last executing test programs:

5.300787214s ago: executing program 0 (id=1635):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250e000000050033000100000008003a000010000008002c000d00000008000300", @ANYRES32=0x0, @ANYBLOB="050038000000400008002c0000004000"], 0x44}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000016) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250e000000050033000100000008003a000010000008002c000d00000008000300", @ANYRES32=0x0, @ANYBLOB="050038000000400008002c0000004000"], 0x44}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000016)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
connect$inet6(r7, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x10, 0x2, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x95, 0x0, 0x4, [0xffff, 0x2, 0x6, 0x3, 0xff, 0x8, 0x7]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x20, 0x70, 0x0, 0xe, [0xc15f, 0x4, 0x5, 0xc2, 0x7, 0x8000, 0x81]}, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x8, [{@loopback, 0x1ff}, {@multicast1, 0x7}, {@remote, 0x8}, {@multicast1, 0xd73f}]}, @timestamp_prespec={0x44, 0x2c, 0x8e, 0x3, 0x6, [{@loopback, 0x1}, {@broadcast}, {@loopback, 0x7fff}, {@loopback, 0x6}, {@local, 0x2}]}]}}}}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x200000000000030f, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000034100122ffffffff9500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, r9}, 0x94)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={r10, &(0x7f0000000200)='ip_vti0\x00', 0x2100, &(0x7f0000000240)={@align=0x7, {0x2, 0x4, 0x1, 0x877}}, 0x8001, 0x0, &(0x7f00000003c0)})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000804)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

3.311805855s ago: executing program 0 (id=1638):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010002108378fd4ed512849fdffffff00", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x54, 0x10, 0x1, 0x70bd27, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xe, 0x3}, {0x8, 0xfff2}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0xfffc]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
write$tun(r5, &(0x7f0000000080)=ANY=[], 0xfdef)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000100000093f13ffa3fa6789c16cdb10000fedbdf250a140000fd0400070009000000000000000000000000170000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)

3.310342836s ago: executing program 2 (id=1639):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000000104050000000000000000000000000a08000584090a000200000087f100000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x4)
getsockopt$sock_buf(r1, 0x1, 0x2d, &(0x7f0000002e00)=""/4096, &(0x7f0000003e00)=0x1000)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
r3 = socket$kcm(0x2, 0xa, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="18feffffff850000006d00000018000000030000000000000006000000950000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38f5ff08", @ANYRES16=r8, @ANYBLOB="07000000000000000000050000000c0003800800020009000000180001801400020073797a5f74756e000000000000000000"], 0x38}}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81})
write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r10, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="100000000306050000000000000000000a00000505000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
setsockopt(r0, 0x6, 0x3, &(0x7f0000000000)="22757e1d", 0x4)

2.436050589s ago: executing program 0 (id=1642):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe4f, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20429}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0xc024)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'erspan0\x00', <r4=>0x0, 0x80, 0x8000, 0x4, 0x5, {{0xd, 0x4, 0x0, 0x2e, 0x34, 0x65, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@lsrr={0x83, 0x1f, 0x1e, [@empty, @rand_addr=0x64010100, @multicast1, @empty, @remote, @loopback, @remote]}]}}}}})
sendmsg$can_raw(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)=@canfd={{0x1, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "19f6972527bf95f85d3c5819dde4b0a3c47dc0b6ef30b8b79a8aa6dd7ea6ccf52fb81927b29181c015c16c83a9ead0b83d3707a66673e5a3128aaae09c58a3e2"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
accept4(r2, &(0x7f0000000780)=@generic, &(0x7f0000000800)=0x80, 0x80800)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="00000000060000100000006d00"/28, @ANYRES32=r6, @ANYBLOB="0000000000000000790000000000deacf6f8f34b7c7c2fb0970c3959c800001800000000000000000000000000000095000000010000009500000000000000733631fb7571d727de9e397e8e7e0912ab05be90d71a67834f63cd2e718c34aeb04786c13957158b551f764fbab4611ca05ea0c2e945d19e6c0de1c26ccd5619432ae0e7f5e2bcb3035a9a1e21c19d7a83d4155b14ede4aa581d9f8dd7fc5fc6774e45367bf5cdbf4c6ff147fd4824dbaffbe78965a5b81414df342356c999a32e69b0798f3f39ee65e4c27319c201ff75e9d8c81a7e2298b339a384e804b1aaf8c1389ec0ee8cb8626dca7b4b0e2dc0a8a9c26f"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000000906010200000001c5856f8838314e301b68093c00000000000000000900c20000007a31f9ffffff0500010007000000180007800c00018008000140"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r11], 0x40}}, 0x0)

2.320213584s ago: executing program 1 (id=1643):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000004380)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='r', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400090000000000200100000000000000000000000000021800000000000000840000000000000000000900"], 0x38, 0x20000010}], 0x1, 0x4000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

2.096711127s ago: executing program 1 (id=1644):
unshare(0x6020400) (async, rerun: 64)
unshare(0x400) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000300)=0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {0x10, 0xf}, {0xffff, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0xc0}}]}, 0x2c}}, 0x62741984eb7a0734)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044080) (async, rerun: 32)
bind$llc(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

2.018715785s ago: executing program 1 (id=1645):
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x4)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) (async)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)})
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4)
bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0)

1.948436416s ago: executing program 2 (id=1646):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000104050000000000000000180000000a0a000200000000610100000008000540089084090a000201000087f102000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008040}, 0xc4) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000002e00)=""/4096, &(0x7f0000003e00)=0x1000)
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async)
socket$kcm(0x2, 0xa, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x70, 0x0, "1cdc0dca1d9f68846960e56de429"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x90}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x2004809c) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000240)="105b74", 0x3}, {&(0x7f0000000500)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006000001ffffffffffffbbbbbbbbbbbb0000000200000000"], 0x0) (async)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c)

1.790128066s ago: executing program 2 (id=1647):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a32000000"], 0x48}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
unshare(0x20000400)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000600)={r7, r7, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
shutdown(r7, 0x1)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}})
getsockname$packet(r6, 0x0, &(0x7f0000001bc0))
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="140200000a0601010000000d0000004197000007ccb06e9da9b5ed37b0bed4781a2e8d8eddf3ff1c5794da35aba788dca79007a0cd02439326dfa8b82f6d033a151b750a42a8cd58c41b6b2759db1852ca6a0162a23b64c099ed1a4c0ac3f201751b0b79da8d85b3978cd20e8edefff53d2b5d1fe66c7644b1a102fadc1d13832edb86689ca8dba98b29d1e7"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRESOCT=r5, @ANYRES16=r7, @ANYRES32=r8, @ANYRES32=r6, @ANYRES8=r0, @ANYRESOCT=r1], 0x50)

1.640421994s ago: executing program 2 (id=1648):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
setsockopt(r4, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r8, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0xffffffffffffff6e)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.499357588s ago: executing program 0 (id=1649):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x20}, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c5c8ce1a00", 0xfffffffc, 0x4, 0x81, 0x800}, 0x3c)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e03f030041000b05b7f6b1a14b9020b70324fc60100000000a000200053582c1cd37153e3704020180fc5409000c004b777ce41d91ee77d8793baea8628590815fc8481123583bab0be0d06aecfdc1c176251e5f827d06b50f424d5f6957bef510e574a064b29430f603b06c7a582d8e38b60b0c3fce69dff8946f60e94344bcac034fa6fc8d0462e4e875b5f88ce05242a5c8444c08105fe82b4c56bd94213cae5b449ec20dd2aaaa9e83f6ffe5e0a05c992060f4e5e4e820d9af076d3e360330", 0xc1}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3107000000000000005d9b4c24c800380000000e0001006e657464657673696d0000000f0002006e657464657673696d0800000000000000000000c12b3273eadfa9cec46a040aec0e06187961028818ca5cecac2e1a8f6a9815687376e3e07522c0b689c088a5d9b2b0a75af24352a670387fa3af6023231982695c27a0584bd4aff8f24a7d65840cb0a049561e267f0242ad46186a1b07f2e21c88822bc926b88ce8ee594ab4494f73a8f81862e2"], 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000)

1.120511626s ago: executing program 1 (id=1650):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast1}, 0x8) (async)
sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 32)
sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) (async, rerun: 32)
r1 = socket$inet6(0x10, 0x2, 0x4) (async, rerun: 32)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000002c0)=0x4) (rerun: 32)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500921401000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r4) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0xf8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x20000001)
ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_dump={0x3f, 0x5, 0x3d, 0x31, "129cbda59775dcc181c4d6edf230cfeca2192a3c8e02918139a49358692916305a903ea544e14708fbca1d5f78090a2e9f"}}) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x6afc91deabb5003e, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, 0x0) (async)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4)

981.502974ms ago: executing program 0 (id=1651):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0, 0x80, 0x10, 0x4, 0x7, {{0x1b, 0x4, 0x0, 0x5, 0x6c, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0xff, 0x0, 0x9, [0x2, 0x6, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x9c, 0x3, 0x8, [{@empty, 0x2}, {@remote, 0xff}, {@empty, 0xffff}, {@multicast1, 0x200}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xfffffffc}]}, @lsrr={0x83, 0xb, 0x5, [@rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xf, 0xd8, [@local, @empty, @empty]}]}}}}})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @empty, @loopback}, 0xc) (async)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r1, @empty, @loopback}, 0xc)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x39f97000) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x39f97000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x18, r4}, 0x18)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)) (async)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x9, [@enum64={0xb, 0x3, 0x0, 0x13, 0x1, 0x3, [{0x6, 0x1}, {0x3, 0x8, 0x2b8}, {0x4, 0x8000, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x8000}}, @enum64={0x6, 0x9, 0x0, 0x13, 0x1, 0x6, [{0x4, 0x81, 0xffffffff}, {0x8, 0x7fffffff, 0xa}, {0x3, 0x1ff, 0xd8d}, {0x9, 0xffffffff, 0x5}, {0x6, 0xffff, 0xa}, {0xd, 0x8, 0xe}, {0x4, 0xcf158fa6, 0x357d}, {0x1, 0x3f5}, {0x7, 0x5, 0x1}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x30, 0x61, 0x2e, 0x0, 0x30, 0x30]}}, &(0x7f0000000780)=""/86, 0xed, 0x56, 0x0, 0x5}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0xe, <r8=>0x0}, 0x8)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0xc534, 0x400, 0xfffffffe, 0x460a4, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd65, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x9, 0x18}, 0xc) (async)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x9, 0x18}, 0xc)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000b80)={<r13=>r0, &(0x7f0000000a80)='ethtool\x00', 0x101000, &(0x7f0000000ac0)={@align=0x8000, {0x4162, 0xfff9, 0x100, 0x8ec}}, 0x4, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x7})
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xd06dee8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @call={0x85, 0x0, 0x0, 0xb6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0xc, 0xd7, &(0x7f0000000580)=""/215, 0x41000, 0x22, '\x00', r1, @cgroup_sock_addr=0x1d, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0x10, 0x2, 0x5f4ee5db}, 0x10, r8, r9, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1, r10, r11, r12, r13, r14], &(0x7f0000000c80)=[{0x4, 0x2, 0xe}, {0x2, 0x2, 0x1, 0x2}], 0x10, 0x4}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xd06dee8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @call={0x85, 0x0, 0x0, 0xb6}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0xc, 0xd7, &(0x7f0000000580)=""/215, 0x41000, 0x22, '\x00', r1, @cgroup_sock_addr=0x1d, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0x10, 0x2, 0x5f4ee5db}, 0x10, r8, r9, 0x2, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1, r10, r11, r12, r13, r14], &(0x7f0000000c80)=[{0x4, 0x2, 0xe}, {0x2, 0x2, 0x1, 0x2}], 0x10, 0x4}, 0x94)
bind$xdp(0xffffffffffffffff, &(0x7f0000000d80)={0x2c, 0x5, r1, 0x13}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'syztnl1\x00', r1, 0x4, 0x4, 0xaf, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0x0, 0x5}})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001f00)={r14, &(0x7f0000000e80)="fdf5eb6e21debcec807686c70c95a48356f4e8a5a7df00e6b5e1e2fd2fde38ef6e3133e7a313df5ce1404976f097d8eff9e96f0f6bb63d985ef284e2252912c31dacbe37622a298b34f2e19b3b237931726edd3510c9c67d341a217a04d9128e5fcf6f06ed5ac73830f00e784be3ac2ddce0", &(0x7f0000000f00)=""/4096}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001f00)={r14, &(0x7f0000000e80)="fdf5eb6e21debcec807686c70c95a48356f4e8a5a7df00e6b5e1e2fd2fde38ef6e3133e7a313df5ce1404976f097d8eff9e96f0f6bb63d985ef284e2252912c31dacbe37622a298b34f2e19b3b237931726edd3510c9c67d341a217a04d9128e5fcf6f06ed5ac73830f00e784be3ac2ddce0", &(0x7f0000000f00)=""/4096}, 0x20)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f80), r13)
sendmsg$TIPC_NL_PEER_REMOVE(r13, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, r15, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x840) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r13, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, r15, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000002180)={<r16=>r12, &(0x7f0000002080)='syzkaller\x00', 0x601, &(0x7f00000020c0)={@align, {0x1, 0x0, 0x28b, 0x9}}, 0x7, &(0x7f0000002100), &(0x7f0000002140)=0x32})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000022c0)={@fallback=r7, 0x33, 0x0, 0xe672, &(0x7f00000021c0)=[0x0], 0x1, 0x0, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000022c0)={@fallback=r7, 0x33, 0x0, 0xe672, &(0x7f00000021c0)=[0x0], 0x1, 0x0, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0], <r17=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002300)={@cgroup=r13, r16, 0x21, 0x2018, 0x0, @value=r6, @void, @void, @void, r17}, 0x20)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002680)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002640)={&(0x7f0000002380)={0x2ac, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "a895d119c14f5805d4e1830db0b3a72d748c3a54e01ecf797d330921575c7459834b0add2eaa"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.&@..$]*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']*.%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xdf@((%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47c}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x735d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbd\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x850}, 0x4060) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002680)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002640)={&(0x7f0000002380)={0x2ac, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "a895d119c14f5805d4e1830db0b3a72d748c3a54e01ecf797d330921575c7459834b0add2eaa"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.&@..$]*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']*.%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xdf@((%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47c}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x735d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbd\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x850}, 0x4060)
openat$cgroup_devices(r16, &(0x7f00000026c0)='devices.deny\x00', 0x2, 0x0)

969.786111ms ago: executing program 1 (id=1652):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0)
recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100013040000000000000000fe88000000000000000000000000000120010000000000000000000000000000fffd00004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x140}}, 0x844)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f)

829.262493ms ago: executing program 0 (id=1653):
unshare(0x6a040000)
mmap(&(0x7f000084f000/0xb000)=nil, 0xb000, 0x2000003, 0x110, 0xffffffffffffffff, 0xffffd000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'rose0\x00', 0x102})
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x26, 0x20000000000001, 0xffffffff, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x2c00, 0x0, @void}, 0x10)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000540)="8123e434f0531ba12bf923f37a87a1b0736d4f6d4dca1bd21df7a14ae16233cc1c3fc981f1d36b3e74c4d2622bc975a963b1a4e81d954de69b59087f8fd7f206a88462e16966e6188ef3009c228c3e2face76f05a60c6a30847c21b089eb4a6e245a9d986b1024a1667dcde226a4ba27e4a3da8bb231c779a0526e6e3be75915f80c0f0e2837d1322c936417900cc9d77e5156ecc37e6dcc0f80c5fdbae75b2da071f299e3d3fc089624c6e93d28f562a20857deffcbc2b7bbcf056cedd14f4c9f166964ee873cc01aa657e37fc0b9800ea96a95350c38cdcef750a171cae2cba8ca0985797602a4e2d179d198db042b21a0b4956e29376ace2703546ee8162243d902ee41425620ed2ea7cab36297d790c862e9643e49dbd492fbdcb2703a22d9b50252f4301a0a780d", 0x12a}], 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
syz_extract_tcp_res(&(0x7f00000002c0), 0xe6c7, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ffffffff000000000000000095000000001b0000"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000400c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000500)=[{&(0x7f0000000340)="8333ade47008357dbc16b3ab937296499c1de2b09e815510c0c7b58a47b588d85efd12d6c2878ef12c2e34dd7ce4e69b101ac588dce3dc31b2592f180d4a81f46bb996b98866c6d4c9bfe280064694e6a44fea59d3b01ab52c792a9d9d9a0ef771367dfd011dd813c21519f192dd881c8e059df3aba684e3d2d100505cccff2cd343ee481c2ddc4228e972c5df186e2b0d61ddfde4f2e590673dec54a653489c987adf600bf98373dbe71edf0310c02196", 0xb1}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000200000000000000000002001900fe0000010024002008001e0100040000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)

