Call Trace:
[  498.097941][    C1]  <TASK>
[  498.097946][    C1]  down_write+0x76/0x1f0
[  498.097962][    C1]  ? __pfx_down_write+0x10/0x10
[  498.097977][    C1]  vfs_unlink+0xf2/0x650
[  498.097992][    C1]  do_unlinkat+0x345/0x560
[  498.098006][    C1]  ? __pfx_do_unlinkat+0x10/0x10
[  498.098020][    C1]  ? getname_flags+0x1e5/0x540
[  498.098035][    C1]  __x64_sys_unlink+0x47/0x50
[  498.098047][    C1]  do_syscall_64+0xfa/0x3b0
[  498.098058][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.098069][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.098079][    C1]  ? exc_page_fault+0x9f/0xf0
[  498.098091][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.098100][    C1] RIP: 0033:0x7f0ea3d8e197
[  498.098110][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.098118][    C1] RSP: 002b:00007ffd0cb97168 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  498.098129][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0ea3d8e197
[  498.098136][    C1] RDX: 00007ffd0cb97190 RSI: 00007ffd0cb97220 RDI: 00007ffd0cb97220
[  498.098144][    C1] RBP: 00007ffd0cb97220 R08: 0000000000000000 R09: 0000000000000000
[  498.098151][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd0cb982b0
[  498.098158][    C1] R13: 00007f0ea3e11c05 R14: 000000000007990e R15: 00007ffd0cb982f0
[  498.098172][    C1]  </TASK>
[  498.099125][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  498.190270][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  498.194221][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  498.197899][   T34] Call Trace:
[  498.199355][   T34]  <TASK>
[  498.200595][   T34]  dump_stack_lvl+0x99/0x250
[  498.202598][   T34]  ? __asan_memcpy+0x40/0x70
[  498.204456][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  498.206289][   T34]  ? __pfx__printk+0x10/0x10
[  498.208334][   T34]  vpanic+0x27a/0x730
[  498.210094][   T34]  ? __pfx_vpanic+0x10/0x10
[  498.211674][   T34]  ? preempt_schedule+0xae/0xc0
[  498.213599][   T34]  ? preempt_schedule_common+0x83/0xd0
[  498.215912][   T34]  panic+0xb9/0xc0
[  498.217272][   T34]  ? __pfx_panic+0x10/0x10
[  498.218793][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  498.221157][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  498.223790][   T34]  watchdog+0xfd2/0xfe0
[  498.225170][   T34]  ? watchdog+0x1de/0xfe0
[  498.226829][   T34]  kthread+0x711/0x8a0
[  498.228565][   T34]  ? __pfx_watchdog+0x10/0x10
[  498.230587][   T34]  ? __pfx_kthread+0x10/0x10
[  498.232621][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.234738][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.237014][   T34]  ? __pfx_kthread+0x10/0x10
[  498.239045][   T34]  ret_from_fork+0x3fc/0x770
[  498.240959][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  498.243064][   T34]  ? __switch_to_asm+0x39/0x70
[  498.245041][   T34]  ? __switch_to_asm+0x33/0x70
[  498.247138][   T34]  ? __pfx_kthread+0x10/0x10
[  498.249108][   T34]  ret_from_fork_asm+0x1a/0x30
[  498.251068][   T34]  </TASK>
[  498.253289][   T34] Kernel Offset: disabled
[  498.255180][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:59:41  Registers:
info registers vcpu 0

CPU#0
RAX=00007fff636a09f0 RBX=0000000000000000 RCX=00007fff636a09d8 RDX=0000564e9079a408
RSI=0000000000000080 RDI=00007fff636a0ae8 RBP=0000564e9079b019 RSP=00007fff636a09c8
R8 =0000000000000000 R9 =000000000000068d R10=0000564e9079b019 R11=0000000000000246
R12=0000564e9079ac08 R13=0000564e9079b280 R14=00007fff636a0ae8 R15=00007fff636a1040
RIP=00007fbf712b5075 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbf7175f800 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=00000000246a9000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=00000000000000ff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107068237 R9 =1ffff11020e0d046 R10=dffffc0000000000 R11=ffffffff854bdf00
R12=dffffc0000000000 R13=ffffffff99a9b911 R14=ffffffff99da04a0 R15=0000000000000000
RIP=ffffffff854bdf7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c79000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010cf12000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
