last executing test programs:

1.260563026s ago: executing program 0 (id=1628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x48040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0xc)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x24000080)

1.259586371s ago: executing program 2 (id=1629):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="62f3a6d7228fd4ff6da16b5497f5735d820200deabd023a22428420f2a0ad687e7cdc2992ee6078c0036acda4ff1132287a4d370b2a7eac81b0e97e19289e6c39f7d139a46a552eada0efc2fb6f887ef1cd1c6089344de0d832635bb72d9210f1d61f874d69ab318ba4b012c5b303c18b65227e2ef6e3f88458e9cc7bbf23d9a174edfe5f39f0a63ae9faad9a19108f26cc6173cc7d4780e81347ae98c8ae45db5dcfd9bca9c234c6ab404ba88bbd86a682c17104b628efa0851664f42", 0xbd, 0x48000, &(0x7f00000000c0)={0xa, 0x4e20, 0x100, @mcast2, 0x3}, 0x1c) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={<r2=>0x0, 0xe0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x7a}, 0x8) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2e}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2b}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc0000000}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000054)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64)
r5 = socket$inet_sctp(0x2, 0x0, 0x84) (rerun: 64)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={r2, 0x1}, &(0x7f0000000340)=0xc) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = gettid()
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4018, r5}, 0x18) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x0, 0x5, 0x7, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7f}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000580)='syzkaller\x00', 0x30706ac5, 0x2e, &(0x7f00000005c0)=""/46, 0x100, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x8, 0x76}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x48}, 0x94)
sendmsg$nl_route(r6, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newlinkprop={0x74, 0x6c, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x0, 0x401}, [@IFLA_NET_NS_PID={0x8, 0x13, r8}, @IFLA_WEIGHT={0x8, 0xf, 0x10}, @IFLA_LINKMODE={0x5}, @IFLA_MTU={0x8, 0x4, 0x300}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1000}, @IFLA_GROUP={0x8, 0x1b, 0xc0000000}, @IFLA_WEIGHT={0x8, 0xf, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c1}, 0x1) (async, rerun: 64)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async, rerun: 64)
r11 = accept(r4, 0x0, &(0x7f0000000980))
socket$inet(0x2, 0x2, 0xffffff86) (async)
sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x43}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x702629d1bcc2a63b}, 0x800) (async)
setsockopt$inet_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000000ac0)=@ccm_128={{0x304}, "0ee58d1df40821d9", "e256b512d5b13e615723967091f55a17", "cd8a4ee7", "0300ba021351ccef"}, 0x28) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0) (async)
sendmsg(r6, &(0x7f0000002380)={&(0x7f0000000b40)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000bc0)="a687f5f030bd822c88017d92ca573352b2c577a18911edf9e22db2d08aecbd2c640160b69d1fa398be0faef188b8aadb033bffdeb0c6bf22498b8e61f798b7bf2c9c3ad5ce2c49361d6261c5402bdbae5578ce1bbddc2f436294bd0ffa3b61253366e4ecff81193b56d9ea45c34640472f4290012f8714833ce09c4ad3b2f9c1629037221c2aa06a89f5c5ac77735cc612e85dd588bff40b566fd048a99f0256980e09f6006037f2f4f3f43e8da98636b325", 0xb2}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="556272e1f6e608c88baaeadfbd219931417ba15db1af5daa736089315b5b19c0b428eb22d7d479c57c686d3b0665677a1e469b16e5b422", 0x37}, {&(0x7f0000001cc0)="2e44524d327d68a29bb82ef2c52c492c0dbae009d28b0516c5694a1d1fbbbabfb6ef183a71bb58ae6fff160066ad3f21518f5db8f8aa85c69c84ec962c10d366dd6676d8d2c470cce43b4a035ad84141534e161633cb6b576a46723334e6d705dcc014a3680718412660dc619fe46abf23388923c780ad94f3c111307a127cce1c257447afb6685b9e3a342bdfa2ba64fb48049faa3c1b3860d9774a0644edfb580976416884430ccd3822bc1af5c807863fb9839513", 0xb6}, {&(0x7f0000001d80)="b2167883", 0x4}, {&(0x7f0000001dc0)="2e4e53a8621b8fc14709c54c5082a7999fda0ff66f1a341a0cc46d81fb7ad40a5d7c46ed5f174024b73468e12b16dbf3c4e20da3d6e9413e997f2807b795b6f4fa51e08546b1a536030b8e542f30ac7a54a7444a305839df1b852d4fbf685f990a", 0x61}, {&(0x7f0000001e40)="41926d617b8b68a045640be91d49c35ee8e6696d574d8e8d38e4dfd0d5f276cc152b2d3cac5be0b0a935e42131f54ebc67e47c99d437b9a5d7c251ed0ec68667b637b1eb8a453491e51fece694aa0e00b5155342beccb2aa43d23b0cccc33844a69c7119ae39ffdfdede3d5d3a33760c704a0983c316e52976576fc335e2011227f11d32ebda07c0abad7a7fecbee2c0afeeb772ce9bbcc730dfb2b4ba43835b9d726e995e4160b43127f2dd293eb99f3746950885ded7e6b3a02b8008ad6fa2a00e47dabdb5dcac3c61d2a63c521fd7627c7485033012d1a513129ad1", 0xdd}], 0x7, &(0x7f0000001fc0)=[{0x98, 0x1, 0xb03, "df833c213365f9da0f5ee7fbb04c18d9a861bb8185baabc1116c35184b124979c774a90e830e0fbf2d3bc64bb8c4941b79a4dd1f9c0f548f2f210852b44d4c0cdb58dd473472c9539210024632eb126584438039cf86185202297ed121ee5ea7efcf58f2bb4d7755d462544d9fdfa3d5ace57fbc0dc3c341d5cc195782f38c9c2a7c30ee2b63"}, {0xe0, 0x112, 0x8a46, "e017edbe0e193f02b899c2114bf835de924887785e0e3ca682b2574001624bc8c72fded2aafd5cab9b9fd6ec43664adb4a07615b7072dac7adf60f039e866855a0a23443b90ab7896e0526c80d4c1adfbb46a7b435ffe2f0295c2aafb394875ba68841be25ed2dc76e1a99da8a93930f957158d669467188145b400fd988e658b1f5ac03a05baf69a349ecf3e99ed0d6b5a0c7702e9368afed5570c6c0b4d3c04ea8c643280e66dc26ac8976281d7bc661dba8d3b837d89d08a9489eec619f8eec6a76d4e2e63f33f3ac3fbaaace74d9"}, {0xd0, 0x108, 0x1, "f9b2b7cc11eb601dc803bd74a8b95889fdec990bcd66257a1a10d06205fe3653c87f12f6915c1b680f6a7e4b7960d5d37711126d722c4d7aeb2478b3f10153a5a78997b2af6c8f7ed2ccadeff35c936846014e0217601c09eeab8555402ee6a76b9924870ce64d64b69b5a5050b9050b304279aaf6b25e24654a28e3810ff8313a09c91f740cfcee3282bbf5aa906ba849e892744475131957dd7aec1e0c7a22d5dc5de530067e2ed09a361d78997af2857fc878c02deeba7a8bda"}, {0x30, 0x101, 0x8001, "905d7d4ddacfc9829392c3e598175035d4abf756fab479efc17d987424"}, {0xe8, 0x107, 0x6, "afc92f27222882d2f4e6448533c9e1f07f0b86e71b6650fa941f70b30ab56a34fa7a34c02660db95fa6fddf53e83c0617eeca47691762b6a757a0a4932d8b4ba4b835fa4d8ef3ec6cee4bba27a8092ab4ce839fb5493a742b365ccee4ef68512f0b24d9759f0a56ab907d3a72f013c933b363ef3e6cebe2423df4bc3779facc22273439515557638495b02526b864103ff20cfe14dc17bd7c94ce2736468e53aa9bb428602fefd075483669091f89c2d42c2e94b4bdd3c0ba5f2ec01dad698b9ab510e1943a7c17a0de08a410c11e5258f89"}, {0x48, 0x3a, 0x3, "9692107d55bcec5fe67d6afb26c544937d30caf826ac4346586cf4bed97793d0e483c22294889b082c0734edc3735b97bd33c976"}], 0x3a8}, 0x0) (async)
gettid() (async)
ioctl$SIOCAX25OPTRT(r11, 0x89e7, &(0x7f00000023c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x56})
syz_genetlink_get_family_id$ipvs(&(0x7f0000002400), r1)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000002480), r11)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x40, r12, 0x8, 0xffffffff, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000002580)={r2, @in6={{0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, 0xdb3, 0xa, 0x2a, 0x6, 0x14, 0x3, 0x5}, &(0x7f0000002640)=0x9c)

1.200276145s ago: executing program 0 (id=1630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2, 0x0, 0x3}, 0x18)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

1.196474494s ago: executing program 2 (id=1631):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907800000000000000000000ff8c0000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

1.060450794s ago: executing program 0 (id=1632):
shutdown(0xffffffffffffffff, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r0, r1, 0x1, 0x0, 0x2}, 0x50) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400140, 0x0)
write$tun(r2, &(0x7f0000000240)={@void, @void, @x25={0x2, 0x3, 0xfd, "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"}}, 0xfd) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
getpeername(r3, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff}}, &(0x7f00000003c0)=0x80) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r5 = epoll_create1(0x0)
close(r1) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getpeername$l2tp6(r4, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000440)=0x20)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x1, 0x401, 0x4a65ddb4})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x3, <r7=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r7, 0x4) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000580)={'batadv_slave_0\x00', &(0x7f0000000540)=@ethtool_pauseparam={0x12, 0xe, 0x0, 0x6}}) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x1410, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x30}}, 0x20) (async)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000006c0)={r0, 0x1, 0x6, @local}, 0x10) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000700)={<r8=>0x0, 0x5}, &(0x7f0000000740)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000780)={r8, @in6={{0xa, 0x4e24, 0x3, @remote, 0xea}}, 0x5, 0x101}, 0x90) (async)
r9 = accept4$x25(r5, &(0x7f0000000840)={0x9, @remote}, &(0x7f0000000880)=0x12, 0x800)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000900)={0x5, &(0x7f00000008c0)=[{0x20, 0x0, 0xe6, 0xa18f}, {0x8, 0x1, 0x8a, 0xc984}, {0x0, 0x0, 0x6, 0x401}, {0x1, 0xba, 0x1, 0x80}, {0x101, 0x7f, 0x0, 0xfffff7b6}]}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000009c0)={'pim6reg1\x00', &(0x7f0000000940)=@ethtool_coalesce={0xf, 0x3795, 0x6, 0xb, 0x7, 0x0, 0x4, 0xcf17, 0x8, 0x6, 0x8, 0x3ff, 0xfffffffb, 0x3, 0xe83, 0x6, 0x2, 0x9, 0x5, 0x0, 0x7f, 0x37f, 0x6}})