670.553218ms ago: executing program 2 (id=1654):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000008c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x200000, 0x0, 0xff, 0x1, 0x4}, 0xd88e1248643216d7)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000280)=0x7fb, 0xff11)
listen(r1, 0x3)
listen(r1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10)
socket$inet(0x2, 0x5, 0x9)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000050601020000000000000000050000000900020073797a32000000000900130073797a30000000000900020073797a3100000000050001000700000009000300"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x94)
r2 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

329.240505ms ago: executing program 2 (id=1655):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r3 = socket(0x10, 0x2, 0x1)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000010000000000fedbdf250a140000fd0400070036fce5d2ba2084826500000800170000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a010000000000000000000100000009"], 0xfc}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=1656):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000080))
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000004b000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r8, 0x89f5, &(0x7f0000000000))
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x20048041)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x5, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xe, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}, {0x0, <r16=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r17=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r18=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r19=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r20=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r21=>0x0}], 0x2, "f35cdffa4c22ce"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r17}], 0x7, "e81e98e4abedff"})

kernel console output (not intermixed with test programs):

e_slave_0) entered disabled state
[  179.362902][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.392454][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.527270][ T9310] 8021q: adding VLAN 0 to HW filter on device 
[  179.530473][ T9310] 8021q: adding VLAN 0 to HW filter on device team0
[  179.535823][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.561872][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.564212][ T9310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.568741][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.571338][ T9310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.585021][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.589251][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.601568][ T9310] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  179.710146][ T9333] ip6_vti0 speed is unknown, defaulting to 1000
[  179.881901][ T9340] ip6_vti0 speed is unknown, defaulting to 1000
[  180.657117][ T9357] __nla_validate_parse: 4 callbacks suppressed
[  180.657133][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'.
[  180.662195][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.859'.
[  180.669902][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'.
[  181.167992][ T9405] ip6_vti0 speed is unknown, defaulting to 1000
[  182.241650][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.243996][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.438574][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.448746][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.555709][ T9442] ip6_vti0 speed is unknown, defaulting to 1000
[  182.564456][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'.
[  182.716411][ T9451] ip6_vti0 speed is unknown, defaulting to 1000
[  183.701983][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'.
[  183.705096][ T9460] ip6_vti0 speed is unknown, defaulting to 1000
[  183.891516][ T9465] netlink: 'syz.2.880': attribute type 13 has an invalid length.
[  183.894685][ T9465] netlink: 'syz.2.880': attribute type 17 has an invalid length.
[  183.958220][ T9465] 8021q: adding VLAN 0 to HW filter on device 
[  183.962444][ T9465] 8021q: adding VLAN 0 to HW filter on device team0
[  183.967730][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.012580][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.016289][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.027667][ T9465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.031737][ T9465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.040146][ T9465] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  184.087185][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'.
[  184.088804][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.092658][ T6749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.111421][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.114144][ T6749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.374632][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.523430][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[  184.700703][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.703620][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.727195][ T9488] netlink: 'syz.0.885': attribute type 13 has an invalid length.
[  184.730606][ T9488] netlink: 'syz.0.885': attribute type 17 has an invalid length.
[  184.777044][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.777120][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  184.788348][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.910557][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'.
[  185.407570][ T9525] netlink: 9 bytes leftover after parsing attributes in process `syz.1.893'.
[  186.403734][ T9543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.594970][ T9545] __nla_validate_parse: 1 callbacks suppressed
[  186.595017][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'.
[  188.454271][ T9527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.462888][ T9548] netlink: 'syz.0.898': attribute type 1 has an invalid length.
[  188.482428][ T9548] netlink: 228 bytes leftover after parsing attributes in process `syz.0.898'.
[  188.490086][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[  188.729404][ T9554] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.732569][ T9554] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.991642][ T9554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.001624][ T9554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.556759][ T9605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.909'.
[  189.607156][ T9605] ip6_vti0 speed is unknown, defaulting to 1000
[  189.653266][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.910'.
[  189.661175][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  189.668327][ T9611] netlink: 232 bytes leftover after parsing attributes in process `syz.1.910'.
[  189.684976][ T9611] x_tables: duplicate underflow at hook 1
[  189.805733][ T9615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'.
[  189.808412][ T9615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'.
[  189.811767][ T9615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.911'.
[  190.319081][ T9633] ip6_vti0 speed is unknown, defaulting to 1000
[  190.426012][ T9642] syzkaller0: entered promiscuous mode
[  190.427965][ T9642] syzkaller0: entered allmulticast mode
[  190.639084][ T9651] ip6_vti0 speed is unknown, defaulting to 1000
[  191.299497][ T9661] ip6_vti0 speed is unknown, defaulting to 1000
[  191.359555][ T9582] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.368719][ T9582] Bluetooth: hci1: command 0x0406 tx timeout
[  192.325786][ T9714] __nla_validate_parse: 155 callbacks suppressed
[  192.325806][ T9714] netlink: 76 bytes leftover after parsing attributes in process `syz.2.928'.
[  192.681515][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'.
[  193.602722][ T9758] netlink: 'syz.1.939': attribute type 4 has an invalid length.
[  193.672620][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  193.676942][ T9760] netlink: 'syz.1.940': attribute type 13 has an invalid length.
[  193.687071][ T9760] netlink: 2084 bytes leftover after parsing attributes in process `syz.1.940'.
[  193.777467][ T9762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.941'.
[  193.782321][ T9762] unsupported nlmsg_type 40
[  193.915652][ T9768] ip6_vti0 speed is unknown, defaulting to 1000
[  194.021608][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'.
[  194.235995][ T9781] netlink: 'syz.2.946': attribute type 13 has an invalid length.
[  194.245716][ T9781] netlink: 'syz.2.946': attribute type 17 has an invalid length.
[  194.298464][ T9781] 8021q: adding VLAN 0 to HW filter on device 
[  194.303679][ T9781] 8021q: adding VLAN 0 to HW filter on device team0
[  194.320084][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.351777][ T9786] xt_CT: You must specify a L4 protocol and not use inversions on it
[  194.352122][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.359030][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.365776][ T9781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.369122][ T9781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.377637][ T9781] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  194.387499][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.390368][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.395306][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.398243][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.430842][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'.
[  194.604528][ T9791] ip6_vti0 speed is unknown, defaulting to 1000
[  194.794813][ T9791] vlan2: entered promiscuous mode
[  195.118791][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'.
[  195.131098][ T9797] IPVS: Scheduler module ip_vs_sip not found
[  195.131817][ T9801] SET target dimension over the limit!
[  195.273454][ T9808] ip6_vti0 speed is unknown, defaulting to 1000
[  195.354897][ T9813] SET target dimension over the limit!
[  195.544514][ T9815] netlink: 'syz.0.956': attribute type 13 has an invalid length.
[  195.551081][ T9815] netlink: 'syz.0.956': attribute type 17 has an invalid length.
[  195.643335][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.647638][ T9815] 8021q: adding VLAN 0 to HW filter on device team0
[  195.655924][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.695807][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.699295][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.705014][ T9815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.708290][ T9815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.714339][ T9815] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  195.720782][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  195.743755][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  195.748880][ T9825] openvswitch: netlink: IP tunnel dst address not specified
[  195.754102][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.756566][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.765846][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.768359][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.868607][ T9820] ip6_vti0 speed is unknown, defaulting to 1000
[  196.303970][ T9830] ip6_vti0 speed is unknown, defaulting to 1000
[  196.513511][ T9834] netlink: 'syz.0.960': attribute type 1 has an invalid length.
[  196.728540][ T9836] ip6_vti0 speed is unknown, defaulting to 1000
[  197.453864][ T9865] ip6_vti0 speed is unknown, defaulting to 1000
[  197.493558][ T9858] tipc: Started in network mode
[  197.495465][ T9858] tipc: Node identity 2ab49937e8ad, cluster identity 4711
[  197.512628][ T9858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.584657][ T9858] syzkaller0: entered promiscuous mode
[  197.587066][ T9858] syzkaller0: entered allmulticast mode
[  197.600201][ T9858] tipc: Resetting bearer <eth:syzkaller0>
[  197.664799][ T9857] tipc: Resetting bearer <eth:syzkaller0>
[  197.717070][ T9873] netlink: 'syz.0.970': attribute type 4 has an invalid length.
[  199.523092][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  199.525439][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  199.997937][ T9857] tipc: Disabling bearer <eth:syzkaller0>
[  200.025089][  T796] tipc: Node number set to 3256457527
[  200.554883][ T9907] ieee802154 phy0 wpan0: encryption failed: -22
[  200.558106][ T9905] netlink: 'syz.2.977': attribute type 4 has an invalid length.
[  200.704901][ T9914] ip6_vti0 speed is unknown, defaulting to 1000
[  200.801104][ T9927] __nla_validate_parse: 1 callbacks suppressed
[  200.801124][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  200.869511][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'.
[  200.885119][ T9930] ipt_REJECT: TCP_RESET invalid for non-tcp
[  200.943987][ T9923] ip6_vti0 speed is unknown, defaulting to 1000
[  201.031258][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'.
[  201.548378][ T9955] Cannot find del_set index 14804 as target
[  201.674439][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'.
[  201.752969][ T9970] netlink: 'syz.2.995': attribute type 4 has an invalid length.
[  201.857048][ T9974] netlink: 32 bytes leftover after parsing attributes in process `syz.2.996'.
[  202.044733][ T9976] ip6_vti0 speed is unknown, defaulting to 1000
[  202.073952][ T9981] Cannot find add_set index 2 as target
[  202.482777][T10000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.560885][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'.
[  202.738778][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'.
[  202.742315][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'.
[  202.934669][T10017] ip6_vti0 speed is unknown, defaulting to 1000
[  203.184489][T10026] netlink: 'syz.0.1010': attribute type 4 has an invalid length.
[  203.247937][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1011'.
[  203.542651][T10035] ip6_vti0 speed is unknown, defaulting to 1000
[  203.576272][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'.
[  203.776342][T10057] ieee802154 phy0 wpan0: encryption failed: -22
[  204.000527][T10071] netlink: 'syz.0.1023': attribute type 13 has an invalid length.
[  204.003708][T10071] netlink: 'syz.0.1023': attribute type 17 has an invalid length.
[  204.119013][T10069] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.122104][T10069] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.291847][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.308055][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.432846][T10071] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.436988][T10071] 8021q: adding VLAN 0 to HW filter on device team0
[  204.447590][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.475331][T10071] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.477884][T10071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.485301][T10071] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.488087][T10071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.503415][T10071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.508654][T10071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.520780][T10071] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  204.556662][T10064] ip6_vti0 speed is unknown, defaulting to 1000
[  204.759282][T10084] ip6_vti0 speed is unknown, defaulting to 1000
[  205.394051][T10105] netlink: 'syz.0.1030': attribute type 3 has an invalid length.
[  205.624592][T10110] ip6_vti0 speed is unknown, defaulting to 1000
[  205.858628][T10137] netlink: 'syz.2.1035': attribute type 13 has an invalid length.
[  205.865403][T10137] netlink: 'syz.2.1035': attribute type 17 has an invalid length.
[  205.887478][T10120] netlink: 'syz.1.1033': attribute type 13 has an invalid length.
[  205.895505][T10120] netlink: 'syz.1.1033': attribute type 17 has an invalid length.
[  205.906280][T10137] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  205.941524][T10120] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.944659][T10120] 8021q: adding VLAN 0 to HW filter on device team0
[  205.948441][T10120] batman_adv: batadv0: Interface activated: dummy0
[  205.953568][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.006217][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.011552][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.030698][T10120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  206.034873][T10120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  206.046873][T10120] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  206.067629][T10143] __nla_validate_parse: 10 callbacks suppressed
[  206.067641][T10143] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1036'.
[  206.074646][ T5075] ip6_vti0 speed is unknown, defaulting to 1000
[  206.078248][ T5075] syz2: Port: 1 Link ACTIVE
[  206.079216][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.082139][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.087665][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.090446][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.110708][ T5075] ip6_vti0 speed is unknown, defaulting to 1000
[  206.171079][T10145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1037'.
[  206.373348][T10156] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.378273][T10156] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.395917][T10156] macsec0: left promiscuous mode
[  206.611199][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'.
[  206.733487][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  206.737036][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1041'.
[  206.743885][T10167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.822098][T10173] ip6_vti0 speed is unknown, defaulting to 1000
[  207.245792][T10191] ip6_vti0 speed is unknown, defaulting to 1000
[  207.267668][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'.
[  207.406917][T10199] dvmrp0: entered allmulticast mode
[  207.519027][T10214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.540893][T10212] ip6_vti0 speed is unknown, defaulting to 1000
[  207.661659][T10214] xt_l2tp: v2 tid > 0xffff: 37482740
[  207.729838][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'.
