last executing test programs:

2.341595482s ago: executing program 1 (id=1440):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = socket$inet(0xa, 0x801, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xd, 0x30}, &(0x7f0000000140)=0xc)
unshare(0x6a040000)
socket$packet(0x11, 0x3, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x844)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x18, 0x800, 0xfa)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

2.201577084s ago: executing program 1 (id=1444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', <r1=>0x0})
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x7c, 0x2c, 0x800, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x100000, 0xe1, 0x7, 0xa2a2}, {0x3ff, 0x10a, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}}, 0x20040054)
close(0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r6, 0x37}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback, 0xc, 0x1, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, @void, @value, @void, @void, r7}, 0x20)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, 0x0, 0x25, 0x15, @val=@tcx={@void, @value=r8, @void, @void, r7}}, 0x1c)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000)
readv(r9, 0x0, 0x0)
write$tun(r9, 0x0, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r9, 0xffffffffffffffff, 0x10, 0x9, r0, @void, @value=r10, @void, @void, r7}, 0x20)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x0, 0x3, {0xa, 0x4e24, 0xfb6, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, 0x32)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES8=r3], 0x50}}, 0x0)
r11 = accept$inet(r4, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10)
close(r11)

2.119515959s ago: executing program 1 (id=1447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r4, @ANYBLOB="080003000300000008001bedffffff00"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000001840)=@ethtool_cmd={0x27, 0x40, 0x5, 0x401, 0x6, 0x2, 0x10, 0x3, 0x8, 0x9, 0x6, 0x0, 0x9, 0x7, 0x10, 0x2, [0x7, 0x7]}})
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
r9 = socket$kcm(0xf, 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x25, 0x14, @void}, 0x10)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

2.00067937s ago: executing program 1 (id=1450):
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x1)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000)
r3 = socket$inet(0x2, 0x3, 0x33b9)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000030f8c40d1308c4e5", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYBLOB="c3"], 0x4)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040801)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000800000c3000200ffffffffd718a65900000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={<r13=>0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f00000000c0)={r13, 0x8, 0x9, 0xd5}, 0x14)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000001e", @ANYRES16=r14, @ANYBLOB="250c2cbd7000fcdbdf250b0000000c0005800800010075647000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r14, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x10)

1.929116357s ago: executing program 1 (id=1454):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010012000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000064070000090a0104000000000000000900020073797a31000000000900010073797a300000000008000540000000210500034000000005140000001100010000000000000000000000000a"], 0x8c}}, 0x0)

770.691223ms ago: executing program 1 (id=1466):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000a40)={0xa, 0x4e23, 0x80000001, @local, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000008"], 0x18}}], 0x1, 0x8080)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r1, 0x1}, 0x20)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000001e40), 0x4)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}}, 0x8)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@can_newroute={0x74, 0x18, 0x10, 0x70bd26, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "db6e9ca1ccaa994b"}, 0x5}}, @CGW_DST_IF={0x8, 0xa, r8}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x0, 0x3, 0x0, 0x0, "18c2cc3fc599354d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x0, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "f55f05f37bcabd7f"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r10 = socket$inet(0x2b, 0x801, 0x0)
getsockopt$MRT(r10, 0x0, 0xce, 0x0, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000010000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00000000000000e0000002000000000000000000000000000000000000000000080000000000000000000020010000000000000000000000000001000000003200000000000000e00000010000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000200010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c0000205d8064006feb8b0e6a0100000000007f0000010000000000000000000000000300000000000000000000000000000000000000fc000000000000000000000000000001000000002b00000002000000fc010000000000000000000000000000000000000400fc000100"/511], 0x23c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000600), 0x4)
r12 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r12, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r12)

574.143893ms ago: executing program 2 (id=1469):
r0 = socket$igmp(0x2, 0x3, 0x2)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000080)={@private=0xa010100, @broadcast, 0xffffffffffffffff, "8bc73e7e440cd443ea3eeb7df44f9f4f8e9f641b592aff2ce898b782c5a0a523", 0x1, 0x8, 0x6, 0x7b}, 0x3c)
unshare(0x2040400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000001300000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c0002800600100004000000"], 0x50}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f"], 0x0, 0x2b, 0x0, 0x6}, 0x28)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000001003c0012800e00010069703667726574617000000028000280060011004e20000014000700ff010000000000000000000000000001060010004e20002a9f26aa00e18a76b07d3db85923be235cedfe5ceb92294701089f9ee27b991edf4ab1ae75057834957316d06cee575afde13ab26e3653b7d7f91bd6e84f9deab059963c806bb2d77845ee7fade7fcbfaf74ca1dc81b9d199df37e333d7b14f47d89991b73d023da194af06f28df4b0e06d313262d6a1da12d2b2786cd035253c3f1a05bd86203ee13a3e1f5dd6bb21d24615aea489c7b9c9b93136b0e59a47338e4ae36b6a0921e1a4857e63708eb486b0ac561a9a1d0077e0f3645ca2473d3"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, @llc={0x1a, 0x310, 0x3, 0x4, 0x8, 0x7, @multicast}, @sco, 0xff5f, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000000040)='bridge_slave_0\x00', 0x0, 0x7})

563.569527ms ago: executing program 2 (id=1470):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00'})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
socket$kcm(0x29, 0x2, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000500)=0xd0)
sendmsg$alg(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000540)="2c9cc39f56", 0x5}], 0x1, 0x0, 0x0, 0x4011}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40800)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0xc, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)

471.33776ms ago: executing program 2 (id=1471):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000003800128009000100766c616e000000002890f8f15ea3548c6bce0b0002801c0004800c00010000000100080000000c0001000800000000000000060001000300000008000500", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

470.451131ms ago: executing program 2 (id=1473):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24)

401.480048ms ago: executing program 2 (id=1474):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}}) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@gettaction={0x88, 0x32, 0xe72c5f922f23cad9, 0x70bd24, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
r1 = socket$rds(0x15, 0x5, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x7}, {0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffd}]}}]}, 0x40}}, 0x0)
bind$rds(r1, &(0x7f0000000740)={0x2, 0xffff, @private=0xa010102}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e80)="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", 0x2b5}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}, {&(0x7f0000000cc0)={0x198, 0x27, 0x2, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x58, 0x116, 0x0, 0x1, [@typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf1}, @generic="a60fd4f302123314cd72badb6aec9a791bd2607c956235d2909f4926723ccf84a3bd152d62014637c3b9901fdeda2fe49b34deab69d74e1a", @typed={0x4, 0xa1}]}, @generic="39430543e256037c915ca0e6f59895e9df28b9", @generic="a279d922dcdc11e20d8851db2ebed66e5b4c6f7f1921097366c4ea4fa957e55da649f3d28f6ca9bc0e6bebac9097e7a1122126e14cbd543468f80be139220d86b742fc0fce92492a4597601f6132f505637a90ee45b7ad54097fba9c580dca5e2b791a360de0b10a60841f55a86c32d34320bf0f502f935d1379a413ccc199535b63533007535f77f07becf67d3d7a99ee5a6694f5cae931e853be36ddfbe014aaa6f1e242977e7ead1a3e24331d146c99f1b58e3e23ad1ebd7799ff5a6d088e2de08ee72fe56d0f39c49aa435b468c0c5567677454c7f0177d1b918c9418b8cab176aa7794a9840e6cce55bc870bc659834739a3410b2", @typed={0x8, 0x119, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0xcd, 0x0, 0x0, @fd=r7}, @nested={0xc, 0xcc, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x198}], 0x2, 0x0, 0x0, 0x24004050}, 0x4000084) (async)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x0, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0x68, [@remote, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_type(r10, &(0x7f0000000040), 0x2, 0x0)
sendfile(r9, r11, &(0x7f0000000240)=0x6, 0x9) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000200), 0xffffffc1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x320, 0x0, 0x0, 0x0, 0x53}, [@generic={0x7, 0x0, 0x4, 0x8, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0xb4, &(0x7f00000005c0)=""/180, 0x41100, 0x41, '\x00', 0x0, @fallback=0x9, r4, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xb, 0x5, 0x80e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r12, 0xffffffffffffffff, r4], 0x0, 0x10, 0x6}, 0x94)

311.185417ms ago: executing program 2 (id=1475):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x3}, 0x2)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x280}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4005}, 0x240100d4)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60)
r9 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r9, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000e80)=[@hoplimit_2292={{0x14, 0x29, 0x36, 0x80}}], 0x18}}], 0x1, 0x4000880)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000500)={r8, r9, 0x8, 0xa9, &(0x7f0000000440)="ac1382ade2d707012f3ec397f6ad29dcb68bb2a200abfb81375ad6d49b33405bc84e27046bba051be9b400094958d087641b0f832355bb166514a6f373a759251620d400a7d91f2b79dfae3e19945bef07ee97039682ff132f7c8a201e0c5dd37ec383d503a012a50562db97ce578b103ee0494ad470171508937bd3d5e10301d12905e3077d329b566aa280276add63b0c384b73fc73447e3b6e47fb548c1eef51a0487e9f3f8f354", 0x4, 0x9, 0x0, 0xe, 0xd, 0x1, 0xd38, 'syz1\x00'})
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38)
r10 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x14, &(0x7f0000000100), 0x120)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0)

307.603179ms ago: executing program 0 (id=1476):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_process_wait\x00', r3, 0x0, 0x81200}, 0x18)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xe8c1, '\x00', r2, r5, 0x4, 0x3, 0x3}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r8)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x8080)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r10, 0x309, 0x0, 0x1, {0x1d}}, 0x14}}, 0x4054)

240.92876ms ago: executing program 0 (id=1477):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)

239.970303ms ago: executing program 0 (id=1478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x5, &(0x7f0000000040)={[0x3]}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0100001200576d10000010fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001d00ca0e00000a0001"], 0x11c}, 0x1, 0x0, 0x0, 0x40084}, 0x0)

161.389348ms ago: executing program 0 (id=1479):
r0 = socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x164, 0x10, 0x300, 0x200, 0x0, {}, [@IFLA_LINKINFO={0xfffffffffffffd86, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x34, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa}, {0xa}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_AF_SPEC={0x100, 0x1a, 0x0, 0x1, [@AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x1}, {0x8, 0x4, 0x0, 0x0, 0xffffffff}, {0x8, 0x17, 0x0, 0x0, 0xe04}, {0x8, 0xb, 0x0, 0x0, 0x6}, {0x8, 0x18, 0x0, 0x0, 0x4}, {0x8, 0x16, 0x0, 0x0, 0x207}]}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}}]}, @AF_MPLS={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xb}, {0x8, 0x9, 0x0, 0x0, 0x80000000}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3d}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

60.099699ms ago: executing program 0 (id=1480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0xfd}], 0x1, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}], 0x18}, 0xd3817a19c8977948)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)

0s ago: executing program 0 (id=1481):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x36, 0x701, 0x0, 0x2, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000cc0)=@delchain={0x6c8, 0x65, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0x6}, {0x5, 0x7}, {0xc, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x34}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x1182cc60}, @filter_kind_options=@f_u32={{0x8}, {0x674, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x71, 0x53b4}}, @TCA_U32_HASH={0x8, 0x2, 0xb}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_ACT={0x18c, 0x7, [@m_vlan={0x3c, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x8, 0x6, "4228be48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_xt={0x68, 0x1b, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x14, 0x6, "311e045d582fb22ace82bf8bb48cf3c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xe4, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x2, 0x4bfc, 0x7}, 0x8}}]}, {0x97, 0x6, "4ecfa4e668f4bc3a50f5434a5efa3cdf80e6c39ca406ed0a1127d08b34a67daaab87fd3f12dc337a4a7841b0137fd6a478ece3e4aac0bb6cfafb8dc425583f0a0c5b61e832f2db97b7a8e76b09a4431209e48ce5335c14e72532a661c86d5056768aaf3bc3457392e633ecfac707a1af15b3b82543b88095140f11e2ee5686f7c6b4c687d33cfb145c82cf320ca7c2088a11e8"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_SEL={0x4a4, 0x5, {0x5, 0x0, 0xf, 0x9, 0x3d5, 0x4bb, 0xa4, 0x84, [{0x1, 0x9, 0x81, 0x9a4}, {0xe, 0x3, 0x2659, 0x4}, {0x9, 0x634, 0xffffffff, 0x80000000}, {0x5, 0x0, 0x200, 0x6}, {0x9, 0x5, 0x1, 0x19}, {0xffff, 0x7, 0xd, 0x9}, {0x4, 0x2, 0x0, 0x7}, {0x1, 0x101, 0x6, 0x7}, {0x43, 0x5, 0x9a, 0x3f8}, {0x8, 0x4, 0x7, 0x8a}, {0x7fff, 0x3ff, 0x81, 0xfc}, {0x535a, 0x1ff, 0x7, 0x8}, {0x0, 0x3, 0x40, 0x2}, {0x6, 0xfffffffb, 0xfff, 0x6}, {0x1, 0xffffff5e, 0x5, 0x94}, {0x1, 0x9c, 0x919, 0x2}, {0x1, 0x100, 0x3, 0x3}, {0x1, 0x401, 0x48, 0x1000}, {0x89, 0x2, 0x200, 0x9}, {0x101, 0x34000000, 0x1, 0x4}, {0xbc0, 0xa75, 0x965b, 0x6b}, {0xff, 0x3ff, 0x9, 0x5}, {0xf, 0x9, 0x6, 0x39f12eb1}, {0x2a, 0x7, 0x28000000, 0xd}, {0x5, 0x9, 0x7fff, 0x8}, {0xff, 0x5, 0x0, 0x5}, {0x8, 0x8dc, 0x9, 0x4}, {0xfffffffb, 0xeb7f, 0x1, 0x4}, {0x0, 0x7, 0x10, 0xffffffff}, {0x6, 0x6, 0xf, 0x80000001}, {0x40, 0x4, 0x2, 0xfffff800}, {0x8, 0x10000000, 0x4, 0xc}, {0x7ff, 0x7ff, 0x9, 0x6}, {0x2, 0x1, 0x7, 0xfff}, {0xbf, 0x5, 0x59fd6854, 0x4}, {0xd, 0x0, 0x0, 0x8ae}, {0xd3, 0x5, 0x7f, 0xea}, {0x9, 0x7, 0x7, 0x6}, {0xfc, 0x400, 0x4, 0x15210839}, {0x1ff, 0xd8, 0x81, 0x8}, {0x9, 0x10, 0x4, 0x7}, {0x8, 0x50000, 0xfd, 0x7}, {0x7, 0x3, 0x0, 0x7ff}, {0xe, 0xffffffd2, 0x1fc0000, 0x400}, {0x40, 0x400, 0x2, 0x4}, {0x100, 0xa66c, 0xf, 0x55}, {0x4, 0x3, 0x5, 0x7}, {0x80000000, 0x1, 0x6, 0xba}, {0x0, 0x7, 0x6, 0x3}, {0xf0000000, 0x1ff, 0x6, 0x2}, {0x8000, 0x40, 0x5, 0x1000}, {0x8, 0x1, 0x1, 0x7fff}, {0x80000000, 0x9, 0x3, 0x8}, {0x4, 0x2, 0x4, 0x6}, {0x5cf2, 0xb4, 0x6, 0x8}, {0x2, 0x9, 0x942, 0xb}, {0x5, 0x8, 0x4, 0x6}, {0x6, 0xb94, 0x3, 0xf9ff}, {0x3, 0x4, 0x40}, {0x3, 0x7f, 0xfffffe00, 0x7}, {0x0, 0x5, 0x7, 0x4109}, {0x80, 0x10, 0x7, 0xc}, {0x3, 0xfffff800, 0x4, 0x7ff}, {0x7, 0x6, 0x8, 0x6}, {0xfffff800, 0x9, 0x400, 0xfffffffd}, {0xf8d, 0xc00, 0x5, 0xff}, {0x3, 0xffff, 0x0, 0x3}, {0x9e87, 0xa4db, 0xffffffff, 0x8}, {0x7, 0x0, 0x5, 0x9}, {0x5, 0x8001, 0x1, 0x634e}, {0x5, 0x5, 0xdab, 0x9}, {0x8, 0x7, 0xc7f, 0x4}, {0xfffffff8, 0x0, 0x1000, 0x6}]}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}]}, @TCA_U32_HASH={0x8, 0x2, 0x10}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x6c8}}, 0x4048040)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r10, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r17)
sendmsg$NLBL_MGMT_C_ADD(r17, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01000000400000000000010000004e00010003dfe4dd9e6efa9e72e4065e1dd0ab4c3f17568492fa019225f4f55724dbd9d7264880ef7cef4da08a74e947a31ce6750f9a05e44bd95d7a6eda083bd26f71103e0c0000e8d4a0c6f5e40000"], 0x64}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

kernel console output (not intermixed with test programs):