1.058498634s ago: executing program 2 (id=1634):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x36, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0xf5c4cc9ddd572797, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000003c0), &(0x7f0000000740)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, &(0x7f0000000300)=0x40)
epoll_create(0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.056564559s ago: executing program 0 (id=1635):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, 0x0, 0x0)
r4 = accept(r1, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000005812823c07b4d0b0bcc6f083bd1599ceabf4277780a6ce1cbcb39096b5f27741202ef53baed09f5fb13ce87058b1c51154694171898ede0dfbda7f40b57af93e0e7af0f04b7b680c3de88e2ba7a3a1048c2859857617b075fb015b9c5983dabda05f8b4e09b2be3da4f283347f39027ebf4fdf34e8cc796dd0bfe15367f226b153b918d1ce7704fd18479d4ca7da16896d15749c573a19b40a48fbfb80d7d409cb7870bd8cb14d42d1140b2ca7d25ac0f25df33d4d98aca088"], 0x0, 0x26}, 0x20)
accept4(r4, 0x0, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

978.35531ms ago: executing program 2 (id=1637):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000080ffff850000000c000000b7090000000000001801000020207025a1000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020042a6c3aebd04dfa20008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007400), 0xffffffffffffffff)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r3, 0x103, 0x4, 0x0, &(0x7f00000000c0))
socket$rds(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], 0x48)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000240)={{0x8, 0xc}, 0x4}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x36, 0xc}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0xc000)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1fffc002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000497294e5351a5aa3009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r4, @ANYRES16=r2, @ANYBLOB="01002d00000000dbdf250400000000000000002207c5652d0977826c0789be4c1e7d83aed29df6f667d9af7140c047dd14da2f36fc8fc3e9525d425dda803efca9872f7d807e466cf970cc4b0cc0cfc7a1d0a6e6916c56a5033e5acc2b522378f7e9e7c2beeade577db1f656113b84ad91774861de5d928b7327c663302a835999d97771e1e0f2d4996c86da9201980d9fd7dc249212093a8a464ef82816bc539007f10a67d5bff57eaa21b0fe48afbfa26b94fef3a8"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
ioctl$PPPIOCGNPMODE(r10, 0xc008744c, &(0x7f0000000040)={0x8021, 0x2})

788.1924ms ago: executing program 1 (id=1640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000240)=0x1, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0xc0c0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x44001}, 0x20004000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000004f80)={'wlan0\x00', &(0x7f0000004f40)=@ethtool_gfeatures})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8854}, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf255200000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000)

659.762869ms ago: executing program 1 (id=1641):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002)
socket$pppoe(0x18, 0x1, 0x0)
socket$rxrpc(0x21, 0x2, 0xa) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32)
socket$rds(0x15, 0x5, 0x0) (rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x87) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x840000000002, 0x3, 0x100) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c00020036e8040ed82e"], 0xb4}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100f07e000000010095c7ff78cf1d67d0e36f7811"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2=0xe000002f}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x58}}, 0x0) (async)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

428.729702ms ago: executing program 1 (id=1642):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd2d, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2}}}, 0xb8}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x4e}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

267.40697ms ago: executing program 1 (id=1643):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c001440feffffffffffffff"], 0x30}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000)
read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r5)
sendmsg$NET_DM_CMD_START(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x1}, 0x14}}, 0x0)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0xa4ee5599dc3afe67)

126.540326ms ago: executing program 0 (id=1644):
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20)
close(r0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(0xffffffffffffffff, 0x729) (async)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x8000, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x401, 0x6}}], 0x70, 0x20000000}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x2, 0x4, 0x2, 0x1, 0x4}}) (async)
r5 = socket(0x15, 0x800, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) (async)
syz_emit_ethernet(0x17, &(0x7f0000000400)={@random="502dd9cba764", @empty, @void, {@llc={0x4, {@llc={0x7e, 0x1, '<', "41cc0f9e13fa"}}}}}, 0x0) (async)
sendmsg$nl_generic(r5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000600), 0x0}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r6, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), r5) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

125.820599ms ago: executing program 2 (id=1645):
r0 = socket(0x1d, 0x2, 0x6)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x7, 0x60, 0x5, {0x77359400}, {r3, r4/1000+60000}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "720712a59f6b660b"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000001)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f00)=@filter={'filter\x00', 0x42, 0xff03, 0x298, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x4, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x8, 0x3, [0x2c, 0x6, 0x9, 0x25, 0xc, 0xe, 0x0, 0x25, 0x3f, 0x0, 0x2e, 0x34, 0x32, 0xffff, 0x35, 0x1f], 0x0, 0x7, 0x7}}}, {{@ip={@broadcast, @remote, 0xff000000, 0xff, 'veth1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x1, 0x25}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r6=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="040001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010004f8ffffffb700000000000000b7030000f531fc4d850000000400000018110000", @ANYRES32=r7, @ANYBLOB="000000001b000000b7080000000000007b8af8ff00000000bfa202000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000956e0ff8da9711aa93fe2ee204b4a0aca0efb2763770993a51ccf8c46a1cf93b2af970a2fb24f7b32a9a2b1cc1bad6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, r7}, 0xc)
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r6, 0x3, {0x1, 0xf0, 0x1}, 0xfe}, 0x18)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="e2612d49e81711f9d521355d9674d10dfadd540ac6a643a5a1c7411d0a3b55b2649be583b3ca2a4ba18df0711e27f1f7a02e26d3a76bcc872f22dde077aeab36d34816020c7025318e3556ccb32aabdb07e8b749867c882494145aba81600793500f7eb664b8bfc1316634d8322c2b4d403ac80257bfd46800540024b6ff6553d330af7a1848e9415a8fa9eb32bdeafa98781df76e842c8c422212c4b6d1d6a4d8", 0xa1}, {&(0x7f0000000a00)="3e8e364331a523fb40a0e992d7f88ac691ea94dbd7ae40616ce8915d025dfab807d7597675a089c79068a87866f21a430f2992482576734a030acbfa2e7af52d955ee7c99416fedd238443c3b29b12ef1d07bbffc37265776acac809fab0a14aceeb6a2d21fcfebafb26342be6a9224e60057f136a65a14b6c24d6b074db3d86d8cd2bbe1c044f3d2349a0237bde67e922460548b3bba5c2534cee6cb82b417174248baef04c26a05a42923723452a4545e0df342a68cc68764728dabe0c9c57f5266b3a9acb85f3f4d22cff57bb2c77f28fb230632d8a2c8c5dc6436901f49e1319", 0xe2}, {&(0x7f00000007c0)="c8b27f1cecdc232bca248d97ecf3ce57c9c5707f69dd7e307125d0062c12493acdcbb4b667613c80563787774d55655d98c5174078e7a732c3d1b6b7c23d9023dd27381b7dab8e57d7517f29b29f92a916bb45d96a0297a57c3bec0918e92c4f1b907eeb9448c77da08107d334c94dd4a3b516e368429d698d16b695b25117a6e714", 0x82}, {&(0x7f0000000440)="89994493fb83b7515152110b2a4347aa71de067df379e6f282", 0x19}, {&(0x7f0000000b00)="5e794f7614b4e82012a603b6df921be310ccd91263fb5315878cceed3ebe8a40307eb578fba685f87f41da1c7ac79b960d835c07e37598508e125d56dab45660c563dd485423b7121663fd39cb0d01dbe98f2e4a85909b3d3fe0421cdb53be539ea8547d54677190d59c09dfa1b4775fa9292dc723af6b42cd30febc1e8103ae95789b2b44e466e7bbab4d8e50a75e94874d15bdfbb14cff0c9c3f370f86cb9271f7436bc527e2fbc628768c", 0xac}], 0x5, &(0x7f0000000bc0)=[@iv={0xf8, 0x117, 0x2, 0xde, "3780d07ebe065169c713f3fa225202ed02c3649b10c273aa7035a42c4f61e04750c139201c5083c0960978fbf2f89ff5b7cdfa1996f353a8a0298d29c5e749804add768bf63e4b035a11c8c7f39ad3baabf023d7d121c102a2783ba8580df662831b70422edd4da705eb7f74a91ac034501cd615966504a5938aec0230f0b89b497e82f55627434d2d454a9cc39a5108a99133c91ebb9fef18dc6a451af7ab3287b3f8c9fef599ee3128f7e81250180cd8cf6d006f0227612647658e0f6416f2f542e90d93b20149c0958e91019d00036cbffe46f495871211ddf149ead0"}, @iv={0xd8, 0x117, 0x2, 0xbf, "c30502f0033eb1d1b9c8eb73e4887c1f41bd536c7977fe2bf26772b356bffd540aaf2f29d69ad942fbe1ad0697a21ecb14a3fc49e293e956bbe14bc3e8c38257df41940c36937ad6837fdffa1b1696aeb2feb97653d7fa0eeb6fd694b70fdf6e9f742cdd67aa0b6bdeb9b006ed1f64fef56cce6248be75b5faa471deaee0ac25ae87c8540c0dca1b8ca48ac3e88ce1f6cbe3eee3b0e521dccf3854185f31a39c92ba3fa3ad1c9957e5a193ea445205b4d217c68952aafa9f7e975ca7eedd98"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x108, 0x117, 0x2, 0xf1, "7870fba99b68e0e9109b9da511bb13cb231cf21f3ccac116f68ff54f6505efcf40e2cc6bf1e86f0512f4db663b5c29270e215d0b4f34979783a8e469ec9247a9b033f55414e6bd1506673cea9dc6cac65c73b7c6a5d25890ab59b91b064625c652ff137ba97120bffe73a4b9e3af580db0c1cfe5eec30f3e161391a6753de4fa59605eae9bc4a87cc8e1e008272ade7481682b53aa634ab983ef17311d713a6905af534b34c65727a48f2197961d9ed408cc57e5cf742bd4b4b28588a8f5c6c4e19ce3708949988bc7b67e00c0b9f4eca430dda32febff3e66717b2a55ca2b4cb754e87097ac5032f756bdc2e40e677b33"}], 0x308, 0x20000000}, 0x24000801)
sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
recvmsg$kcm(r9, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {0x2}, 0x2})
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)

125.481472ms ago: executing program 0 (id=1646):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x4000)

60.60769ms ago: executing program 1 (id=1647):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1d, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @call={0x85, 0x0, 0x0, 0x50}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0xffffffffffffffff)

60.162736ms ago: executing program 2 (id=1648):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x2) (async)
socket$inet(0x2, 0x3, 0x2)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002bbd7000fddbdf2500000008f7ba5e", @ANYRES32=r5, @ANYBLOB="0c00990002000000420000001c00238005000e000300000008001c00050000000600120009000000040008010500240098000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f07000000000000006161"], 0x0, 0x2b, 0x0, 0x9}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x36}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
socket(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