[  207.850372][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  208.277021][T10245] macsec0: entered promiscuous mode
[  208.298023][T10247] Cannot find del_set index 1 as target
[  208.420199][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'.
[  208.550844][T10252] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  208.664133][T10264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.309035][T10282] IPVS: length: 15 != 8
[  209.664893][T10288] ip6_vti0 speed is unknown, defaulting to 1000
[  209.717925][T10290] openvswitch: netlink: IP tunnel dst address not specified
[  210.185053][T10294] netlink: 'syz.1.1073': attribute type 1 has an invalid length.
[  210.325017][T10294] bond4: entered promiscuous mode
[  210.327606][T10294] 8021q: adding VLAN 0 to HW filter on device bond4
[  210.381332][T10292] syz_tun: entered allmulticast mode
[  210.556235][T10299] syzkaller0: entered promiscuous mode
[  210.558556][T10299] syzkaller0: entered allmulticast mode
[  210.628174][T10303] dvmrp0: left allmulticast mode
[  210.638828][T10299] ip6_vti0 speed is unknown, defaulting to 1000
[  210.793212][T10305] nbd: must specify a device to reconfigure
[  210.898782][T10282] Set syz1 is full, maxelem 65536 reached
[  211.008412][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'.
[  211.068502][T10308] ip6_vti0 speed is unknown, defaulting to 1000
[  211.201817][T10327] ieee802154 phy0 wpan0: encryption failed: -22
[  211.219487][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.230230][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.245069][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.257178][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.268776][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.278479][T10334] ieee802154 phy0 wpan0: encryption failed: -22
[  211.278987][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.294173][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.299767][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.304323][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.315456][T10329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  211.377874][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[  211.522164][T10350] netlink: 'syz.1.1086': attribute type 4 has an invalid length.
[  211.528985][T10348] netlink: 'syz.1.1086': attribute type 4 has an invalid length.
[  211.562437][T10352] netlink: 'syz.2.1087': attribute type 13 has an invalid length.
[  211.564938][T10352] netlink: 'syz.2.1087': attribute type 17 has an invalid length.
[  211.593531][T10354] netlink: 'syz.0.1088': attribute type 4 has an invalid length.
[  211.601416][T10347] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.603868][T10347] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.860905][T10347] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.882801][T10347] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.004840][T10352] 8021q: adding VLAN 0 to HW filter on device 
[  212.007880][T10352] 8021q: adding VLAN 0 to HW filter on device team0
[  212.014798][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.043823][T10352] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.046771][T10352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.055227][T10352] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.058089][T10352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.074196][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.083761][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.098104][T10352] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  212.138363][T10370] netlink: 'syz.1.1090': attribute type 13 has an invalid length.
[  212.141606][T10370] netlink: 'syz.1.1090': attribute type 17 has an invalid length.
[  212.203555][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'.
[  212.232682][T10369] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.235677][T10369] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.254356][T10369] batman_adv: batadv0: Interface deactivated: dummy0
[  212.325981][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.336983][T10369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.344589][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  212.388788][T10370] syz_tun: left allmulticast mode
[  212.401148][T10370] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.410314][T10370] 8021q: adding VLAN 0 to HW filter on device team0
[  212.415507][T10370] batman_adv: batadv0: Interface activated: dummy0
[  212.421528][T10370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.458245][T10370] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.461451][T10370] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.468885][T10370] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.471767][T10370] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.487779][T10370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.493924][T10370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.510073][T10370] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  212.523070][T10359] ip6_vti0 speed is unknown, defaulting to 1000
[  212.545546][    T9] ip6_vti0 speed is unknown, defaulting to 1000
[  212.557165][T10359] ip6_vti0 speed is unknown, defaulting to 1000
[  212.631703][T10380] ip6_vti0 speed is unknown, defaulting to 1000
[  212.726542][T10393] Cannot find del_set index 49151 as target
[  213.165197][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1096'.
[  213.274330][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'.
[  213.277979][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'.
[  213.345058][T10404] syz.1.1097: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  213.351177][T10404] CPU: 0 UID: 0 PID: 10404 Comm: syz.1.1097 Not tainted syzkaller #0 PREEMPT(full) 
[  213.351199][T10404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.351209][T10404] Call Trace:
[  213.351215][T10404]  <TASK>
[  213.351223][T10404]  dump_stack_lvl+0xe8/0x150
[  213.351248][T10404]  warn_alloc+0x249/0x340
[  213.351272][T10404]  ? stack_trace_save+0xa9/0x100
[  213.351296][T10404]  ? __pfx_warn_alloc+0x10/0x10
[  213.351320][T10404]  ? kasan_save_track+0x4f/0x80
[  213.351373][T10404]  ? kasan_save_track+0x3e/0x80
[  213.351392][T10404]  ? __kasan_kmalloc+0x93/0xb0
[  213.351409][T10404]  ? __kmalloc_cache_noprof+0x31c/0x660
[  213.351427][T10404]  ? xskq_create+0x56/0x170
[  213.351442][T10404]  ? xsk_setsockopt+0x54c/0x990
[  213.351463][T10404]  ? do_sock_setsockopt+0x17c/0x1b0
[  213.351480][T10404]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  213.351496][T10404]  ? do_syscall_64+0x15f/0xf80
[  213.351514][T10404]  __vmalloc_node_range_noprof+0x132/0x1750
[  213.351553][T10404]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  213.351575][T10404]  ? __kasan_kmalloc+0x93/0xb0
[  213.351599][T10404]  vmalloc_user_noprof+0xad/0xe0
[  213.351619][T10404]  ? xskq_create+0xbf/0x170
[  213.351633][T10404]  xskq_create+0xbf/0x170
[  213.351650][T10404]  xsk_init_queue+0x8a/0xe0
[  213.351673][T10404]  xsk_setsockopt+0x54c/0x990
[  213.351695][T10404]  ? __pfx_xsk_setsockopt+0x10/0x10
[  213.351715][T10404]  ? __pfx_aa_sk_perm+0x10/0x10
[  213.351736][T10404]  ? aa_sock_opt_perm+0xff/0x1a0
[  213.351756][T10404]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  213.351777][T10404]  ? __pfx_xsk_setsockopt+0x10/0x10
[  213.351798][T10404]  do_sock_setsockopt+0x17c/0x1b0
[  213.351819][T10404]  __x64_sys_setsockopt+0x13d/0x1b0
[  213.351838][T10404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.351854][T10404]  do_syscall_64+0x15f/0xf80
[  213.351870][T10404]  ? trace_irq_disable+0x3b/0x140
[  213.351896][T10404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.351910][T10404] RIP: 0033:0x7f93c759cdd9
[  213.351925][T10404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.351938][T10404] RSP: 002b:00007f93c83e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  213.351955][T10404] RAX: ffffffffffffffda RBX: 00007f93c7816090 RCX: 00007f93c759cdd9
[  213.351966][T10404] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  213.351975][T10404] RBP: 00007f93c7632d69 R08: 0000000000000004 R09: 0000000000000000
[  213.351984][T10404] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.351992][T10404] R13: 00007f93c7816128 R14: 00007f93c7816090 R15: 00007ffd87e992d8
[  213.352016][T10404]  </TASK>
[  213.352023][T10404] Mem-Info:
[  213.453097][T10404] active_anon:5527 inactive_anon:0 isolated_anon:0
[  213.453097][T10404]  active_file:13318 inactive_file:38369 isolated_file:0
[  213.453097][T10404]  unevictable:1768 dirty:79 writeback:0
[  213.453097][T10404]  slab_reclaimable:10545 slab_unreclaimable:187247
[  213.453097][T10404]  mapped:18227 shmem:2483 pagetables:1110
[  213.453097][T10404]  sec_pagetables:0 bounce:0
[  213.453097][T10404]  kernel_misc_reclaimable:0
[  213.453097][T10404]  free:1024726 free_pcp:19310 free_cma:0
[  213.467615][T10404] Node 0 active_anon:10076kB inactive_anon:0kB active_file:25860kB inactive_file:144488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38984kB dirty:128kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7864kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  213.478285][T10404] Node 1 active_anon:12032kB inactive_anon:0kB active_file:27412kB inactive_file:8988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33924kB dirty:188kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4820kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  213.488708][T10404] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  213.498245][T10404] lowmem_reserve[]: 0 1587 2117 2117 2117
[  213.500153][T10404] Node 0 DMA32 free:1279672kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:704kB inactive_anon:0kB active_file:24368kB inactive_file:9860kB unevictable:0kB writepending:128kB zspages:0kB present:2080636kB managed:1625428kB mlocked:0kB bounce:0kB free_pcp:26788kB local_pcp:15480kB free_cma:0kB
[  213.509772][T10404] lowmem_reserve[]: 0 0 530 530 530
[  213.511505][T10404] Node 0 Normal free:15628kB boost:4096kB min:12608kB low:14736kB high:16864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9440kB inactive_anon:0kB active_file:1492kB inactive_file:134628kB unevictable:3536kB writepending:0kB zspages:0kB present:1572868kB managed:543156kB mlocked:0kB bounce:0kB free_pcp:3500kB local_pcp:3364kB free_cma:0kB
[  213.521218][T10404] lowmem_reserve[]: 0 0 0 0 0
[  213.523263][T10404] Node 1 Normal free:2788244kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12032kB inactive_anon:0kB active_file:27412kB inactive_file:8988kB unevictable:3536kB writepending:188kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:47096kB local_pcp:30316kB free_cma:0kB
[  213.533498][T10404] lowmem_reserve[]: 0 0 0 0 0
[  213.535248][T10404] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  213.539042][T10404] Node 0 DMA32: 2*4kB (UE) 2*8kB (UE) 6*16kB (UME) 136*32kB (UME) 75*64kB (UME) 31*128kB (UME) 21*256kB (UME) 11*512kB (UME) 8*1024kB (UME) 5*2048kB (ME) 302*4096kB (UM) = 1279672kB
[  213.545062][T10404] Node 0 Normal: 45*4kB (UME) 76*8kB (UM) 192*16kB (UM) 118*32kB (UM) 79*64kB (UM) 7*128kB (UM) 6*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 15636kB
[  213.550418][T10404] Node 1 Normal: 1307*4kB (UME) 847*8kB (UME) 583*16kB (UME) 268*32kB (UME) 324*64kB (UM) 107*128kB (UME) 28*256kB (UM) 14*512kB (UM) 24*1024kB (UM) 13*2048kB (UME) 649*4096kB (M) = 2788180kB
[  213.557003][T10404] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  213.560142][T10404] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  213.565089][T10404] 54170 total pagecache pages
[  213.568507][T10404] 0 pages in swap cache
[  213.571721][T10404] Free swap  = 124996kB
[  213.573212][T10404] Total swap = 124996kB
[  213.574756][T10404] 1834877 pages RAM
[  213.576349][T10404] 0 pages HighMem/MovableOnly
[  213.578213][T10404] 390220 pages reserved
[  213.581274][T10404] 0 pages cma reserved
[  213.643763][T10410] ip6_vti0 speed is unknown, defaulting to 1000
[  213.656369][T10414] openvswitch: netlink: IP tunnel dst address not specified
[  213.822078][T10414] ip6_vti0 speed is unknown, defaulting to 1000
[  214.244433][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1100'.
[  214.277747][T10424] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  214.356039][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'.
[  214.361537][T10427] Set syz0 is full, maxelem 0 reached
[  214.365621][T10427] nbd: must specify a device to reconfigure
[  214.461013][T10432] netlink: 'syz.2.1104': attribute type 13 has an invalid length.
[  214.470005][T10432] netlink: 'syz.2.1104': attribute type 17 has an invalid length.
[  214.479265][T10435] openvswitch: netlink: IP tunnel dst address not specified
[  214.566360][T10431] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.568888][T10431] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.751416][T10431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.763905][T10431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.863080][T10432] 8021q: adding VLAN 0 to HW filter on device 
[  214.866037][T10432] 8021q: adding VLAN 0 to HW filter on device team0
[  214.871655][T10432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.892287][T10432] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.894862][T10432] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.901926][T10432] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.904328][T10432] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.915386][T10432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.920294][T10432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.929956][T10432] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  214.969109][T10428] ip6_vti0 speed is unknown, defaulting to 1000
[  215.324532][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'.
[  215.333793][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'.
[  215.850488][T10459] team0: Port device team_slave_0 removed
[  215.958770][T10464] ip6_vti0 speed is unknown, defaulting to 1000
[  216.368937][T10475] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  216.510373][T10476] __nla_validate_parse: 6 callbacks suppressed
[  216.510392][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'.
[  216.855236][T10484] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.858266][T10484] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.868911][T10484] batman_adv: batadv0: Interface deactivated: dummy0
[  216.917131][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.926530][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.945778][ T5673] ip6_vti0 speed is unknown, defaulting to 1000
[  216.948576][ T5673] syz2: Port: 1 Link DOWN
[  216.951208][ T5673] ip6_vti0 speed is unknown, defaulting to 1000
[  217.310546][T10495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.493644][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1123'.
[  217.618550][T10502] tap0: tun_chr_ioctl cmd 2147767521
[  217.627880][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'.
[  217.631812][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'.
[  217.707301][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  217.712731][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  217.712735][T10504] ip6_vti0 speed is unknown, defaulting to 1000
[  217.744001][T10510] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1125'.
[  217.747466][T10510] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1125'.
[  217.752090][T10510] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  217.776798][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  217.924587][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'.
[  219.461891][T10530] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  219.507708][T10530] ip6_vti0 speed is unknown, defaulting to 1000
[  219.533794][T10535] IPVS: set_ctl: invalid protocol: 92 172.20.20.61:20002
[  219.713277][T10537] ip6_vti0 speed is unknown, defaulting to 1000
[  219.989974][T10550] ieee802154 phy0 wpan0: encryption failed: -22
[  220.377895][T10558] ip6_vti0 speed is unknown, defaulting to 1000
[  220.638938][T10565] ip6_vti0 speed is unknown, defaulting to 1000
[  221.536619][T10588] __nla_validate_parse: 5 callbacks suppressed
[  221.536638][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'.
[  221.542020][T10589] validate_nla: 3 callbacks suppressed
[  221.542039][T10589] netlink: 'syz.1.1148': attribute type 4 has an invalid length.
[  221.547296][T10588] Set syz0 is full, maxelem 0 reached
[  221.552275][T10588] nbd: must specify a device to reconfigure
[  221.614856][T10591] IPv6: sit1: Disabled Multicast RS
[  221.706945][T10591] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1149'.
[  221.729029][T10593] ip6_vti0 speed is unknown, defaulting to 1000
[  221.797607][T10595] openvswitch: netlink: IP tunnel dst address not specified
[  221.833721][T10598] netlink: 'syz.2.1151': attribute type 13 has an invalid length.
[  221.836600][T10598] netlink: 'syz.2.1151': attribute type 17 has an invalid length.
[  222.020212][T10597] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.023421][T10597] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.154756][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.161876][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.204772][T10598] 8021q: adding VLAN 0 to HW filter on device 
[  222.208354][T10598] 8021q: adding VLAN 0 to HW filter on device team0
[  222.214648][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.244847][T10598] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.247495][T10598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.264509][T10598] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.267295][T10598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.287100][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.293153][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.308729][T10598] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  222.518145][T10605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.523781][T10605] IPv6: NLM_F_CREATE should be set when creating new route
[  222.526529][T10605] IPv6: NLM_F_CREATE should be set when creating new route
[  222.568498][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'.
[  222.661114][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1154'.
