last executing test programs:

794.715405ms ago: executing program 1 (id=1241):
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)="2c0e4e", 0x3}], 0x1, 0x8040000, 0x0) (async)
preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/26, 0x1a}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, 0x5, 0x7ff00000)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x40000000, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async)
accept4(r4, 0x0, 0x0, 0x80000) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r6, 0x0, 0x9}, 0x18) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)

794.254512ms ago: executing program 1 (id=1242):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
writev(r8, &(0x7f0000000600)=[{&(0x7f0000000340)="b8", 0x1}], 0x1)
recvmsg(r7, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x60002060)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000061400032abd7000b05cde616f43c265336f85d3fddbdf250800010001000000e40b010002002300"], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x8008)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x821c0005, r10}) (async)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x821c0005, r10})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x110022, r10}) (async)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x110022, r10})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14], 0x20}}, 0x0)
accept$packet(r4, 0x0, &(0x7f0000000240))

688.269612ms ago: executing program 0 (id=1243):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000002c0)={@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000180)=""/247, 0xf7}, &(0x7f0000000040), 0x7}, 0xa0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000030400000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="000800005516010008000a00", @ANYRES32=r3, @ANYBLOB="0a0015d022d1aaaaaaaa0000"], 0x34}, 0x1, 0x0, 0x0, 0x20004894}, 0x4001800)

618.465491ms ago: executing program 1 (id=1244):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527a004c3c0020010000000000000000000000000000ff02000000000000000000000000000173000000000000000420880b0000000000000800000086dd080088be00000001100000000100000000000000080022eb0000000020000008020000000000000000000000080065580000000075d160fb0a4484732fdbbfbc4221f1c5d33f4f508e1b8e8e34581dc9753714a454867bd5566501cc1296ea3330052fcae82b4689a5da650e9f3db58548b064a935e8cc2bdcc03329e4809952cba167d6231a1180f533fc12afec8d"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4021}}, 0x20}}, 0x0)

618.243321ms ago: executing program 2 (id=1245):
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000090605000a0005b38290f90e9ab40000100003006269746d61703a706f727400050004000000000c0900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)

616.407577ms ago: executing program 0 (id=1246):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
socket$inet6(0xa, 0x6, 0x20005)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}]}}]}, 0x44}}, 0x800)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, 0x0, 0x8008090)
r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r15 = accept$unix(r4, &(0x7f0000000280)=@abs, &(0x7f0000000200)=0x6e)
getsockopt$bt_hci(r14, 0x0, 0x3, &(0x7f0000000cc0)=""/199, &(0x7f0000000dc0)=0xc7)
recvmsg$unix(r15, &(0x7f0000000c80)={&(0x7f0000000380), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000600)=""/72, 0x48}, {&(0x7f0000000680)=""/247, 0xf7}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/170, 0xaa}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000000a40)=""/119, 0x77}], 0xa, &(0x7f0000000ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x10060)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)

615.792882ms ago: executing program 2 (id=1247):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000ff", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0)

537.784234ms ago: executing program 2 (id=1248):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2a, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)={0x2c, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x4d}]}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000004)
sendto$packet(r0, &(0x7f0000000580)="311437873a963bf485", 0x9, 0x40, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe, 0x6, @local}, 0x14)

359.882147ms ago: executing program 1 (id=1249):
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x20040880}, 0x800)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = accept4(r3, &(0x7f0000000180)=@alg, &(0x7f0000000080)=0xffffffffffffffb6, 0x80000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3000000000080004400000000a0800094000002003080003400000000009000100"], 0x90}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0xb8, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
syz_emit_ethernet(0xa8, 0x0, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@hci={0x1f, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xa, 0x7, "9ade3b34563980c1c9ecc996d5c2d514210311d06da8cdc357a023bf7af733e15c6d55188356073134fd7ccc925ec6b1164f2bc74907f7245c57300a0d34b1", 0x5}, 0x80, 0x0}}], 0x2, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x48010)
close(r3)