0s ago: executing program 1 (id=1649):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}, 0x3ff}], 0x1, 0x123, 0x0) (async, rerun: 32)
shutdown(r1, 0x1) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541}, 0x24}}, 0x0)
unshare(0x2c000800)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000c80)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="d5c762", 0x3}, {0x0}], 0x2}, 0x4040044) (async)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000dc0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x24}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
r11 = socket(0x40000000015, 0x5, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r10) (async, rerun: 32)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36360' (ED25519) to the list of known hosts.
syzkaller login: [   40.753718][ T5738] cgroup: Unknown subsys name 'net'
[   40.875064][ T5738] cgroup: Unknown subsys name 'cpuset'
[   40.879671][ T5738] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.660478][ T5738] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.517722][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.520693][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.523422][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.526601][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.549651][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.553424][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.556139][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.558887][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.563791][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.567862][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.570232][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.573126][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.575800][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.584748][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.591869][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.825043][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   46.854013][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   46.910610][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   46.960214][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.963654][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.966051][ T5810] bridge_slave_0: entered allmulticast mode
[   46.968887][ T5810] bridge_slave_0: entered promiscuous mode
[   46.985585][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.987904][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.990019][ T5810] bridge_slave_1: entered allmulticast mode
[   46.993317][ T5810] bridge_slave_1: entered promiscuous mode
[   46.996031][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.998372][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.000874][ T5814] bridge_slave_0: entered allmulticast mode
[   47.004077][ T5814] bridge_slave_0: entered promiscuous mode
[   47.018770][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.021264][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.024207][ T5814] bridge_slave_1: entered allmulticast mode
[   47.027093][ T5814] bridge_slave_1: entered promiscuous mode
[   47.068196][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.079102][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.081324][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.084143][ T5818] bridge_slave_0: entered allmulticast mode
[   47.086781][ T5818] bridge_slave_0: entered promiscuous mode
[   47.089914][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.092851][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.095051][ T5818] bridge_slave_1: entered allmulticast mode
[   47.097627][ T5818] bridge_slave_1: entered promiscuous mode
[   47.101447][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.114822][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.145373][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.150383][ T5810] team0: Port device team_slave_0 added
[   47.154211][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.166105][ T5810] team0: Port device team_slave_1 added
[   47.178215][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.183130][ T5814] team0: Port device team_slave_0 added
[   47.194991][ T5814] team0: Port device team_slave_1 added
[   47.230318][ T5818] team0: Port device team_slave_0 added
[   47.234508][ T5818] team0: Port device team_slave_1 added
[   47.236886][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.238998][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.247797][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.269189][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.271356][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.279360][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.284469][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.286593][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.294888][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.311054][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.313318][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.321644][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.330296][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.333353][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.344263][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.351079][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.354346][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.364640][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.419962][ T5814] hsr_slave_0: entered promiscuous mode
[   47.422807][ T5814] hsr_slave_1: entered promiscuous mode
[   47.431027][ T5810] hsr_slave_0: entered promiscuous mode
[   47.434205][ T5810] hsr_slave_1: entered promiscuous mode
[   47.436294][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.438789][ T5810] Cannot create hsr debugfs directory
[   47.505657][ T5818] hsr_slave_0: entered promiscuous mode
[   47.507938][ T5818] hsr_slave_1: entered promiscuous mode
[   47.510532][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.513579][ T5818] Cannot create hsr debugfs directory
[   47.671273][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.677576][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.694451][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.718446][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.758911][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.771545][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.788319][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.804122][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.810245][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.812669][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.815297][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.817592][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.845466][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.848488][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.866611][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.880616][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.896196][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.901726][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.936014][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.957538][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   47.970672][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.973018][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.985766][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.987951][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.028498][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.073651][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   48.081225][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.083642][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.096263][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.105275][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.107656][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.137400][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   48.147404][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.149720][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.168154][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.170805][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.193765][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.221627][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.261216][ T5814] veth0_vlan: entered promiscuous mode
[   48.273377][ T5814] veth1_vlan: entered promiscuous mode
[   48.307294][ T5814] veth0_macvtap: entered promiscuous mode
[   48.318624][ T5814] veth1_macvtap: entered promiscuous mode
[   48.348534][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.356931][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.363950][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.371311][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.380090][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.383924][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.386743][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.389409][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.436641][ T5810] veth0_vlan: entered promiscuous mode
[   48.438576][ T5818] veth0_vlan: entered promiscuous mode
[   48.461789][ T5810] veth1_vlan: entered promiscuous mode
[   48.468521][ T5818] veth1_vlan: entered promiscuous mode
[   48.492509][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.494950][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.520608][ T5818] veth0_macvtap: entered promiscuous mode
[   48.529709][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.533257][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.537167][ T5818] veth1_macvtap: entered promiscuous mode
[   48.543384][ T5810] veth0_macvtap: entered promiscuous mode
[   48.547468][ T5810] veth1_macvtap: entered promiscuous mode
[   48.558195][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.569391][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.580050][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.593544][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.597370][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.599518][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.600045][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.610198][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.614144][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.622904][ T5203] Bluetooth: hci2: command tx timeout
[   48.624739][   T54] Bluetooth: hci0: command tx timeout
[   48.626957][   T54] Bluetooth: hci1: command tx timeout
[   48.632588][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.635343][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.638008][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.640553][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.720686][ T5167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.728730][ T5167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.757426][ T5167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.759863][ T5167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.781760][ T4896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.785450][ T4896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.833470][ T4896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.840575][ T4896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.843986][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4'.
[   48.926679][ T5885] tipc: Started in network mode
[   48.928330][ T5885] tipc: Node identity 7f000001, cluster identity 4711
[   48.932070][ T5888] netlink: 'syz.0.5': attribute type 21 has an invalid length.
[   48.937126][ T5885] tipc: Enabled bearer <udp:syz2>, priority 10
[   48.939615][ T5888] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5'.
[   48.943850][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'.
[   48.947842][ T5885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.957248][ T5885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.003097][ T5894] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   49.319717][ T5903] gtp0: entered promiscuous mode
[   49.321329][ T5903] gtp0: entered allmulticast mode
[   49.338761][ T5903] Zero length message leads to an empty skb
[   49.709794][ T5911] dummy0: entered promiscuous mode
[   49.711580][ T5911] vlan2: entered promiscuous mode
[   49.837831][ T5918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15'.
[   49.916920][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.921144][ T5922] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.926347][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   50.068936][   T24] tipc: Node number set to 2130706433
[   50.587804][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'.
[   50.667902][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'.
[   50.671053][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.22'.
[   50.702119][ T5816] Bluetooth: hci1: command tx timeout
[   50.703832][ T5816] Bluetooth: hci2: command tx timeout
[   50.705497][ T5816] Bluetooth: hci0: command tx timeout
[   50.722867][ T5878] IPVS: starting estimator thread 0...
[   50.773374][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   50.812596][ T5943] IPVS: using max 62 ests per chain, 148800 per kthread
[   50.821269][ T5946] xt_l2tp: v2 doesn't support IP mode
[   50.901743][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.999798][ T5965] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   51.020789][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.046067][ T5929] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   51.084001][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.113653][ T5965] veth3: entered promiscuous mode
[   51.743751][ T5996] netlink: 'syz.2.35': attribute type 83 has an invalid length.
[   51.772459][ T5996] sctp: [Deprecated]: syz.2.35 (pid 5996) Use of struct sctp_assoc_value in delayed_ack socket option.
[   51.772459][ T5996] Use struct sctp_sack_info instead
[   52.119315][ T6015] syzkaller0: entered promiscuous mode
[   52.129626][ T6015] syzkaller0: entered allmulticast mode
[   52.598243][ T6039] macvlan2: entered promiscuous mode
[   52.599921][ T6039] macvlan2: entered allmulticast mode
[   52.782689][ T5816] Bluetooth: hci2: command tx timeout
[   52.782711][ T5203] Bluetooth: hci1: command 0x040f tx timeout