[  222.867788][T10618] netlink: 'syz.1.1157': attribute type 10 has an invalid length.
[  222.870507][T10618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1157'.
[  222.904621][T10621] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1158'.
[  222.961271][T10627] netlink: 'syz.1.1159': attribute type 4 has an invalid length.
[  223.497651][T10637] netlink: 'syz.0.1162': attribute type 13 has an invalid length.
[  223.502243][T10637] netlink: 'syz.0.1162': attribute type 17 has an invalid length.
[  223.588272][T10636] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.596791][T10636] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.639894][T10637] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.643950][T10637] 8021q: adding VLAN 0 to HW filter on device team0
[  223.650408][T10637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.698242][T10637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.704091][T10637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.713772][T10637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.718148][T10637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.726918][T10637] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  223.743627][  T273] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.745860][  T273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.750859][  T273] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.753665][  T273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.823127][T10650] netlink: 'syz.2.1164': attribute type 13 has an invalid length.
[  223.826086][T10650] netlink: 'syz.2.1164': attribute type 17 has an invalid length.
[  223.971736][T10647] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.974408][T10647] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.052815][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'.
[  224.139483][T10662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1167'.
[  224.150993][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'.
[  224.154536][T10662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1167'.
[  224.295494][T10647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.311339][T10647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.395193][T10649] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  224.440732][T10650] 8021q: adding VLAN 0 to HW filter on device 
[  224.446009][T10650] 8021q: adding VLAN 0 to HW filter on device team0
[  224.454380][T10650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.473027][T10650] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.476008][T10650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.481567][T10650] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.484371][T10650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.499165][T10650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.504481][T10650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.517152][T10650] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  224.553818][T10651] ip6_vti0 speed is unknown, defaulting to 1000
[  224.576468][T10665] netlink: 'syz.1.1168': attribute type 13 has an invalid length.
[  224.608689][T10665] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.611791][T10665] 8021q: adding VLAN 0 to HW filter on device team0
[  224.616408][T10665] batman_adv: batadv0: Interface activated: dummy0
[  224.621280][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.686107][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.693388][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.702608][T10665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  224.706699][T10665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.714559][T10665] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  224.725560][ T5673] ip6_vti0 speed is unknown, defaulting to 1000
[  224.727976][ T5673] syz2: Port: 1 Link ACTIVE
[  224.738958][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.741945][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.748403][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.751290][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.782091][ T5673] ip6_vti0 speed is unknown, defaulting to 1000
[  225.240278][T10677] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  225.687073][T10703] ip6_vti0 speed is unknown, defaulting to 1000
[  225.722354][T10708] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  226.615477][T10724] validate_nla: 2 callbacks suppressed
[  226.615491][T10724] netlink: 'syz.0.1182': attribute type 4 has an invalid length.
[  226.799883][T10732] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.802844][T10732] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.857340][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.868341][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.887554][T10732] macsec0: left promiscuous mode
[  226.890166][T10732] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  226.928204][T10732] ip6_vti0 speed is unknown, defaulting to 1000
[  227.259554][T10742] __nla_validate_parse: 11 callbacks suppressed
[  227.259574][T10742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1189'.
[  227.454238][T10744] ip6_vti0 speed is unknown, defaulting to 1000
[  227.558099][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1192'.
[  227.688669][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[  227.833343][T10761] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1194'.
[  227.927345][T10763] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  227.939486][T10763] netlink: 'syz.1.1195': attribute type 4 has an invalid length.
[  227.942263][T10763] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1195'.
[  228.198775][T10789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1202'.
[  228.417674][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1206'.
[  228.486714][T10801] syzkaller1: entered promiscuous mode
[  228.489071][T10801] syzkaller1: entered allmulticast mode
[  228.777713][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'.
[  228.785344][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'.
[  228.789053][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1209'.
[  229.017153][T10823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.115202][T10827] ip6_vti0 speed is unknown, defaulting to 1000
[  229.275234][T10840] netlink: 'syz.0.1216': attribute type 13 has an invalid length.
[  229.286862][T10844] netlink: 'syz.2.1215': attribute type 1 has an invalid length.
[  229.288877][T10838] can: request_module (can-proto-0) failed.
[  229.293905][T10840] netlink: 'syz.0.1216': attribute type 17 has an invalid length.
[  229.320252][T10838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.321952][T10840] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.328283][T10840] 8021q: adding VLAN 0 to HW filter on device team0
[  229.338036][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.377641][T10840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.382730][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.390582][T10840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.394673][T10840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.402489][T10840] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  229.431973][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.434814][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.439014][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.441922][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.490113][T10850] netlink: 'syz.0.1217': attribute type 4 has an invalid length.
[  229.515035][T10844] ip6_vti0 speed is unknown, defaulting to 1000
[  229.998517][T10858] ip6_vti0 speed is unknown, defaulting to 1000
[  230.428534][T10866] ip6_vti0 speed is unknown, defaulting to 1000
[  230.639413][T10879] vlan2: entered promiscuous mode
[  231.828325][T10915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.239820][T10923] netlink: 'syz.0.1236': attribute type 13 has an invalid length.
[  232.243047][T10923] netlink: 'syz.0.1236': attribute type 17 has an invalid length.
[  232.258565][T10923] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  232.337898][T10928] netlink: 'syz.2.1238': attribute type 3 has an invalid length.
[  232.381055][T10928] block nbd2: NBD_DISCONNECT
[  232.499639][T10934] ieee802154 phy0 wpan0: encryption failed: -22
[  232.508333][T10934] __nla_validate_parse: 72 callbacks suppressed
[  232.508349][T10934] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1241'.
[  232.558851][T10939] ip6_vti0 speed is unknown, defaulting to 1000
[  232.746872][T10950] ip6_vti0 speed is unknown, defaulting to 1000
[  232.975351][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'.
[  232.991244][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1247'.
[  233.128226][T10969] netlink: 'syz.1.1248': attribute type 33 has an invalid length.
[  233.144662][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'.
[  233.185570][T10963] ip6_vti0 speed is unknown, defaulting to 1000
[  233.675362][T10984] netlink: 'syz.1.1251': attribute type 1 has an invalid length.
[  233.694228][T10984] 8021q: adding VLAN 0 to HW filter on device bond5
[  233.714302][T10984] bond5: (slave gretap2): making interface the new active one
[  233.722523][T10984] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  233.728594][T10984] syz.1.1251 (10984) used greatest stack depth: 19904 bytes left
[  234.064204][T10992] ip6_vti0 speed is unknown, defaulting to 1000
[  234.108799][T10997] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1253'.
[  234.113915][T10997] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1253'.
[  234.124036][T10997] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  234.196791][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'.
[  234.567938][T11007] ip6_vti0 speed is unknown, defaulting to 1000
[  234.608828][T11013] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1257'.
[  234.642687][T11013] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.645447][T11013] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.720903][T11013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.738634][T11013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.077682][T11034] syzkaller0: entered promiscuous mode
[  235.085815][T11034] syzkaller0: entered allmulticast mode
[  235.405335][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'.
[  235.412694][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'.
[  235.484926][T11057] Set syz0 is full, maxelem 0 reached
[  235.494614][T11057] nbd: must specify a device to reconfigure
[  236.430107][T11088] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.433098][T11088] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.472805][T11088] batman_adv: batadv0: Interface deactivated: dummy0
[  236.702493][T11088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.730708][T11088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.825077][ T7757] ip6_vti0 speed is unknown, defaulting to 1000
[  236.830603][ T7757] syz2: Port: 1 Link DOWN
[  236.898843][ T5671] ip6_vti0 speed is unknown, defaulting to 1000
[  236.974625][T11100] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  237.167981][T11106] nbd: nbd64 already in use
[  237.343378][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.443923][T11113] ip6_vti0 speed is unknown, defaulting to 1000
[  237.491903][T11120] openvswitch: netlink: IP tunnel dst address not specified
[  237.660128][T11123] ip6_vti0 speed is unknown, defaulting to 1000
[  237.993594][T11130] ip6_vti0 speed is unknown, defaulting to 1000
[  238.545653][T11146] ip6_vti0 speed is unknown, defaulting to 1000
[  239.318065][T11168] ip6_vti0 speed is unknown, defaulting to 1000
[  239.387287][T11170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.550155][T11170] __nla_validate_parse: 8 callbacks suppressed
[  239.550166][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'.
[  239.593306][T11174] ip6_vti0 speed is unknown, defaulting to 1000
[  239.614886][T11178] xt_socket: unknown flags 0x4
[  239.754062][T11180] netlink: 65616 bytes leftover after parsing attributes in process `syz.1.1293'.
[  240.109071][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'.
[  240.162672][T11199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'.
[  240.184839][T11199] nbd: must specify a device to reconfigure
[  240.467143][T11211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1303'.
[  240.557039][T11220] netlink: 'syz.0.1306': attribute type 13 has an invalid length.
[  240.560553][T11220] netlink: 'syz.0.1306': attribute type 17 has an invalid length.
[  240.578415][T11220] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.582859][T11220] 8021q: adding VLAN 0 to HW filter on device team0
[  240.612944][T11220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.617937][T11223] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1305'.
[  240.624576][T11223] nbd: must specify a device to reconfigure
[  240.647965][T11220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.652486][T11220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.658226][T11220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  240.662110][T11220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  240.664796][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'.
[  240.668603][T11220] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  240.674720][T11216] syzkaller1: entered promiscuous mode
[  240.676455][T11216] syzkaller1: entered allmulticast mode
[  240.684982][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.687958][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.696289][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.699186][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.811795][T11221] ip6_vti0 speed is unknown, defaulting to 1000
[  240.859979][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'.
[  241.010655][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'.
[  241.014015][T11237] SET target dimension over the limit!
[  241.110793][T11241] netlink: 'syz.2.1311': attribute type 1 has an invalid length.
[  241.243281][T11246] Cannot find del_set index 49151 as target
[  241.322807][T11253] ip6_vti0 speed is unknown, defaulting to 1000
[  241.403354][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  242.231427][T11291] ip6_vti0 speed is unknown, defaulting to 1000
[  242.840311][T11316] ip6_vti0 speed is unknown, defaulting to 1000
[  242.938326][T11318] erspan0: entered promiscuous mode
[  242.943175][T11318] vlan2: entered promiscuous mode
[  243.174627][T11324] ip6_vti0 speed is unknown, defaulting to 1000
[  243.605475][T11332] openvswitch: netlink: IP tunnel dst address not specified
[  243.647215][T11337] ip6_vti0 speed is unknown, defaulting to 1000
[  243.787401][T11346] netlink: 'syz.2.1338': attribute type 6 has an invalid length.
[  243.791950][T11346] netlink: 'syz.2.1338': attribute type 7 has an invalid length.
[  243.794983][T11346] netlink: 'syz.2.1338': attribute type 8 has an invalid length.
[  243.934442][T11348] netlink: 'syz.2.1339': attribute type 5 has an invalid length.
[  243.954624][T11340] ip6_vti0 speed is unknown, defaulting to 1000
[  244.389220][T11364] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.392313][T11364] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.455492][T11364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.467652][T11364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.535700][T11366] ip6_vti0 speed is unknown, defaulting to 1000
[  244.783374][T11383] __nla_validate_parse: 11 callbacks suppressed
[  244.783391][T11383] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1347'.
[  244.883330][T11385] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1346'.
[  245.002294][T11387] ip6_vti0 speed is unknown, defaulting to 1000
[  245.725204][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'.
[  245.730394][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'.
[  245.738632][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'.
[  245.742908][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'.
[  245.791719][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1352'.
[  245.814527][T11404] ip6_vti0 speed is unknown, defaulting to 1000
[  245.844650][T11408] netlink: 'syz.1.1353': attribute type 5 has an invalid length.
[  245.854283][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'.
[  245.926763][T11411] IPVS: Unknown mcast interface: vcan0
[  245.934034][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'.
[  245.995318][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.194083][T11421] syzkaller0: entered promiscuous mode
[  246.197585][T11421] syzkaller0: entered allmulticast mode
[  246.227732][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  246.331824][T11428] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  246.603684][T11434] nbd: must specify a device to reconfigure
[  246.616933][T11436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.860860][T11487] netlink: 'syz.2.1370': attribute type 1 has an invalid length.
[  247.869253][T11487] netlink: 'syz.2.1370': attribute type 3 has an invalid length.
[  247.877550][T11490] --map-set only usable from mangle table
[  247.883160][T11492] --map-set only usable from mangle table
[  248.119788][T11510] ip6_vti0 speed is unknown, defaulting to 1000
[  248.206310][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.297576][T11515] ip6_vti0 speed is unknown, defaulting to 1000
[  248.574996][T11532] ip6_vti0 speed is unknown, defaulting to 1000
[  251.272425][T11524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.473392][T11557] ip6_vti0 speed is unknown, defaulting to 1000
[  251.602731][T11565] netlink: 'syz.2.1391': attribute type 13 has an invalid length.
[  251.610332][T11565] netlink: 'syz.2.1391': attribute type 17 has an invalid length.
[  251.752077][T11576] __nla_validate_parse: 16 callbacks suppressed
[  251.752090][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'.
[  251.801949][T11563] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.805123][T11563] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.947324][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'.