270.012348ms ago: executing program 2 (id=1250):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='cma_release\x00', r0, 0x40000000}, 0x18)

269.562493ms ago: executing program 1 (id=1251):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="270f00000000000000000407fce90000000000006e6c300000000000000900030073797a310000000037c14f06945c1a07e2aba48d944fc413bf421c6a"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', <r5=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$inet6(0xa, 0x6, 0x20005)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x46, &(0x7f0000001100)={&(0x7f0000001140)=@ipv4_getaddr={0x0, 0x16, 0x10, 0x70bd2d, 0x25dfdbfc, {0x2, 0x1e, 0x88, 0xfe, r5}, [@IFA_ADDRESS={0x0, 0x1, @private=0xa010102}, @IFA_LABEL={0x0, 0x3, 'vlan0\x00'}, @IFA_BROADCAST={0x0, 0x4, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r11 = socket$packet(0x11, 0x2, 0x300)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r13, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x0, 0x2, 0xfffffffffffffffc, 0x40e, 0xf8a8], 0x3, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)

188.294339ms ago: executing program 0 (id=1252):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0}) (async)
socket$inet6(0xa, 0x6, 0x20005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a5c000000090a010400000080000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000000008080007400000002e080006400000000008000f4000000002140000001000010000000000000000000084000a"], 0x84}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, 0x0, 0x8008090) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket$packet(0x11, 0x3, 0x300) (async)
r11 = socket(0x11, 0x3, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r13=>0x0})
bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13}, 0x14) (async)
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async)
sendmsg$netlink(r11, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca0b"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}, {&(0x7f0000000600)=ANY=[], 0x22e8}], 0x3}, 0x20040051) (async)
setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r14, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")

185.585705ms ago: executing program 2 (id=1253):
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x89}, {0x401, 0x0, 0x0, 0x200000000000, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x40}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x89}, {0x401, 0x0, 0x0, 0x200000000000, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x40}}, 0xe8)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000c18366d555aada002bcae92af537123547ace1de0101eb760079619eed930b1384d3fe0e0eef992a04b9f37572a1e82cc4343461023297001f984aaf4199db507407c342926c2081f19820c24b0d9bddeaae9e9f47fb6381debb6c31b9396d52551db96c55551d4c4a7a74d2a5f2492c61ba8f2f253e448d4dbf295f8e72704e2b2cb863f40438ebe5fdd861267c8650321d0f0f0eb9c8bc5355b1345e226ecfdea2ed32ae9e6250eff9cd62ec38344a353464bd0f54505007463b9d22bf9146bed6a8c9c46cbc063028946ef78b2ae486d5338651303b4842bfbd3f187974960b45ff94", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r3, &(0x7f00000001c0), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r7, 0x0, 0x9}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
socket(0x10, 0x803, 0x0)

114.782474ms ago: executing program 0 (id=1254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000090605000a0005b38290f90e9ab40000100003006269746d61703a706f727400050004000c0000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)

111.652731ms ago: executing program 2 (id=1255):
socket$inet6(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001000)={<r1=>0x0, 0x80000001}, &(0x7f0000001040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000010c0)={r1, 0x3, 0x1, [0x5]}, 0xa)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x8080)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0xdc0320f922d7d4f9, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}, {0x0}, {&(0x7f0000001400)="4445c9af65c7a20daffa7284ac524e4209f819caf53db107d8b7c3a5ac79fc68debea9ebba6d4a26c920151f64ca30", 0x2f}], 0x3, 0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001100)={r1, 0xf9}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x0, 0x0, {{}, {0x0, 0x410c}, {0xd, 0x14, {0xffffffee, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}}, 0x0)

109.351067ms ago: executing program 0 (id=1256):
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000090605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900160073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)