[   52.784728][   T54] Bluetooth: hci0: command tx timeout
[   53.299097][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.301891][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.369866][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.378693][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.425914][ T6073] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.428847][ T6073] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.431681][ T6073] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.436507][ T6073] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.585542][ T6086] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   53.588686][ T6086] team0: entered promiscuous mode
[   53.590403][ T6086] team_slave_0: entered promiscuous mode
[   53.602075][ T6086] team_slave_1: entered promiscuous mode
[   53.612203][ T6086] team0: entered allmulticast mode
[   53.613826][ T6086] team_slave_0: entered allmulticast mode
[   53.615577][ T6086] team_slave_1: entered allmulticast mode
[   53.633642][ T6086] 8021q: adding VLAN 0 to HW filter on device team0
[   53.636292][ T6086] bridge0: port 3(team0) entered blocking state
[   53.639818][ T6086] bridge0: port 3(team0) entered disabled state
[   53.879821][ T6097] batadv0: entered allmulticast mode
[   53.880350][ T6104] netlink: 'syz.0.60': attribute type 7 has an invalid length.
[   53.892598][ T6104] netlink: 'syz.0.60': attribute type 8 has an invalid length.
[   53.894947][ T6104] netlink: 'syz.0.60': attribute type 4 has an invalid length.
[   53.897193][ T6104] __nla_validate_parse: 13 callbacks suppressed
[   53.897198][ T6104] netlink: 204 bytes leftover after parsing attributes in process `syz.0.60'.
[   53.916550][ T6104] netlink: 'syz.0.60': attribute type 21 has an invalid length.
[   53.919039][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.60'.
[   54.492534][ T6111] netlink: 256 bytes leftover after parsing attributes in process `syz.1.62'.
[   54.511398][ T6111] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   54.599117][ T6115] tipc: Started in network mode
[   54.600667][ T6115] tipc: Node identity 7ea986bd935d, cluster identity 4711
[   54.610268][ T6115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.613142][ T6116] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   54.618277][ T6115] D: renamed from syzkaller0
[   54.621031][ T6115] tipc: Disabling bearer <eth:syzkaller0>
[   54.656860][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'.
[   54.661687][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'.
[   54.715592][ T6122] Bluetooth: MGMT ver 1.23
[   54.798622][ T6126] trusted_key: syz.1.67 sent an empty control message without MSG_MORE.
[   54.862031][   T54] Bluetooth: hci0: command tx timeout
[   54.862052][ T5203] Bluetooth: hci2: command tx timeout
[   54.873831][ T5203] Bluetooth: hci1: command 0x040f tx timeout
[   54.894465][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   55.121759][ T6146] netlink: 'syz.0.75': attribute type 4 has an invalid length.
[   55.248169][ T6155] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   55.415597][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'.
[   55.625621][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.87'.
[   55.881149][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'.
[   55.920088][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'.
[   56.007474][ T6211] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   56.031722][ T6211] bond1: (slave bridge2): making interface the new active one
[   56.039034][ T6211] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   56.146003][ T6218] syzkaller0: entered promiscuous mode
[   56.147852][ T6218] syzkaller0: entered allmulticast mode
[   56.763120][ T6230] netlink: 'syz.2.101': attribute type 1 has an invalid length.
[   56.942179][ T5203] Bluetooth: hci1: command 0x040f tx timeout
[   56.944544][ T6249] syzkaller1: entered promiscuous mode
[   56.946289][ T6249] syzkaller1: entered allmulticast mode
[   57.272500][ T6275] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   57.557226][ T6289] netlink: 'syz.2.119': attribute type 7 has an invalid length.
[   57.559687][ T6289] netlink: 'syz.2.119': attribute type 8 has an invalid length.
[   57.567855][ T6289] bond0: entered promiscuous mode
[   57.569585][ T6289] bond_slave_0: entered promiscuous mode
[   57.571754][ T6289] bond_slave_1: entered promiscuous mode
[   57.575407][ T6289] bond0: left promiscuous mode
[   57.577058][ T6289] bond_slave_0: left promiscuous mode
[   57.578922][ T6289] bond_slave_1: left promiscuous mode
[   57.871722][ T6313] netlink: 'syz.1.128': attribute type 2 has an invalid length.
[   57.882463][ T6313] netlink: 'syz.1.128': attribute type 8 has an invalid length.
[   57.981422][ T6323] netlink: 'syz.1.131': attribute type 11 has an invalid length.
[   58.117643][ T6336] netlink: 'syz.2.137': attribute type 1 has an invalid length.
[   58.170359][ T6340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.199590][ T6342] netdevsim netdevsim2: Direct firmware load for .
[   58.199590][ T6342]  failed with error -2
[   58.204201][ T6342] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   58.204201][ T6342] 
[   58.228818][ T6344] SET target dimension over the limit!
[   58.418076][ T6362] veth0: entered promiscuous mode
[   58.464674][ T6362] veth0 (unregistering): left promiscuous mode
[   59.257194][ T6437] __nla_validate_parse: 87 callbacks suppressed
[   59.257204][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'.
[   59.465454][ T6456] netlink: 17 bytes leftover after parsing attributes in process `syz.2.154'.
[   59.540402][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'.
[   59.541942][ T6466] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   59.794948][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.161'.
[   59.810471][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'.
[   60.307297][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   60.322250][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'.
[   60.905217][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[   61.269842][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.315922][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.591408][ T6568] netlink: 'syz.1.181': attribute type 3 has an invalid length.
[   61.654842][ T6572] xt_hashlimit: size too large, truncated to 1048576
[   61.667108][ T6572] xt_hashlimit: overflow, try lower: 3/0
[   61.712782][ T6574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.770657][ T6578] netlink: 'syz.1.183': attribute type 18 has an invalid length.
[   61.789579][ T6574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.807011][ T6577] pim6reg1: entered allmulticast mode
[   61.875108][ T6582] hsr0: entered allmulticast mode
[   61.876791][ T6582] hsr_slave_0: entered allmulticast mode
[   61.878705][ T6582] hsr_slave_1: entered allmulticast mode
[   61.911251][ T6574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.976426][ T6592] netlink: 'syz.1.191': attribute type 8 has an invalid length.
[   61.996882][ T6592] sctp: [Deprecated]: syz.1.191 (pid 6592) Use of int in maxseg socket option.
[   61.996882][ T6592] Use struct sctp_assoc_value instead
[   62.014502][ T6574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.021997][ T6592] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   62.118799][ T6604] ieee802154 phy0 wpan0: encryption failed: -22
[   62.124856][ T6605] ieee802154 phy0 wpan0: encryption failed: -22
[   62.136966][ T6574] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.147301][ T6574] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.157434][ T6574] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.184390][ T6574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.352076][ T6626] netlink: 'syz.0.203': attribute type 32 has an invalid length.
[   62.810383][ T6665]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   62.848896][ T6669] netlink: 'syz.2.214': attribute type 32 has an invalid length.
[   62.867487][ T6672] Cannot find add_set index 3 as target
[   63.250172][ T6700] netlink: 'syz.2.222': attribute type 32 has an invalid length.
[   63.376648][ T6709] ieee802154 phy0 wpan0: encryption failed: -22
[   63.999541][ T6731] netlink: 'syz.0.230': attribute type 32 has an invalid length.
[   64.178697][ T6745] netlink: 'syz.0.233': attribute type 2 has an invalid length.
[   64.181483][ T6746] netlink: 'syz.0.233': attribute type 2 has an invalid length.
[   64.307238][ T6752] __nla_validate_parse: 21 callbacks suppressed
[   64.307249][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   64.312455][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.236'.
[   64.549404][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'.
[   64.552850][ T6769] hsr_slave_0: left promiscuous mode
[   64.555269][ T6769] hsr_slave_1: left promiscuous mode
[   65.219375][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.242'.
[   65.295936][ T6777] bridge0: port 3(team0) entered disabled state
[   65.305479][ T6777] bridge_slave_0: left allmulticast mode
[   65.307366][ T6777] bridge_slave_0: left promiscuous mode
[   65.309270][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.318390][ T6777] bridge_slave_1: left allmulticast mode
[   65.320264][ T6777] bridge_slave_1: left promiscuous mode
[   65.323910][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.346506][ T6777] bond0: (slave bond_slave_0): Releasing backup interface
[   65.354155][ T6777] bond0: (slave bond_slave_1): Releasing backup interface
[   65.358162][ T6777] team_slave_0: left promiscuous mode
[   65.360080][ T6777] team_slave_0: left allmulticast mode
[   65.369046][ T6777] team0: Port device team_slave_0 removed
[   65.371685][ T6777] team_slave_1: left promiscuous mode
[   65.374368][ T6777] team_slave_1: left allmulticast mode
[   65.377788][ T6777] team0: Port device team_slave_1 removed
[   65.379900][ T6777] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.385673][ T6777] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.389315][ T6777] bond1: (slave bridge2): Releasing active interface
[   65.459520][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[   65.500217][ T6791] netlink: 64 bytes leftover after parsing attributes in process `syz.1.246'.
[   65.589369][ T6803] geneve2: entered promiscuous mode
[   65.594574][ T6800] IPVS: Scheduler module ip_vs_sip not found
[   65.603253][ T6800] veth0: entered promiscuous mode
[   65.606061][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'.
[   65.613452][ T6800] veth0 (unregistering): left promiscuous mode
[   65.711176][ T6810] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   65.728991][ T6810] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   66.304440][ T6845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'.
[   66.354162][ T6848] can: request_module (can-proto-0) failed.
[   66.957580][ T6878] tipc: Started in network mode
[   66.959201][ T6878] tipc: Node identity 4a9b964e0ce4, cluster identity 4711
[   66.961563][ T6878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.045022][ T6878] tipc: Resetting bearer <eth:syzkaller0>
[   67.331205][ T6893] validate_nla: 3 callbacks suppressed
[   67.331230][ T6893] netlink: 'syz.1.270': attribute type 39 has an invalid length.
[   67.492765][ T6897] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[   67.532818][ T6903] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (47)
[   67.607909][ T6911] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[   67.699382][ T6915] "syz.0.277" (6915) uses obsolete ecb(arc4) skcipher
[   67.712099][ T6915] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   67.794782][ T6932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'.
[   67.866476][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'.
[   67.930733][ T6949] netlink: 'syz.1.283': attribute type 8 has an invalid length.
[   68.015466][ T6958] netlink: 'syz.0.285': attribute type 1 has an invalid length.
[   68.022728][   T24] tipc: Node number set to 1182766670
[   68.054168][ T6958] bond2: (slave gretap1): making interface the new active one
[   68.057197][ T6958] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   68.063072][ T6958] syz.0.285 (6958) used greatest stack depth: 20136 bytes left
[   68.129014][ T6971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.220756][ T6984] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.224463][ T6984] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.227280][ T6984] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.230227][ T6984] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.234168][ T6984] geneve1: entered promiscuous mode
[   68.235750][ T6984] geneve1: entered allmulticast mode
[   68.268411][ T6988] netlink: 'syz.0.290': attribute type 32 has an invalid length.
[   68.594034][ T7027] netlink: 'syz.2.298': attribute type 32 has an invalid length.
[   68.611624][ T7029] pim6reg: entered allmulticast mode
[   68.789248][ T7038] team0: Device gtp0 is of different type
[   69.438298][ T7050] __nla_validate_parse: 7 callbacks suppressed
[   69.438308][ T7050] netlink: 72 bytes leftover after parsing attributes in process `syz.0.304'.
[   69.652199][ T7067] sctp: [Deprecated]: syz.2.310 (pid 7067) Use of int in maxseg socket option.
[   69.652199][ T7067] Use struct sctp_assoc_value instead
[   69.691197][ T7074] netlink: 'syz.2.312': attribute type 2 has an invalid length.
[   69.701917][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'.
[   69.733980][ T7077] batadv_slave_1: entered promiscuous mode
[   69.741114][ T7081] netlink: 104 bytes leftover after parsing attributes in process `syz.0.313'.
[   69.755757][ T7077] batadv_slave_1: left promiscuous mode
[   69.783286][ T7088] netlink: 'syz.2.315': attribute type 11 has an invalid length.
[   69.785637][ T7088] netlink: 224 bytes leftover after parsing attributes in process `syz.2.315'.
[   69.862362][ T7092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.905337][ T7092] syzkaller0: entered promiscuous mode
[   69.907123][ T7092] syzkaller0: entered allmulticast mode
[   69.912842][ T7092] tipc: Resetting bearer <eth:syzkaller0>
[   69.925958][ T7090] bond2: (slave gretap1): Releasing active interface
[   69.934677][ T7091] tipc: Resetting bearer <eth:syzkaller0>
[   69.937015][ T7090] netlink: 'syz.0.316': attribute type 10 has an invalid length.