[  252.026151][T11563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.052713][T11563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.174916][T11565] 8021q: adding VLAN 0 to HW filter on device 
[  252.179021][T11565] 8021q: adding VLAN 0 to HW filter on device team0
[  252.186871][T11565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.211286][T11565] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.214222][T11565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.220412][T11565] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.223007][T11565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.238339][T11565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.243259][T11565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.256421][T11565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  252.325108][T11582] netlink: 'syz.0.1394': attribute type 11 has an invalid length.
[  252.437413][T11584] ip6_vti0 speed is unknown, defaulting to 1000
[  252.442984][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'.
[  253.098680][T11596] openvswitch: netlink: IP tunnel dst address not specified
[  253.316224][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'.
[  253.406058][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'.
[  253.411562][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'.
[  253.719650][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'.
[  253.724674][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'.
[  254.214112][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'.
[  254.232040][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'.
[  254.318078][T11660] ip6_vti0 speed is unknown, defaulting to 1000
[  254.369752][T11663] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  254.578105][T11666] xt_SECMARK: invalid mode: 4
[  254.582501][T11666] macsec0: entered promiscuous mode
[  254.636100][T11668] hsr0 speed is unknown, defaulting to 1000
[  254.639540][T11668] hsr0 speed is unknown, defaulting to 1000
[  254.644594][T11668] hsr0 speed is unknown, defaulting to 1000
[  254.647194][T11668] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  254.657499][T11668] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  254.663336][T11668] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  254.669210][T11668] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  254.680602][T11668] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  254.745615][T11668] hsr0 speed is unknown, defaulting to 1000
[  254.756458][T11668] hsr0 speed is unknown, defaulting to 1000
[  254.770013][T11668] hsr0 speed is unknown, defaulting to 1000
[  254.832738][T11671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  255.123306][T11676] ip6_vti0 speed is unknown, defaulting to 1000
[  255.288500][T11676] hsr0 speed is unknown, defaulting to 1000
[  256.206458][T11702] ip6_vti0 speed is unknown, defaulting to 1000
[  256.362296][T11702] hsr0 speed is unknown, defaulting to 1000
[  256.999777][T11735] netlink: 'syz.2.1434': attribute type 1 has an invalid length.
[  257.066214][T11738] __nla_validate_parse: 14 callbacks suppressed
[  257.066230][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'.
[  257.093634][T11738] vlan2: entered promiscuous mode
[  257.098308][T11738] bridge0: entered promiscuous mode
[  257.135719][T11735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1434'.
[  257.152243][T11742] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.158997][T11742] bond1: (slave bond2): making interface the new active one
[  257.166275][T11742] bond1: (slave bond2): Enslaving as an active interface with an up link
[  257.182965][T11744] ip6_vti0 speed is unknown, defaulting to 1000
[  257.380664][T11744] hsr0 speed is unknown, defaulting to 1000
[  257.650378][T11760] ip6_vti0 speed is unknown, defaulting to 1000
[  257.672829][T11761] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1439'.
[  257.677315][T11761] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1439'.
[  257.681869][T11761] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  257.857231][T11760] hsr0 speed is unknown, defaulting to 1000
[  258.296344][T11765] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.300821][T11765] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.530254][T11765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.556917][T11765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.461657][T11805] ip6_vti0 speed is unknown, defaulting to 1000
[  259.613822][T11805] hsr0 speed is unknown, defaulting to 1000
[  259.666133][T11817] netlink: 'syz.2.1452': attribute type 1 has an invalid length.
[  260.155412][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'.
[  260.159035][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'.
[  260.746324][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.961030][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  260.963576][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  260.988435][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'.
[  261.097033][T11889] ieee802154 phy0 wpan0: encryption failed: -22
[  261.204266][T11892] Can't find ip_set type hash:ip,por
[  261.371433][T11909] ip6_vti0 speed is unknown, defaulting to 1000
[  261.545204][T11911] ip6_vti0 speed is unknown, defaulting to 1000
[  261.545280][T11909] hsr0 speed is unknown, defaulting to 1000
[  261.764631][T11911] hsr0 speed is unknown, defaulting to 1000
[  262.203677][T11924] macsec0: left promiscuous mode
[  262.276758][T11931] xt_check_target: 23 callbacks suppressed
[  262.276779][T11931] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  262.492210][T11945] ip6_vti0 speed is unknown, defaulting to 1000
[  262.554616][T11955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1488'.
[  262.748266][T11945] hsr0 speed is unknown, defaulting to 1000
[  262.895037][T11970] veth1_macvtap: entered promiscuous mode
[  262.897673][T11970] macsec0: left promiscuous mode
[  262.904038][T11970] veth1_macvtap: left promiscuous mode
[  262.910186][T11966] netlink: 'syz.2.1491': attribute type 1 has an invalid length.
[  262.923640][T11980] ip6_vti0 speed is unknown, defaulting to 1000
[  262.986289][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'.
[  262.989113][T11989] netlink: 'syz.2.1496': attribute type 5 has an invalid length.
[  262.993695][T11989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'.
[  263.003490][T11989] geneve2: entered promiscuous mode
[  263.005276][T11989] geneve2: entered allmulticast mode
[  263.006996][T11985] netlink: 'syz.0.1495': attribute type 13 has an invalid length.
[  263.011691][ T5648] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  263.016689][ T5648] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  263.020844][ T5648] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  263.024772][T11985] netlink: 'syz.0.1495': attribute type 17 has an invalid length.
[  263.028695][ T5648] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  263.050696][T11985] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.053501][T11985] 8021q: adding VLAN 0 to HW filter on device team0
[  263.060907][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.124740][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.129074][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.135737][T11985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  263.140337][T11985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.151396][T11985] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  263.161229][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.163981][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.171853][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.174677][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.233344][ T5075] hsr0 speed is unknown, defaulting to 1000
[  263.237214][ T5075] syz0: Port: 1 Link ACTIVE
[  263.243010][T11980] hsr0 speed is unknown, defaulting to 1000
[  263.243068][T11092] hsr0 speed is unknown, defaulting to 1000
[  263.400541][T11991] ip6_vti0 speed is unknown, defaulting to 1000
[  263.462874][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1498'.
[  263.676598][T12006] netlink: 'syz.0.1499': attribute type 13 has an invalid length.
[  263.680017][T12006] netlink: 'syz.0.1499': attribute type 17 has an invalid length.
[  263.695990][T12005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1500'.
[  263.713274][T12006] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  263.719698][T11991] hsr0 speed is unknown, defaulting to 1000
[  263.776886][T12007] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  263.855589][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'.
[  264.368987][T12012] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1501'.
[  264.560970][T12014] ip6_vti0 speed is unknown, defaulting to 1000
[  264.679139][T12014] hsr0 speed is unknown, defaulting to 1000
[  264.679381][T12019] ip6_vti0 speed is unknown, defaulting to 1000
[  264.952585][T12019] hsr0 speed is unknown, defaulting to 1000
[  265.229055][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'.
[  265.287872][T12038] netlink: 'syz.0.1507': attribute type 1 has an invalid length.
[  265.513016][T12041] ip6_vti0 speed is unknown, defaulting to 1000
[  265.734666][T12041] hsr0 speed is unknown, defaulting to 1000
[  265.812883][T12048] ip6_vti0 speed is unknown, defaulting to 1000
[  265.922021][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'.
[  265.954624][T12048] hsr0 speed is unknown, defaulting to 1000
[  266.202641][T12054] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.205185][T12054] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.230611][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'.
[  266.305997][T12062] netlink: 'syz.1.1512': attribute type 1 has an invalid length.
[  266.310421][T12062] netlink: 'syz.1.1512': attribute type 2 has an invalid length.
[  266.458387][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.483228][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.616213][ T7768] hsr0 speed is unknown, defaulting to 1000
[  266.617993][ T7768] syz0: Port: 1 Link DOWN
[  266.890974][T12078] ip6_vti0 speed is unknown, defaulting to 1000
[  266.963421][T12082] netlink: 'syz.2.1517': attribute type 4 has an invalid length.
[  267.112275][T12078] hsr0 speed is unknown, defaulting to 1000
[  267.564471][T12109] ip6_vti0 speed is unknown, defaulting to 1000
[  267.586232][T12111] __nla_validate_parse: 5 callbacks suppressed
[  267.586246][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  267.595147][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  267.599145][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  267.633857][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  267.637158][T12113] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1526'.
[  267.662770][T12113] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.665829][T12113] 8021q: adding VLAN 0 to HW filter on device team0
[  267.670260][T12113] batman_adv: batadv0: Interface activated: dummy0
[  267.674363][T12113] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.706632][T12113] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.710864][T12113] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.718159][T12113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  267.721898][T12113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  267.729709][T12113] veth1_vlan: left promiscuous mode
[  267.732447][T12113] veth0_vlan: left promiscuous mode
[  267.734716][T12113] veth0_vlan: entered promiscuous mode
[  267.741725][T12113] veth1_vlan: entered promiscuous mode
[  267.747044][T12113] veth1_macvtap: left promiscuous mode
[  267.750298][T12113] veth0_macvtap: left promiscuous mode
[  267.753231][T12113] veth0_macvtap: entered promiscuous mode
[  267.756107][T12113] veth1_macvtap: entered promiscuous mode
[  267.758039][T12113] macsec0: left promiscuous mode
[  267.765876][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  267.769628][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  267.772936][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  267.783210][T12113] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  267.801678][T12113] 8021q: adding VLAN 0 to HW filter on device bond1
[  267.808011][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'.
[  269.125382][T12113] 8021q: adding VLAN 0 to HW filter on device bond2
[  269.129197][T12113] macsec1: left promiscuous mode
[  269.133164][T12113] 8021q: adding VLAN 0 to HW filter on device bond3
[  269.176099][T12113] bond4: left promiscuous mode
[  269.178237][T12113] 8021q: adding VLAN 0 to HW filter on device bond4
[  269.183972][T12113] 8021q: adding VLAN 0 to HW filter on device bond5
[  269.195097][ T5687] ip6_vti0 speed is unknown, defaulting to 1000
[  269.206473][  T273] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.209250][  T273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.211848][ T5687] syz2: Port: 1 Link ACTIVE
[  269.214490][  T273] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.216686][  T273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.245856][T12109] hsr0 speed is unknown, defaulting to 1000
[  269.249619][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.268925][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.276400][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.285952][ T5075] ip6_vti0 speed is unknown, defaulting to 1000
[  269.314530][T12126] validate_nla: 2 callbacks suppressed
[  269.314548][T12126] netlink: 'syz.1.1528': attribute type 13 has an invalid length.
[  269.323297][T12127] netlink: 'syz.1.1528': attribute type 13 has an invalid length.
[  269.325908][T12127] netlink: 'syz.1.1528': attribute type 17 has an invalid length.
[  269.328439][T12126] netlink: 'syz.1.1528': attribute type 17 has an invalid length.
[  269.450580][T12125] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.453005][T12125] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.486602][T12125] batman_adv: batadv0: Interface deactivated: dummy0
[  269.709900][T12125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.738100][T12125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.072315][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.098539][T12127] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.102924][T12127] 8021q: adding VLAN 0 to HW filter on device team0
[  270.107845][T12127] batman_adv: batadv0: Interface activated: dummy0
[  270.114001][T12127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.148580][T12127] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.151380][T12127] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.162929][T12127] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.165843][T12127] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.179566][T12127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.184821][T12127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.198583][T12127] veth1_vlan: left promiscuous mode
[  270.201613][T12127] veth0_vlan: left promiscuous mode
[  270.204864][T12127] veth0_vlan: entered promiscuous mode
[  270.211450][T12127] veth1_vlan: entered promiscuous mode
[  270.218515][T12127] veth1_macvtap: left promiscuous mode
[  270.221943][T12127] veth0_macvtap: left promiscuous mode
[  270.225601][T12127] veth0_macvtap: entered promiscuous mode
[  270.229191][T12127] veth1_macvtap: entered promiscuous mode
[  270.237436][T12127] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.241946][T12127] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.245093][T12127] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  270.248178][T12127] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  270.256431][T12127] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.260561][T12127] 8021q: adding VLAN 0 to HW filter on device bond2
[  270.265827][T12127] 8021q: adding VLAN 0 to HW filter on device bond3
[  270.296196][T12127] 8021q: adding VLAN 0 to HW filter on device bond4
[  270.300860][T12127] 8021q: adding VLAN 0 to HW filter on device bond5
[  270.331706][ T7768] ip6_vti0 speed is unknown, defaulting to 1000
[  270.334521][ T7759] ip6_vti0 speed is unknown, defaulting to 1000
[  270.391048][ T7768] ip6_vti0 speed is unknown, defaulting to 1000
[  270.398231][T12135] ip6_vti0 speed is unknown, defaulting to 1000
[  270.406093][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.451671][T12145] IPv6: NLM_F_CREATE should be specified when creating new route
[  270.461341][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.568467][T12135] hsr0 speed is unknown, defaulting to 1000
[  270.632233][T12147] ip6_vti0 speed is unknown, defaulting to 1000
[  270.952744][T12147] hsr0 speed is unknown, defaulting to 1000
[  271.368567][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1533'.
[  271.451454][T12155] ip6_vti0 speed is unknown, defaulting to 1000
[  271.487030][T12163] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1535'.
[  271.636225][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'.
[  271.641698][T12167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1538'.
[  271.713958][T12155] hsr0 speed is unknown, defaulting to 1000
[  272.225821][T12192] ip6_vti0 speed is unknown, defaulting to 1000
[  272.309225][T12199] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  272.442873][T12192] hsr0 speed is unknown, defaulting to 1000
[  272.469007][T12204] 8021q: adding VLAN 0 to HW filter on device bond5
[  272.477896][T12204] bond5 (unregistering): Released all slaves
[  272.876795][T12228] ip6_vti0 speed is unknown, defaulting to 1000
[  272.878934][T12232] __nla_validate_parse: 5 callbacks suppressed
[  272.878943][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'.
[  272.907351][T12233] openvswitch: netlink: IP tunnel dst address not specified
[  272.985399][T12238] openvswitch: netlink: IP tunnel dst address not specified
[  273.054397][T12235] ip6_vti0 speed is unknown, defaulting to 1000
[  273.057363][T12228] hsr0 speed is unknown, defaulting to 1000
[  273.222290][T12235] hsr0 speed is unknown, defaulting to 1000
[  273.247953][T12249] netlink: 'syz.2.1556': attribute type 4 has an invalid length.
[  273.341078][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'.
[  273.350643][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'.
[  273.734256][T12265] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1562'.