81.683949ms ago: executing program 1 (id=1257):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000200))
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x80000002})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={<r3=>r1, 0xffffffffffffffff, 0x4, 0x1})
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000814}, 0x40000891)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
close(0x4)
connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
write$rfkill(r10, &(0x7f0000000340)={0x785, 0x8, 0x3, 0x0, 0x1}, 0x8)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000940)=ANY=[@ANYBLOB="18000040010016000000000000000076aba48f2ddc01cc0e0018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186800000400000000000000080000001840000003000000000000000000000018550000100000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0xd795, 0x10, &(0x7f00000005c0)=""/16, 0x41100, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, r3, r2, r3, r2, r11], &(0x7f0000000800)=[{0x5, 0x2, 0x5, 0x5}, {0x3, 0x4, 0xa, 0x8}, {0x3, 0x4, 0xb, 0x2}, {0x2, 0x4, 0x5, 0x6}, {0x5, 0x2, 0x8, 0x3}, {0x4, 0x4, 0x4, 0xa}, {0x3, 0x5, 0x3, 0x2}], 0x10, 0x5}, 0x94)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f00000000c0)="404d41bee8bcd81b2cf13dc4d25eb99faa913e874c15ec6a8168a5add7d35e36a616956ff40355108e8e3e93f69408b4136640232e0f73213a9891a0d48627bb15942be815c8ee24613d720e40a57ecde426e1e6e985fe35324c68999972e828f1c786bb0ece53220867dce386", 0xfffffffffffffd19}], 0x2}, 0x4058880)