[   70.633192][ T7091] tipc: Disabling bearer <eth:syzkaller0>
[   70.638610][ T7090] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.641429][ T7096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.644954][ T7104] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   70.662195][ T7106] syzkaller0: entered promiscuous mode
[   70.670886][ T7106] syzkaller0: entered allmulticast mode
[   70.713155][ T7110] tipc: Resetting bearer <eth:syzkaller0>
[   70.718073][ T7112] netlink: 'syz.0.320': attribute type 21 has an invalid length.
[   70.722029][ T7094] tipc: Resetting bearer <eth:syzkaller0>
[   70.752552][ T7094] tipc: Disabling bearer <eth:syzkaller0>
[   70.767087][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   70.777785][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   70.864615][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.868663][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   70.914589][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'.
[   71.004439][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.326'.
[   71.058877][ T7151] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   71.061415][ T7151] netlink: 216 bytes leftover after parsing attributes in process `syz.0.328'.
[   71.124045][ T7157] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.132158][ T7157] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.137353][ T7157] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.141037][ T7157] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.144529][ T7157] geneve1: left promiscuous mode
[   71.146241][ T7157] geneve1: left allmulticast mode
[   71.150031][ T7157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.156497][ T7157] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.159298][ T7157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.164063][ T7157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.170233][ T7157] geneve1: entered promiscuous mode
[   71.172445][ T7157] geneve1: entered allmulticast mode
[   71.174734][ T7157] team0: Port device geneve1 added
[   71.843143][   T10] cfg80211: failed to load regulatory.db
[   72.117042][ T7204] netlink: 180 bytes leftover after parsing attributes in process `syz.1.340'.
[   72.510867][ T7237] syzkaller1: entered promiscuous mode
[   72.520165][ T7237] syzkaller1: entered allmulticast mode
[   72.869212][ T7268]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   73.018569][ T7283] validate_nla: 1 callbacks suppressed
[   73.018581][ T7283] netlink: 'syz.0.364': attribute type 8 has an invalid length.
[   73.042081][ T7283] @: renamed from bond_slave_0
[   73.335805][ T7316] netlink: 'syz.0.375': attribute type 13 has an invalid length.
[   73.349274][ T7316] netlink: 'syz.0.375': attribute type 17 has an invalid length.
[   73.356326][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.429987][ T7321] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   73.548530][ T7309] syz.2.374 (7309) used greatest stack depth: 19608 bytes left
[   73.699728][ T7360] netlink: 'syz.1.386': attribute type 32 has an invalid length.
[   74.004457][ T7395] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   74.010039][ T7399] netlink: 'syz.0.397': attribute type 32 has an invalid length.
[   74.039709][ T7402] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   74.046402][ T7402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   74.279729][ T7432] tipc: Cannot configure node identity twice
[   74.756675][ T7483] __nla_validate_parse: 18 callbacks suppressed
[   74.756686][ T7483] netlink: 248 bytes leftover after parsing attributes in process `syz.0.422'.
[   74.813264][ T7395] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   74.818733][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'.
[   74.873928][ T7490] netlink: 'syz.2.424': attribute type 32 has an invalid length.
[   75.147994][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[   75.148698][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'.
[   75.327627][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'.
[   75.439259][ T7549] ip6gretap0: entered promiscuous mode
[   75.457035][ T7551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.440'.
[   75.460224][ T7549] ip6gretap0: left promiscuous mode
[   75.485066][ T7553] veth1: renamed from bond0
[   75.489214][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'.
[   75.564615][ T7560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.443'.
[   75.597324][ T7564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.678029][ T7574] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   75.679264][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[   75.681280][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[   75.724761][ T7576] netlink: 'syz.0.450': attribute type 13 has an invalid length.
[   75.727294][ T7576] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   75.899290][ T7601] tc_dump_action: action bad kind
[   75.979296][ T7607] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[   75.984825][ T7607] netlink: 'syz.2.461': attribute type 1 has an invalid length.
[   76.028263][ T7611] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.331074][ T7640] syz.0.470: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   76.337978][ T7640] CPU: 0 UID: 0 PID: 7640 Comm: syz.0.470 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   76.337995][ T7640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.338002][ T7640] Call Trace:
[   76.338007][ T7640]  <TASK>
[   76.338013][ T7640]  dump_stack_lvl+0x189/0x250
[   76.338044][ T7640]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.338059][ T7640]  ? __pfx__printk+0x10/0x10
[   76.338069][ T7640]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.338079][ T7640]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.338089][ T7640]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   76.338098][ T7640]  warn_alloc+0x214/0x310
[   76.338110][ T7640]  ? stack_depot_save_flags+0x429/0x900
[   76.338123][ T7640]  ? __pfx_warn_alloc+0x10/0x10
[   76.338132][ T7640]  ? kasan_save_track+0x4f/0x80
[   76.338145][ T7640]  ? xskq_create+0x56/0x170
[   76.338156][ T7640]  ? xsk_init_queue+0xb0/0x110
[   76.338165][ T7640]  ? xsk_setsockopt+0x43f/0x710
[   76.338173][ T7640]  ? do_sock_setsockopt+0x25a/0x3e0
[   76.338185][ T7640]  ? __x64_sys_setsockopt+0x18b/0x220
[   76.338195][ T7640]  ? do_syscall_64+0xfa/0x3b0
[   76.338202][ T7640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.338215][ T7640]  __vmalloc_node_range_noprof+0x125/0x12f0
[   76.338237][ T7640]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   76.338248][ T7640]  ? __kasan_kmalloc+0x93/0xb0
[   76.338257][ T7640]  vmalloc_user_noprof+0xad/0xf0
[   76.338266][ T7640]  ? xskq_create+0xbf/0x170
[   76.338276][ T7640]  xskq_create+0xbf/0x170
[   76.338289][ T7640]  xsk_init_queue+0xb0/0x110
[   76.338326][ T7640]  xsk_setsockopt+0x43f/0x710
[   76.338339][ T7640]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.338349][ T7640]  ? __lock_acquire+0xab9/0xd20
[   76.338373][ T7640]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   76.338386][ T7640]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.338399][ T7640]  do_sock_setsockopt+0x25a/0x3e0
[   76.338411][ T7640]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   76.338423][ T7640]  ? __fget_files+0x2a/0x420
[   76.338437][ T7640]  __x64_sys_setsockopt+0x18b/0x220
[   76.338450][ T7640]  do_syscall_64+0xfa/0x3b0
[   76.338458][ T7640]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.338469][ T7640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.338476][ T7640]  ? exc_page_fault+0x9f/0xf0
[   76.338488][ T7640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.338496][ T7640] RIP: 0033:0x7fb0f6b8e929
[   76.338505][ T7640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.338513][ T7640] RSP: 002b:00007fb0f49f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.338522][ T7640] RAX: ffffffffffffffda RBX: 00007fb0f6db5fa0 RCX: 00007fb0f6b8e929
[   76.338528][ T7640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   76.338533][ T7640] RBP: 00007fb0f6c10b39 R08: 0000000000000004 R09: 0000000000000000
[   76.338537][ T7640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.338542][ T7640] R13: 0000000000000000 R14: 00007fb0f6db5fa0 R15: 00007ffca3978378
[   76.338555][ T7640]  </TASK>
[   76.338559][ T7640] Mem-Info:
[   76.353586][ T7642] x_tables: duplicate underflow at hook 1
[   76.356941][ T7640] active_anon:5538 inactive_anon:0 isolated_anon:0
[   76.356941][ T7640]  active_file:1013 inactive_file:38212 isolated_file:0
[   76.356941][ T7640]  unevictable:1768 dirty:120 writeback:0
[   76.356941][ T7640]  slab_reclaimable:9281 slab_unreclaimable:56175
[   76.356941][ T7640]  mapped:18214 shmem:2452 pagetables:963
[   76.356941][ T7640]  sec_pagetables:0 bounce:0
[   76.356941][ T7640]  kernel_misc_reclaimable:0
[   76.356941][ T7640]  free:302436 free_pcp:16262 free_cma:0
[   76.470528][ T7640] Node 0 active_anon:13504kB inactive_anon:0kB active_file:3012kB inactive_file:142696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35868kB dirty:344kB writeback:0kB shmem:5140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5300kB pagetables:2056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.480913][ T7640] Node 1 active_anon:8640kB inactive_anon:0kB active_file:1040kB inactive_file:10152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37156kB dirty:136kB writeback:0kB shmem:4716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6272kB pagetables:1668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.490832][ T7640] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.500647][ T7640] lowmem_reserve[]: 0 815 815 815 815
[   76.502537][ T7640] Node 0 DMA32 free:305840kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13504kB inactive_anon:0kB active_file:3012kB inactive_file:142696kB unevictable:3536kB writepending:344kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:30348kB local_pcp:15600kB free_cma:0kB
[   76.516620][ T7640] lowmem_reserve[]: 0 0 0 0 0
[   76.526069][ T7640] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.535654][ T7640] lowmem_reserve[]: 0 0 854 854 854
[   76.537401][ T7640] Node 1 Normal free:429964kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8640kB inactive_anon:0kB active_file:1040kB inactive_file:10152kB unevictable:3536kB writepending:136kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:35260kB local_pcp:16704kB free_cma:0kB
[   76.547235][ T7640] lowmem_reserve[]: 0 0 0 0 0
[   76.548929][ T7640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   76.554217][ T7640] Node 0 DMA32: 1216*4kB (UME) 750*8kB (UM) 280*16kB (UME) 112*32kB (UME) 153*64kB (UM) 85*128kB (UME) 44*256kB (UME) 12*512kB (UME) 7*1024kB (ME) 4*2048kB (UM) 57*4096kB (M) = 305840kB
[   76.559915][ T7640] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   76.565084][ T7640] Node 1 Normal: 955*4kB (UM) 644*8kB (UME) 551*16kB (UME) 243*32kB (UM) 116*64kB (UME) 25*128kB (UM) 12*256kB (UM) 7*512kB (UM) 6*1024kB (ME) 4*2048kB (UME) 91*4096kB (M) = 429916kB
[   76.570690][ T7640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.573721][ T7640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.576463][ T7640] 41689 total pagecache pages
[   76.577932][ T7640] 0 pages in swap cache
[   76.579184][ T7640] Free swap  = 124996kB
[   76.580440][ T7640] Total swap = 124996kB
[   76.581712][ T7640] 786301 pages RAM
[   76.605709][ T7640] 0 pages HighMem/MovableOnly
[   76.607225][ T7640] 240368 pages reserved
[   76.608524][ T7640] 0 pages cma reserved
[   77.166373][ T7710] set match dimension is over the limit!
[   77.515254][ T7731] geneve1: Device is already in use.
[   77.770812][ T7754] sctp: [Deprecated]: syz.0.500 (pid 7754) Use of int in max_burst socket option deprecated.
[   77.770812][ T7754] Use struct sctp_assoc_value instead
[   78.251767][ T7772] unknown channel width for channel at 909000KHz?
[   78.485045][ T7782] xt_cluster: node mask cannot exceed total number of nodes
[   78.530355][ T7784] xt_CT: No such helper "snmp"
[   78.534617][ T7784] openvswitch: netlink: Flow actions attr not present in new flow.
[   78.738998][ T7803] lo speed is unknown, defaulting to 1000
[   78.757163][ T7803] lo speed is unknown, defaulting to 1000
[   78.762851][ T7803] lo speed is unknown, defaulting to 1000
[   78.900335][ T7812] validate_nla: 1 callbacks suppressed
[   78.900346][ T7812] netlink: 'syz.1.519': attribute type 9 has an invalid length.
[   78.913993][ T5819] lo speed is unknown, defaulting to 1000
[   78.916040][ T7803] infiniband syz0: set active
[   78.917745][ T7803] infiniband syz0: added lo
[   78.948564][ T7803] RDS/IB: syz0: added
[   78.950290][ T7803] smc: adding ib device syz0 with port count 1
[   78.952683][ T7803] smc:    ib device syz0 port 1 has pnetid 
[   78.955746][ T5819] lo speed is unknown, defaulting to 1000
[   78.958805][ T7803] lo speed is unknown, defaulting to 1000
[   79.064917][ T7803] lo speed is unknown, defaulting to 1000
[   79.169726][ T7803] lo speed is unknown, defaulting to 1000
[   79.374746][ T7824] netlink: 'syz.2.523': attribute type 2 has an invalid length.
[   79.407309][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.559325][ T7836] netlink: 'syz.2.527': attribute type 29 has an invalid length.
[   79.803250][ T7855] __nla_validate_parse: 25 callbacks suppressed
[   79.803263][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   79.886934][ T7867] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.538'.
[   80.019969][ T7880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.542'.
[   80.159750][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[   80.169961][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'.
[   80.229488][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'.
[   80.260206][ T7884] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[   80.269268][ T7884] team0: Device ipvlan1 failed to register rx_handler
[   80.324604][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.553'.
[   80.380915][ T7915] syzkaller0: entered promiscuous mode
[   80.383886][ T7915] syzkaller0: entered allmulticast mode
[   80.441687][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'.
[   80.506567][ T7925] netlink: 27 bytes leftover after parsing attributes in process `syz.2.559'.
[   80.581261][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'.