  55.685125][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.691625][ T5841] veth0_macvtap: entered promiscuous mode
[   55.698575][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.702677][ T5841] veth1_macvtap: entered promiscuous mode
[   55.709433][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.722398][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.725832][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.744970][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.750079][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.757145][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.769934][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.776198][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.782580][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.788929][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.811306][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.815541][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.844946][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.860660][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.870663][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.895168][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.921685][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.928549][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.956592][ T2264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.959337][ T2264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.974010][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.977393][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.003555][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.006198][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.024382][ T4671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.028335][ T4671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.040165][ T2264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.044596][ T2264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.060965][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.107575][ T5906] vxcan1: entered allmulticast mode
[   56.166934][ T5913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.179146][ T5913] Zero length message leads to an empty skb
[   56.187367][ T5911] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   56.222943][ T5911] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.242640][ T5911] bridge_slave_0: left allmulticast mode
[   56.247269][ T5911] bridge_slave_0: left promiscuous mode
[   56.251747][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.259390][ T5915] sctp: [Deprecated]: syz.2.4 (pid 5915) Use of struct sctp_assoc_value in delayed_ack socket option.
[   56.259390][ T5915] Use struct sctp_sack_info instead
[   56.268397][ T5916] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[   56.269823][ T5911] bridge_slave_1: left allmulticast mode
[   56.283206][ T5911] bridge_slave_1: left promiscuous mode
[   56.285875][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.300929][ T5911] bond0: (slave bond_slave_0): Releasing backup interface
[   56.308625][ T5911] bond0: (slave bond_slave_1): Releasing backup interface
[   56.326347][ T5911] team0: Port device team_slave_0 removed
[   56.339967][ T5911] team0: Port device team_slave_1 removed
[   56.352064][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.356447][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.357313][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.360980][ T5922] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   56.381863][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.387091][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.409059][ T5922] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   56.428925][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.439907][ T5922] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   56.496000][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5'.
[   56.988419][   T24] cfg80211: failed to load regulatory.db
[   57.041091][ T5927] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6'.
[   57.191893][ T5934] openvswitch: netlink: Message has 4 unknown bytes.
[   57.444417][ T5945] batadv_slave_1: entered promiscuous mode
[   57.452814][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   57.468610][ T5948] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.482201][ T5945] batadv_slave_1 (unregistering): left promiscuous mode
[   57.510165][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.517340][ T5950] netlink: 348 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.520767][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.530603][ T5950] netlink: 348 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.535109][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.547892][ T5948] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   57.551852][ T5948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   57.560358][ T5234] Bluetooth: hci0: command tx timeout
[   57.633403][ T5234] Bluetooth: hci1: command tx timeout
[   57.650937][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.653986][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.713284][ T5234] Bluetooth: hci2: command tx timeout
[   57.732264][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   57.737476][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.743708][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.889427][ T5956] geneve2: entered promiscuous mode
[   57.891821][ T5956] geneve2: entered allmulticast mode
[   57.899922][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.905085][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[   57.908851][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.912502][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[   57.920449][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.925973][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[   57.937664][ T5967] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[   57.941570][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.945999][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[   57.949354][ T5972] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[   57.954456][ T5967] xt_socket: unknown flags 0xd0
[   58.300702][ T5989] tipc: Started in network mode
[   58.302738][ T5989] tipc: Node identity , cluster identity 4711
[   58.305411][ T5989] tipc: Failed to obtain node identity
[   58.308167][ T5989] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.387836][ T5997] netlink: 'syz.1.19': attribute type 12 has an invalid length.
[   58.402916][ T5994] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET)
[   58.495025][ T5994] team0 (unregistering): Port device team_slave_0 removed
[   58.500427][ T5994] team0 (unregistering): Port device team_slave_1 removed
[   58.726415][ T6007] netlink: zone id is out of range
[   58.729552][ T6007] netlink: zone id is out of range
[   58.732418][ T6007] netlink: zone id is out of range
[   58.735291][ T6007] netlink: zone id is out of range
[   58.740442][ T6007] netlink: zone id is out of range
[   58.742166][ T6007] netlink: zone id is out of range
[   58.744810][ T6007] netlink: zone id is out of range
[   58.747136][ T6007] netlink: zone id is out of range
[   58.748713][ T6007] netlink: zone id is out of range
[   58.873421][ T6014] syz_tun: entered allmulticast mode
[   58.890357][ T6014] dvmrp8: entered allmulticast mode
[   58.905430][ T6013] syz_tun: left allmulticast mode
[   58.907745][ T6013] dvmrp8: left allmulticast mode
[   58.938685][ T6016] netlink: 'syz.1.25': attribute type 1 has an invalid length.
[   59.021989][ T6022] nbd: must specify a size in bytes for the device
[   59.455819][ T6098] netlink: 'syz.1.33': attribute type 10 has an invalid length.
[   59.463592][ T6098] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.476000][ T6098] Bluetooth: MGMT ver 1.23
[   59.600349][ T6112] vlan2: entered allmulticast mode
[   59.602536][ T6112] veth0_macvtap: entered allmulticast mode
[   59.633277][ T5234] Bluetooth: hci0: command tx timeout
[   59.715392][ T5234] Bluetooth: hci1: command tx timeout
[   59.779860][ T6136] tipc: Can't bind to reserved service type 0
[   59.796145][ T5234] Bluetooth: hci2: command tx timeout
[   60.262060][ T6187] tipc: Started in network mode
[   60.270858][ T6187] tipc: Node identity f2a8d85e32e1, cluster identity 4711
[   60.275216][ T6187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.278463][ T6188] syzkaller0: entered promiscuous mode
[   60.281759][ T6188] syzkaller0: entered allmulticast mode
[   60.287902][ T6185] tipc: Resetting bearer <eth:syzkaller0>
[   60.298083][ T6185] tipc: Disabling bearer <eth:syzkaller0>
[   60.725755][ T6235] tipc: New replicast peer: 255.255.255.255
[   60.729497][ T6235] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.896679][ T6246] bridge_slave_0: left allmulticast mode
[   60.903146][ T6246] bridge_slave_0: left promiscuous mode
[   60.909490][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.917872][ T6246] bridge_slave_1: left allmulticast mode
[   60.920472][ T6246] bridge_slave_1: left promiscuous mode
[   60.926976][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.935948][ T6246] bond0: (slave bond_slave_0): Releasing backup interface
[   60.951443][ T6246] bond0: (slave bond_slave_1): Releasing backup interface
[   60.963856][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.967488][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.972023][ T6246] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.978897][ T6246] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.158536][ T6258] geneve2: entered promiscuous mode
[   61.160955][ T6258] geneve2: entered allmulticast mode
[   61.166031][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[   61.176831][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[   61.183457][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[   61.193278][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[   61.281052][ T6270] tipc: Started in network mode
[   61.283585][ T6270] tipc: Node identity 7f000001, cluster identity 4711
[   61.286811][ T6270] tipc: Enabled bearer <udp:syz2>, priority 10
[   61.302384][ T6270] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   61.610469][ T6302] __nla_validate_parse: 14 callbacks suppressed
[   61.610484][ T6302] netlink: 11 bytes leftover after parsing attributes in process `syz.0.65'.
[   61.686796][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'.
[   61.690635][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'.
[   61.704927][ T6307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'.
[   61.713572][ T5234] Bluetooth: hci0: command tx timeout
[   61.726615][ T5259] tipc: Node number set to 3226064990
[   61.738436][ T6309] netlink: 180 bytes leftover after parsing attributes in process `syz.0.68'.
[   61.793675][ T5234] Bluetooth: hci1: command tx timeout
[   61.883323][ T5234] Bluetooth: hci2: command tx timeout
[   62.123727][ T6331] bridge: RTM_NEWNEIGH with invalid ether address
[   62.131851][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.72'.
[   62.326645][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'.
[   62.334558][ T6352] netlink: 'syz.1.75': attribute type 10 has an invalid length.
[   62.339285][ T6351] netlink: 56 bytes leftover after parsing attributes in process `syz.2.76'.
[   62.346067][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'.
[   62.403192][    T9] tipc: Node number set to 2130706433
[   62.430098][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.78'.
[   62.441001][ T6358] tipc: Invalid UDP bearer configuration
[   62.441030][ T6358] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   62.501927][ T6368] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   62.565755][ T6374] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   62.628800][ T6376] macsec1: entered promiscuous mode
[   62.631348][ T6376] team0: entered promiscuous mode
[   62.636190][ T6376] team_slave_0: entered promiscuous mode
[   62.638931][ T6376] team_slave_1: entered promiscuous mode
[   62.647569][ T6383] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   62.648075][ T6382] IPVS: stopping master sync thread 6383 ...
[   62.669289][ T6382] pim6reg1: entered promiscuous mode
[   62.671051][ T6382] pim6reg1: entered allmulticast mode
[   65.736582][ T6391] Bluetooth: MGMT ver 1.23
[   65.825764][ T6396] netlink: 'syz.1.90': attribute type 3 has an invalid length.
[   66.270828][ T6452] tipc: Started in network mode
[   66.272954][ T6452] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   66.280395][ T6452] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   66.285131][ T6452] tipc: Enabled bearer <udp:syz0>, priority 10
[   66.418893][ T6464] syzkaller0: entered allmulticast mode
[   66.509855][ T6474] netlink: 'syz.0.112': attribute type 4 has an invalid length.
[   66.536838][ T6476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.541372][ T6476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   66.571327][ T6478] xfrm0: entered promiscuous mode
[   66.573748][ T6478] xfrm0: entered allmulticast mode
[   66.582637][ T6477] net_ratelimit: 32 callbacks suppressed
[   66.582650][ T6477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.606703][ T6476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.610298][ T6476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   66.683606][ T6476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.687008][ T6476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   66.732368][ T6476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.736988][ T6476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   66.800946][ T5867] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   66.804712][ T5867] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   66.812410][ T5867] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   66.815781][ T5867] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   66.828055][ T5867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   66.831569][ T5867] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   66.841474][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   66.844991][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   67.039887][ T6488] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.048934][ T6488] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   67.056550][ T6488] __nla_validate_parse: 11 callbacks suppressed
[   67.056563][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'.
[   67.169977][ T6492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.117'.
[   67.250168][ T6496] netlink: 284 bytes leftover after parsing attributes in process `syz.2.119'.
[   67.306907][ T6499] netlink: 'syz.1.120': attribute type 5 has an invalid length.
[   67.371801][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'.
[   67.407905][ T6508] netlink: 'syz.1.124': attribute type 10 has an invalid length.
[   67.450351][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'.
[   67.517051][ T6522] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[   67.549050][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[   67.585143][ T6527] bond0: (slave gretap0): Opening slave failed
[   67.596663][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[   67.832365][ T6539] xt_l2tp: unknown flags: 51
[   67.889287][ T6541] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[   67.891822][ T6541] netlink: 17 bytes leftover after parsing attributes in process `syz.0.134'.
[   67.957594][ T6553] vxcan1: entered allmulticast mode
[   67.959906][ T6553] vxcan1: left allmulticast mode
[   68.035592][ T6553] raw_sendmsg: syz.2.138 forgot to set AF_INET. Fix it!
[   68.084378][ T6561] openvswitch: netlink: IPv6 tunnel dst address is zero
[   68.094512][ T6561] netlink: 'syz.2.141': attribute type 64 has an invalid length.
[   68.097902][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   68.105797][ T5904] tipc: Node number set to 1
[   68.317160][ T6574] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   68.325799][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.144'.
[   68.360792][ T6576] veth0: entered promiscuous mode
[   68.488122][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.570122][ T6585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.576284][ T6585] syzkaller0: entered promiscuous mode
[   68.578945][ T6585] syzkaller0: entered allmulticast mode
[   68.596649][ T6585] tipc: Resetting bearer <eth:syzkaller0>
[   68.607076][ T6584] tipc: Resetting bearer <eth:syzkaller0>
[   68.626110][ T6584] tipc: Disabling bearer <eth:syzkaller0>
[   69.627957][ T6602] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   69.665535][ T6602] bond1: (slave bridge3): making interface the new active one
[   69.669252][ T6602] bond1: (slave bridge3): Enslaving as an active interface with an up link
[   70.657969][ T6622] vlan3: entered allmulticast mode
[   70.660214][ T6622] bond0: entered allmulticast mode
[   70.662533][ T6622] bond_slave_0: entered allmulticast mode
[   70.675820][ T6622] bond_slave_1: entered allmulticast mode
[   70.680209][ T6622] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   70.754506][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   71.079127][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.081967][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.319221][ T6661] vlan0: entered promiscuous mode
[   71.321441][ T6661] vlan0: entered allmulticast mode
[   71.324862][ T6661] hsr_slave_1: entered allmulticast mode
[   71.391426][ T6666] netlink: 'syz.1.174': attribute type 6 has an invalid length.