[  273.808317][T12264] ip6_vti0 speed is unknown, defaulting to 1000
[  273.821739][T12273] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1560'.
[  273.855677][T12274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.923132][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'.
[  273.980985][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'.
[  273.983726][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'.
[  274.017064][T12264] hsr0 speed is unknown, defaulting to 1000
[  274.241994][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'.
[  274.270843][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'.
[  274.339856][T12311] syzkaller1: entered promiscuous mode
[  274.349447][T12311] syzkaller1: entered allmulticast mode
[  274.554486][T12335] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  274.861287][T12342] ip6_vti0 speed is unknown, defaulting to 1000
[  274.979013][T12350] openvswitch: netlink: IP tunnel dst address not specified
[  275.060931][T12342] hsr0 speed is unknown, defaulting to 1000
[  275.061011][T12339] ip6_vti0 speed is unknown, defaulting to 1000
[  275.220774][T12339] hsr0 speed is unknown, defaulting to 1000
[  275.220808][T12355] ip6_vti0 speed is unknown, defaulting to 1000
[  275.361186][T12362] ip6_vti0 speed is unknown, defaulting to 1000
[  275.717153][T12362] hsr0 speed is unknown, defaulting to 1000
[  275.747512][T12355] hsr0 speed is unknown, defaulting to 1000
[  276.551358][T12384] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.554454][T12384] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.626581][T12384] batman_adv: batadv0: Interface deactivated: dummy0
[  276.822061][T12384] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.848863][T12384] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.258069][T10357] ip6_vti0 speed is unknown, defaulting to 1000
[  277.265960][T10357] syz2: Port: 1 Link DOWN
[  277.278001][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.294508][T10357] ip6_vti0 speed is unknown, defaulting to 1000
[  277.294569][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.314096][T12390] ip6_vti0 speed is unknown, defaulting to 1000
[  277.316996][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.327588][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.517853][T12390] hsr0 speed is unknown, defaulting to 1000
[  277.602629][T12414] ip6_vti0 speed is unknown, defaulting to 1000
[  277.650465][T12416] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  277.712859][T12414] hsr0 speed is unknown, defaulting to 1000
[  278.003442][T12426] __nla_validate_parse: 17 callbacks suppressed
[  278.003452][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'.
[  278.008383][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'.
[  278.055419][T12428] netlink: 'syz.0.1606': attribute type 13 has an invalid length.
[  278.061116][T12428] netlink: 'syz.0.1606': attribute type 17 has an invalid length.
[  278.072826][T12428] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.076786][T12428] 8021q: adding VLAN 0 to HW filter on device team0
[  278.083192][T12428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.109927][T12428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.113913][T12428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.119031][T12428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  278.123378][T12428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.144205][T12428] veth1_vlan: left promiscuous mode
[  278.146702][T12428] veth0_vlan: left promiscuous mode
[  278.149685][T12428] veth0_vlan: entered promiscuous mode
[  278.155053][T12428] veth1_vlan: entered promiscuous mode
[  278.160268][T12428] veth1_macvtap: left promiscuous mode
[  278.163038][T12428] veth0_macvtap: left promiscuous mode
[  278.165529][T12428] veth0_macvtap: entered promiscuous mode
[  278.168012][T12428] veth1_macvtap: entered promiscuous mode
[  278.174063][T12428] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  278.177020][T12428] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  278.180197][T12428] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  278.183084][T12428] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  278.187354][T12428] 8021q: adding VLAN 0 to HW filter on device bond1
[  280.899828][T12428] rose0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  280.913895][T12428] veth0_to_team: entered promiscuous mode
[  280.918757][T12428] 8021q: adding VLAN 0 to HW filter on device bond2
[  280.922775][T12428] 8021q: adding VLAN 0 to HW filter on device bond3
[  280.964636][T12428] 8021q: adding VLAN 0 to HW filter on device bond4
[  280.968743][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.971199][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.982270][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.984886][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.995497][T12428] syz.0.1606 (12428) used greatest stack depth: 17928 bytes left
[  281.065015][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.072332][T12452] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1612'.
[  281.091016][ T7765] hsr0 speed is unknown, defaulting to 1000
[  281.094538][ T7765] syz0: Port: 1 Link ACTIVE
[  281.096729][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.104737][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.119103][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.135251][T12449] ip6_vti0 speed is unknown, defaulting to 1000
[  281.306218][T12449] hsr0 speed is unknown, defaulting to 1000
[  281.452236][T12472] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  281.461728][T12472] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  281.550742][T12480] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  281.607908][T12480] macsec0: entered promiscuous mode
[  281.685274][T12484] ip6_vti0 speed is unknown, defaulting to 1000
[  281.780894][T12486] vlan2: entered promiscuous mode
[  281.866091][T12484] hsr0 speed is unknown, defaulting to 1000
[  282.025010][T12495] ip6_vti0 speed is unknown, defaulting to 1000
[  282.196847][T12495] hsr0 speed is unknown, defaulting to 1000
[  282.429290][T12518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1624'.
[  283.031143][T12543] ip6_vti0 speed is unknown, defaulting to 1000
[  283.052369][T12545] openvswitch: netlink: IP tunnel dst address not specified
[  283.282373][T12548] veth1_macvtap: left promiscuous mode
[  283.284175][T12548] macsec0: entered promiscuous mode
[  283.288931][T12543] hsr0 speed is unknown, defaulting to 1000
[  283.289153][T12548] veth1_macvtap: entered promiscuous mode
[  283.302842][T12548] macsec0: left promiscuous mode
[  283.308589][T12548] netlink: 'syz.0.1629': attribute type 1 has an invalid length.
[  283.404130][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'.
[  283.565061][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'.
[  283.659025][T12567] macsec1: entered promiscuous mode
[  283.824072][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'.
[  283.830062][T12573] netlink: 'syz.2.1636': attribute type 13 has an invalid length.
[  283.833480][T12573] netlink: 'syz.2.1636': attribute type 17 has an invalid length.
[  283.872190][T12573] 8021q: adding VLAN 0 to HW filter on device 
[  283.876472][T12573] 8021q: adding VLAN 0 to HW filter on device team0
[  283.885522][T12573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.916249][T12573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.920923][T12573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.928800][T12573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  283.934571][T12573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  283.943292][T12573] veth1_vlan: left promiscuous mode
[  283.946677][T12573] veth0_vlan: left promiscuous mode
[  283.950469][T12573] veth0_vlan: entered promiscuous mode
[  283.955937][T12573] veth1_vlan: entered promiscuous mode
[  283.966409][T12573] veth0_macvtap: left promiscuous mode
[  283.972745][T12573] veth0_macvtap: entered promiscuous mode
[  283.976192][T12573] veth1_macvtap: entered promiscuous mode
[  283.978675][T12573] macsec0: left promiscuous mode
[  283.989436][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'.
[  284.012567][T12573] gtp0: left promiscuous mode
[  285.374593][T12573] rose0: refused to change device tx_queue_len
[  285.381280][T12573] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check.
[  285.392843][T12573] syz.2.1636 (12573) used greatest stack depth: 16472 bytes left
[  285.422776][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.425620][ T6749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.446117][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.448898][ T6749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.507106][ T5813] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  285.514463][ T5813] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  285.526986][T12579] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  285.578337][T12584] netlink: 'syz.0.1638': attribute type 13 has an invalid length.
[  285.590657][T12584] netlink: 'syz.0.1638': attribute type 17 has an invalid length.
[  285.608739][T12583] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.611013][T12583] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.882416][T12583] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.897776][T12583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.941697][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1639'.
[  285.995157][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'.
[  286.195203][ T5813] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  286.202567][ T5813] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  286.214559][ T5671] hsr0 speed is unknown, defaulting to 1000
[  286.215060][T12591] hsr0: entered promiscuous mode
[  286.222966][ T5671] syz0: Port: 1 Link DOWN
[  286.244936][T12592] hsr_slave_0: left promiscuous mode
[  286.260291][T12592] hsr_slave_1: left promiscuous mode
[  286.281358][T12592] hsr0 (unregistering): left promiscuous mode
[  286.310656][ T5813] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.337303][ T5813] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.341684][ T5813] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.369867][ T5813] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.526455][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'.
[  286.526655][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'.
[  286.618023][T12612] xt_NFQUEUE: number of total queues is 0
[  286.694762][T12614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1642'.
[  286.827343][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'.
[  286.867911][T12617] gtp1: entered promiscuous mode
[  286.875984][T12617] gtp1: entered allmulticast mode
[  286.991640][T12623] ip6_vti0 speed is unknown, defaulting to 1000
[  287.064715][T12630] Can't find ip_set type hash:ip,por
[  287.332796][T12623] hsr0 speed is unknown, defaulting to 1000
[  287.523664][T12647] ip6_vti0 speed is unknown, defaulting to 1000
[  287.732329][T12647] hsr0 speed is unknown, defaulting to 1000
[  288.258683][T12666] ip6_vti0 speed is unknown, defaulting to 1000
[  288.716750][T12675] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.719185][T12675] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.784264][T12676] netlink: 'syz.2.1655': attribute type 13 has an invalid length.
[  288.790386][T12676] netlink: 'syz.2.1655': attribute type 17 has an invalid length.
[  288.794816][T12675] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.799165][T12675] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.883834][T12666] hsr0 speed is unknown, defaulting to 1000
[  288.932399][T12676] 8021q: adding VLAN 0 to HW filter on device 
[  288.936388][T12676] 8021q: adding VLAN 0 to HW filter on device team0
[  288.944596][T12676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.970473][T12675] __nla_validate_parse: 1 callbacks suppressed
[  288.970485][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  288.980499][T12676] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.983562][T12676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.989655][T12676] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.992454][T12676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.004703][T12676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.011473][T12676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.045942][T12676] veth1_vlan: left promiscuous mode
[  289.048631][T12676] veth0_vlan: left promiscuous mode
[  289.052261][T12676] veth0_vlan: entered promiscuous mode
[  289.058047][T12676] veth1_vlan: entered promiscuous mode
[  289.073306][T12676] veth1_macvtap: left promiscuous mode
[  289.076473][T12676] veth0_macvtap: left promiscuous mode
[  289.082471][T12676] veth0_macvtap: entered promiscuous mode
[  289.089100][T12676] veth1_macvtap: entered promiscuous mode
[  291.381410][T12676] rose0: refused to change device tx_queue_len
[  291.384392][T12676] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check.
[  291.390702][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  291.402824][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  291.762473][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  291.775123][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  292.002359][T12683] ip6_vti0 speed is unknown, defaulting to 1000
[  294.922355][T12683] hsr0 speed is unknown, defaulting to 1000
[  298.233274][ T5057] udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-1000
[  298.253493][ T5057] CPU: 1 UID: 0 PID: 5057 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  298.253517][ T5057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.253526][ T5057] Call Trace:
[  298.253532][ T5057]  <TASK>
[  298.253538][ T5057]  dump_stack_lvl+0xe8/0x150
[  298.253565][ T5057]  dump_header+0xd3/0x4c0
[  298.253587][ T5057]  oom_kill_process+0x3ab/0x970
[  298.253608][ T5057]  out_of_memory+0x106c/0x1410
[  298.253661][ T5057]  ? __pfx_out_of_memory+0x10/0x10
[  298.253687][ T5057]  __alloc_pages_may_oom+0x1ea/0x330
[  298.253705][ T5057]  ? lockdep_hardirqs_on+0x7a/0x110
[  298.253722][ T5057]  ? __pfx___alloc_pages_may_oom+0x10/0x10
[  298.253738][ T5057]  ? unreserve_highatomic_pageblock+0x3e3/0x610
[  298.253766][ T5057]  __alloc_pages_slowpath+0x6c2/0xd40
[  298.253801][ T5057]  __alloc_frozen_pages_noprof+0x322/0x380
[  298.253821][ T5057]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  298.253843][ T5057]  ? __pfx_policy_nodemask+0x10/0x10
[  298.253870][ T5057]  alloc_pages_mpol+0x235/0x490
[  298.253893][ T5057]  folio_alloc_mpol_noprof+0x39/0x160
[  298.253918][ T5057]  swap_cache_alloc_folio+0xd5/0x240
[  298.253942][ T5057]  swap_cluster_readahead+0x523/0x670
[  298.253998][ T5057]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  298.254024][ T5057]  ? get_vma_policy+0x27b/0x3c0
[  298.254049][ T5057]  swapin_readahead+0x196/0xc50
[  298.254068][ T5057]  ? swap_table_get+0x1e/0x260
[  298.254080][ T5057]  ? __pfx_swapin_readahead+0x10/0x10
[  298.254090][ T5057]  ? swap_table_get+0x1e/0x260
[  298.254098][ T5057]  ? swap_table_get+0x1e/0x260
[  298.254105][ T5057]  ? swap_table_get+0x1e/0x260
[  298.254114][ T5057]  ? swap_table_get+0x216/0x260
[  298.254122][ T5057]  ? swap_cache_get_folio+0x2e4/0x2f0
[  298.254134][ T5057]  do_swap_page+0x555/0x5120
[  298.254147][ T5057]  ? __pte_offset_map+0x29/0x240
[  298.254158][ T5057]  ? __pte_offset_map+0x29/0x240
[  298.254171][ T5057]  ? do_swap_page+0x128/0x5120
[  298.254179][ T5057]  ? __pfx_do_swap_page+0x10/0x10
[  298.254187][ T5057]  ? __pte_offset_map+0x1ae/0x240
[  298.254197][ T5057]  ? pte_offset_map_rw_nolock+0xea/0x160
[  298.254208][ T5057]  handle_mm_fault+0x12d2/0x3170
[  298.254224][ T5057]  ? handle_mm_fault+0xee/0x3170
[  298.254236][ T5057]  ? __pfx_handle_mm_fault+0x10/0x10
[  298.254250][ T5057]  ? irqentry_exit+0x2eb/0x730
[  298.254262][ T5057]  ? lock_mm_and_find_vma+0xa7/0x340
[  298.254279][ T5057]  do_user_addr_fault+0x75b/0x1340
[  298.254296][ T5057]  exc_page_fault+0x6a/0xc0
[  298.254306][ T5057]  asm_exc_page_fault+0x26/0x30
[  298.254314][ T5057] RIP: 0010:rseq_set_ids_get_csaddr+0x86/0x460
[  298.254330][ T5057] Code: f0 ff ff ff 7f 00 00 48 89 ea 48 39 c2 48 0f 47 d0 0f 1f 00 49 89 de 49 c1 ee 03 43 0f b6 04 2e 84 c0 0f 85 dc 00 00 00 8b 03 <89> 02 4c 8d 62 04 43 0f b6 04 2e 84 c0 0f 85 ea 00 00 00 8b 03 41
[  298.254337][ T5057] RSP: 0000:ffffc9000277fe38 EFLAGS: 00010246
[  298.254346][ T5057] RAX: 0000000000000001 RBX: ffffc9000277fe98 RCX: ffff888114031d80
[  298.254352][ T5057] RDX: 00007f824a539620 RSI: ffffc9000277fe98 RDI: ffff888114031d80
[  298.254358][ T5057] RBP: 00007f824a539620 R08: ffffffff903096f7 R09: 1ffffffff20612de
[  298.254364][ T5057] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffff888114033380
[  298.254369][ T5057] R13: dffffc0000000000 R14: 1ffff920004effd3 R15: ffffc9000277fea0
[  298.254383][ T5057]  ? rseq_set_ids_get_csaddr+0x59/0x460
[  298.254397][ T5057]  __rseq_handle_slowpath+0x165/0x310
[  298.254412][ T5057]  irqentry_exit+0x293/0x730
[  298.254420][ T5057]  ? trace_irq_disable+0x3b/0x140
[  298.254436][ T5057]  asm_exc_page_fault+0x26/0x30
[  298.254443][ T5057] RIP: 0033:0x7f824a0c888d
[  298.254460][ T5057] Code: Unable to access opcode bytes at 0x7f824a0c8863.
[  298.254464][ T5057] RSP: 002b:00007ffc5d9e9ad0 EFLAGS: 00010202
[  298.254470][ T5057] RAX: 0000000000000004 RBX: 00000000000200e0 RCX: 00007f824a1f1ac0
[  298.254475][ T5057] RDX: 000000055b627854 RSI: 00007f824a1f1ab0 RDI: 0000000000000002
[  298.254480][ T5057] RBP: 00007f824a1f1aa0 R08: 000055b6278544e0 R09: fffffffffffffe98
[  298.254486][ T5057] R10: 00007f824a0d7e60 R11: 0000000000000000 R12: 00007f824a1f1aa0
[  298.254491][ T5057] R13: 000055b6279aef20 R14: 0000000000000030 R15: 000055b61ca5a401
[  298.254504][ T5057]  </TASK>
[  298.254543][ T5057] Mem-Info:
[  298.598575][ T5057] active_anon:17 inactive_anon:32 isolated_anon:0
[  298.598575][ T5057]  active_file:142 inactive_file:38 isolated_file:0
[  298.598575][ T5057]  unevictable:1768 dirty:0 writeback:0
[  298.598575][ T5057]  slab_reclaimable:10616 slab_unreclaimable:1175142
[  298.598575][ T5057]  mapped:15364 shmem:1768 pagetables:976
[  298.598575][ T5057]  sec_pagetables:0 bounce:0