0s ago: executing program 0 (id=1258):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="011be93d270f1c630882ed860e00d87b74216084c2cf1ee09f3379cacc9efd90cf0b3e01d5e6306e64be2d1688121132bdc85ce555a6c99b2e66c1b26879c168a52998c7618fb2227f95bec39e5ff537e21345ba32abce03ffdba5ac027b0bb633d3f9df93caf32fcb6a0414eddd0d7b"], 0x14}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x390, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5e3c3e018fc2203c9988a2b5ab79fe08095e65da6709"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "74bb6bbb2b2634c1847eb846d7effcf8ad6982a419"}}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x42f, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7f37f1b2b884fb0fb4b6d2bcfba60e07e1423ce3f9e64b8c"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "861aace93f00d219599bd3ceae3c6db9e723ed03755046adbbd67444d5dd78d6d570d0"}}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4884}, 0x10)
ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
socket$inet6(0xa, 0x6, 0x20005)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r12 = socket$packet(0x11, 0x3, 0x300)
r13 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r13, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000300)=0xf6d, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53275' (ED25519) to the list of known hosts.
syzkaller login: [   57.198604][ T5831] cgroup: Unknown subsys name 'net'
[   57.291028][ T5831] cgroup: Unknown subsys name 'cpuset'
[   57.295199][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.871025][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.474948][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.489505][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.493071][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.496918][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.500189][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.511152][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.518533][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.523358][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.528344][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.532006][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.595250][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.600764][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.604437][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.608988][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.612559][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.851484][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   66.003807][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.006894][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.010327][ T5846] bridge_slave_0: entered allmulticast mode
[   66.013541][ T5846] bridge_slave_0: entered promiscuous mode
[   66.018313][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.021068][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.023787][ T5846] bridge_slave_1: entered allmulticast mode
[   66.026894][ T5846] bridge_slave_1: entered promiscuous mode
[   66.058062][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   66.090145][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.101871][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.136851][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   66.158089][ T5846] team0: Port device team_slave_0 added
[   66.190600][ T5846] team0: Port device team_slave_1 added
[   66.203567][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.206191][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.209225][ T5850] bridge_slave_0: entered allmulticast mode
[   66.212377][ T5850] bridge_slave_0: entered promiscuous mode
[   66.247781][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.250724][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.253654][ T5850] bridge_slave_1: entered allmulticast mode
[   66.257204][ T5850] bridge_slave_1: entered promiscuous mode
[   66.306931][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.321522][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.324147][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.333818][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.341105][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.352313][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.354930][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.365014][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.383685][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.386475][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.390201][ T5854] bridge_slave_0: entered allmulticast mode
[   66.394101][ T5854] bridge_slave_0: entered promiscuous mode
[   66.400269][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.403162][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.406853][ T5854] bridge_slave_1: entered allmulticast mode
[   66.411037][ T5854] bridge_slave_1: entered promiscuous mode
[   66.478473][ T5850] team0: Port device team_slave_0 added
[   66.484061][ T5846] hsr_slave_0: entered promiscuous mode
[   66.487001][ T5846] hsr_slave_1: entered promiscuous mode
[   66.491820][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.496378][ T5850] team0: Port device team_slave_1 added
[   66.512906][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.566166][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.569147][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.580305][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.601280][ T5854] team0: Port device team_slave_0 added
[   66.604029][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.606778][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.616938][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.623527][ T5854] team0: Port device team_slave_1 added
[   66.674822][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.677119][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.687571][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.693641][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.696428][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.706990][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.771293][ T5850] hsr_slave_0: entered promiscuous mode
[   66.773745][ T5850] hsr_slave_1: entered promiscuous mode
[   66.776316][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   66.779743][ T5850] Cannot create hsr debugfs directory
[   66.803191][ T5854] hsr_slave_0: entered promiscuous mode
[   66.806400][ T5854] hsr_slave_1: entered promiscuous mode
[   66.810565][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   66.812880][ T5854] Cannot create hsr debugfs directory
[   67.032140][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.059090][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.087379][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.120467][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.209813][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.218711][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.224303][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.247109][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.336946][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.348241][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.360358][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.369898][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.382573][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.424378][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   67.449795][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.452926][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.483348][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.486269][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.568766][ T5238] Bluetooth: hci1: command tx timeout
[   67.571289][ T5238] Bluetooth: hci0: command tx timeout
[   67.594410][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.639089][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.649345][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.658496][ T5852] Bluetooth: hci2: command tx timeout
[   67.661048][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.664000][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.680719][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.683605][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.713082][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   67.743647][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.746519][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.770360][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.772738][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.834094][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.911097][ T5846] veth0_vlan: entered promiscuous mode