[   71.430962][ T6665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.438854][ T6665] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   71.443605][ T6665] tipc: Resetting bearer <eth:syzkaller0>
[   71.448544][ T6663] tipc: Disabling bearer <eth:syzkaller0>
[   71.525275][ T6675] netlink: 'syz.0.177': attribute type 1 has an invalid length.
[   71.664652][ T6689] vlan2: entered promiscuous mode
[   71.666357][ T6689] macvtap0: entered promiscuous mode
[   71.715476][ T6696] lo: entered allmulticast mode
[   71.717548][ T6696] lo: left allmulticast mode
[   71.889951][ T6707] batman_adv: batadv0: Adding interface: ip6gretap1
[   71.892695][ T6707] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.903415][ T6707] batman_adv: batadv0: Interface activated: ip6gretap1
[   72.094663][ T6718] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   72.292915][ T6722] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   72.299152][ T6723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.475500][ T6726] __nla_validate_parse: 24 callbacks suppressed
[   72.475515][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'.
[   72.530263][ T6729] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[   72.533847][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.193'.
[   72.545752][ T6729] team0: Port device geneve0 added
[   72.605530][ T6731] ieee802154 phy0 wpan0: encryption failed: -90
[   72.608981][ T6731] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   72.672086][ T6738] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[   72.694742][ T6738] 8021q: adding VLAN 0 to HW filter on device bond2
[   72.725487][ T6738] bond2: (slave ip6gretap1): making interface the new active one
[   72.728883][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'.
[   72.732400][ T6738] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   72.739515][ T6738] netlink: 'syz.0.196': attribute type 28 has an invalid length.
[   72.744944][ T6743] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   72.776559][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'.
[   72.781880][ T6738] veth1: entered promiscuous mode
[   72.935883][ T6755] tipc: Enabled bearer <ib:caif0>, priority 14
[   73.035734][ T6766] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.072318][ T6762] syzkaller0: entered promiscuous mode
[   73.076022][ T6762] syzkaller0: entered allmulticast mode
[   73.221116][ T6774] netlink: 'syz.0.209': attribute type 21 has an invalid length.
[   73.228852][ T6774] netlink: 'syz.0.209': attribute type 22 has an invalid length.
[   73.232434][ T6774] netlink: 'syz.0.209': attribute type 23 has an invalid length.
[   73.237070][ T6774] netlink: 136 bytes leftover after parsing attributes in process `syz.0.209'.
[   74.031158][ T6768] bridge0: port 1(erspan0) entered blocking state
[   74.034371][ T6768] bridge0: port 1(erspan0) entered disabled state
[   74.036825][ T6768] erspan0: entered allmulticast mode
[   74.039898][ T6768] erspan0: entered promiscuous mode
[   74.043628][ T6768] bridge0: port 1(erspan0) entered blocking state
[   74.046251][ T6768] bridge0: port 1(erspan0) entered listening state
[   74.167517][ T6786] pim6reg1: entered promiscuous mode
[   74.178998][ T6786] pim6reg1: entered allmulticast mode
[   74.190270][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'.
[   74.249038][ T6782] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   74.252314][ T6793] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.214'.
[   74.255710][ T6782] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   74.285922][ T6793] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.214'.
[   74.314660][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.1.217'.
[   74.351118][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'.
[   74.369510][ T6810] vlan4: entered promiscuous mode
[   74.371631][ T6810] macvtap0: entered promiscuous mode
[   74.393188][ T6813] netlink: 'syz.0.221': attribute type 5 has an invalid length.
[   74.400060][ T6807] syzkaller0: entered promiscuous mode
[   74.402225][ T6807] syzkaller0: entered allmulticast mode
[   74.416352][ T6810] netlink: 'syz.1.220': attribute type 2 has an invalid length.
[   75.162010][ T6819] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   75.211521][ T6819] syz.1.222 uses old SIOCAX25GETINFO
[   75.235316][ T5867] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[   75.241792][ T5867] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[   75.247459][ T5867] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[   75.318072][ T6825] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   75.328937][ T5867] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[   75.643272][ T6848] openvswitch: netlink: Missing key (keys=40, expected=80)
[   75.646545][ T6848] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   75.830602][ T6875] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   75.924844][ T6883] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   75.969528][ T6891] openvswitch: netlink: Flow key attr not present in new flow.
[   76.016502][ T6895] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   76.022375][ T6895] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   76.101737][ T6899] netem: change failed
[   76.112907][ T6899] vlan4: entered allmulticast mode
[   76.346284][ T6915] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   76.643712][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.650872][ T6935] syzkaller0: entered promiscuous mode
[   76.659506][ T6935] syzkaller0: entered allmulticast mode
[   76.667596][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   76.680759][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   76.693834][ T6934] tipc: Disabling bearer <eth:syzkaller0>
[   77.128912][ T6963] openvswitch: netlink: Missing valid actions attribute.
[   77.131782][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.135743][ T6963] openvswitch: netlink: Missing valid actions attribute.
[   77.138519][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.142160][ T6963] openvswitch: netlink: Missing valid actions attribute.
[   77.339444][ T6980] erspan0: left allmulticast mode
[   77.341674][ T6980] erspan0: left promiscuous mode
[   77.345555][ T6980] bridge0: port 1(erspan0) entered disabled state
[   77.370956][ T6980] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   77.374530][ T6980] batman_adv: batadv0: Removing interface: ip6gretap1
[   78.167256][ T6999] validate_nla: 4 callbacks suppressed
[   78.167270][ T6999] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[   78.172821][ T6999] __nla_validate_parse: 19 callbacks suppressed
[   78.172833][ T6999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.283'.
[   78.407745][ T7003] netlink: 'syz.0.285': attribute type 4 has an invalid length.
[   78.592517][ T7011] syzkaller0: entered promiscuous mode
[   78.602269][ T7011] syzkaller0: entered allmulticast mode
[   78.613833][ T7011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.621084][ T7010] tipc: Resetting bearer <eth:syzkaller0>
[   78.640952][ T7010] tipc: Disabling bearer <eth:syzkaller0>
[   78.730426][ T7018] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[   78.780514][ T7020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.290'.
[   78.946040][ T7020] bond0 (unregistering): Released all slaves
[   78.963747][ T7023] bond0: (slave gretap0): Opening slave failed
[   78.972641][ T7027] vxcan2: entered promiscuous mode
[   79.034519][ T7029] unknown channel width for channel at 909000KHz?
[   79.037467][ T7029] unknown channel width for channel at 909000KHz?
[   79.065939][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'.
[   79.186444][ T7039] net_ratelimit: 125 callbacks suppressed
[   79.186458][ T7039] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   79.188299][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'.
[   79.308146][ T7048] syz_tun: entered allmulticast mode
[   79.366171][ T7047] syz_tun: left allmulticast mode
[   79.588277][ T7056] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.602151][ T7056] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   79.869408][ T7059] netlink: 'syz.1.303': attribute type 21 has an invalid length.
[   79.872881][ T7059] netlink: 'syz.1.303': attribute type 22 has an invalid length.
[   79.884444][ T7059] netlink: 'syz.1.303': attribute type 23 has an invalid length.
[   79.887742][ T7059] netlink: 'syz.1.303': attribute type 25 has an invalid length.
[   79.891599][ T7059] netlink: 96 bytes leftover after parsing attributes in process `syz.1.303'.
[   79.959583][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[   80.205784][ T7076] syzkaller0: entered promiscuous mode
[   80.208135][ T7076] syzkaller0: entered allmulticast mode
[   80.299190][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'.
[   80.520107][ T7098] syzkaller0: entered promiscuous mode
[   80.523356][ T7098] syzkaller0: entered allmulticast mode
[   80.528035][ T7097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.542057][ T7099] tipc: Resetting bearer <eth:syzkaller0>
[   80.556729][ T7099] tipc: Disabling bearer <eth:syzkaller0>
[   80.597382][ T7102] netlink: 80 bytes leftover after parsing attributes in process `syz.0.315'.
[   80.690959][ T7107] dvmrp0: entered allmulticast mode
[   80.696173][ T7107] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[   80.710130][ T7107] veth0_vlan: entered allmulticast mode
[   80.994238][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'.
[   81.097430][ T7112] bridge_slave_0: left promiscuous mode
[   81.099605][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.104003][ T7112] bridge_slave_1: left allmulticast mode
[   81.105867][ T7112] bridge_slave_1: left promiscuous mode
[   81.107832][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.112443][ T7112] bond0: (slave bond_slave_0): Releasing backup interface
[   81.116961][ T7112] bond_slave_0: left allmulticast mode
[   81.119807][ T7112] bond0: (slave bond_slave_1): Releasing backup interface
[   81.122858][ T7112] bond_slave_1: left allmulticast mode
[   81.125594][ T7112] team_slave_0: left promiscuous mode
[   81.128392][ T7112] team0: Port device team_slave_0 removed
[   81.130838][ T7112] team_slave_1: left promiscuous mode
[   81.137630][ T7112] team0: Port device team_slave_1 removed
[   81.140665][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.148425][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.167132][ T7112] bond0: (slave netdevsim0): Releasing backup interface
[   81.171758][ T7112] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   81.177196][ T7112] bond0: (slave wlan1): Releasing backup interface
[   81.181619][ T7112] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   81.189786][ T7112] bond1: (slave bridge3): Releasing active interface
[   81.244493][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'.
[   81.410716][ T7129] netlink: 'syz.0.324': attribute type 12 has an invalid length.
[   81.413835][ T7129] netlink: 'syz.0.324': attribute type 14 has an invalid length.
[   81.886208][ T7161] netlink: 'syz.0.334': attribute type 4 has an invalid length.
[   81.916592][ T7164] delete_channel: no stack
[   82.612789][ T7201] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.642904][   T33] audit: type=1800 audit(1756956406.591:2): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=578 res=0 errno=0
[   83.036189][ T7213] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.040484][ T7213] bond3: (slave bond4): Enslaving as an active interface with an up link
[   83.054135][ T7213] bond3 (unregistering): (slave bond4): Releasing backup interface
[   83.059385][ T7213] bond3 (unregistering): Released all slaves
[   83.177755][ T7217] validate_nla: 2 callbacks suppressed
[   83.177769][ T7217] netlink: 'syz.0.350': attribute type 1 has an invalid length.
[   83.198988][ T7217] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   83.453595][ T7233] netlink: 'syz.2.356': attribute type 6 has an invalid length.
[   83.465493][ T7233] netlink: 'syz.2.356': attribute type 12 has an invalid length.
[   83.468812][ T7233] __nla_validate_parse: 16 callbacks suppressed
[   83.468823][ T7233] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.356'.
[   83.553956][   T40] wlan0: Trigger new scan to find an IBSS to join
[   83.576064][ T7236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.579734][ T7236] syzkaller0: entered promiscuous mode
[   83.582276][ T7236] syzkaller0: entered allmulticast mode
[   83.599010][ T7236] tipc: Resetting bearer <eth:syzkaller0>
[   83.604350][ T7235] tipc: Resetting bearer <eth:syzkaller0>
[   83.611444][ T7235] tipc: Disabling bearer <eth:syzkaller0>
[   83.657705][ T7238] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.672866][ T7238] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   83.689469][ T7238] bond3: (slave macvlan2): Enslaving as a backup interface with a down link
[   83.698215][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   83.701348][ T7243] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[   83.706819][ T7243] netlink: 'syz.2.359': attribute type 2 has an invalid length.
[   83.709858][ T7243] netlink: 80 bytes leftover after parsing attributes in process `syz.2.359'.
[   83.710672][ T7238] bond3: (slave macvlan2): Releasing backup interface
[   83.797509][ T7248] syzkaller0: entered promiscuous mode
[   83.799481][ T7248] syzkaller0: entered allmulticast mode
[   83.819604][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[   83.883501][ T7254] syzkaller0: entered promiscuous mode
[   83.885561][ T7254] syzkaller0: entered allmulticast mode
[   83.890288][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   83.894616][ T7254] netlink: 'syz.1.363': attribute type 20 has an invalid length.
[   83.897424][ T7254] netlink: 'syz.1.363': attribute type 21 has an invalid length.
[   84.104961][ T7270] Driver unsupported XDP return value 0 on prog  (id 89) dev N/A, expect packet loss!
[   84.129931][ T7218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.227276][ T7270] syz.1.366: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.235140][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT(full) 
[   84.235157][ T7270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.235163][ T7270] Call Trace:
[   84.235169][ T7270]  <TASK>
[   84.235174][ T7270]  dump_stack_lvl+0x189/0x250
[   84.235195][ T7270]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.235209][ T7270]  ? __pfx__printk+0x10/0x10
[   84.235226][ T7270]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.235240][ T7270]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.235254][ T7270]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   84.235269][ T7270]  warn_alloc+0x214/0x310
[   84.235291][ T7270]  ? __pfx_warn_alloc+0x10/0x10
[   84.235315][ T7270]  ? __get_vm_area_node+0x28f/0x300
[   84.235331][ T7270]  ? hash_ipportip_create+0x358/0xfe0
[   84.235347][ T7270]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   84.235362][ T7270]  ? do_syscall_64+0xfa/0x3b0
[   84.235403][ T7270]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.235424][ T7270]  ? rcu_is_watching+0x15/0xb0
[   84.235437][ T7270]  ? hash_ipportip_create+0x358/0xfe0
[   84.235449][ T7270]  ? hash_ipportip_create+0x358/0xfe0
[   84.235460][ T7270]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   84.235476][ T7270]  ? hash_ipportip_create+0x358/0xfe0
[   84.235490][ T7270]  ? hash_ipportip_create+0x2fe/0xfe0
[   84.235506][ T7270]  hash_ipportip_create+0x358/0xfe0
[   84.235525][ T7270]  ? __nla_parse+0x40/0x60
[   84.235543][ T7270]  ? __pfx_hash_ipportip_create+0x10/0x10
[   84.235558][ T7270]  ip_set_create+0xa97/0x1940
[   84.235573][ T7270]  ? ip_set_create+0x4a2/0x1940
[   84.235597][ T7270]  ? __pfx_ip_set_create+0x10/0x10
[   84.235638][ T7270]  nfnetlink_rcv_msg+0xb4d/0x1130
[   84.235656][ T7270]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   84.235685][ T7270]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   84.235738][ T7270]  netlink_rcv_skb+0x208/0x470
[   84.235751][ T7270]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   84.235769][ T7270]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   84.235789][ T7270]  ? bpf_lsm_capable+0x9/0x20
[   84.235804][ T7270]  ? security_capable+0x7e/0x2e0
[   84.235853][ T7270]  nfnetlink_rcv+0x26a/0x2520
[   84.235871][ T7270]  ? is_bpf_text_address+0x26/0x2b0
[   84.235890][ T7270]  ? kernel_text_address+0xa5/0xe0
[   84.235907][ T7270]  ? __kernel_text_address+0xd/0x40
[   84.235921][ T7270]  ? unwind_get_return_address+0x4d/0x90
[   84.235934][ T7270]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   84.235948][ T7270]  ? arch_stack_walk+0xfc/0x150
[   84.235973][ T7270]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   84.235989][ T7270]  ? stack_depot_save_flags+0x40/0x860
[   84.236008][ T7270]  ? __lock_acquire+0xab9/0xd20
[   84.236043][ T7270]  ? __lock_acquire+0xab9/0xd20
[   84.236067][ T7270]  ? netlink_deliver_tap+0x2e/0x1b0
[   84.236084][ T7270]  ? netlink_deliver_tap+0x2e/0x1b0
[   84.236102][ T7270]  netlink_unicast+0x82f/0x9e0
[   84.236125][ T7270]  ? __pfx_netlink_unicast+0x10/0x10
[   84.236142][ T7270]  ? netlink_sendmsg+0x642/0xb30
[   84.236152][ T7270]  ? skb_put+0x11b/0x210
[   84.236168][ T7270]  netlink_sendmsg+0x805/0xb30
[   84.236187][ T7270]  ? __pfx_netlink_sendmsg+0x10/0x10
[   84.236201][ T7270]  ? aa_sock_msg_perm+0xf1/0x1d0
[   84.236215][ T7270]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   84.236227][ T7270]  ? __pfx_netlink_sendmsg+0x10/0x10
[   84.236239][ T7270]  __sock_sendmsg+0x21c/0x270