[  298.598575][ T5057]  kernel_misc_reclaimable:0
[  298.598575][ T5057]  free:33273 free_pcp:156 free_cma:0
[  298.636272][ T5057] Node 0 active_anon:52kB inactive_anon:72kB active_file:0kB inactive_file:40kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32780kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7840kB pagetables:1892kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  298.680505][ T5057] Node 1 active_anon:144kB inactive_anon:24kB active_file:564kB inactive_file:132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28676kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4672kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  298.724109][ T5057] Node 0 DMA free:8696kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.767818][ T5057] lowmem_reserve[]: 0 1587 2117 2117 2117
[  298.777964][ T5057] Node 0 DMA32 free:29196kB boost:6144kB min:31156kB low:37408kB high:43660kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:152kB present:2080636kB managed:1625428kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.816944][ T5057] lowmem_reserve[]: 0 0 530 530 530
[  298.823021][ T5057] Node 0 Normal free:18668kB boost:10240kB min:18752kB low:20880kB high:23008kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:72kB active_file:0kB inactive_file:40kB unevictable:3536kB writepending:0kB zspages:2972kB present:1572868kB managed:543156kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.865675][ T5057] lowmem_reserve[]: 0 0 0 0 0
[  298.871957][ T5057] Node 1 Normal free:76452kB boost:20480kB min:76824kB low:90908kB high:104992kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:128kB active_file:280kB inactive_file:364kB unevictable:3536kB writepending:0kB zspages:3028kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB
[  298.917031][ T5057] lowmem_reserve[]: 0 0 0 0 0
[  298.923319][ T5057] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 2*64kB (U) 3*128kB (U) 2*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 8708kB
[  298.943526][ T5057] Node 0 DMA32: 711*4kB (UE) 552*8kB (UE) 391*16kB (UE) 333*32kB (UE) 58*64kB (UE) 7*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29292kB
[  298.959566][ T5057] Node 0 Normal: 274*4kB (UM) 283*8kB (UM) 244*16kB (UM) 248*32kB (UM) 13*64kB (UM) 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 18720kB
[  298.983275][ T5057] Node 1 Normal: 116*4kB (UM) 822*8kB (UME) 1173*16kB (UME) 310*32kB (UME) 419*64kB (UME) 74*128kB (UM) 18*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 76624kB
[  299.003035][ T5057] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  299.015443][ T5057] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  299.032510][ T5057] 1938 total pagecache pages
[  299.040283][ T5057] 72 pages in swap cache
[  299.046799][ T5057] Free swap  = 104208kB
[  299.055005][ T5057] Total swap = 124996kB
[  299.063804][ T5057] 1834877 pages RAM
[  299.070419][ T5057] 0 pages HighMem/MovableOnly
[  299.078377][ T5057] 390220 pages reserved
[  299.085015][ T5057] 0 pages cma reserved
[  299.092502][ T5057] Unreclaimable slab info:
[  299.113310][ T5057] Name                      Used          Total
[  299.130743][ T5057] pid_2                    110KB        149KB
[  299.140536][ T5057] bio-464                   17KB         22KB
[  299.162184][ T5057] bio-528                   21KB         31KB
[  299.174359][ T5057] bio-544                   21KB         31KB
[  299.184243][ T5057] bio-552                   21KB         31KB
[  299.193138][ T5057] zswap_entry              516KB        517KB
[  299.204365][ T5057] AF_VSOCK                  27KB         63KB
[  299.213033][ T5057] sw_flow_stats              5KB          8KB
[  299.224309][ T5057] sw_flow                   27KB         63KB
[  299.234966][ T5057] batadv_tt_change_cache          1KB          8KB
[  299.246598][ T5057] batadv_tl_cache           12KB         16KB
[  299.254486][ T5057] IEEE-802.15.4-MAC         14KB         61KB
[  299.266684][ T5057] IEEE-802.15.4-RAW         16KB         63KB
[  299.278213][ T5057] INET6_SMC                 71KB        117KB
[  299.287491][ T5057] SMC6                      43KB        187KB
[  299.300776][ T5057] SMC                       37KB        250KB
[  299.311433][ T5057] TIPC                      41KB        191KB
[  299.318066][ T5057] rds_tcp_connection         21KB         31KB
[  299.328752][ T5057] RDS                       14KB        127KB
[  299.339538][ T5057] rds_connection            17KB         22KB
[  299.349647][ T5057] SCTPv6                    80KB        247KB
[  299.359842][ T5057] SCTP                      47KB        189KB
[  299.363816][ T5057] sctp_chunk                20KB         63KB
[  299.369497][ T5057] sctp_bind_bucket           4KB         12KB
[  299.376451][ T5057] PNPIPE                     9KB         92KB
[  299.386272][ T5057] PHONET                    30KB         63KB
[  299.396520][ T5057] L2TP/IPv6                 33KB         63KB
[  299.404164][ T5057] L2TP/IP                   31KB         63KB
[  299.415074][ T5057] KCM                       14KB        128KB
[  299.424157][ T5057] kcm_mux                   48KB         78KB
[  299.435323][ T5057] RXRPC                     36KB        128KB
[  299.446207][ T5057] rxrpc_call_jar           228KB        350KB
[  299.453573][ T5057] can_receiver               6KB         23KB
[  299.461511][ T5057] net_bridge_fdb_entry         29KB         32KB
[  299.469909][ T5057] xfrm6_tunnel_spi           7KB          8KB
[  299.479056][ T5057] MPTCPv6                   45KB        117KB
[  299.488834][ T5057] fib6_node                125KB        132KB
[  299.495944][ T5057] ip6_dst_cache            163KB        173KB
[  299.507209][ T5057] mfc6_cache                14KB         16KB
[  299.514492][ T5057] PINGv6                     6KB         63KB
[  299.524792][ T5057] RAWv6                    214KB        318KB
[  299.531378][ T5057] UDPv6                    137KB        252KB
[  299.537783][ T5057] TCPv6                    384KB        577KB
[  299.548469][ T5057] nf_conntrack               9KB         47KB
[  299.554913][ T5057] fq_flow_cache              8KB         32KB
[  299.561296][ T5057] wg_peer                   86KB         89KB
[  299.569632][ T5057] allowedips_node           11KB         15KB
[  299.574816][ T5057] t10_alua_lu_gp_cache          8KB         11KB
[  299.579791][ T5057] scsi_sense_cache          45KB         48KB
[  299.587343][ T5057] virtio_scsi_cmd           21KB         24KB
[  299.594757][ T5057] bio-136                   43KB         52KB
[  299.605814][ T5057] bio-264                   10KB         15KB
[  299.612318][ T5057] mqueue_inode_cache         47KB        185KB
[  299.621219][ T5057] f2fs_bio_post_read_ctx         30KB         31KB
[  299.630233][ T5057] jfs_mp                    14KB         15KB
[  299.636943][ T5057] cifs_small_rq             28KB         32KB
[  299.648037][ T5057] cifs_request              67KB         67KB
[  299.655054][ T5057] cifs_mpx_ids              10KB         15KB
[  299.665576][ T5057] cifs_io_subrequest         42KB         47KB
[  299.672530][ T5057] cifs_io_request          108KB        112KB
[  299.682077][ T5057] nfs_commit_data           24KB         31KB
[  299.690959][ T5057] nfs_write_data            40KB         47KB
[  299.699458][ T5057] jbd2_inode                11KB         15KB
[  299.710651][ T5057] ext4_system_zone           1KB          3KB
[  299.716183][ T5057] ext4_io_end_vec            4KB         11KB
[  299.727555][ T5057] fasync_cache              19KB         23KB
[  299.735589][ T5057] zspage                   144KB        145KB
[  299.743685][ T5057] zs_handle                186KB        192KB
[  299.754518][ T5057] pid_namespace             34KB         92KB
[  299.764637][ T5057] rpc_buffers               25KB         31KB
[  299.772105][ T5057] rpc_tasks                 10KB         15KB
[  299.780996][ T5057] UNIX-STREAM               76KB        255KB
[  299.788695][ T5057] UNIX                     140KB        286KB
[  299.794867][ T5057] ip4-frags                 10KB         15KB
[  299.806868][ T5057] mfc_cache                 13KB         16KB
[  299.816953][ T5057] MPTCP                     46KB        187KB
[  299.825708][ T5057] tcp_bind2_bucket          15KB         32KB
[  299.834777][ T5057] tcp_bind_bucket           29KB         36KB
[  299.841412][ T5057] inet_peer                  7KB          8KB
[  299.849189][ T5057] xfrm_state                 5KB         31KB
[  299.858839][ T5057] ip_fib_trie               15KB         24KB
[  299.867534][ T5057] ip_fib_alias              66KB         79KB
[  299.874411][ T5057] rtable                    17KB         52KB
[  299.884163][ T5057] PING                      35KB         63KB
[  299.891037][ T5057] RAW                      120KB        255KB
[  299.899443][ T5057] UDP                      112KB        255KB
[  299.908740][ T5057] tw_sock_TCP                9KB         15KB
[  299.917428][ T5057] request_sock_TCP           8KB         15KB
[  299.926485][ T5057] TCP                      861KB       1199KB
[  299.935229][ T5057] fs_bio_integrity           7KB          8KB
[  299.945517][ T5057] hugetlbfs_inode_cache         15KB         31KB
[  299.953936][ T5057] netfs_subrequest          42KB         47KB
[  299.962514][ T5057] netfs_request            108KB        112KB
[  299.969515][ T5057] bio-280                   21KB         23KB
[  299.978656][ T5057] ep_head                    2KB         20KB
[  299.987932][ T5057] eventpoll_pwq              7KB         31KB
[  299.997389][ T5057] eventpoll_epi             25KB         32KB
[  300.008275][ T5057] inotify_inode_mark         19KB         39KB
[  300.020135][ T5057] sgpool-128               909KB        952KB
[  300.027960][ T5057] sgpool-64                556KB        605KB
[  300.034466][ T5057] sgpool-32                228KB        252KB
[  300.045261][ T5057] sgpool-16                105KB        112KB
[  300.054336][ T5057] sgpool-8                 113KB        118KB
[  300.063829][ T5057] bio_crypt_ctx              9KB         11KB
[  300.071179][ T5057] bio_integrity_data          7KB          8KB
[  300.080116][ T5057] request_queue            190KB        211KB
[  300.087865][ T5057] blkdev_ioc                 8KB         11KB
[  300.095374][ T5057] bio-200                  760KB        779KB
[  300.105982][ T5057] biovec-max               837KB        892KB
[  300.114306][ T5057] biovec-128               350KB        382KB
[  300.120843][ T5057] biovec-64                407KB        409KB
[  300.131887][ T5057] biovec-16                120KB        141KB
[  300.138185][ T5057] uid_cache                 19KB         31KB
[  300.144695][ T5057] dmaengine-unmap-256         27KB         31KB
[  300.156340][ T5057] dmaengine-unmap-128         15KB         15KB
[  300.162719][ T5057] dmaengine-unmap-16          7KB          8KB
[  300.172395][ T5057] dmaengine-unmap-2          3KB          4KB
[  300.179545][ T5057] QIPCRTR                   14KB         61KB
[  300.186268][ T5057] audit_buffer              22KB         23KB
[  300.197615][ T5057] skbuff_ext_cache          11KB         28KB
[  300.203831][ T5057] skbuff_small_head       6346KB       6574KB
[  300.213891][ T5057] skbuff_fclone_cache        227KB        337KB
[  300.222090][ T5057] skbuff_head_cache       3856KB       4047KB
[  300.228575][ T5057] configfs_dir_cache         15KB         16KB
[  300.239451][ T5057] file_lock_cache            8KB         35KB
[  300.246093][ T5057] file_lock_ctx             20KB         23KB
[  300.256400][ T5057] fsnotify_inode_mark_connector         16KB         39KB
[  300.266287][ T5057] taskstats                 81KB        127KB
[  300.275877][ T5057] mem_cgroup_per_node         72KB         95KB
[  300.283278][ T5057] mem_cgroup                84KB        126KB
[  300.294357][ T5057] proc_dir_entry          1216KB       1338KB
[  300.300964][ T5057] pde_opener                 8KB         23KB
[  300.308929][ T5057] seq_file                  31KB         43KB
[  300.318849][ T5057] sigqueue                  29KB         66KB
[  300.325940][ T5057] shmem_inode_cache       7089KB       7504KB
[  300.336278][ T5057] kernfs_iattrs_cache         12KB         15KB
[  300.343857][ T5057] kernfs_node_cache      39482KB      39521KB
[  300.352841][ T5057] mnt_cache                134KB        160KB
[  300.361053][ T5057] filp                    1622KB       1912KB
[  300.370995][ T5057] names_cache             1289KB       1392KB
[  300.380103][ T5057] net_namespace            213KB        377KB
[  300.388255][ T5057] ima_iint_cache            36KB         46KB
[  300.399881][ T5057] lsm_inode_cache         2629KB       2748KB
[  300.404535][ T5057] lsm_file_cache           536KB        637KB
[  300.412968][ T5057] key_jar                   28KB         32KB
[  300.424189][ T5057] uts_namespace             60KB        108KB
[  300.430920][ T5057] nsproxy                   17KB         31KB
[  300.441961][ T5057] vm_area_struct          3105KB       3425KB
[  300.448826][ T5057] fs_cache                  50KB         76KB
[  300.456186][ T5057] files_cache              175KB        272KB
[  300.466671][ T5057] signal_cache            1057KB       1657KB
[  300.475109][ T5057] sighand_cache           1334KB       1790KB
[  300.484889][ T5057] task_struct             5450KB       5929KB
[  300.492761][ T5057] cred                     187KB        340KB
[  300.502174][ T5057] anon_vma_chain           465KB        539KB
[  300.508700][ T5057] anon_vma                 564KB        649KB
[  300.515591][ T5057] pid                      196KB        378KB
[  300.524957][ T5057] Acpi-Operand             172KB        245KB
[  300.535385][ T5057] Acpi-ParseExt              3KB         19KB
[  300.543546][ T5057] Acpi-Parse                 2KB         19KB
[  300.550620][ T5057] Acpi-State                 6KB         19KB
[  300.560253][ T5057] Acpi-Namespace            18KB         24KB
[  300.571060][ T5057] numa_policy                3KB          4KB
[  300.581502][ T5057] perf_event                15KB         31KB
[  300.592659][ T5057] trace_event_file         540KB        540KB
[  300.600335][ T5057] ftrace_event_field       1031KB       1031KB
[  300.611453][ T5057] pool_workqueue           710KB        752KB
[  300.618140][ T5057] task_group                49KB         63KB
[  300.628968][ T5057] maple_node              3641KB       4088KB
[  300.635814][ T5057] mm_struct                545KB        735KB
[  300.644573][ T5057] vmap_area                764KB        768KB
[  300.651551][ T5057] debug_objects_cache       2216KB       2463KB
[  300.657951][ T5057] page->ptl                306KB        397KB
[  300.667010][ T5057] kmalloc-cg-8k           1904KB       2080KB
[  300.676626][ T5057] kmalloc-cg-4k          14824KB      16032KB
[  300.684654][ T5057] kmalloc-cg-2k           9644KB      10784KB
[  300.693836][ T5057] kmalloc-cg-1k           2466KB       3104KB
[  300.702839][ T5057] kmalloc-cg-512          1388KB       1424KB
[  300.713905][ T5057] kmalloc-cg-256           467KB        568KB
[  300.728649][ T5057] kmalloc-cg-128           244KB        276KB
[  300.737509][ T5057] kmalloc-cg-64             68KB        116KB
[  300.752405][ T5057] kmalloc-cg-32             55KB        160KB
[  300.760408][ T5057] kmalloc-cg-16             13KB         32KB
[  300.769599][ T5057] kmalloc-cg-8              21KB         36KB
[  300.778199][ T5057] kmalloc-cg-192           109KB        140KB
[  300.787593][ T5057] kmalloc-cg-96             90KB        120KB
[  300.796589][ T5057] kmalloc-8k             17312KB      17600KB
[  300.807569][ T5057] kmalloc-4k             57384KB      60520KB
[  300.814923][ T5057] kmalloc-2k             22232KB      22656KB
[  300.829452][ T5057] kmalloc-1k              7746KB       8576KB
[  300.844515][ T5057] kmalloc-512            13927KB      15504KB
[  300.857491][ T5057] kmalloc-256             7860KB       7860KB
[  300.868962][ T5057] kmalloc-128             1675KB       2128KB
[  300.882592][ T5057] kmalloc-64              9441KB       9520KB
[  300.894762][ T5057] kmalloc-32              3324KB       3624KB
[  300.905058][ T5057] kmalloc-16               451KB        456KB
[  300.914654][ T5057] kmalloc-8               2172KB       2228KB
[  300.928840][ T5057] kmalloc-192             1920KB       2160KB
[  300.936921][ T5057] kmalloc-96              3062KB       3084KB
[  300.948582][ T5057] kmem_cache_node          210KB        212KB
[  300.959763][ T5057] kmem_cache               175KB        183KB
[  300.971158][ T5057] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz-executor,pid=5617,uid=0
[  300.994538][ T5057] Out of memory: Killed process 5617 (syz-executor) total-vm:98188kB, anon-rss:0kB, file-rss:20492kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0
[  301.069590][ T5353] dhcpcd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0
[  301.084666][ T5353] CPU: 0 UID: 101 PID: 5353 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) 
[  301.084704][ T5353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.084711][ T5353] Call Trace:
[  301.084715][ T5353]  <TASK>
[  301.084720][ T5353]  dump_stack_lvl+0xe8/0x150
[  301.084737][ T5353]  dump_header+0xd3/0x4c0
[  301.084753][ T5353]  oom_kill_process+0x3ab/0x970
[  301.084769][ T5353]  out_of_memory+0x1141/0x1410
[  301.084791][ T5353]  ? __pfx_out_of_memory+0x10/0x10
[  301.084812][ T5353]  __alloc_pages_may_oom+0x1ea/0x330
[  301.084831][ T5353]  ? lockdep_hardirqs_on+0x7a/0x110
[  301.084847][ T5353]  ? __pfx___alloc_pages_may_oom+0x10/0x10
[  301.084856][ T5353]  ? unreserve_highatomic_pageblock+0x3e3/0x610
[  301.084873][ T5353]  __alloc_pages_slowpath+0x6c2/0xd40
[  301.084896][ T5353]  __alloc_frozen_pages_noprof+0x322/0x380
[  301.084909][ T5353]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  301.084923][ T5353]  ? __pfx_policy_nodemask+0x10/0x10
[  301.084941][ T5353]  alloc_pages_mpol+0x235/0x490
[  301.084955][ T5353]  folio_alloc_mpol_noprof+0x39/0x160
[  301.084967][ T5353]  swap_cache_alloc_folio+0xd5/0x240
[  301.084980][ T5353]  swap_cluster_readahead+0x523/0x670
[  301.084992][ T5353]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  301.085006][ T5353]  ? get_vma_policy+0x27b/0x3c0