[   80.593955][ T7934] netlink: 'syz.0.560': attribute type 32 has an invalid length.
[   80.645302][ T7940] netlink: 'syz.1.562': attribute type 5 has an invalid length.
[   80.870471][ T7961] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   80.876157][ T7962] syz.1.570 uses old SIOCAX25GETINFO
[   80.878721][ T7961] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   80.882037][ T7961] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   80.930572][ T7971] netlink: 'syz.0.572': attribute type 32 has an invalid length.
[   81.017484][ T7985] sit0: entered promiscuous mode
[   81.026216][ T7985] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[   81.144895][ T7991] pim6reg0: tun_chr_ioctl cmd 1074025694
[   81.215344][ T7993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.218405][ T7993] syzkaller0: entered promiscuous mode
[   81.220129][ T7993] syzkaller0: entered allmulticast mode
[   81.272551][ T7992] tipc: Resetting bearer <eth:syzkaller0>
[   81.290116][ T7992] tipc: Disabling bearer <eth:syzkaller0>
[   81.405076][ T8001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.509822][ T8008] netlink: 'syz.1.582': attribute type 32 has an invalid length.
[   81.817988][ T8034] sctp: sctp_transport_update_pmtu: Reported pmtu 216 too low, using default minimum of 512
[   82.033519][ T8067] pim6reg: entered allmulticast mode
[   82.035911][ T8067] pim6reg: left allmulticast mode
[   82.206385][ T8081] team0: No ports can be present during mode change
[   82.339851][ T8094] netlink: 'syz.1.605': attribute type 2 has an invalid length.
[   82.547884][ T8112] netlink: zone id is out of range
[   82.549471][ T8112] netlink: zone id is out of range
[   82.551178][ T8112] netlink: zone id is out of range
[   82.551655][ T8119] @: renamed from veth0_vlan (while UP)
[   82.572239][ T8112] netlink: zone id is out of range
[   82.574067][ T8112] netlink: zone id is out of range
[   82.591446][ T8112] netlink: set zone limit has 4 unknown bytes
[   82.595819][ T8112] veth1_to_batadv: mtu greater than device maximum
[   82.600356][ T8122] xt_l2tp: invalid flags combination: c
[   82.774714][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.777483][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.805446][ T8146] IPv6: NLM_F_REPLACE set, but no existing node found!
[   82.840364][ T8140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.848422][ T8140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.890107][ T8140] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.893214][ T8140] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.895901][ T8140] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.898461][ T8140] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.942837][ T5858] lo speed is unknown, defaulting to 1000
[   82.944909][ T5858] syz0: Port: 1 Link DOWN
[   82.946647][ T5858] lo speed is unknown, defaulting to 1000
[   83.633086][ T8194] lo speed is unknown, defaulting to 1000
[   84.354682][ T8203] lo speed is unknown, defaulting to 1000
[   84.623949][ T8212] bond0: Unable to set down delay as MII monitoring is disabled
[   84.983582][ T8233] validate_nla: 3 callbacks suppressed
[   84.983594][ T8233] netlink: 'syz.0.644': attribute type 8 has an invalid length.
[   85.582374][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   85.598878][ T8254] bridge_slave_0: left allmulticast mode
[   85.600760][ T8254] bridge_slave_0: left promiscuous mode
[   85.603721][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.607924][ T8254] bridge_slave_1: left allmulticast mode
[   85.609791][ T8254] bridge_slave_1: left promiscuous mode
[   85.611687][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.618147][ T8254] bond0: (slave bond_slave_0): Releasing backup interface
[   85.626757][ T8254] bond0: (slave bond_slave_1): Releasing backup interface
[   85.644202][ T8254] team0: Port device team_slave_0 removed
[   85.647884][ T8255] __nla_validate_parse: 14 callbacks suppressed
[   85.647894][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'.
[   85.650750][ T8254] team0: Port device team_slave_1 removed
[   85.656519][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.659590][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.665190][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.667738][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.685215][ T5858] srz1: Port: 1 Link DOWN
[   85.685597][ T8255] netlink: 'syz.1.652': attribute type 10 has an invalid length.
[   85.686836][ T8254] netlink: 'syz.1.652': attribute type 10 has an invalid length.
[   86.523182][ T8270] netlink: 3 bytes leftover after parsing attributes in process `syz.2.656'.
[   86.526236][ T8270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.743732][ T8276] lo speed is unknown, defaulting to 1000
[   86.943257][ T8288] xt_TCPMSS: Only works on TCP SYN packets
[   87.033227][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[   87.037021][ T8289] netlink: 'syz.1.660': attribute type 9 has an invalid length.
[   87.047828][ T8289] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   87.051500][ T8289] macvlan2: entered allmulticast mode
[   87.056388][ T8289] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   87.065575][ T8288] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[   87.073101][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.660'.
[   87.114120][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'.
[   87.166259][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'.
[   87.176265][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[   87.240615][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.667'.
[   87.337309][ T8319] netlink: 'syz.0.670': attribute type 303 has an invalid length.
[   87.345968][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[   87.348600][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[   87.397031][ T8326] sctp: [Deprecated]: syz.0.672 (pid 8326) Use of int in max_burst socket option.
[   87.397031][ T8326] Use struct sctp_assoc_value instead
[   87.667593][ T8343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.141054][ T8366] lo speed is unknown, defaulting to 1000
[   88.427905][ T8377] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[   88.430710][ T8377] bridge0: port 1(team0) entered blocking state
[   88.434604][ T8377] bridge0: port 1(team0) entered disabled state
[   88.447258][ T8377] bridge0: port 1(team0) entered blocking state
[   88.450287][ T8377] bridge0: port 1(team0) entered forwarding state
[   88.639026][ T8398] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   88.645510][ T8398] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   88.648825][ T8398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.713687][ T8408] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   88.933009][ T8425] syzkaller0: entered promiscuous mode
[   88.935046][ T8425] syzkaller0: entered allmulticast mode
[   89.105783][ T8435] geneve1: Device is already in use.
[   90.033840][ T8458] netlink: 'syz.0.709': attribute type 29 has an invalid length.
[   90.194995][ T8470] bridge0: entered allmulticast mode
[   90.371463][ T8475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.427331][ T8475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.509001][ T8475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.562921][ T8475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.626387][ T8475] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.634638][ T8475] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.643850][ T8475] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.652117][ T8475] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.152004][ T8493] __nla_validate_parse: 13 callbacks suppressed
[   91.152015][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[   91.157115][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[   91.188397][ T8496] netlink: 'syz.2.720': attribute type 3 has an invalid length.
[   91.191041][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'.
[   92.429544][ T8531] infiniband syz!: set down
[   92.431236][ T8531] infiniband syz!: added team_slave_0
[   92.451701][ T8531] RDS/IB: syz!: added
[   92.454086][ T8531] smc: adding ib device syz! with port count 1
[   92.455942][ T8531] smc:    ib device syz! port 1 has pnetid 
[   92.853558][ T8539] bridge0: left allmulticast mode
[   92.877463][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.883180][ T8539] 8021q: adding VLAN 0 to HW filter on device team0
[   92.888063][ T8539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.898309][ T8540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.905725][ T5858] lo speed is unknown, defaulting to 1000
[   92.907520][ T5858] syz0: Port: 1 Link ACTIVE
[   92.912786][ T5858] lo speed is unknown, defaulting to 1000
[   93.037492][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[   93.148881][ T8559] netlink: 'syz.2.737': attribute type 8 has an invalid length.
[   93.151181][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'.
[   93.926393][ T8572] netlink: 5 bytes leftover after parsing attributes in process `syz.0.738'.
[   93.978359][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[   93.981396][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'.
[   94.278690][ T8584] netlink: 34 bytes leftover after parsing attributes in process `syz.0.742'.
[   94.282435][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'.
[   94.659020][ T8622] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[   94.823438][ T8637] tc_dump_action: action bad kind
[   94.903301][ T8644] bridge: RTM_NEWNEIGH with invalid state 0x31
[   94.997581][ T8653] syzkaller1: entered promiscuous mode
[   94.999571][ T8653] syzkaller1: entered allmulticast mode
[   95.287870][ T8668] openvswitch: netlink: Flow actions attr not present in new flow.
[   96.135994][ T8693] netlink: 'syz.0.777': attribute type 83 has an invalid length.
[   96.430257][ T8719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.446877][ T8719] atomic_op ffff888110a8d998 conn xmit_atomic 0000000000000000
[   97.291467][ T8745] __nla_validate_parse: 8 callbacks suppressed
[   97.291477][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'.
[   97.400459][ T8757] netlink: 208 bytes leftover after parsing attributes in process `syz.1.799'.
[   97.403480][ T8757] netlink: 208 bytes leftover after parsing attributes in process `syz.1.799'.
[   97.438186][ T8760] netlink: 176 bytes leftover after parsing attributes in process `syz.1.800'.
[   97.568691][ T8776] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[   97.572235][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'.
[   97.576260][ T8776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.806'.
[   97.611427][ T8776] xt_CT: No such helper "snmp"
[   97.747317][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.809'.
[   97.861155][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'.
[   97.873478][ T8804] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   97.875837][ T8804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.940676][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.818'.
[   98.009620][ T8819] lo speed is unknown, defaulting to 1000
[   98.095322][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'.
[   98.277369][ T8816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.830426][ T8831] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   99.549574][ T8877] batman_adv: batadv0: Adding interface: dummy0
[   99.551546][ T8877] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.560858][ T8877] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   99.660861][ T8884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   99.664220][ T8884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   99.811678][ T8897] Driver unsupported XDP return value 0 on prog  (id 392) dev N/A, expect packet loss!
[  100.749768][ T8905] DRBG: could not allocate digest TFM handle: hmac(sha384)
[  100.831293][ T8915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.948692][ T8939] netlink: 'syz.2.855': attribute type 5 has an invalid length.
[  101.039219][ T8944] syzkaller1: entered promiscuous mode
[  101.040922][ T8944] syzkaller1: entered allmulticast mode
[  101.059861][ T8949] netlink: 'syz.1.858': attribute type 1 has an invalid length.
[  101.209596][ T8968] netlink: 'syz.1.864': attribute type 32 has an invalid length.
[  101.274899][ T8979] atomic_op ffff888038e36198 conn xmit_atomic 0000000000000000
[  101.478781][ T9003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.508393][ T9006] netlink: 'syz.0.873': attribute type 11 has an invalid length.
[  101.698040][ T9028] erspan0: entered promiscuous mode
[  101.722596][ T9028] 8021q: adding VLAN 0 to HW filter on device veth1
[  101.729151][ T9028] team0: left promiscuous mode
[  101.740784][ T9028] batman_adv: batadv0: Interface activated: dummy0
[  101.745579][ T9028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.407820][ T9093] __nla_validate_parse: 17 callbacks suppressed
[  102.407830][ T9093] netlink: 592 bytes leftover after parsing attributes in process `syz.2.901'.
[  102.552795][ T9102] lo speed is unknown, defaulting to 1000
[  103.225099][ T9107] netlink: 84 bytes leftover after parsing attributes in process `syz.0.905'.
[  104.009493][ T9097] Set syz1 is full, maxelem 65536 reached
[  104.055113][ T9137] netlink: 88 bytes leftover after parsing attributes in process `syz.1.912'.
[  104.287127][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'.
[  104.321708][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.921'.
[  104.360846][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'.
[  104.399802][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'.
[  104.581371][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  104.585239][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'.
[  104.588001][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  104.628364][ T9183] ip6t_srh: unknown srh invflags 4449
[  104.639305][ T9183] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  104.892907][ T9210] netlink: 'syz.0.936': attribute type 2 has an invalid length.
[  104.895636][ T9210] netlink: 'syz.0.936': attribute type 8 has an invalid length.
[  104.941492][ T9214] bond0: entered promiscuous mode
[  104.944031][ T9214] macvlan1: entered promiscuous mode