[   84.236258][ T7270]  ____sys_sendmsg+0x505/0x830
[   84.236276][ T7270]  ? __pfx_____sys_sendmsg+0x10/0x10
[   84.236297][ T7270]  ? import_iovec+0x74/0xa0
[   84.236313][ T7270]  ___sys_sendmsg+0x21f/0x2a0
[   84.236328][ T7270]  ? __pfx____sys_sendmsg+0x10/0x10
[   84.236366][ T7270]  ? __fget_files+0x2a/0x420
[   84.236376][ T7270]  ? __fget_files+0x3a0/0x420
[   84.236399][ T7270]  __x64_sys_sendmsg+0x19b/0x260
[   84.236415][ T7270]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   84.236436][ T7270]  ? rcu_is_watching+0x15/0xb0
[   84.236451][ T7270]  ? do_syscall_64+0xbe/0x3b0
[   84.236467][ T7270]  do_syscall_64+0xfa/0x3b0
[   84.236499][ T7270]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.236511][ T7270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.236522][ T7270]  ? exc_page_fault+0x9f/0xf0
[   84.236535][ T7270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.236546][ T7270] RIP: 0033:0x7feae238ebe9
[   84.236558][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.236567][ T7270] RSP: 002b:00007feae31f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   84.236580][ T7270] RAX: ffffffffffffffda RBX: 00007feae25c5fa0 RCX: 00007feae238ebe9
[   84.236587][ T7270] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000006
[   84.236595][ T7270] RBP: 00007feae2411e19 R08: 0000000000000000 R09: 0000000000000000
[   84.236602][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.236609][ T7270] R13: 00007feae25c6038 R14: 00007feae25c5fa0 R15: 00007ffefae728d8
[   84.236630][ T7270]  </TASK>
[   84.239606][ T7270] Mem-Info:
[   84.432085][ T7270] active_anon:5584 inactive_anon:0 isolated_anon:0
[   84.432085][ T7270]  active_file:1414 inactive_file:38233 isolated_file:0
[   84.432085][ T7270]  unevictable:1768 dirty:149 writeback:0
[   84.432085][ T7270]  slab_reclaimable:9726 slab_unreclaimable:53222
[   84.432085][ T7270]  mapped:18233 shmem:2439 pagetables:936
[   84.432085][ T7270]  sec_pagetables:0 bounce:0
[   84.432085][ T7270]  kernel_misc_reclaimable:0
[   84.432085][ T7270]  free:293245 free_pcp:26256 free_cma:0
[   84.453273][ T7270] Node 0 active_anon:12264kB inactive_anon:0kB active_file:4484kB inactive_file:26204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42764kB dirty:460kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7480kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.469106][ T7270] Node 1 active_anon:10072kB inactive_anon:0kB active_file:1172kB inactive_file:126728kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30168kB dirty:136kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4500kB pagetables:1520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.482150][ T7270] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.494241][ T7270] lowmem_reserve[]: 0 811 811 811 811
[   84.496540][ T7270] Node 0 DMA32 free:371000kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12236kB inactive_anon:0kB active_file:4484kB inactive_file:26204kB unevictable:3536kB writepending:460kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:45892kB local_pcp:20512kB free_cma:0kB
[   84.510403][ T7270] lowmem_reserve[]: 0 0 0 0 0
[   84.512589][ T7270] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.526183][ T7270] lowmem_reserve[]: 0 0 854 854 854
[   84.528489][ T7270] Node 1 Normal free:328084kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10012kB inactive_anon:0kB active_file:1172kB inactive_file:126728kB unevictable:3536kB writepending:144kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:59436kB local_pcp:42156kB free_cma:0kB
[   84.542425][ T7270] lowmem_reserve[]: 0 0 0 0 0
[   84.544608][ T7270] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.549771][ T7270] Node 0 DMA32: 1118*4kB (UM) 428*8kB (UME) 182*16kB (UME) 164*32kB (UME) 46*64kB (UME) 16*128kB (UME) 11*256kB (UM) 4*512kB (UM) 3*1024kB (ME) 1*2048kB (E) 83*4096kB (M) = 371000kB
[   84.557571][ T7270] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   84.564761][ T7270] Node 1 Normal: 203*4kB (UM) 81*8kB (UME) 540*16kB (UME) 141*32kB (UME) 322*64kB (UME) 144*128kB (UME) 58*256kB (UME) 31*512kB (UME) 14*1024kB (UME) 8*2048kB (UME) 52*4096kB (UM) = 328084kB
[   84.572729][ T7270] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.577653][ T7270] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.581606][ T7270] 42089 total pagecache pages
[   84.583690][ T7270] 0 pages in swap cache
[   84.585469][ T7270] Free swap  = 124996kB
[   84.587266][ T7270] Total swap = 124996kB
[   84.589062][ T7270] 786301 pages RAM
[   84.590697][ T7270] 0 pages HighMem/MovableOnly
[   84.592697][ T7270] 241344 pages reserved
[   84.594664][ T7270] 0 pages cma reserved
[   84.914385][ T7305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.936983][ T7312] netlink: 'syz.2.377': attribute type 39 has an invalid length.
[   84.967282][ T7305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.245963][ T7305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.323610][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   85.327403][ T7305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.396688][ T5867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.405020][ T5867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.412043][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.424854][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.571158][ T7327] macsec2: entered promiscuous mode
[   85.574328][ T7327] bridge0: entered promiscuous mode
[   85.577320][ T7327] bridge0: port 1(macsec2) entered blocking state
[   85.579867][ T7327] bridge0: port 1(macsec2) entered disabled state
[   85.582039][ T7327] macsec2: entered allmulticast mode
[   85.585011][ T7327] bridge0: entered allmulticast mode
[   85.588259][ T7327] macsec2: left allmulticast mode
[   85.590178][ T7327] bridge0: left allmulticast mode
[   85.592611][ T7327] bridge0: left promiscuous mode
[   85.785796][ T7343] netlink: 'syz.0.385': attribute type 16 has an invalid length.
[   85.789766][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   85.795297][ T7345] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   85.797187][ T7343] netlink: 'syz.0.385': attribute type 17 has an invalid length.
[   85.881453][ T7350] sctp: [Deprecated]: syz.2.384 (pid 7350) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.881453][ T7350] Use struct sctp_sack_info instead
[   85.972320][ T5867] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.979988][ T5867] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.987054][ T5867] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.003412][ T5867] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.202424][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'.
[   86.266523][ T7379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.270600][ T7379] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.503990][ T7401] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   86.509318][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   86.516775][ T2266] wlan0: Trigger new scan to find an IBSS to join
[   86.822157][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'.
[   86.942121][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'.
[   87.215845][ T7456] bond4: entered promiscuous mode
[   87.218532][ T7456] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.236419][ T7466] batadv1: entered promiscuous mode
[   87.238671][ T7466] batadv1: entered allmulticast mode
[   87.242377][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv1
[   87.251693][ T7466] bond4: (slave batadv1): making interface the new active one
[   87.262671][ T7466] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   87.754598][ T7514] xfrm1: entered allmulticast mode
[   88.043180][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[   88.121542][ T7552] !: renamed from dummy0
[   88.566376][ T7576] validate_nla: 5 callbacks suppressed
[   88.566385][ T7576] netlink: 'syz.2.420': attribute type 7 has an invalid length.
[   88.585416][ T7576] : entered promiscuous mode
[   88.938461][ T7608] netlink: 'syz.2.426': attribute type 3 has an invalid length.
[   88.955027][ T7610] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.996085][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.999339][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.015614][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.081100][ T7619] syz_tun: entered promiscuous mode
[   89.087879][ T7619] batadv_slave_0: entered promiscuous mode
[   89.091373][ T7619] hsr1: entered allmulticast mode
[   89.095211][ T7619] syz_tun: entered allmulticast mode
[   89.098727][ T7619] batadv_slave_0: entered allmulticast mode
[   89.210641][ T7626] __nla_validate_parse: 4 callbacks suppressed
[   89.210655][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'.
[   89.452484][ T7640] netlink: 'syz.2.434': attribute type 27 has an invalid length.
[   89.460454][ T7640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.557929][   T40] wlan0: Trigger new scan to find an IBSS to join
[   89.626036][ T7650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.846092][ T7663] netlink: 68 bytes leftover after parsing attributes in process `syz.1.439'.
[   89.861141][ T7659] syzkaller0: entered promiscuous mode
[   89.863788][ T7659] syzkaller0: entered allmulticast mode
[   89.867212][ T5867] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[   89.871192][ T5867] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   89.877149][ T5867] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[   89.880812][ T5867] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   89.885054][ T5867] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[   89.888634][ T5867] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   89.892117][ T5867] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[   89.896189][ T5867] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   89.901406][ T7659] tipc: Resetting bearer <eth:syzkaller0>
[   90.454281][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.477269][ T7649] tipc: Resetting bearer <eth:syzkaller0>
[   90.489129][ T7649] tipc: Disabling bearer <eth:syzkaller0>
[   90.675589][ T7672] IPVS: set_ctl: invalid protocol: 8 172.20.20.11:20003
[   90.692673][ T7674] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   91.040539][ T7700] sctp: [Deprecated]: syz.1.451 (pid 7700) Use of int in max_burst socket option deprecated.
[   91.040539][ T7700] Use struct sctp_assoc_value instead
[   91.048192][ T7700] netlink: 76 bytes leftover after parsing attributes in process `syz.1.451'.
[   91.116201][ T7712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.453'.
[   91.132548][ T7715] netlink: 27 bytes leftover after parsing attributes in process `syz.1.454'.
[   91.230881][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'.
[   91.297025][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'.
[   91.349424][ T7736] netlink: 'syz.1.461': attribute type 1 has an invalid length.
[   91.382957][ T7736] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.441687][ T7742] ieee802154 phy1 wpan1: encryption failed: -22
[   91.446663][ T7742] netlink: 'syz.1.463': attribute type 2 has an invalid length.
[   91.464805][ T7742] k*]: entered promiscuous mode
[   91.497853][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.506705][ T7742] 8021q: adding VLAN 0 to HW filter on device team0
[   91.516283][ T7742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.524010][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'.
[   91.550350][ T7742] veth0_to_team: entered promiscuous mode
[   91.559998][ T7742] veth0_to_team: entered allmulticast mode
[   91.666576][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'.
[   91.775707][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'.
[   91.787616][ T7762] geneve3: entered promiscuous mode
[   91.790166][ T7762] geneve3: entered allmulticast mode
[   91.794525][ T5890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.799054][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.805532][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.810680][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.856648][ T7765] syzkaller0: entered promiscuous mode
[   91.859020][ T7765] syzkaller0: entered allmulticast mode
[   92.148507][ T7769] bridge0: entered promiscuous mode
[   92.150553][ T7769] macsec2: entered promiscuous mode
[   92.152808][ T7769] bridge0: port 1(macsec2) entered blocking state
[   92.156206][ T7769] bridge0: port 1(macsec2) entered disabled state
[   92.159075][ T7769] macsec2: entered allmulticast mode
[   92.161407][ T7769] bridge0: entered allmulticast mode
[   92.165212][ T7769] macsec2: left allmulticast mode
[   92.167273][ T7769] bridge0: left allmulticast mode
[   92.170483][ T7769] bridge0: left promiscuous mode
[   92.639266][ T7780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.649704][ T7780] syzkaller0: entered promiscuous mode
[   92.651790][ T7780] syzkaller0: entered allmulticast mode
[   92.682079][ T7780] tipc: Resetting bearer <eth:syzkaller0>
[   92.693469][ T7779] tipc: Resetting bearer <eth:syzkaller0>
[   92.719240][ T7779] tipc: Disabling bearer <eth:syzkaller0>
[   92.964895][ T7798] netlink: 'syz.0.481': attribute type 5 has an invalid length.
[   93.052552][ T7804] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.117911][ T7804] openvswitch: netlink: Duplicate or invalid key (type 0).
[   93.127974][ T7804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.918578][ T7844] syzkaller0: entered promiscuous mode
[   93.921033][ T7844] syzkaller0: entered allmulticast mode
[   94.392353][ T7846] netlink: 'syz.1.492': attribute type 1 has an invalid length.
[   94.434249][ T7848] macsec2: entered promiscuous mode
[   94.436023][ T7848] macsec2: entered allmulticast mode
[   94.439326][ T7851] __nla_validate_parse: 7 callbacks suppressed
[   94.439336][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[   94.476884][ T7855] netlink: 'syz.0.496': attribute type 2 has an invalid length.
[   94.483977][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[   94.549469][ T7860] netlink: 68 bytes leftover after parsing attributes in process `syz.2.497'.
[   94.555909][ T7861] team0: Port device geneve0 removed
[   94.559922][ T7861] bond0: (slave wlan1): Releasing backup interface
[   94.567361][ T7861] bond2: (slave ip6gretap1): Releasing active interface
[   94.578372][ T7861] netlink: 76 bytes leftover after parsing attributes in process `syz.0.498'.
[   94.598067][ T7861] netlink: 'syz.0.498': attribute type 10 has an invalid length.
[   94.605280][ T7861] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   94.737204][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'.
[   94.740620][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[   94.748705][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[   94.808009][ T7896] netlink: 'syz.2.507': attribute type 1 has an invalid length.
[   94.842160][ T7896] bond0: entered promiscuous mode
[   94.847865][ T7896] bond0: entered allmulticast mode
[   94.848640][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'.
[   94.850321][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.858184][ T7896] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.507'.
[   94.870165][ T7896] bridge1: entered promiscuous mode
[   94.871983][ T7896] bridge1: entered allmulticast mode
[   94.874162][ T7896] bond0: (slave bridge1): Enslaving as a backup interface with an up link
[   94.963979][ T5867] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   94.970658][ T7912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.510'.
[   94.975172][ T7912] nbd: illegal input index 65508
[   95.084560][ T5867] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   95.138526][ T7929] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   95.729211][ T7955] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[   95.939949][ T7968] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[   95.940979][ T7965] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   95.946951][ T7965] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.958833][ T7966] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   97.053751][ T8011] vlan4: entered allmulticast mode
[   97.136767][ T8013] vlan2: entered promiscuous mode
[   97.139819][ T8013] bond0: entered promiscuous mode
[   97.142688][ T8013] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   97.248176][ T8029] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.337111][ T8041] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   97.346333][ T8041] bond4: (slave batadv1): Releasing active interface
[   97.371330][ T8041] netlink: 'syz.1.542': attribute type 10 has an invalid length.
[   97.375247][ T8041] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   97.379494][ T8041] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   97.382212][ T8041] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.392895][ T8041] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.397592][ T8041] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.918470][ T8073] bond0: (slave wlan1): Releasing backup interface
[   97.922211][ T8073] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[   98.295067][ T8088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.298676][ T8088] syzkaller0: entered promiscuous mode
[   98.301220][ T8088] syzkaller0: entered allmulticast mode
[   98.309757][ T8088] ip6tnl1: entered promiscuous mode
[   98.311560][ T8088] ip6tnl1: entered allmulticast mode