[  301.085019][ T5353]  swapin_readahead+0x196/0xc50
[  301.085030][ T5353]  ? swap_table_get+0x1e/0x260
[  301.085041][ T5353]  ? __pfx_swapin_readahead+0x10/0x10
[  301.085052][ T5353]  ? swap_table_get+0x1e/0x260
[  301.085065][ T5353]  ? swap_table_get+0x1e/0x260
[  301.085078][ T5353]  ? swap_table_get+0x1e/0x260
[  301.085088][ T5353]  ? swap_table_get+0x216/0x260
[  301.085104][ T5353]  ? swap_cache_get_folio+0x2e4/0x2f0
[  301.085123][ T5353]  do_swap_page+0x555/0x5120
[  301.085141][ T5353]  ? __pte_offset_map+0x29/0x240
[  301.085153][ T5353]  ? __pte_offset_map+0x29/0x240
[  301.085181][ T5353]  ? do_swap_page+0x128/0x5120
[  301.085192][ T5353]  ? __pfx_do_swap_page+0x10/0x10
[  301.085199][ T5353]  ? __pte_offset_map+0x1ae/0x240
[  301.085210][ T5353]  ? pte_offset_map_rw_nolock+0xea/0x160
[  301.085221][ T5353]  handle_mm_fault+0x12d2/0x3170
[  301.085237][ T5353]  ? handle_mm_fault+0xee/0x3170
[  301.085249][ T5353]  ? __pfx_handle_mm_fault+0x10/0x10
[  301.085264][ T5353]  ? irqentry_exit+0x2eb/0x730
[  301.085275][ T5353]  ? lock_mm_and_find_vma+0xa7/0x340
[  301.085289][ T5353]  do_user_addr_fault+0x75b/0x1340
[  301.085305][ T5353]  exc_page_fault+0x6a/0xc0
[  301.085314][ T5353]  asm_exc_page_fault+0x26/0x30
[  301.085323][ T5353] RIP: 0010:rseq_set_ids_get_csaddr+0x86/0x460
[  301.085339][ T5353] Code: f0 ff ff ff 7f 00 00 48 89 ea 48 39 c2 48 0f 47 d0 0f 1f 00 49 89 de 49 c1 ee 03 43 0f b6 04 2e 84 c0 0f 85 dc 00 00 00 8b 03 <89> 02 4c 8d 62 04 43 0f b6 04 2e 84 c0 0f 85 ea 00 00 00 8b 03 41
[  301.085346][ T5353] RSP: 0000:ffffc90003a87e38 EFLAGS: 00010246
[  301.085355][ T5353] RAX: 0000000000000000 RBX: ffffc90003a87e98 RCX: ffff888175b23b00
[  301.085361][ T5353] RDX: 00007fed73cac0e0 RSI: ffffc90003a87e98 RDI: ffff888175b23b00
[  301.085366][ T5353] RBP: 00007fed73cac0e0 R08: ffffffff903096f7 R09: 1ffffffff20612de
[  301.085372][ T5353] R10: dffffc0000000000 R11: fffffbfff20612df R12: ffff888175b25100
[  301.085379][ T5353] R13: dffffc0000000000 R14: 1ffff92000750fd3 R15: ffffc90003a87ea0
[  301.085393][ T5353]  ? rseq_set_ids_get_csaddr+0x59/0x460
[  301.085407][ T5353]  __rseq_handle_slowpath+0x165/0x310
[  301.085420][ T5353]  irqentry_exit+0x293/0x730
[  301.085428][ T5353]  ? trace_irq_disable+0x3b/0x140
[  301.085443][ T5353]  asm_exc_page_fault+0x26/0x30
[  301.085451][ T5353] RIP: 0033:0x7fed73d36503
[  301.085466][ T5353] Code: Unable to access opcode bytes at 0x7fed73d364d9.
[  301.085470][ T5353] RSP: 002b:00007ffff8a581b8 EFLAGS: 00010287
[  301.085476][ T5353] RAX: 0000000000000efc RBX: 0000000000000000 RCX: 0000000000000000
[  301.085481][ T5353] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 000055578d932efc
[  301.085486][ T5353] RBP: 00007ffff8a586e0 R08: 0000000000000000 R09: 0000000000000000
[  301.085491][ T5353] R10: 000055578d932efc R11: 0000000000000217 R12: 00007ffff8a58c90
[  301.085496][ T5353] R13: 00000000fbad8001 R14: 00007ffff8a58c90 R15: 00007ffff8a587d0
[  301.085513][ T5353]  </TASK>
[  301.085548][ T5353] Mem-Info:
[  301.468973][ T5353] active_anon:15 inactive_anon:57 isolated_anon:0
[  301.468973][ T5353]  active_file:0 inactive_file:11 isolated_file:0
[  301.468973][ T5353]  unevictable:1768 dirty:0 writeback:0
[  301.468973][ T5353]  slab_reclaimable:10614 slab_unreclaimable:1175131
[  301.468973][ T5353]  mapped:15363 shmem:1768 pagetables:955
[  301.468973][ T5353]  sec_pagetables:0 bounce:0
[  301.468973][ T5353]  kernel_misc_reclaimable:0
[  301.468973][ T5353]  free:33065 free_pcp:583 free_cma:0
[  301.527195][ T5353] Node 0 active_anon:8kB inactive_anon:120kB active_file:108kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32780kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7816kB pagetables:1808kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  301.574722][ T5353] Node 1 active_anon:4kB inactive_anon:160kB active_file:0kB inactive_file:56kB unevictable:1736kB isolated(anon):1700kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4672kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  301.613645][ T5353] Node 0 DMA free:8708kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  301.665549][ T5353] lowmem_reserve[]: 0 1587 2117 2117 2117
[  301.672858][ T5353] Node 0 DMA32 free:29980kB boost:6144kB min:31156kB low:37408kB high:43660kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:152kB present:2080636kB managed:1625428kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  301.727539][ T5353] lowmem_reserve[]: 0 0 530 530 530
[  301.735074][ T5353] Node 0 Normal free:18704kB boost:10240kB min:18752kB low:20880kB high:23008kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:80kB active_file:0kB inactive_file:12kB unevictable:3536kB writepending:0kB zspages:2972kB present:1572868kB managed:543156kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB
[  301.773965][ T7759] ==================================================================
[  301.776479][ T7759] BUG: KASAN: slab-use-after-free in __mutex_lock+0x80d/0x1550
[  301.778958][ T7759] Read of size 8 at addr ffff88810a5ee2e8 by task kworker/1:7/7759
[  301.782137][ T7759] 
[  301.783315][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) 
[  301.783332][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.783342][ T7759] Workqueue: events l2cap_chan_timeout
[  301.783367][ T7759] Call Trace:
[  301.783373][ T7759]  <TASK>
[  301.783379][ T7759]  dump_stack_lvl+0xe8/0x150
[  301.783394][ T7759]  print_address_description+0x55/0x1e0
[  301.783403][ T7759]  ? __mutex_lock+0x80d/0x1550
[  301.783413][ T7759]  print_report+0x58/0x70
[  301.783419][ T7759]  kasan_report+0x117/0x150
[  301.783433][ T7759]  ? __mutex_lock+0x80d/0x1550
[  301.783443][ T7759]  __mutex_lock+0x80d/0x1550
[  301.783451][ T7759]  ? lockdep_unlock+0x5d/0xd0
[  301.783460][ T7759]  ? __lock_acquire+0x146e/0x2cf0
[  301.783469][ T7759]  ? __mutex_lock+0x608/0x1550
[  301.783478][ T7759]  ? l2cap_chan_timeout+0x63/0x3b0
[  301.783487][ T7759]  ? __pfx___mutex_lock+0x10/0x10
[  301.783495][ T7759]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  301.783507][ T7759]  ? process_scheduled_works+0xa70/0x1860
[  301.783520][ T7759]  ? process_scheduled_works+0xa70/0x1860
[  301.783534][ T7759]  l2cap_chan_timeout+0x63/0x3b0
[  301.783548][ T7759]  ? process_scheduled_works+0xa70/0x1860
[  301.783561][ T7759]  process_scheduled_works+0xb5d/0x1860
[  301.783581][ T7759]  ? __pfx_process_scheduled_works+0x10/0x10
[  301.783594][ T7759]  ? assign_work+0x3d5/0x5e0
[  301.783606][ T7759]  worker_thread+0xa53/0xfc0
[  301.783671][ T7759]  kthread+0x388/0x470
[  301.783689][ T7759]  ? __pfx_worker_thread+0x10/0x10
[  301.783703][ T7759]  ? __pfx_kthread+0x10/0x10
[  301.783719][ T7759]  ret_from_fork+0x514/0xb70
[  301.783735][ T7759]  ? __pfx_ret_from_fork+0x10/0x10
[  301.783748][ T7759]  ? __switch_to+0xc79/0x1410
[  301.783769][ T7759]  ? __pfx_kthread+0x10/0x10
[  301.783782][ T7759]  ret_from_fork_asm+0x1a/0x30
[  301.783794][ T7759]  </TASK>
[  301.783797][ T7759] 
[  301.839430][ T5353] lowmem_reserve[]:
[  301.840744][ T7759] Allocated by task 5610:
[  301.840756][ T7759]  kasan_save_track+0x3e/0x80
[  301.840776][ T7759]  __kasan_kmalloc+0x93/0xb0
[  301.841898][ T5353]  0
[  301.842786][ T7759]  __kmalloc_cache_noprof+0x31c/0x660
[  301.843975][ T5353]  0 0
[  301.845642][ T7759]  l2cap_conn_add+0xaa/0x960
[  301.847164][ T5353]  0 0
[  301.848937][ T7759]  l2cap_connect_cfm+0x142/0x1560
[  301.857763][ T7759]  hci_remote_features_evt+0x5b9/0x950
[  301.859587][ T7759]  hci_event_packet+0x6ab/0xef0
[  301.860854][ T5353] Node 1 
[  301.860977][ T7759]  hci_rx_work+0x3ee/0x1040
[  301.860980][ T5353] Normal free:76532kB boost:20480kB min:76824kB low:90908kB high:104992kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:216kB active_file:40kB inactive_file:56kB unevictable:3536kB writepending:0kB zspages:3028kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:480kB local_pcp:480kB free_cma:0kB
[  301.861807][ T7759]  process_scheduled_works+0xb5d/0x1860
[  301.869275][ T5353] lowmem_reserve[]:
[  301.872150][ T7759]  worker_thread+0xa53/0xfc0
[  301.872168][ T7759]  kthread+0x388/0x470
[  301.872183][ T7759]  ret_from_fork+0x514/0xb70
[  301.872197][ T7759]  ret_from_fork_asm+0x1a/0x30
[  301.872211][ T7759] 
[  301.872215][ T7759] Freed by task 5617:
[  301.872223][ T7759]  kasan_save_track+0x3e/0x80
[  301.884887][ T7759]  kasan_save_free_info+0x46/0x50
[  301.886549][ T7759]  __kasan_slab_free+0x5c/0x80
[  301.888240][ T7759]  kfree+0x1c5/0x640
[  301.888903][ T5353]  0
[  301.889403][ T7759]  hci_conn_hash_flush+0x10d/0x260
[  301.889416][ T7759]  hci_dev_close_sync+0x821/0x10e0
[  301.889429][ T7759]  hci_unregister_dev+0x21a/0x5a0
[  301.889438][ T7759]  vhci_release+0x152/0x1a0
[  301.889451][ T7759]  __fput+0x44f/0xa60
[  301.889461][ T7759]  task_work_run+0x1d9/0x270
[  301.889471][ T7759]  do_exit+0x70f/0x22c0
[  301.895193][ T5353]  0
[  301.895574][ T7759]  do_group_exit+0x21b/0x2d0
[  301.895626][ T7759]  get_signal+0x1284/0x1330
[  301.904322][ T7759]  arch_do_signal_or_restart+0xbc/0x830
[  301.904890][ T5353]  0
[  301.905877][ T7759]  irqentry_exit+0x284/0x730
[  301.905890][ T7759]  asm_exc_page_fault+0x26/0x30
[  301.905897][ T7759] 
[  301.905900][ T7759] Last potentially related work creation:
[  301.905905][ T7759]  kasan_save_stack+0x3e/0x60
[  301.905914][ T7759]  kasan_record_aux_stack+0xbd/0xd0
[  301.905923][ T7759]  insert_work+0x3d/0x330
[  301.912663][ T5353]  0
[  301.913142][ T7759]  __queue_work+0xccf/0xfc0
[  301.913157][ T7759]  call_timer_fn+0x192/0x5e0
[  301.913167][ T7759]  __run_timer_base+0x67e/0x8b0
[  301.913174][ T7759]  run_timer_softirq+0xb7/0x170
[  301.913180][ T7759]  handle_softirqs+0x22a/0x840
[  301.913189][ T7759]  __irq_exit_rcu+0xca/0x220
[  301.913196][ T7759]  irq_exit_rcu+0x9/0x30
[  301.922934][ T5353]  0
[  301.923542][ T7759]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  301.923557][ T7759]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  301.923568][ T7759] 
[  301.923570][ T7759] Second to last potentially related work creation:
[  301.923574][ T7759]  kasan_save_stack+0x3e/0x60
[  301.923585][ T7759]  kasan_record_aux_stack+0xbd/0xd0
[  301.934905][ T5353] 
[  301.936046][ T7759]  insert_work+0x3d/0x330
[  301.936058][ T7759]  __queue_work+0xbad/0xfc0
[  301.936067][ T7759]  queue_work_on+0x106/0x1d0
[  301.936074][ T7759]  l2cap_connect_cfm+0x10f5/0x1560
[  301.936083][ T7759]  hci_remote_features_evt+0x5b9/0x950
[  301.936093][ T7759]  hci_event_packet+0x6ab/0xef0
[  301.946967][ T5353] Node 0 
[  301.948586][ T7759]  hci_rx_work+0x3ee/0x1040
[  301.948629][ T7759]  process_scheduled_works+0xb5d/0x1860
[  301.948639][ T7759]  worker_thread+0xa53/0xfc0
[  301.948647][ T7759]  kthread+0x388/0x470
[  301.948656][ T7759]  ret_from_fork+0x514/0xb70
[  301.948663][ T7759]  ret_from_fork_asm+0x1a/0x30
[  301.948673][ T7759] 
[  301.948675][ T7759] The buggy address belongs to the object at ffff88810a5ee000
[  301.948675][ T7759]  which belongs to the cache kmalloc-1k of size 1024
[  301.962829][ T5353] DMA: 
[  301.965573][ T7759] The buggy address is located 744 bytes inside of
[  301.965573][ T7759]  freed 1024-byte region [ffff88810a5ee000, ffff88810a5ee400)
[  301.965618][ T7759] 
[  301.965623][ T7759] The buggy address belongs to the physical page:
[  301.965632][ T7759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810a5ed800 pfn:0x10a5e8
[  301.965648][ T7759] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  301.965661][ T7759] flags: 0x17ff00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff)
[  301.976721][ T5353] 1*4kB 
[  301.979094][ T7759] page_type: f5(slab)
[  301.979111][ T7759] raw: 017ff00000000240 ffff888100041dc0 ffffea0000882210 ffffea00044aa810
[  301.979119][ T7759] raw: ffff88810a5ed800 000000080010000b 00000000f5000000 0000000000000000
[  301.979126][ T7759] head: 017ff00000000240 ffff888100041dc0 ffffea0000882210 ffffea00044aa810
[  301.979133][ T7759] head: ffff88810a5ed800 000000080010000b 00000000f5000000 0000000000000000
[  301.979140][ T7759] head: 017ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  301.979147][ T7759] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  301.979151][ T7759] page dumped because: kasan: bad access detected
[  301.999497][ T5353] (U) 
[  302.000133][ T7759] page_owner tracks the page as allocated
[  302.008627][ T7759] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5604, tgid 5604 (sshd), ts 60391644899, free_ts 60390832434
[  302.015712][ T7759]  post_alloc_hook+0x231/0x280
[  302.017250][ T5353] 0*8kB 0*16kB 
[  302.017351][ T7759]  get_page_from_freelist+0x24ba/0x2540
[  302.017369][ T7759]  __alloc_frozen_pages_noprof+0x18d/0x380
[  302.022518][ T7759]  allocate_slab+0x77/0x660
[  302.023355][ T5353] 0*32kB 
[  302.023916][ T7759]  refill_objects+0x339/0x3d0
[  302.023923][ T5353] 2*64kB (U) 
[  302.025030][ T7759]  __pcs_replace_empty_main+0x321/0x720
[  302.025049][ T7759]  __kmalloc_noprof+0x474/0x760
[  302.025067][ T7759]  load_elf_phdrs+0x13e/0x240
[  302.025080][ T7759]  load_elf_binary+0xa0f/0x2980
[  302.034315][ T7759]  bprm_execve+0x94a/0x1440
[  302.035955][ T7759]  do_execveat_common+0x50d/0x690
[  302.037975][ T7759]  __x64_sys_execve+0x97/0xc0
[  302.038446][ T5353] 3*128kB 
[  302.039730][ T7759]  do_syscall_64+0x15f/0xf80
[  302.039747][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.039756][ T7759] page last free pid 15 tgid 15 stack trace:
[  302.039762][ T7759]  __free_frozen_pages+0xbc7/0xd30
[  302.039773][ T7759]  __folio_put+0x4a2/0x580
[  302.039785][ T7759]  skb_release_data+0x544/0xa60
[  302.047906][ T5353] (U) 
[  302.049398][ T7759]  napi_consume_skb+0x1e7/0x2a0
[  302.049422][ T7759]  skb_defer_free_flush+0x191/0x260
[  302.049436][ T7759]  net_rx_action+0x455/0xf70
[  302.049450][ T7759]  handle_softirqs+0x22a/0x840
[  302.058444][ T7759]  run_ksoftirqd+0x36/0x60
[  302.059791][ T7759]  smpboot_thread_fn+0x541/0xa50
[  302.060709][ T5353] 2*256kB 
[  302.061390][ T7759]  kthread+0x388/0x470
[  302.061396][ T5353] (U) 
[  302.061404][ T7759]  ret_from_fork+0x514/0xb70
[  302.066050][ T7759]  ret_from_fork_asm+0x1a/0x30
[  302.067682][ T7759] 
[  302.068465][ T7759] Memory state around the buggy address:
[  302.068616][ T5353] 1*512kB 
[  302.070073][ T7759]  ffff88810a5ee180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.070083][ T7759]  ffff88810a5ee200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.070088][ T7759] >ffff88810a5ee280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.070093][ T7759]                                                           ^
[  302.070098][ T7759]  ffff88810a5ee300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.070103][ T7759]  ffff88810a5ee380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.070107][ T7759] ==================================================================
[  302.070745][ T7759] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  302.070760][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) 
[  302.070776][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.070787][ T7759] Workqueue: events l2cap_chan_timeout
[  302.070808][ T7759] Call Trace:
[  302.070814][ T7759]  <TASK>
[  302.070820][ T7759]  vpanic+0x56c/0xa60
[  302.070833][ T7759]  ? __pfx_vpanic+0x10/0x10
[  302.070843][ T7759]  panic+0xc5/0xd0
[  302.070851][ T7759]  ? __pfx_panic+0x10/0x10
[  302.070859][ T7759]  ? __mutex_lock+0x80d/0x1550
[  302.070871][ T7759]  ? __mutex_lock+0x80d/0x1550
[  302.070880][ T7759]  check_panic_on_warn+0x89/0xb0
[  302.070899][ T7759]  ? __mutex_lock+0x80d/0x1550
[  302.070913][ T7759]  end_report+0x73/0x170
[  302.070933][ T7759]  ? __mutex_lock+0x80d/0x1550
[  302.070948][ T7759]  kasan_report+0x128/0x150
[  302.070966][ T7759]  ? __mutex_lock+0x80d/0x1550
[  302.070983][ T7759]  __mutex_lock+0x80d/0x1550
[  302.070997][ T7759]  ? lockdep_unlock+0x5d/0xd0
[  302.071010][ T7759]  ? __lock_acquire+0x146e/0x2cf0
[  302.071026][ T7759]  ? __mutex_lock+0x608/0x1550
[  302.071041][ T7759]  ? l2cap_chan_timeout+0x63/0x3b0
[  302.119098][ T7759]  ? __pfx___mutex_lock+0x10/0x10
[  302.120515][ T7759]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  302.122056][ T7759]  ? process_scheduled_works+0xa70/0x1860
[  302.123688][ T7759]  ? process_scheduled_works+0xa70/0x1860
[  302.125309][ T7759]  l2cap_chan_timeout+0x63/0x3b0
[  302.126750][ T7759]  ? process_scheduled_works+0xa70/0x1860
[  302.128324][ T7759]  process_scheduled_works+0xb5d/0x1860
[  302.129945][ T7759]  ? __pfx_process_scheduled_works+0x10/0x10
[  302.131680][ T7759]  ? assign_work+0x3d5/0x5e0
[  302.133013][ T7759]  worker_thread+0xa53/0xfc0
[  302.134321][ T7759]  kthread+0x388/0x470
[  302.135465][ T7759]  ? __pfx_worker_thread+0x10/0x10
[  302.136940][ T7759]  ? __pfx_kthread+0x10/0x10
[  302.138278][ T7759]  ret_from_fork+0x514/0xb70
[  302.139636][ T7759]  ? __pfx_ret_from_fork+0x10/0x10
[  302.141054][ T7759]  ? __switch_to+0xc79/0x1410
[  302.142477][ T7759]  ? __pfx_kthread+0x10/0x10
[  302.143842][ T7759]  ret_from_fork_asm+0x1a/0x30
[  302.145298][ T7759]  </TASK>
[  302.146893][ T7759] Kernel Offset: disabled
[  302.148429][ T7759] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:59:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000000003cc RCX=0000000000000008 RDX=0000000000000008
RSI=ffff88810d00e488 RDI=00000000000003cc RBP=05a9944b3186c605 RSP=ffffc90004727400
R8 =ffffc900047273c8 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff81a20c90
R12=ffffffff96d4b858 R13=ffffffff93e82708 R14=ffff88810d00d880 R15=0000000000000047
RIP=ffffffff81a1ba98 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558e363500 ffffffff 00c00000
GS =0000 ffff88818dc94000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffa067cc20 CR3=00000001758c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003be72d0
R8 =ffff888109530237 R9 =1ffff110212a6046 R10=dffffc0000000000 R11=ffffffff85448920
R12=dffffc0000000000 R13=ffffffff9a4829ae R14=ffffffff9a79b780 R15=0000000000000000
RIP=ffffffff8544899c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9294000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6ac275b591 CR3=00000001754f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000ffff00 0000000000000000 XMM01=ffffffffff000033 746e6576652f7475
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