[  104.946281][ T9214] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  104.949146][ T9214] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[  104.953890][ T9214] hsr1: entered promiscuous mode
[  105.050115][ T9222] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  105.307071][ T9255] netlink: 'syz.1.952': attribute type 22 has an invalid length.
[  105.503957][ T9284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.539801][ T9286] netlink: 'syz.2.962': attribute type 32 has an invalid length.
[  105.559550][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.667745][ T9284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.387448][ T9332] netlink: 'syz.0.973': attribute type 32 has an invalid length.
[  106.613524][ T9354] netlink: 'syz.0.980': attribute type 1 has an invalid length.
[  106.669760][ T9365] netlink: 'syz.0.984': attribute type 32 has an invalid length.
[  106.678929][ T9364] block nbd0: Unsupported socket: shutdown callout must be supported.
[  106.755502][   T33] audit: type=1107 audit(1751947704.034:2): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  107.133140][ T9406] xt_policy: too many policy elements
[  107.141587][ T9407] xt_policy: too many policy elements
[  107.442906][ T9433] netlink: 'syz.2.1003': attribute type 1 has an invalid length.
[  107.474301][ T9433] bond1: (slave gretap1): making interface the new active one
[  107.477400][ T9433] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  107.495691][ T9433] syz.2.1003 (9433) used greatest stack depth: 19592 bytes left
[  107.518076][ T9439] netlink: 'syz.2.1004': attribute type 5 has an invalid length.
[  107.575674][ T9441] __nla_validate_parse: 24 callbacks suppressed
[  107.575685][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'.
[  107.587351][ T9441] sch_tbf: peakrate 14652803538553308261 is lower than or equals to rate 15465736562220645413 !
[  107.592622][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'.
[  107.712968][ T9452] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1010'.
[  107.715809][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[  107.718846][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1010'.
[  107.728997][ T9452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1010'.
[  107.924561][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'.
[  107.927894][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'.
[  107.976918][ T9469] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  107.980050][ T9469] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  108.051581][ T9485] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1019'.
[  108.059356][ T9485] netlink: 'syz.1.1019': attribute type 1 has an invalid length.
[  108.109284][ T9490] netlink: 'syz.1.1021': attribute type 4 has an invalid length.
[  108.119596][ T9490] netlink: 'syz.1.1021': attribute type 4 has an invalid length.
[  108.137095][ T9490] tipc: Can't bind to reserved service type 0
[  108.158644][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'.
[  108.273645][ T9501] netem: change failed
[  108.329385][ T9505] netlink: 'syz.1.1027': attribute type 42 has an invalid length.
[  108.677754][ T9522] xt_CT: No such helper "syz0"
[  109.275066][ T9529] netlink: 'syz.2.1036': attribute type 1 has an invalid length.
[  109.471147][ T9549] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  109.475350][ T9547] lo speed is unknown, defaulting to 1000
[  109.606486][   T33] audit: type=1804 audit(1751947706.884:3): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1045" name="/newroot/402/cgroup.controllers" dev="tmpfs" ino=2066 res=1 errno=0
[  109.615488][   T33] audit: type=1800 audit(1751947706.884:4): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1045" name="cgroup.controllers" dev="tmpfs" ino=2066 res=0 errno=0
[  109.695202][ T9558] Bluetooth: MGMT ver 1.23
[  111.008485][ T9667] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0
[  111.219131][ T9688] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.623049][ T9706] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  112.150080][ T9735] validate_nla: 5 callbacks suppressed
[  112.150091][ T9735] netlink: 'syz.2.1100': attribute type 32 has an invalid length.
[  112.440596][ T9775] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:0
[  112.546986][ T9790] netlink: 'syz.0.1116': attribute type 32 has an invalid length.
[  112.709059][ T9785] __nla_validate_parse: 31 callbacks suppressed
[  112.709069][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[  112.840731][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'.
[  112.938601][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'.
[  113.068925][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'.
[  113.370254][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'.
[  114.104192][ T9877] netlink: 'syz.2.1136': attribute type 6 has an invalid length.
[  114.109229][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'.
[  114.116038][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'.
[  114.166158][ T9883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1138'.
[  114.241163][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'.
[  114.480218][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'.
[  114.668783][ T9923] lo speed is unknown, defaulting to 1000
[  115.218924][ T9957] netlink: 'syz.1.1162': attribute type 4 has an invalid length.
[  115.221640][ T9958] netlink: 'syz.1.1162': attribute type 4 has an invalid length.
[  115.306913][ T9963] x_tables: duplicate underflow at hook 2
[  115.597108][ T9984] SET target dimension over the limit!
[  115.702664][ T9994] xt_TCPMSS: Only works on TCP SYN packets
[  115.929519][T10013] netlink: 'syz.2.1182': attribute type 2 has an invalid length.
[  115.933688][T10013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.329767][T10059] netlink: 'syz.1.1194': attribute type 4 has an invalid length.
[  116.385148][T10065] xt_hashlimit: max too large, truncated to 1048576
[  116.387425][T10065] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  116.525278][T10076] IPv6: sit1: Disabled Multicast RS
[  116.527682][T10076] sit1: entered allmulticast mode
[  116.671081][T10082] IPVS: length: 111 != 24
[  117.168149][T10119] pim6reg1: entered allmulticast mode
[  117.412888][T10134] openvswitch: netlink: Key type 9488 is out of range max 32
[  117.567420][T10147] x_tables: unsorted underflow at hook 2
[  117.636681][ T4896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.639093][ T4896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.653379][T10149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.813349][T10160] __nla_validate_parse: 16 callbacks suppressed
[  117.813361][T10160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1226'.
[  117.817894][T10160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1226'.
[  117.826485][T10160] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  117.867165][T10164] bridge0: port 3(syz_tun) entered blocking state
[  117.869375][T10164] bridge0: port 3(syz_tun) entered disabled state
[  117.873041][T10164] syz_tun: entered allmulticast mode
[  117.876239][T10164] syz_tun: entered promiscuous mode
[  117.878737][T10164] bridge0: port 3(syz_tun) entered blocking state
[  117.881119][T10164] bridge0: port 3(syz_tun) entered forwarding state
[  117.914125][T10168] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1230'.
[  117.917636][T10168] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1230'.
[  118.027433][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'.
[  118.043855][T10187] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  118.084138][T10187] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  118.145116][T10197] netlink: 'syz.0.1237': attribute type 32 has an invalid length.
[  118.370889][T10226] lo speed is unknown, defaulting to 1000
[  118.384886][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1245'.
[  118.387622][T10228] netlink: 'syz.0.1245': attribute type 1 has an invalid length.
[  118.492880][T10240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1247'.
[  118.548114][T10245] netlink: 'syz.2.1249': attribute type 32 has an invalid length.
[  118.943840][T10267] lo speed is unknown, defaulting to 1000
[  119.457290][T10280] netlink: 'syz.1.1260': attribute type 32 has an invalid length.
[  119.988610][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  120.029499][T10302] netlink: 'syz.2.1264': attribute type 11 has an invalid length.
[  120.092953][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'.
[  120.095995][T10304] net veth1_virt_wifi : renamed from virt_wifi0
[  120.212074][T10317] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1267'.
[  120.405247][T10332] netlink: 'syz.1.1276': attribute type 32 has an invalid length.
[  120.695225][T10360] netlink: 'syz.0.1284': attribute type 9 has an invalid length.
[  120.703933][T10360] netlink: 'syz.0.1284': attribute type 9 has an invalid length.
[  120.727586][T10366] netlink: 'syz.1.1286': attribute type 32 has an invalid length.
[  121.024252][T10396] x_tables: duplicate underflow at hook 1
[  121.350581][T10425] xt_time: unknown flags 0x4
[  121.412207][T10425] lo speed is unknown, defaulting to 1000
[  121.618712][T10444] netlink: 'syz.1.1310': attribute type 1 has an invalid length.
[  121.741374][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.741374][T10452] Use struct sctp_sack_info instead
[  121.748297][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.748297][T10452] Use struct sctp_sack_info instead
[  121.755526][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.755526][T10452] Use struct sctp_sack_info instead
[  121.760517][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.760517][T10452] Use struct sctp_sack_info instead
[  121.765535][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.765535][T10452] Use struct sctp_sack_info instead
[  121.771318][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.771318][T10452] Use struct sctp_sack_info instead
[  121.776185][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.776185][T10452] Use struct sctp_sack_info instead
[  121.807602][T10452] sctp: [Deprecated]: syz.2.1313 (pid 10452) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.807602][T10452] Use struct sctp_sack_info instead
[  122.089199][T10475] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  122.094121][T10477] batadv_slave_1: entered promiscuous mode
[  122.100515][T10476] batadv_slave_1: left promiscuous mode
[  122.149047][T10484] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  122.322339][T10507] tap0: tun_chr_ioctl cmd 1074025677
[  122.324250][T10507] tap0: linktype set to 825
[  122.331451][ T5858] IPVS: starting estimator thread 0...
[  122.422038][T10512] IPVS: using max 62 ests per chain, 148800 per kthread
[  122.982375][T10562] veth4: entered allmulticast mode
[  123.264722][T10580] __nla_validate_parse: 17 callbacks suppressed
[  123.264736][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'.
[  123.269640][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'.
[  123.272635][T10580] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1353'.
[  123.275472][T10580] nbd: socks must be embedded in a SOCK_ITEM attr
[  123.335086][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'.
[  123.650806][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'.
[  123.669680][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'.
[  123.767497][   T33] audit: type=1804 audit(1751947721.044:5): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1362" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2172 res=1 errno=0
[  123.779043][   T33] audit: type=1800 audit(1751947721.044:6): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1362" name="cgroup.controllers" dev="tmpfs" ino=2172 res=0 errno=0
[  123.933369][T10615] lo speed is unknown, defaulting to 1000
[  123.972418][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  124.019202][T10614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'.
[  124.023484][T10614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1364'.
[  124.026369][T10614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'.
[  124.743318][T10657] lo speed is unknown, defaulting to 1000
[  124.855951][T10666] validate_nla: 1 callbacks suppressed
[  124.855963][T10666] netlink: 'syz.2.1378': attribute type 32 has an invalid length.
[  125.951970][T10743] nbd: must specify a size in bytes for the device
[  125.954444][T10744] nbd: must specify a size in bytes for the device
[  126.193238][T10760] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  126.233311][T10763] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.241422][T10763] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.244497][T10763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.247285][T10763] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.250465][T10763] geneve2: entered promiscuous mode
[  126.455298][T10784] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  126.512584][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.729875][T10805] netlink: 'syz.0.1424': attribute type 1 has an invalid length.
[  126.742170][T10805] netlink: 'syz.0.1424': attribute type 4 has an invalid length.
[  127.046969][T10841] team0: left allmulticast mode
[  127.048560][T10841] geneve1: left allmulticast mode
[  127.050650][T10841] geneve1: left promiscuous mode
[  127.053655][T10841] bridge0: port 1(team0) entered disabled state
[  127.866863][T10906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.043253][T10920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.103368][T10920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.136822][T10920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.179552][T10920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.252800][T10920] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.261734][T10920] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.271561][T10920] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.296113][T10920] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.312033][ T5203] Bluetooth: hci2: command 0x0405 tx timeout
[  128.370672][T10958] netlink: 'syz.0.1470': attribute type 32 has an invalid length.
[  128.386708][T10957] can: request_module (can-proto-0) failed.
[  128.471236][T10975] Cannot find del_set index 286 as target