[   98.316185][ T8088] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[   98.359864][ T8089] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   98.859324][ T8108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.861825][ T8108] syzkaller0: entered promiscuous mode
[   98.865554][ T8108] syzkaller0: entered allmulticast mode
[   98.894995][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[   98.901449][ T8107] tipc: Resetting bearer <eth:syzkaller0>
[   98.911561][ T8107] tipc: Disabling bearer <eth:syzkaller0>
[   98.919591][ T8110] block nbd2: not configured, cannot reconfigure
[   98.925395][ T8088] tipc: Resetting bearer <eth:syzkaller0>
[   99.096450][ T8118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.106173][ T8118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.116071][ T8118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.130135][ T8118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.136568][ T8087] tipc: Resetting bearer <eth:syzkaller0>
[   99.165750][ T8087] tipc: Disabling bearer <eth:syzkaller0>
[   99.170078][ T8118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.175437][ T8118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   99.189674][ T5867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.192642][ T5867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.196859][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.202433][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.301115][ T8136] netlink: 'syz.0.571': attribute type 2 has an invalid length.
[   99.730455][ T8159] __nla_validate_parse: 26 callbacks suppressed
[   99.730470][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.578'.
[   99.738807][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'.
[   99.744768][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.578'.
[   99.770842][ T8156] bridge0: port 1(erspan0) entered blocking state
[   99.773932][ T8156] bridge0: port 1(erspan0) entered disabled state
[   99.776776][ T8156] erspan0: entered allmulticast mode
[   99.780166][ T8156] erspan0: entered promiscuous mode
[   99.788669][ T8156] erspan0: left allmulticast mode
[   99.790724][ T8156] erspan0: left promiscuous mode
[   99.793533][ T8156] bridge0: port 1(erspan0) entered disabled state
[   99.827593][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[   99.947132][ T8174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.585'.
[   99.955167][ T8174] tipc: Invalid UDP bearer configuration
[   99.955211][ T8174] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  100.011933][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'.
[  100.018440][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'.
[  100.022176][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.586'.
[  100.129239][ T8193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.140256][ T8193] tipc: Resetting bearer <eth:syzkaller0>
[  100.149759][ T8192] tipc: Disabling bearer <eth:syzkaller0>
[  100.245566][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'.
[  100.361310][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.598'.
[  100.405119][ T8211] netlink: 'syz.0.597': attribute type 12 has an invalid length.
[  100.545389][ T8227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.550265][ T8227] tipc: Resetting bearer <eth:syzkaller0>
[  100.555565][ T8226] tipc: Disabling bearer <eth:syzkaller0>
[  100.602147][ T8230] net_ratelimit: 27 callbacks suppressed
[  100.602161][ T8230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.660717][ T8232] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  100.769905][ T8241] xfrm0: left promiscuous mode
[  100.771972][ T8241] xfrm0: left allmulticast mode
[  100.775371][ T8241] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  100.778392][ T8241] vlan0: left promiscuous mode
[  100.780382][ T8241] vlan0: left allmulticast mode
[  100.782168][ T8241] hsr_slave_1: left allmulticast mode
[  100.787265][ T8241] xfrm1: left allmulticast mode
[  100.789852][ T8241] macsec2: left promiscuous mode
[  100.792098][ T8241] macsec2: left allmulticast mode
[  100.800890][ T5851] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.804138][ T5851] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.807267][ T5851] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.810464][ T5851] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.375864][ T8268] erspan0: entered promiscuous mode
[  101.381379][ T8268] erspan0: left promiscuous mode
[  101.541288][ T8276] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.887172][ T8330] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  102.891196][ T8330] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  103.057998][ T8341] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  103.145531][ T8349] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  103.515643][ T8383] bridge4: entered promiscuous mode
[  103.571976][ T8388] batadv_slave_1: entered promiscuous mode
[  103.577796][ T8388] batadv_slave_1: left promiscuous mode
[  103.746531][ T8393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.768209][ T8393] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  103.789091][ T8393] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  103.912886][ T8411] netlink: 'syz.2.651': attribute type 8 has an invalid length.
[  104.160610][ T8421] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  104.502262][ T8435] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.563949][ T8440] macsec1: entered promiscuous mode
[  104.566296][ T8440] bond1: entered promiscuous mode
[  104.568759][ T8440] macsec1: entered allmulticast mode
[  104.571040][ T8440] bond1: entered allmulticast mode
[  104.574882][ T8440] bond1: left allmulticast mode
[  104.577008][ T8440] bond1: left promiscuous mode
[  105.311759][ T8451] __nla_validate_parse: 27 callbacks suppressed
[  105.311773][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  105.323371][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  105.365944][ T5259] IPVS: starting estimator thread 0...
[  105.376644][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'.
[  105.436019][ T8465] netlink: 'syz.2.667': attribute type 11 has an invalid length.
[  105.453707][ T8457] IPVS: using max 52 ests per chain, 124800 per kthread
[  105.498977][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'.
[  105.504086][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[  105.569932][ T8475] netlink: 76 bytes leftover after parsing attributes in process `syz.0.670'.
[  105.577616][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'.
[  105.609690][ T8477] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  105.670935][ T8487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.722556][ T8489] netlink: 52 bytes leftover after parsing attributes in process `syz.2.674'.
[  105.727429][ T8489] netlink: 52 bytes leftover after parsing attributes in process `syz.2.674'.
[  105.731130][ T8489] netlink: 52 bytes leftover after parsing attributes in process `syz.2.674'.
[  105.811849][ T8497] syzkaller0: entered promiscuous mode
[  105.815715][ T8497] syzkaller0: entered allmulticast mode
[  105.819801][ T8496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.832132][ T8498] tipc: Resetting bearer <eth:syzkaller0>
[  105.846760][ T8498] tipc: Disabling bearer <eth:syzkaller0>
[  105.855452][ T8502] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  105.949721][ T8515] netlink: 'syz.0.681': attribute type 11 has an invalid length.
[  106.137305][ T8530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.146226][ T8531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.177343][ T8535] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.292284][ T8535] syz.1.688 (8535) used obsolete PPPIOCDETACH ioctl
[  106.761936][ T8556] netlink: 'syz.0.694': attribute type 1 has an invalid length.
[  106.784572][ T8556] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.811922][ T8556] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.816288][ T8556] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  106.821792][ T8556] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  106.871748][ T8561] veth5: entered promiscuous mode
[  106.878074][ T8561] bond6: (slave veth5): Enslaving as an active interface with a down link
[  106.889875][ T6222] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  107.102647][ T8578] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  107.112985][ T8578] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  107.118117][ T8578] tipc: Enabled bearer <udp:syz0>, priority 10
[  107.181973][ T8585] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  107.319541][ T8597] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  107.439195][ T8606] netlink: 'syz.0.708': attribute type 11 has an invalid length.
[  107.538202][ T8611] openvswitch: netlink: Missing key (keys=40, expected=80)
[  107.688653][ T8617] bond0 (unregistering): Released all slaves
[  107.856528][ T8632] bond0: (slave bridge1): Removing an active aggregator
[  107.862360][ T8632] bond0: (slave bridge1): Releasing backup interface
[  107.890337][ T8632] bridge1: left promiscuous mode
[  107.892487][ T8632] bridge1: left allmulticast mode
[  107.907295][ T8631] geneve2: entered promiscuous mode
[  108.109143][ T5851] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.116653][ T8656] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  108.117871][ T8661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.132342][ T8661] netlink: 'syz.0.726': attribute type 6 has an invalid length.
[  108.149287][ T5851] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.152769][ T5851] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.158363][ T5851] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.208361][ T8666] netlink: 'syz.1.728': attribute type 58 has an invalid length.
[  108.251801][ T8675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.358308][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.399405][ T8692] bridge4: left promiscuous mode
[  108.404320][ T8692] veth5: left promiscuous mode
[  109.194812][ T8704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.197509][ T8704] syzkaller0: entered promiscuous mode
[  109.199391][ T8704] syzkaller0: entered allmulticast mode
[  109.211217][ T8704] tipc: Resetting bearer <eth:syzkaller0>
[  109.217882][ T8703] tipc: Resetting bearer <eth:syzkaller0>
[  109.258596][ T8703] tipc: Disabling bearer <eth:syzkaller0>
[  109.364575][ T8719] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  109.370044][ T8717] IPVS: stopping backup sync thread 8719 ...
[  109.456255][ T8726] ieee802154 phy1 wpan1: encryption failed: -22
[  109.674384][ T8740] bond6: (slave veth5): Releasing active interface
[  109.815111][ T8749] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.857922][ T8749] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.917719][ T8749] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.935860][ T8757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.986618][ T8749] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.068942][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.082741][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.091563][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.111015][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.577929][ T8782] __nla_validate_parse: 27 callbacks suppressed
[  110.577942][ T8782] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.760'.
[  110.584635][ T8782] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  110.612006][ T8784] netlink: 'syz.2.761': attribute type 13 has an invalid length.
[  110.616021][ T8784] netlink: 'syz.2.761': attribute type 17 has an invalid length.
[  110.669177][ T8784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.076397][ T8778] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.759'.
[  111.231252][ T8797] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.242197][ T8797] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.251495][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.767'.
[  112.030107][ T8814] netlink: 128 bytes leftover after parsing attributes in process `syz.1.769'.
[  112.098396][ T8816] netlink: 'syz.2.770': attribute type 13 has an invalid length.
[  112.101575][ T8816] netlink: 'syz.2.770': attribute type 17 has an invalid length.
[  112.108600][ T8816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.172471][ T8818] netlink: 'syz.1.769': attribute type 10 has an invalid length.
[  112.246793][ T8822] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[  112.255975][ T8822] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[  112.326051][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'.
[  112.375173][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  112.378400][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'.
[  112.382360][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'.
[  112.390305][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'.
[  112.767494][ T8855] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.829659][ T8855] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.876540][ T8855] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.938383][ T8859] netlink: 'syz.1.781': attribute type 10 has an invalid length.
[  112.941586][ T8859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.781'.
[  112.946610][ T8859] !: entered promiscuous mode
[  112.948961][ T8859] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  112.968345][ T8855] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.987034][ T8862] netlink: 'syz.1.782': attribute type 2 has an invalid length.
[  112.992284][ T8862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.030131][ T5890] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.038089][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.048940][ T8864] vlan2: entered allmulticast mode
[  113.069922][ T5890] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.078911][ T5890] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.162286][ T8868] netlink: 'syz.1.785': attribute type 1 has an invalid length.
[  113.440148][ T8890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.981383][ T8938] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  113.994582][ T8938] macvlan1: entered promiscuous mode
[  113.999687][ T8938] macvlan1: left promiscuous mode
[  114.111301][ T8947] netlink: 'syz.0.807': attribute type 32 has an invalid length.
[  114.125068][ T8947] trusted_key: syz.0.807 sent an empty control message without MSG_MORE.
[  114.305914][ T8957] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  114.410359][ T8959] bond3: option mode: unable to set because the bond device is up
[  114.454058][ T5851] bond0: (slave wlan1): link status definitely down, disabling slave
[  114.458121][ T5851] bond0: now running without any active interface!
[  114.533848][ T8966] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  114.537833][ T8966] syzkaller0: entered promiscuous mode
[  114.540005][ T8966] syzkaller0: entered allmulticast mode
[  114.647265][ T8968] IPVS: Scheduler module ip_vs_sip not found
[  115.176981][ T8996] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  115.181126][ T8996] macsec2: entered promiscuous mode
[  115.185740][ T8996] macsec2: entered allmulticast mode
[  115.188543][ T8996] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  115.205720][ T8996] macsec3: entered promiscuous mode
[  115.208291][ T8996] macsec3: entered allmulticast mode
[  116.032832][ T9013] __nla_validate_parse: 47 callbacks suppressed
[  116.032850][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'.
[  116.217189][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'.
[  116.390614][ T9028] IPVS: length: 24 != 49176
[  117.026904][ T9038] netlink: zone id is out of range
[  117.030016][ T9038] netlink: zone id is out of range
[  117.034073][ T9038] netlink: zone id is out of range
[  117.036060][ T9038] netlink: zone id is out of range
[  117.042047][ T9038] netlink: zone id is out of range
[  117.044708][ T9038] netlink: zone id is out of range
[  117.047673][ T9038] netlink: zone id is out of range
[  117.049929][ T9038] netlink: zone id is out of range
[  117.052148][ T9038] netlink: zone id is out of range
[  117.064118][ T9038] netlink: zone id is out of range
[  117.078515][ T9043] netlink: 256 bytes leftover after parsing attributes in process `syz.1.836'.
[  117.117183][ T9052] validate_nla: 1 callbacks suppressed
[  117.117195][ T9052] netlink: 'syz.0.841': attribute type 4 has an invalid length.
[  117.117523][ T9050] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  117.131338][ T9050] syzkaller0: entered promiscuous mode
[  117.135747][ T9053] netlink: 'syz.0.841': attribute type 4 has an invalid length.
[  117.143144][ T9050] syzkaller0: entered allmulticast mode
[  117.187258][ T9056] netlink: 68 bytes leftover after parsing attributes in process `syz.2.842'.
[  117.194143][ T9058] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.843'.
[  117.198243][ T9056] lo speed is unknown, defaulting to 1000
[  117.198991][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'.
[  117.211515][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'.
[  117.215036][ T9056] lo speed is unknown, defaulting to 1000
[  117.215041][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'.
[  117.215164][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'.
[  117.224978][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'.
[  117.252216][ T9056] lo speed is unknown, defaulting to 1000
[  117.274125][ T9056] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.289424][ T9063] netlink: 'syz.2.842': attribute type 4 has an invalid length.
[  117.309121][ T9056] lo speed is unknown, defaulting to 1000
[  117.319276][ T9056] lo speed is unknown, defaulting to 1000
[  117.338840][ T9056] lo speed is unknown, defaulting to 1000
[  117.360223][ T9068] pim6reg1: entered promiscuous mode
[  117.362587][ T9068] pim6reg1: entered allmulticast mode
[  118.371064][ T2280] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[  118.376886][ T9084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  118.384068][ T2280] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  118.495406][ T9106] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  118.568204][ T9115] netlink: 'syz.0.859': attribute type 15 has an invalid length.
[  118.684275][ T9130] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  118.944938][ T9157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.950316][ T9157] syzkaller0: entered promiscuous mode
[  118.952220][ T9157] syzkaller0: entered allmulticast mode
[  119.016968][ T9169] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.043184][ T9171] tipc: Resetting bearer <eth:syzkaller0>
[  119.054849][ T9156] tipc: Resetting bearer <eth:syzkaller0>
[  119.062598][ T9156] tipc: Disabling bearer <eth:syzkaller0>
[  119.066098][ T9174] netlink: 'syz.1.873': attribute type 1 has an invalid length.
[  119.138523][ T2280] IPVS: starting estimator thread 0...
[  119.235187][ T9180] IPVS: using max 52 ests per chain, 124800 per kthread
[  119.282596][ T9187] lo speed is unknown, defaulting to 1000
[  119.363667][ T9194] netlink: 'syz.0.878': attribute type 5 has an invalid length.
[  119.453548][ T9205] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  119.469593][ T9205] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.528867][ T9204] veth7: entered promiscuous mode
[  119.744713][ T9225] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  119.799484][ T9230] veth1_to_bond: entered allmulticast mode
[  119.804423][ T9230] veth1_to_bond: left allmulticast mode
[  119.841592][ T9235] netlink: 'syz.0.891': attribute type 6 has an invalid length.
[  119.847860][ T9231] lo speed is unknown, defaulting to 1000
[  119.871146][ T9235] netlink: 'syz.0.891': attribute type 12 has an invalid length.
[  120.194638][ T9245] netlink: 'syz.2.890': attribute type 6 has an invalid length.
[  121.316795][ T9288] __nla_validate_parse: 79 callbacks suppressed
[  121.316807][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  121.360810][ T9289] netlink: 52 bytes leftover after parsing attributes in process `syz.0.904'.
[  121.365276][ T9293] macvlan4: entered allmulticast mode
[  121.371218][ T9293] bond7: (slave macvlan4): Opening slave failed
[  121.403841][ T9288] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  121.415249][ T9288] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  121.657328][ T9302] batman_adv: batadv0: Adding interface: dummy0
[  121.660930][ T9302] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.672145][ T9302] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  121.696279][ T9302] batman_adv: batadv0: Adding interface: ip6gretap2
[  121.698560][ T9302] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.713817][ T9302] batman_adv: batadv0: Interface activated: ip6gretap2
[  121.842217][ T9315] lo speed is unknown, defaulting to 1000
[  121.868870][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.911'.
[  121.877123][ T9321] netlink: 68 bytes leftover after parsing attributes in process `syz.0.911'.
[  121.884030][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'.
[  121.940491][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'.
[  122.033939][ T9333] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  122.041316][ T9333] bond0: (slave gretap0): Opening slave failed
[  122.057498][ T9330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.915'.
[  122.066747][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.071471][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.178932][ T9346] validate_nla: 3 callbacks suppressed
[  122.178942][ T9346] netlink: 'syz.0.920': attribute type 21 has an invalid length.
[  122.185584][ T9346] netlink: 128 bytes leftover after parsing attributes in process `syz.0.920'.
[  122.189899][ T9346] netlink: 'syz.0.920': attribute type 4 has an invalid length.
[  122.197946][ T9346] netlink: 'syz.0.920': attribute type 5 has an invalid length.
[  122.201543][ T9346] netlink: 3 bytes leftover after parsing attributes in process `syz.0.920'.
[  122.386670][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  122.913211][ T1088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  123.204016][ T9378] veth7: left promiscuous mode
[  123.207938][ T9378] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  123.229761][ T9378] netlink: 'syz.0.930': attribute type 1 has an invalid length.
[  123.295132][ T9379] hsr_slave_0: left promiscuous mode
[  123.299051][ T9379] hsr_slave_1: left promiscuous mode
[  123.309397][ T9381] netlink: 'syz.2.932': attribute type 1 has an invalid length.
[  123.468051][ T9394] net_ratelimit: 30 callbacks suppressed
[  123.468067][ T9394] openvswitch: netlink: Flow actions attr not present in new flow.
[  123.567566][ T9399] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.645211][ T9399] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.652178][ T9402] lo speed is unknown, defaulting to 1000
[  123.706399][ T9399] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.754506][ T9399] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.795634][ T9406] syzkaller0: entered promiscuous mode
[  123.797864][ T9406] syzkaller0: entered allmulticast mode
[  123.859366][ T5890] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.872646][ T5890] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.891966][ T5890] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.910653][ T5890] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.937248][ T9408] lo speed is unknown, defaulting to 1000
[  123.981751][ T9414] netlink: 'syz.2.939': attribute type 13 has an invalid length.
[  123.984933][ T9414] netlink: 'syz.2.939': attribute type 17 has an invalid length.
[  123.992838][ T9414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.013406][ T2280] lo speed is unknown, defaulting to 1000
[  124.042172][ T9426] batman_adv: batadv0: Removing interface: dummy0
[  124.047551][ T9426] batman_adv: batadv0: Removing interface: ip6gretap2
[  124.052854][ T9424] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  124.084539][ T9424] syzkaller0: entered promiscuous mode
[  124.086728][ T9424] syzkaller0: entered allmulticast mode
[  124.301365][ T9445] netlink: 'syz.2.950': attribute type 1 has an invalid length.
[  124.339580][ T9445] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  124.352560][ T9445] veth7: entered promiscuous mode
[  124.358591][ T9445] bond3: (slave veth7): Enslaving as a backup interface with a down link
[  124.364938][ T9445] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.365295][ T5890] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  124.452566][ T9452] bond0: (slave gretap0): Opening slave failed
[  124.458856][ T9452] bond0: (slave gretap0): Opening slave failed
[  124.483342][ T5851] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  124.572628][ T9462] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  124.576249][ T9462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.611854][ T9462] syzkaller0: entered promiscuous mode
[  124.614631][ T9462] syzkaller0: entered allmulticast mode
[  125.566843][ T9463] tipc: Resetting bearer <eth:syzkaller0>
[  125.572430][ T9467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.575634][ T9468] syzkaller0: entered promiscuous mode
[  125.577896][ T9468] syzkaller0: entered allmulticast mode
[  125.582442][ T9475] tipc: Resetting bearer <eth:syzkaller0>
[  125.585125][ T9461] tipc: Resetting bearer <eth:syzkaller0>
[  125.595323][ T9461] tipc: Disabling bearer <eth:syzkaller0>
[  125.599699][ T9464] tipc: Resetting bearer <eth:syzkaller0>
[  125.608321][ T9464] tipc: Disabling bearer <eth:syzkaller0>
[  126.442192][ T9529] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  126.505947][ T9531] __nla_validate_parse: 19 callbacks suppressed
[  126.505956][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.972'.
[  126.516787][ T9531] syzkaller1: entered promiscuous mode
[  126.518844][ T9531] syzkaller1: entered allmulticast mode
[  126.704035][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'.
[  126.749117][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.978'.
[  126.789185][ T9559] pim6reg: entered allmulticast mode
[  126.792877][ T9558] pim6reg: left allmulticast mode
[  126.876744][ T9563] netlink: 44 bytes leftover after parsing attributes in process `syz.0.982'.
[  126.904196][ T9563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.982'.
[  126.914422][ T9567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.984'.
[  126.983825][ T9573] : entered promiscuous mode
[  127.156843][ T9581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.239834][ T9590] openvswitch: netlink: IPv4 tun info is not correct
[  127.268047][ T9594] warn_alloc: 1 callbacks suppressed
[  127.268056][ T9594] syz.0.993: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  127.277337][ T9594] CPU: 0 UID: 0 PID: 9594 Comm: syz.0.993 Not tainted syzkaller #0 PREEMPT(full) 
[  127.277347][ T9594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.277351][ T9594] Call Trace:
[  127.277355][ T9594]  <TASK>
[  127.277358][ T9594]  dump_stack_lvl+0x189/0x250
[  127.277373][ T9594]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.277381][ T9594]  ? __pfx__printk+0x10/0x10
[  127.277390][ T9594]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  127.277399][ T9594]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  127.277406][ T9594]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  127.277415][ T9594]  warn_alloc+0x214/0x310
[  127.277428][ T9594]  ? __pfx_warn_alloc+0x10/0x10
[  127.277441][ T9594]  ? __get_vm_area_node+0x28f/0x300
[  127.277450][ T9594]  ? fq_pie_init+0x430/0x840
[  127.277460][ T9594]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  127.277481][ T9594]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  127.277492][ T9594]  ? rcu_is_watching+0x15/0xb0
[  127.277499][ T9594]  ? fq_pie_init+0x430/0x840
[  127.277507][ T9594]  ? fq_pie_init+0x430/0x840
[  127.277515][ T9594]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  127.277525][ T9594]  ? fq_pie_init+0x430/0x840
[  127.277533][ T9594]  ? tcf_block_get+0x67/0xa0
[  127.277539][ T9594]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  127.277547][ T9594]  fq_pie_init+0x430/0x840
[  127.277557][ T9594]  ? __pfx_fq_pie_init+0x10/0x10
[  127.277565][ T9594]  qdisc_create+0x7ac/0xea0
[  127.277578][ T9594]  tc_modify_qdisc+0x1538/0x20e0
[  127.277599][ T9594]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  127.277619][ T9594]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  127.277627][ T9594]  rtnetlink_rcv_msg+0x77c/0xb70
[  127.277634][ T9594]  ? __lock_acquire+0xab9/0xd20
[  127.277644][ T9594]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  127.277650][ T9594]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  127.277662][ T9594]  netlink_rcv_skb+0x208/0x470
[  127.277668][ T9594]  ? __lock_acquire+0xab9/0xd20
[  127.277677][ T9594]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  127.277684][ T9594]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.277695][ T9594]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.277704][ T9594]  netlink_unicast+0x82f/0x9e0
[  127.277717][ T9594]  ? __pfx_netlink_unicast+0x10/0x10
[  127.277727][ T9594]  ? netlink_sendmsg+0x642/0xb30
[  127.277733][ T9594]  ? skb_put+0x11b/0x210
[  127.277742][ T9594]  netlink_sendmsg+0x805/0xb30
[  127.277752][ T9594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.277760][ T9594]  ? aa_sock_msg_perm+0xf1/0x1d0
[  127.277767][ T9594]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.277774][ T9594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.277781][ T9594]  __sock_sendmsg+0x21c/0x270
[  127.277792][ T9594]  ____sys_sendmsg+0x505/0x830
[  127.277802][ T9594]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.277813][ T9594]  ? import_iovec+0x74/0xa0
[  127.277823][ T9594]  ___sys_sendmsg+0x21f/0x2a0
[  127.277832][ T9594]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.277871][ T9594]  ? __fget_files+0x2a/0x420
[  127.277879][ T9594]  ? __fget_files+0x3a0/0x420
[  127.277888][ T9594]  __x64_sys_sendmsg+0x19b/0x260
[  127.277897][ T9594]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.277909][ T9594]  ? rcu_is_watching+0x15/0xb0
[  127.277917][ T9594]  ? do_syscall_64+0xbe/0x3b0
[  127.277927][ T9594]  do_syscall_64+0xfa/0x3b0
[  127.277933][ T9594]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.277940][ T9594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.277946][ T9594]  ? exc_page_fault+0x9f/0xf0
[  127.277954][ T9594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.277960][ T9594] RIP: 0033:0x7f5b8db8ebe9
[  127.277967][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.277973][ T9594] RSP: 002b:00007f5b8e938038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.277981][ T9594] RAX: ffffffffffffffda RBX: 00007f5b8ddc5fa0 RCX: 00007f5b8db8ebe9
[  127.277986][ T9594] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000004
[  127.277990][ T9594] RBP: 00007f5b8dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  127.277994][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.277998][ T9594] R13: 00007f5b8ddc6038 R14: 00007f5b8ddc5fa0 R15: 00007ffd22e47c88
[  127.278009][ T9594]  </TASK>
[  127.278201][ T9594] Mem-Info:
[  127.425620][ T9594] active_anon:13651 inactive_anon:0 isolated_anon:0
[  127.425620][ T9594]  active_file:1550 inactive_file:38252 isolated_file:0
[  127.425620][ T9594]  unevictable:1768 dirty:64 writeback:0
[  127.425620][ T9594]  slab_reclaimable:11790 slab_unreclaimable:80338
[  127.425620][ T9594]  mapped:18337 shmem:2422 pagetables:1008
[  127.425620][ T9594]  sec_pagetables:0 bounce:0
[  127.425620][ T9594]  kernel_misc_reclaimable:0
[  127.425620][ T9594]  free:258723 free_pcp:20262 free_cma:0
[  127.441379][ T9594] Node 0 active_anon:31756kB inactive_anon:0kB active_file:4896kB inactive_file:26228kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43060kB dirty:224kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7652kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  127.452742][ T9594] Node 1 active_anon:22848kB inactive_anon:0kB active_file:1304kB inactive_file:126780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30288kB dirty:32kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4728kB pagetables:1668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  127.462869][ T9594] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  127.472774][ T9594] lowmem_reserve[]: 0 811 811 811 811
[  127.474750][ T9594] Node 0 DMA32 free:280204kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31756kB inactive_anon:0kB active_file:4896kB inactive_file:26228kB unevictable:3536kB writepending:224kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:37576kB local_pcp:20004kB free_cma:0kB
[  127.485040][ T9594] lowmem_reserve[]: 0 0 0 0 0
[  127.486655][ T9594] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  127.496687][ T9594] lowmem_reserve[]: 0 0 854 854 854
[  127.498479][ T9594] Node 1 Normal free:280712kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22848kB inactive_anon:0kB active_file:1304kB inactive_file:126780kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43576kB local_pcp:18680kB free_cma:0kB
[  127.509266][ T9594] lowmem_reserve[]: 0 0 0 0 0
[  127.510854][ T9594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  127.515000][ T9594] Node 0 DMA32: 476*4kB (UM) 753*8kB (U) 315*16kB (U) 183*32kB (UE) 228*64kB (UM) 86*128kB (UME) 37*256kB (UM) 14*512kB (UE) 12*1024kB (UM) 1*2048kB (U) 50*4096kB (UM) = 280200kB
[  127.521047][ T9594] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  127.526517][ T9594] Node 1 Normal: 1*4kB (M) 7*8kB (UME) 389*16kB (U) 191*32kB (UE) 285*64kB (UME) 114*128kB (UME) 36*256kB (UM) 8*512kB (UME) 3*1024kB (UM) 11*2048kB (UME) 48*4096kB (UM) = 280748kB
[  127.532357][ T9594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  127.535540][ T9594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  127.538479][ T9594] 42224 total pagecache pages
[  127.540131][ T9594] 0 pages in swap cache
[  127.541787][ T9594] Free swap  = 124996kB
[  127.543240][ T9594] Total swap = 124996kB
[  127.544633][ T9594] 786301 pages RAM
[  127.545871][ T9594] 0 pages HighMem/MovableOnly
[  127.547395][ T9594] 241344 pages reserved
[  127.548739][ T9594] 0 pages cma reserved
[  127.595291][ T9605] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  127.598621][ T9606] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  127.680919][ T9612] lo speed is unknown, defaulting to 1000
[  127.697969][ T9616] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.997'.
[  127.831882][ T9633] netlink: 'syz.2.1000': attribute type 5 has an invalid length.
[  127.935773][ T9635] netlink: 'syz.1.1001': attribute type 12 has an invalid length.
[  127.941727][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'.
[  127.981804][ T9640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  128.019866][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  128.210563][ T9654] netlink: 'syz.1.1006': attribute type 2 has an invalid length.
[  128.471078][ T9657] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  128.870666][ T9679] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1014'.
[  129.111054][ T9689] lo speed is unknown, defaulting to 1000