[  128.775537][T11011] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  128.952411][T11029] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  129.120442][T11056] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  129.124868][T11056] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  129.130450][T11056] __nla_validate_parse: 27 callbacks suppressed
[  129.130486][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  129.135902][T11056] netlink: 'syz.0.1500': attribute type 23 has an invalid length.
[  129.260629][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'.
[  129.279155][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'.
[  129.319200][T11076] netlink: 'syz.2.1502': attribute type 16 has an invalid length.
[  129.321662][T11076] netlink: 'syz.2.1502': attribute type 17 has an invalid length.
[  129.335005][T11076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.168331][T11104] macsec1: entered allmulticast mode
[  130.170048][T11104] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  130.174225][T11104] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  130.247553][T11086] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  130.287487][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'.
[  130.479842][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  130.536535][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'.
[  130.541108][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  130.565308][T11140] vlan4: entered promiscuous mode
[  130.566972][T11140] bond0: entered promiscuous mode
[  130.630718][T11150] netlink: 'syz.2.1526': attribute type 5 has an invalid length.
[  130.669923][T11155] netlink: 'syz.0.1527': attribute type 1 has an invalid length.
[  130.704422][T11161] openvswitch: netlink: Message has 4 unknown bytes.
[  130.706783][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.724433][T11155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1527'.
[  130.755461][T11167] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.786739][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'.
[  130.790226][T11173] netlink: 'syz.0.1533': attribute type 4 has an invalid length.
[  130.829617][T11167] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.836461][T11180] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1534'.
[  130.869981][T11167] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.917261][T11167] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.925696][T11182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  131.129432][T11200] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  131.164873][T11216] netlink: 'syz.1.1544': attribute type 1 has an invalid length.
[  131.185017][T11215] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  131.206725][T11167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.235219][T11167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.246015][T11167] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.248885][T11222] syzkaller1: entered promiscuous mode
[  131.253596][T11222] syzkaller1: entered allmulticast mode
[  131.261062][T11167] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.424556][T11237] sit3: entered promiscuous mode
[  131.474583][T11241] lo speed is unknown, defaulting to 1000
[  132.696143][T11274] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 2942. macoff=82
[  132.720718][T11276] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  132.824310][T11281] vlan4: entered promiscuous mode
[  132.826039][T11281] bridge0: entered promiscuous mode
[  133.117427][T11300] openvswitch: netlink: IP tunnel dst address not specified
[  133.488315][T11329] x_tables: duplicate underflow at hook 3
[  133.649320][T11347] netlink: 'syz.2.1584': attribute type 1 has an invalid length.
[  133.684335][T11347] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.700601][T11347] bond2: (slave ip6gretap1): making interface the new active one
[  133.704025][T11347] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  133.766347][T11347] netlink: 'syz.2.1584': attribute type 10 has an invalid length.
[  133.768832][T11347] team0: entered promiscuous mode
[  133.770381][T11347] team_slave_0: entered promiscuous mode
[  133.778737][T11347] team_slave_1: entered promiscuous mode
[  133.780651][T11347] team0: entered allmulticast mode
[  133.785976][T11347] team_slave_0: entered allmulticast mode
[  133.788590][T11347] team_slave_1: entered allmulticast mode
[  133.791510][T11347] bridge0: port 4(team0) entered blocking state
[  133.794841][T11347] bridge0: port 4(team0) entered disabled state
[  133.935329][T11386] block nbd0: Unsupported socket: shutdown callout must be supported.
[  134.019895][T11395] netlink: 'syz.0.1600': attribute type 1 has an invalid length.
[  134.022838][T11395] netlink: 'syz.0.1600': attribute type 1 has an invalid length.
[  134.035200][T11395] netlink: 'syz.0.1600': attribute type 13 has an invalid length.
[  134.216974][T11417] netlink: 'syz.2.1606': attribute type 1 has an invalid length.
[  134.219395][T11417] __nla_validate_parse: 22 callbacks suppressed
[  134.219403][T11417] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1606'.
[  134.295847][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'.
[  134.369233][T11434] syzkaller0: entered promiscuous mode
[  134.370896][T11434] syzkaller0: entered allmulticast mode
[  134.623129][T11463] sctp: [Deprecated]: syz.0.1618 (pid 11463) Use of int in maxseg socket option.
[  134.623129][T11463] Use struct sctp_assoc_value instead
[  135.274496][ T5203] Bluetooth: hci2: command 0x0405 tx timeout
[  135.418544][T11456] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1616'.
[  135.435535][T11465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1619'.
[  135.442942][T11465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1619'.
[  135.534119][T11482] gretap2: entered promiscuous mode
[  135.535837][T11482] gretap2: entered allmulticast mode
[  135.554180][T11485] ip6gre1: entered promiscuous mode
[  135.583038][T11485] lo speed is unknown, defaulting to 1000
[  135.720137][T11490] veth8: entered promiscuous mode
[  135.907270][T11504] vlan2: entered allmulticast mode
[  135.908912][T11504] bridge_slave_0: entered allmulticast mode
[  136.095382][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1636'.
[  136.159469][T11524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.331600][T11542] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.437524][T11544] validate_nla: 2 callbacks suppressed
[  136.437538][T11544] netlink: 'syz.1.1641': attribute type 10 has an invalid length.
[  136.445295][T11544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1641'.
[  136.454981][T11544] @: entered allmulticast mode
[  136.460641][T11544] bridge0: port 1(4@) entered blocking state
[  136.468477][T11544] bridge0: port 1(4@) entered disabled state
[  136.479440][T11544] A link change request failed with some changes committed already. Interface 4@ may have been left with an inconsistent configuration, please check.
[  136.729852][T11552] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1642'.
[  136.809804][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  136.993631][T11566] 8021q: VLANs not supported on lo
[  137.003963][T11569] netlink: 'syz.0.1646': attribute type 32 has an invalid length.
[  137.072468][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'.
[  137.100349][T11574] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[  137.104052][T11574] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[  137.107121][T11574] CPU: 0 UID: 0 PID: 11574 Comm: syz.2.1648 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  137.111313][T11574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.114354][T11574] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  137.116018][T11574] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[  137.121905][T11574] RSP: 0018:ffffc900068f70f0 EFLAGS: 00010206
[  137.123772][T11574] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: ffff888106433980
[  137.126228][T11574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881096ba000
[  137.128727][T11574] RBP: dffffc0000000000 R08: ffff888106433980 R09: 0000000000000002
[  137.131035][T11574] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[  137.133444][T11574] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8881096ba000
[  137.135763][T11574] FS:  00007f99942d06c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  137.138433][T11574] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.140357][T11574] CR2: 0000200000001c40 CR3: 000000011060a000 CR4: 00000000000006f0
[  137.142727][T11574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  137.145177][T11574] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  137.147591][T11574] Call Trace:
[  137.148694][T11574]  <TASK>
[  137.149637][T11574]  qdisc_tree_reduce_backlog+0x29c/0x480
[  137.151341][T11574]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  137.153106][T11574]  hhf_change+0x764/0xad0
[  137.154472][T11574]  ? __pfx_hhf_change+0x10/0x10
[  137.155999][T11574]  ? __pfx_hhf_init+0x10/0x10
[  137.157474][T11574]  hhf_init+0x213/0x950
[  137.158767][T11574]  ? __pfx_hhf_init+0x10/0x10
[  137.160218][T11574]  qdisc_create+0x7ac/0xea0
[  137.161629][T11574]  tc_modify_qdisc+0x1426/0x2010
[  137.163172][T11574]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  137.164798][T11574]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  137.166445][T11574]  rtnetlink_rcv_msg+0x77c/0xb70
[  137.168048][T11574]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  137.169639][T11574]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  137.171341][T11574]  ? ref_tracker_free+0x63a/0x7d0
[  137.172902][T11574]  ? __copy_skb_header+0xa7/0x550
[  137.174452][T11574]  ? __pfx_ref_tracker_free+0x10/0x10
[  137.176028][T11574]  netlink_rcv_skb+0x208/0x470
[  137.177498][T11574]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  137.179206][T11574]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  137.180831][T11574]  ? netlink_deliver_tap+0x2e/0x1b0
[  137.182367][T11574]  ? netlink_deliver_tap+0x2e/0x1b0
[  137.183918][T11574]  netlink_unicast+0x75b/0x8d0
[  137.185320][T11574]  netlink_sendmsg+0x805/0xb30
[  137.186759][T11574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.188440][T11574]  ? aa_sock_msg_perm+0x94/0x160
[  137.189974][T11574]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  137.191606][T11574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.193262][T11574]  __sock_sendmsg+0x21c/0x270
[  137.194727][T11574]  ____sys_sendmsg+0x505/0x830
[  137.196243][T11574]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.197899][T11574]  ? import_iovec+0x74/0xa0
[  137.199316][T11574]  ___sys_sendmsg+0x21f/0x2a0
[  137.200772][T11574]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.202317][T11574]  ? __fget_files+0x2a/0x420
[  137.203710][T11574]  ? __fget_files+0x3a0/0x420
[  137.205170][T11574]  __x64_sys_sendmsg+0x19b/0x260
[  137.206695][T11574]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  137.208453][T11574]  ? rcu_is_watching+0x15/0xb0
[  137.209950][T11574]  ? do_syscall_64+0xbe/0x3b0
[  137.211412][T11574]  do_syscall_64+0xfa/0x3b0
[  137.212782][T11574]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.214383][T11574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.216250][T11574]  ? exc_page_fault+0x9f/0xf0
[  137.217700][T11574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.219523][T11574] RIP: 0033:0x7f999338e929
[  137.220916][T11574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.226560][T11574] RSP: 002b:00007f99942d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.229124][T11574] RAX: ffffffffffffffda RBX: 00007f99935b5fa0 RCX: 00007f999338e929
[  137.231530][T11574] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000017
[  137.233980][T11574] RBP: 00007f9993410b39 R08: 0000000000000000 R09: 0000000000000000
[  137.236427][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.238797][T11574] R13: 0000000000000000 R14: 00007f99935b5fa0 R15: 00007fff657b9198
[  137.241185][T11574]  </TASK>
[  137.242143][T11574] Modules linked in:
[  137.243473][T11574] ---[ end trace 0000000000000000 ]---
[  137.245139][T11574] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  137.246768][T11574] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[  137.252590][T11574] RSP: 0018:ffffc900068f70f0 EFLAGS: 00010206
[  137.254392][T11574] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: ffff888106433980
[  137.256692][T11574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881096ba000
[  137.258985][T11574] RBP: dffffc0000000000 R08: ffff888106433980 R09: 0000000000000002
[  137.261318][T11574] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[  137.263741][T11574] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8881096ba000
[  137.266066][T11574] FS:  00007f99942d06c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  137.268694][T11574] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.270614][T11574] CR2: 0000200000001c40 CR3: 000000011060a000 CR4: 00000000000006f0
[  137.272957][T11574] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  137.275242][T11574] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  137.277597][T11574] Kernel panic - not syncing: Fatal exception in interrupt
[  137.280337][T11574] Kernel Offset: disabled
[  137.281624][T11574] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:08:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900068f6930
R8 =ffff888108210237 R9 =1ffff11021042046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4915 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f99942d06c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001c40 CR3=000000011060a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f99940ed100 00007f9993584440 XMM05=00007f9993584458 00007f99935844a0
XMM06=00007f9993584498 00007f9993584490 XMM07=00007f9993584488 00007f9993584480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9993411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=29b1af5726759700 RBX=ffffffff81974d58 RCX=29b1af5726759700 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f999428dfc8 CR3=00000001099da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=224e00000020001c 0000000000000000
XMM04=0000000000000000 bb1414ac00000000 XMM05=17002c0000000700 0b00080000000400
XMM06=0c00080100000000 0000000000000000 XMM07=0000fc0000000021 4e00020004001c00
XMM08=0000000000000000 000000bb1414ac00 XMM09=0000000000000000 00007fb0f6c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