[  129.129517][ T9691] lo: entered allmulticast mode
[  129.136920][ T9691] netlink: 'syz.1.1017': attribute type 3 has an invalid length.
[  129.139844][ T9691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.155009][ T9694] netlink: 'syz.2.1016': attribute type 13 has an invalid length.
[  129.158142][ T9694] netlink: 'syz.2.1016': attribute type 17 has an invalid length.
[  129.164422][ T9694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.549163][ T9717] openvswitch: netlink: Message has 20 unknown bytes.
[  129.562972][ T9717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.966392][ T9735] IPVS: stopping backup sync thread 9736 ...
[  130.049341][ T9738] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  130.156696][ T9754] bond3: option mode: unable to set because the bond device is up
[  130.172564][ T9755] bond0: (slave wlan1): Releasing backup interface
[  130.179725][ T9755] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  130.277384][ T9771] unknown channel width for channel at 909000KHz?
[  130.278944][ T9772] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  130.279943][ T9771] unknown channel width for channel at 909000KHz?
[  130.309909][ T9772] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  130.317026][ T9772] syzkaller0: entered promiscuous mode
[  130.318914][ T9772] syzkaller0: entered allmulticast mode
[  130.508232][ T9795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.511860][ T9795] syzkaller0: entered promiscuous mode
[  130.515483][ T9795] syzkaller0: entered allmulticast mode
[  130.519535][ T9792] netlink: 'syz.1.1043': attribute type 4 has an invalid length.
[  130.522919][ T9793] netlink: 'syz.1.1043': attribute type 4 has an invalid length.
[  130.539033][ T9795] tipc: Resetting bearer <eth:syzkaller0>
[  130.545036][ T9794] tipc: Resetting bearer <eth:syzkaller0>
[  130.552333][ T9794] tipc: Disabling bearer <eth:syzkaller0>
[  130.616758][ T9799] netlink: 'syz.2.1046': attribute type 1 has an invalid length.
[  130.637346][ T9799] lo speed is unknown, defaulting to 1000
[  130.656493][ T9803] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  130.682417][ T9807] bond8: entered promiscuous mode
[  130.687682][ T9807] bond8: entered allmulticast mode
[  130.689604][ T9807] 8021q: adding VLAN 0 to HW filter on device bond8
[  130.700273][ T9807] bridge5: entered promiscuous mode
[  130.702295][ T9807] bridge5: entered allmulticast mode
[  130.704787][ T9807] bond8: (slave bridge5): Enslaving as a backup interface with an up link
[  130.794191][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  130.905876][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  131.150421][ T9874] lo speed is unknown, defaulting to 1000
[  131.202467][ T9877] bridge6: entered promiscuous mode
[  131.638196][ T9897] veth1_to_bond: entered promiscuous mode
[  131.649921][ T9897] __nla_validate_parse: 15 callbacks suppressed
[  131.649936][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'.
[  131.716553][ T9897] veth1_to_bond (unregistering): left promiscuous mode
[  131.736026][ T9912] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1075'.
[  131.968681][ T9912] bond0 (unregistering): Released all slaves
[  132.106678][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'.
[  132.184040][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'.
[  132.292901][ T9952] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1086'.
[  132.310119][ T9953] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  135.363699][ T9974] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1087'.
[  135.646850][T10013] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  135.654639][T10013] syzkaller0: entered promiscuous mode
[  135.663119][T10013] syzkaller0: entered allmulticast mode
[  135.791359][T10022] validate_nla: 7 callbacks suppressed
[  135.791370][T10022] netlink: 'syz.1.1100': attribute type 12 has an invalid length.
[  135.816805][T10025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.821979][T10025] syzkaller0: entered promiscuous mode
[  135.827316][T10025] syzkaller0: entered allmulticast mode
[  135.887560][T10025] tipc: Resetting bearer <eth:syzkaller0>
[  135.914215][T10025] tipc: Disabling bearer <eth:syzkaller0>
[  135.997176][T10034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.004433][T10034] syzkaller0: entered promiscuous mode
[  136.045208][T10034] syzkaller0: entered allmulticast mode
[  136.056533][T10034] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1103'.
[  136.060439][T10033] tipc: Resetting bearer <eth:syzkaller0>
[  136.070252][T10033] tipc: Disabling bearer <eth:syzkaller0>
[  136.402314][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'.
[  136.591534][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'.
[  136.656116][T10068] 8021q: adding VLAN 0 to HW filter on device bond5
[  136.659380][T10068] bond4: (slave bond5): Enslaving as an active interface with an up link
[  136.681767][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  136.709541][T10068] bond4 (unregistering): (slave bond5): Releasing backup interface
[  136.738239][T10068] bond4 (unregistering): Released all slaves
[  137.326552][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1115'.
[  137.456415][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'.
[  137.724689][T10132] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1119'.
[  137.818777][T10137] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1120'.
[  137.827332][T10137] openvswitch: netlink: Flow key attr not present in new flow.
[  137.853335][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'.
[  137.868118][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'.
[  137.871223][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1123'.
[  137.893400][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'.
[  137.932695][T10141] netlink: 'syz.2.1122': attribute type 42 has an invalid length.
[  137.995482][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'.
[  138.066943][T10161] netlink: 'syz.2.1128': attribute type 1 has an invalid length.
[  138.474222][T10196] lo speed is unknown, defaulting to 1000
[  138.695930][T10212] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  138.700202][T10212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.711166][T10212] tipc: Resetting bearer <eth:syzkaller0>
[  138.716155][T10211] tipc: Resetting bearer <eth:syzkaller0>
[  138.726888][T10211] tipc: Disabling bearer <eth:syzkaller0>
[  138.737073][T10214] sctp: [Deprecated]: syz.2.1143 (pid 10214) Use of int in maxseg socket option.
[  138.737073][T10214] Use struct sctp_assoc_value instead
[  138.924868][T10229] netlink: 'syz.2.1148': attribute type 4 has an invalid length.
[  138.957932][T10231] 8021q: adding VLAN 0 to HW filter on device bond9
[  139.139184][T10244] netlink: 'syz.2.1154': attribute type 7 has an invalid length.
[  139.152340][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.718271][T10279] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  139.722079][T10279] syzkaller0: entered promiscuous mode
[  139.725642][T10279] syzkaller0: entered allmulticast mode
[  139.875567][T10283] netlink: 'syz.1.1166': attribute type 7 has an invalid length.
[  139.878537][T10283] netlink: 'syz.1.1166': attribute type 8 has an invalid length.
[  140.079943][T10293] netlink: 'syz.1.1170': attribute type 9 has an invalid length.
[  140.129660][T10295] syzkaller1: entered promiscuous mode
[  140.131564][T10295] syzkaller1: entered allmulticast mode
[  140.320459][T10302] netlink: 'syz.2.1173': attribute type 1 has an invalid length.
[  140.327376][T10302] netlink: 'syz.2.1173': attribute type 1 has an invalid length.
[  140.697980][ T2280] lo speed is unknown, defaulting to 1000
[  140.698059][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.700474][ T2280] syz2: Port: 1 Link DOWN
[  140.705630][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.710491][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.714708][ T5890] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.873568][T10341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.876540][T10341] syzkaller0: entered promiscuous mode
[  140.878497][T10341] syzkaller0: entered allmulticast mode
[  140.890105][T10341] tipc: Resetting bearer <eth:syzkaller0>
[  140.897753][T10340] tipc: Resetting bearer <eth:syzkaller0>
[  140.908337][T10340] tipc: Disabling bearer <eth:syzkaller0>
[  140.994377][T10347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.028636][T10354] validate_nla: 2 callbacks suppressed
[  141.028645][T10354] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  141.059145][T10354] veth11: entered promiscuous mode
[  141.064364][T10354] bond7: (slave veth11): Enslaving as a backup interface with a down link
[  141.319877][T10373] sch_fq: defrate 4095 ignored.
[  141.481871][T10389] netlink: 'syz.2.1199': attribute type 4 has an invalid length.
[  141.571159][T10404] netlink: 'syz.0.1203': attribute type 10 has an invalid length.
[  141.586837][T10406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.632253][T10412] bond8: (slave bridge5): Removing an active aggregator
[  141.638539][T10412] bond8: (slave bridge5): Releasing backup interface
[  141.642813][T10412] bridge5: left promiscuous mode
[  141.646273][T10412] bridge5: left allmulticast mode
[  141.672972][T10415] netlink: 'syz.1.1207': attribute type 6 has an invalid length.
[  141.836338][T10437] __nla_validate_parse: 24 callbacks suppressed
[  141.836348][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'.
[  141.890497][T10441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1214'.
[  141.894391][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'.
[  141.898873][T10441] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  142.449722][T10452] 8021q: adding VLAN 0 to HW filter on device bond8
[  142.464727][T10452] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  142.469219][T10452] bond8: (slave macvlan5): Enslaving as a backup interface with a down link
[  142.476493][T10452] bond8: (slave macvlan6): Error -98 calling set_mac_address
[  142.509268][T10453] bond3: (slave ip6gretap2): Removing an active aggregator
[  142.512285][T10453] bond3: (slave ip6gretap2): Releasing backup interface
[  142.516090][T10453] bond3: (slave ip6gretap2): the permanent HWaddr of slave - c6:4a:fa:f4:03:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  142.525723][T10453] bond3: (slave veth7): Releasing backup interface
[  142.530515][T10453] bond7: (slave veth11): Releasing backup interface
[  142.536536][T10453] bond8: (slave macvlan5): Releasing backup interface
[  142.645981][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'.
[  142.652698][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.669441][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'.
[  142.696695][T10463] 8021q: adding VLAN 0 to HW filter on device bond11
[  142.701072][T10463] bond10: (slave bond11): Enslaving as an active interface with an up link
[  142.759676][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'.
[  142.769097][T10471] bond10 (unregistering): (slave bond11): Releasing backup interface
[  142.777035][T10471] bond10 (unregistering): Released all slaves
[  142.888281][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'.
[  142.950151][T10482] netlink: 'syz.2.1225': attribute type 4 has an invalid length.
[  142.959806][T10482] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1225'.
[  143.008215][T10496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1227'.
[  143.016163][T10496] netlink: 'syz.0.1227': attribute type 1 has an invalid length.
[  143.091079][T10509] netlink: 'syz.1.1232': attribute type 1 has an invalid length.
[  143.097648][T10509] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1232'.
[  143.128924][T10512] netlink: 'syz.1.1232': attribute type 1 has an invalid length.
[  143.248765][T10523] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  143.252251][T10523] syzkaller0: entered promiscuous mode
[  143.254941][T10523] syzkaller0: entered allmulticast mode
[  143.295867][ T6047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.298773][ T6047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.371778][T10541] openvswitch: netlink: Missing valid actions attribute.
[  143.377499][T10541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.440805][T10548] netlink: 'syz.2.1243': attribute type 16 has an invalid length.
[  143.448779][T10548] netlink: 'syz.2.1243': attribute type 17 has an invalid length.
[  143.492669][T10548] IPv6: NLM_F_REPLACE set, but no existing node found!
[  143.495659][T10549] IPv6: NLM_F_REPLACE set, but no existing node found!
[  143.778338][T10581] netlink: zone id is out of range
[  143.783773][T10581] netlink: zone id is out of range
[  143.786152][T10581] netlink: zone id is out of range
[  143.788634][T10581] netlink: get zone limit has 8 unknown bytes
[  143.791826][T10579] veth11: entered promiscuous mode
[  143.909569][T10592] mac80211_hwsim hwsim5 wlan0 (unregistering): left allmulticast mode
[  143.972735][T10596] vlan3: entered promiscuous mode
[  143.975183][T10596] gretap0: entered promiscuous mode
[  144.069221][T10600] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  144.085732][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.306747][T10638] openvswitch: netlink: Flow key attr not present in new flow.
[  144.516248][T10638] lo speed is unknown, defaulting to 1000
[  144.799415][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.802886][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.812421][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.813794][T10685] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  144.828603][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.919386][T10694] 8021q: adding VLAN 0 to HW filter on device bond12
[  144.922349][T10694] bond10: (slave bond12): making interface the new active one
[  144.926740][T10694] bond10: (slave bond12): Enslaving as an active interface with an up link
[  144.929158][T10701] xt_time: unknown flags 0xf4
[  145.022523][T10709] syzkaller1: entered promiscuous mode
[  145.026621][T10709] syzkaller1: entered allmulticast mode
[  145.477799][T10757] unknown channel width for channel at 909000KHz?
[  145.480593][T10757] unknown channel width for channel at 909000KHz?
[  146.030735][T10781] lo speed is unknown, defaulting to 1000
[  146.367750][T10801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.371206][T10801] syzkaller0: entered promiscuous mode
[  146.380864][T10801] syzkaller0: entered allmulticast mode
[  146.398587][T10801] tipc: Resetting bearer <eth:syzkaller0>
[  146.408995][T10800] tipc: Resetting bearer <eth:syzkaller0>
[  146.423534][T10800] tipc: Disabling bearer <eth:syzkaller0>
[  146.786960][T10835] lo speed is unknown, defaulting to 1000
[  146.830569][T10841] validate_nla: 7 callbacks suppressed
[  146.830583][T10841] netlink: 'syz.0.1329': attribute type 5 has an invalid length.
[  147.069852][T10864] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  147.075264][T10860] __nla_validate_parse: 37 callbacks suppressed
[  147.075273][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'.
[  147.082341][T10864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.104486][T10864] tipc: Resetting bearer <eth:syzkaller0>
[  147.114417][T10863] tipc: Resetting bearer <eth:syzkaller0>
[  147.125464][T10863] tipc: Disabling bearer <eth:syzkaller0>
[  147.206572][T10873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'.
[  147.258038][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'.
[  147.261824][T10875] nbd: must specify a device to reconfigure
[  147.316838][T10879] syzkaller1: entered allmulticast mode
[  147.472201][T10902] macsec0: entered allmulticast mode
[  147.476880][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  147.480484][T10902] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.1346'.
[  147.518884][T10905] netlink: 'syz.0.1347': attribute type 1 has an invalid length.
[  147.579601][T10905] 8021q: adding VLAN 0 to HW filter on device bond13
[  147.621807][T10910] bond13: (slave bridge8): making interface the new active one
[  147.625054][T10910] bond13: (slave bridge8): Enslaving as an active interface with an up link
[  147.644805][T10905] bond13: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  147.808158][T10922] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1349'.
[  147.812617][T10920] netlink: 'syz.2.1350': attribute type 10 has an invalid length.
[  147.817876][T10920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'.
[  147.821401][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'.
[  147.866636][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'.
[  147.912197][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'.
[  147.922504][T10930] vlan2: entered promiscuous mode
[  147.927904][T10930] bond0: entered promiscuous mode
[  147.930245][T10930] vlan2: entered allmulticast mode
[  147.932465][T10930] bond0: entered allmulticast mode
[  148.016376][T10934] netlink: 'syz.1.1354': attribute type 7 has an invalid length.
[  148.019046][T10934] netlink: 'syz.1.1354': attribute type 8 has an invalid length.
[  148.065418][T10945] lo speed is unknown, defaulting to 1000
[  148.108115][T10946] netlink: 'syz.1.1357': attribute type 1 has an invalid length.
[  148.798307][T10971] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  148.825397][T10971] 8021q: adding VLAN 0 to HW filter on device bond10
[  148.848082][T10971] bond10: (slave veth13): Enslaving as an active interface with a down link
[  148.859384][T10971] 8021q: adding VLAN 0 to HW filter on device batadv1
[  148.862051][T10971] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  148.875587][T10974] net_ratelimit: 1 callbacks suppressed
[  148.875601][T10974] openvswitch: netlink: Flow key attr not present in new flow.
[  149.167452][T11001] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  149.207337][T11003] netlink: 'syz.0.1371': attribute type 7 has an invalid length.
[  149.217334][T11003] netlink: 'syz.0.1371': attribute type 8 has an invalid length.
[  149.315685][T11011] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.318823][T11012] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.856565][T10984] delete_channel: no stack
[  149.891798][T11019] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  149.899420][T11019] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  150.197407][T11034] netlink: 'syz.1.1379': attribute type 4 has an invalid length.
[  150.241758][T11041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.269470][T11032] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  151.335260][T11071] gretap0: entered promiscuous mode
[  152.157556][T11083] __nla_validate_parse: 15 callbacks suppressed
[  152.157571][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'.
[  152.252214][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1395'.
[  152.254028][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1396'.
[  152.259657][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'.
[  152.457543][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1399'.
[  152.512480][T11099] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1401'.
[  152.512494][T11100] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1401'.
[  152.522850][T11099] netlink: 'syz.0.1401': attribute type 1 has an invalid length.
[  152.566786][ T6047] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  152.567614][T11100] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1401'.
[  152.572546][T11099] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1401'.
[  152.706126][T11110] syzkaller0: entered promiscuous mode
[  152.708765][T11110] syzkaller0: entered allmulticast mode
[  152.887095][T11117] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  152.939483][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'.
[  153.096422][T11138] unsupported nlmsg_type 40
[  153.169531][T11149] netlink: 'syz.1.1415': attribute type 13 has an invalid length.
[  153.190144][T11141] lo speed is unknown, defaulting to 1000
[  153.295997][T11155] lo speed is unknown, defaulting to 1000
[  153.298737][T11162] netlink: 'syz.1.1420': attribute type 1 has an invalid length.
[  153.328565][T11162] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.350735][T11162] bond0: (slave gretap2): making interface the new active one
[  153.362191][T11162] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  153.400281][T11172] ip6tnl3: entered promiscuous mode
[  153.461417][T11177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.475495][T11177] syzkaller0: entered promiscuous mode
[  153.482754][T11177] syzkaller0: entered allmulticast mode
[  153.543625][T11177] tipc: Resetting bearer <eth:syzkaller0>
[  153.565020][T11176] tipc: Resetting bearer <eth:syzkaller0>
[  153.599076][T11176] tipc: Disabling bearer <eth:syzkaller0>
[  153.602939][T11186] netlink: 'syz.0.1429': attribute type 39 has an invalid length.
[  153.979547][T11213] pim6reg: entered allmulticast mode
[  153.982829][T11213] pim6reg: left allmulticast mode
[  154.037960][T11222] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  154.042168][T11222] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  154.046783][T11222] netlink: 'syz.2.1439': attribute type 2 has an invalid length.
[  154.109968][T11224] lo speed is unknown, defaulting to 1000
[  154.336254][T11253] netlink: 'syz.1.1447': attribute type 2 has an invalid length.
[  154.347369][T11255] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  154.380078][T11257] netlink: 'syz.2.1449': attribute type 7 has an invalid length.
[  154.417062][T11257] bridge6: port 1(bond12) entered blocking state
[  154.419285][T11257] bridge6: port 1(bond12) entered disabled state
[  154.421567][T11257] bond12: entered allmulticast mode
[  154.482976][T11270] netlink: 'syz.2.1452': attribute type 6 has an invalid length.
[  154.518399][T11276] lo speed is unknown, defaulting to 1000
[  154.895627][T11305] siw: device registration error -23
[  154.986597][T11315] netlink: 'syz.2.1465': attribute type 13 has an invalid length.
[  155.004541][T11315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.014008][ T5313] lo speed is unknown, defaulting to 1000
[  155.015988][ T5313] syz2: Port: 1 Link ACTIVE
[  155.031890][T11315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.115510][T11315] lo speed is unknown, defaulting to 1000
[  155.198680][T11320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.007868][T11343] tc_dump_action: action bad kind
[  156.011593][T11343] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  156.258408][T11361] hsr_slave_0: left promiscuous mode
[  156.260883][T11361] hsr_slave_1: left promiscuous mode
[  156.430554][T11366] ------------[ cut here ]------------
[  156.432447][T11366] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  156.436082][T11366] WARNING: CPU: 1 PID: 11366 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.439680][T11366] Modules linked in:
[  156.441648][T11366] CPU: 1 UID: 0 PID: 11366 Comm: syz.0.1481 Not tainted syzkaller #0 PREEMPT(full) 
[  156.445964][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.449411][T11366] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.451663][T11366] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 e0 37 b0 8c e8 26 d5 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 77 36 d7 f6 90 0f 0b 90 42 80 7c 3d
[  156.458441][T11366] RSP: 0018:ffffc9000a876f80 EFLAGS: 00010246
[  156.460589][T11366] RAX: 9f6cd393e13f1a00 RBX: 0000000000000000 RCX: 0000000000080000
[  156.463214][T11366] RDX: ffffc90003a42000 RSI: 00000000000063d7 RDI: 00000000000063d8
[  156.465934][T11366] RBP: ffff888031e89728 R08: 0000000000000003 R09: 0000000000000004
[  156.468595][T11366] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888031e8a9d0
[  156.471390][T11366] R13: ffff888031e88d80 R14: 1ffff110063d12e5 R15: dffffc0000000000
[  156.474495][T11366] FS:  00007f5b8e9386c0(0000) GS:ffff8881a3c16000(0000) knlGS:0000000000000000
[  156.477411][T11366] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  156.479585][T11366] CR2: 0000000000000000 CR3: 00000000421de000 CR4: 00000000000006f0
[  156.482299][T11366] Call Trace:
[  156.484240][T11366]  <TASK>
[  156.485352][T11366]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  156.487542][T11366]  __ieee80211_link_release_channel+0x33b/0x4a0
[  156.489548][T11366]  ? __pfx_ieee80211_uninit+0x10/0x10
[  156.491305][T11366]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  156.493704][T11366]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  156.495886][T11366]  ? __pfx_call_rcu+0x10/0x10
[  156.497443][T11366]  unregister_netdevice_queue+0x33c/0x380
[  156.499555][T11366]  ? kernfs_remove_by_name_ns+0xee/0x130
[  156.501428][T11366]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  156.503735][T11366]  _cfg80211_unregister_wdev+0x165/0x590
[  156.505768][T11366]  ieee80211_if_remove+0x256/0x310
[  156.507506][T11366]  ieee80211_del_iface+0x19/0x30
[  156.509083][T11366]  cfg80211_remove_virtual_intf+0x231/0x3f0
[  156.510956][T11366]  genl_family_rcv_msg_doit+0x215/0x300
[  156.512779][T11366]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.515078][T11366]  ? bpf_lsm_capable+0x9/0x20
[  156.516601][T11366]  ? security_capable+0x7e/0x2e0
[  156.518196][T11366]  genl_rcv_msg+0x60e/0x790
[  156.519716][T11366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.521426][T11366]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  156.523273][T11366]  ? __pfx_nl80211_del_interface+0x10/0x10
[  156.525255][T11366]  ? __pfx_nl80211_post_doit+0x10/0x10
[  156.527098][T11366]  netlink_rcv_skb+0x208/0x470
[  156.528626][T11366]  ? __lock_acquire+0xab9/0xd20
[  156.530194][T11366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.531832][T11366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.533743][T11366]  ? down_read+0x1ad/0x2e0
[  156.535388][T11366]  genl_rcv+0x28/0x40
[  156.536774][T11366]  netlink_unicast+0x82f/0x9e0
[  156.538353][T11366]  ? __pfx_netlink_unicast+0x10/0x10
[  156.540201][T11366]  ? netlink_sendmsg+0x642/0xb30
[  156.541794][T11366]  ? skb_put+0x11b/0x210
[  156.543213][T11366]  netlink_sendmsg+0x805/0xb30
[  156.545008][T11366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.546954][T11366]  ? aa_sock_msg_perm+0xf1/0x1d0
[  156.548909][T11366]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.550724][T11366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.552439][T11366]  __sock_sendmsg+0x21c/0x270
[  156.554170][T11366]  ____sys_sendmsg+0x505/0x830
[  156.555777][T11366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.557513][T11366]  ? import_iovec+0x74/0xa0
[  156.559004][T11366]  ___sys_sendmsg+0x21f/0x2a0
[  156.560551][T11366]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.562261][T11366]  ? __fget_files+0x2a/0x420
[  156.563935][T11366]  ? __fget_files+0x3a0/0x420
[  156.565653][T11366]  __x64_sys_sendmsg+0x19b/0x260
[  156.567479][T11366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.569315][T11366]  ? rcu_is_watching+0x15/0xb0
[  156.570862][T11366]  ? do_syscall_64+0xbe/0x3b0
[  156.572400][T11366]  do_syscall_64+0xfa/0x3b0
[  156.573948][T11366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.575884][T11366]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.577829][T11366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.579743][T11366] RIP: 0033:0x7f5b8db8ebe9
[  156.581330][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.587724][T11366] RSP: 002b:00007f5b8e938038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.590456][T11366] RAX: ffffffffffffffda RBX: 00007f5b8ddc5fa0 RCX: 00007f5b8db8ebe9
[  156.593321][T11366] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  156.596469][T11366] RBP: 00007f5b8dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  156.599405][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.602411][T11366] R13: 00007f5b8ddc6038 R14: 00007f5b8ddc5fa0 R15: 00007ffd22e47c88
[  156.605512][T11366]  </TASK>
[  156.606659][T11366] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  156.609101][T11366] CPU: 1 UID: 0 PID: 11366 Comm: syz.0.1481 Not tainted syzkaller #0 PREEMPT(full) 
[  156.612073][T11366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.615268][T11366] Call Trace:
[  156.616309][T11366]  <TASK>
[  156.617239][T11366]  dump_stack_lvl+0x99/0x250
[  156.618636][T11366]  ? __asan_memcpy+0x40/0x70
[  156.620181][T11366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.622023][T11366]  ? __pfx__printk+0x10/0x10
[  156.623467][T11366]  vpanic+0x281/0x750
[  156.624744][T11366]  ? __pfx__printk+0x10/0x10
[  156.626563][T11366]  ? __pfx_vpanic+0x10/0x10
[  156.628080][T11366]  ? is_bpf_text_address+0x26/0x2b0
[  156.629902][T11366]  panic+0xb9/0xc0
[  156.631288][T11366]  ? __pfx_panic+0x10/0x10
[  156.632909][T11366]  __warn+0x31b/0x4b0
[  156.634412][T11366]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.636640][T11366]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.638991][T11366]  report_bug+0x2be/0x4f0
[  156.640796][T11366]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.643175][T11366]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.645504][T11366]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  156.647858][T11366]  handle_bug+0x84/0x160
[  156.649622][T11366]  exc_invalid_op+0x1a/0x50
[  156.651517][T11366]  asm_exc_invalid_op+0x1a/0x20
[  156.653577][T11366] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  156.656186][T11366] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 e0 37 b0 8c e8 26 d5 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 77 36 d7 f6 90 0f 0b 90 42 80 7c 3d
[  156.663958][T11366] RSP: 0018:ffffc9000a876f80 EFLAGS: 00010246
[  156.666494][T11366] RAX: 9f6cd393e13f1a00 RBX: 0000000000000000 RCX: 0000000000080000
[  156.669719][T11366] RDX: ffffc90003a42000 RSI: 00000000000063d7 RDI: 00000000000063d8
[  156.673066][T11366] RBP: ffff888031e89728 R08: 0000000000000003 R09: 0000000000000004
[  156.676283][T11366] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888031e8a9d0
[  156.679510][T11366] R13: ffff888031e88d80 R14: 1ffff110063d12e5 R15: dffffc0000000000
[  156.682764][T11366]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  156.685212][T11366]  __ieee80211_link_release_channel+0x33b/0x4a0
[  156.687686][T11366]  ? __pfx_ieee80211_uninit+0x10/0x10
[  156.689791][T11366]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  156.692296][T11366]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  156.694978][T11366]  ? __pfx_call_rcu+0x10/0x10
[  156.696857][T11366]  unregister_netdevice_queue+0x33c/0x380
[  156.699148][T11366]  ? kernfs_remove_by_name_ns+0xee/0x130
[  156.701457][T11366]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  156.704001][T11366]  _cfg80211_unregister_wdev+0x165/0x590
[  156.706037][T11366]  ieee80211_if_remove+0x256/0x310
[  156.707813][T11366]  ieee80211_del_iface+0x19/0x30
[  156.709484][T11366]  cfg80211_remove_virtual_intf+0x231/0x3f0
[  156.711623][T11366]  genl_family_rcv_msg_doit+0x215/0x300
[  156.713497][T11366]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.715407][T11366]  ? bpf_lsm_capable+0x9/0x20
[  156.717254][T11366]  ? security_capable+0x7e/0x2e0
[  156.719100][T11366]  genl_rcv_msg+0x60e/0x790
[  156.720614][T11366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.722198][T11366]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  156.723974][T11366]  ? __pfx_nl80211_del_interface+0x10/0x10
[  156.726146][T11366]  ? __pfx_nl80211_post_doit+0x10/0x10
[  156.728199][T11366]  netlink_rcv_skb+0x208/0x470
[  156.729851][T11366]  ? __lock_acquire+0xab9/0xd20
[  156.731645][T11366]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.733558][T11366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.735520][T11366]  ? down_read+0x1ad/0x2e0
[  156.737228][T11366]  genl_rcv+0x28/0x40
[  156.738711][T11366]  netlink_unicast+0x82f/0x9e0
[  156.740528][T11366]  ? __pfx_netlink_unicast+0x10/0x10
[  156.742544][T11366]  ? netlink_sendmsg+0x642/0xb30
[  156.744266][T11366]  ? skb_put+0x11b/0x210
[  156.745718][T11366]  netlink_sendmsg+0x805/0xb30
[  156.747428][T11366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.749410][T11366]  ? aa_sock_msg_perm+0xf1/0x1d0
[  156.751296][T11366]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.753139][T11366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.754864][T11366]  __sock_sendmsg+0x21c/0x270
[  156.756436][T11366]  ____sys_sendmsg+0x505/0x830
[  156.758029][T11366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.759877][T11366]  ? import_iovec+0x74/0xa0
[  156.761342][T11366]  ___sys_sendmsg+0x21f/0x2a0
[  156.762921][T11366]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.764666][T11366]  ? __fget_files+0x2a/0x420
[  156.766220][T11366]  ? __fget_files+0x3a0/0x420
[  156.767965][T11366]  __x64_sys_sendmsg+0x19b/0x260
[  156.769661][T11366]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.771671][T11366]  ? rcu_is_watching+0x15/0xb0
[  156.773560][T11366]  ? do_syscall_64+0xbe/0x3b0
[  156.775184][T11366]  do_syscall_64+0xfa/0x3b0
[  156.776672][T11366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.778935][T11366]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.781243][T11366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.783410][T11366] RIP: 0033:0x7f5b8db8ebe9
[  156.785166][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.791613][T11366] RSP: 002b:00007f5b8e938038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.794497][T11366] RAX: ffffffffffffffda RBX: 00007f5b8ddc5fa0 RCX: 00007f5b8db8ebe9
[  156.797546][T11366] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  156.800339][T11366] RBP: 00007f5b8dc11e19 R08: 0000000000000000 R09: 0000000000000000
[  156.803063][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.805996][T11366] R13: 00007f5b8ddc6038 R14: 00007f5b8ddc5fa0 R15: 00007ffd22e47c88
[  156.808735][T11366]  </TASK>
[  156.810601][T11366] Kernel Offset: disabled
[  156.812372][T11366] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:28:00  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff92a2f1d0 RBX=0000000000000004 RCX=ffff888105ac1cc0 RDX=0000000000000000
RSI=ffffffff8f5fd9a0 RDI=0000000000000001 RBP=ffffc90002e9fe38 RSP=ffffc90002e9fd20
R8 =ffff888105ac1cc0 R9 =0000000000000002 R10=0000000000000008 R11=0000000000000000
R12=ffffffff99fc6b00 R13=dffffc0000000000 R14=ffff888110d44100 R15=ffff888110d44130
RIP=ffffffff89f09b0e RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8c3fa9a800 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056472fbf87e8 CR3=0000000108388000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000016389 RDI=000000000001638a RBP=00000000000003f8 RSP=ffffc9000a876730
R8 =ffff888106da8237 R9 =1ffff11020db5046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8ed R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5b8e9386c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000421de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007feae2412e53
XMM06=0000000000000000 00007feae2412e4d XMM07=0000000000000000 00007feae2412e61
XMM08=0000000000000000 00007feae2412ee7 XMM09=0000000000000000 00007feae2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