[   67.932426][ T5846] veth1_vlan: entered promiscuous mode
[   68.005886][ T5846] veth0_macvtap: entered promiscuous mode
[   68.031241][ T5846] veth1_macvtap: entered promiscuous mode
[   68.052934][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.065942][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.071984][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.089683][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.122928][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.126622][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.140609][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.148664][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.212088][ T5850] veth0_vlan: entered promiscuous mode
[   68.230945][ T5854] veth0_vlan: entered promiscuous mode
[   68.239447][ T5850] veth1_vlan: entered promiscuous mode
[   68.262648][ T5854] veth1_vlan: entered promiscuous mode
[   68.330372][ T5850] veth0_macvtap: entered promiscuous mode
[   68.334800][ T3957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.341498][ T3957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.352986][ T5850] veth1_macvtap: entered promiscuous mode
[   68.367353][ T5854] veth0_macvtap: entered promiscuous mode
[   68.376770][ T5854] veth1_macvtap: entered promiscuous mode
[   68.395967][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.400425][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.406319][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.429386][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.443479][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.456973][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.473533][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.485082][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.490917][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.494208][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.503141][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.510671][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.514369][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.529404][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.569504][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.670949][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.675913][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.679139][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.683086][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.744672][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.749801][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.760206][ T3957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.764879][ T3957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.204976][ T5931] netlink: 'syz.0.4': attribute type 1 has an invalid length.
[   69.208073][ T5931] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.4'.
[   69.220990][ T5932] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.260780][ T5932] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5'.
[   69.291482][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   69.563775][ T5946] Bluetooth: MGMT ver 1.23
[   69.649082][ T5852] Bluetooth: hci0: command tx timeout
[   69.651369][ T5852] Bluetooth: hci1: command tx timeout
[   69.727761][ T5852] Bluetooth: hci2: command tx timeout
[   69.814226][ T5962] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12'.
[   69.824060][ T5962] block nbd0: not configured, cannot reconfigure
[   69.974980][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.981883][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.988996][ T5952] bond0 (unregistering): Released all slaves
[   70.203593][ T5972] bond1: entered promiscuous mode
[   70.211013][ T5972] bond1: entered allmulticast mode
[   70.218223][ T5972] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.489913][ T5972] bond1 (unregistering): Released all slaves
[   70.655474][ T5979] Zero length message leads to an empty skb
[   70.671144][ T5977] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   70.674032][ T5977] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   70.924610][ T5995] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   70.934641][ T5995] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16'.
[   71.102396][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.105401][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.728796][ T5238] Bluetooth: hci0: command tx timeout
[   71.731439][ T5852] Bluetooth: hci1: command tx timeout
[   71.804479][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.811339][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.819085][ T5995] bond0 (unregistering): Released all slaves
[   71.819317][ T5852] Bluetooth: hci2: command tx timeout
[   71.853316][ T5997] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   71.943198][ T6001] netlink: 152 bytes leftover after parsing attributes in process `syz.0.20'.
[   71.947548][ T6001] block nbd0: not configured, cannot reconfigure
[   72.044669][ T6003] netlink: 'syz.1.21': attribute type 15 has an invalid length.
[   72.069224][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'.
[   72.078518][ T6006] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   72.090431][ T6003] bond0: entered promiscuous mode
[   72.092505][ T6003] bond0: entered allmulticast mode
[   72.095150][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.181606][ T6003] bond0 (unregistering): Released all slaves
[   72.280535][ T6008] bond1 (unregistering): Released all slaves
[   72.312779][ T6017] netlink: 'syz.1.24': attribute type 10 has an invalid length.
[   72.325900][ T6014] netlink: 164 bytes leftover after parsing attributes in process `syz.0.23'.
[   72.337893][ T6017] team0: Device ipvlan1 failed to register rx_handler
[   72.388830][ T6011] bond0: entered promiscuous mode
[   72.391030][ T6011] bond0: entered allmulticast mode
[   72.394606][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.478676][ T6020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.25'.
[   72.495829][ T6020] block nbd0: not configured, cannot reconfigure
[   72.586680][ T6011] bond0 (unregistering): Released all slaves
[   72.613441][ T6025] warning: `syz.2.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.881453][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'.
[   72.889520][ T6043] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.955787][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv1
[   72.961704][ T6048] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   72.966454][ T6048] team0: Failed to send options change via netlink (err -105)
[   72.973732][ T6048] team0: Port device batadv1 added
[   73.025997][ T6043] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.121384][ T6057] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   73.176784][ T6051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.183810][ T6051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.190166][ T6051] bond0 (unregistering): Released all slaves
[   73.221234][ T6043] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.357974][ T6043] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.533164][ T5857] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.554155][ T5857] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.579151][ T5857] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.600350][ T5857] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.736464][ T6085] netlink: 'syz.0.41': attribute type 3 has an invalid length.
[   73.789648][ T6085] bond0: entered promiscuous mode
[   73.792436][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.817777][ T5238] Bluetooth: hci0: command tx timeout
[   73.819667][ T5852] Bluetooth: hci1: command tx timeout
[   73.877087][ T6089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.888566][ T5852] Bluetooth: hci2: command tx timeout
[   73.992287][ T6085] bond0 (unregistering): Released all slaves
[   74.016704][ T6097] macvlan0: entered promiscuous mode
[   74.020729][ T6097] batadv0: entered promiscuous mode
[   74.025221][ T6097] hsr1: entered allmulticast mode
[   74.029958][ T6097] macvlan0: entered allmulticast mode
[   74.032211][ T6097] veth1_vlan: entered allmulticast mode
[   74.034545][ T6097] batadv0: entered allmulticast mode
[   74.039312][ T6097] macvlan0: left promiscuous mode
[   74.042655][ T6097] batadv0: left promiscuous mode
[   74.217760][ T6105] bond0: entered promiscuous mode
[   74.220241][ T6105] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.297108][ T6105] bond0 (unregistering): Released all slaves
[   74.315826][ T6106] netlink: 'syz.0.46': attribute type 2 has an invalid length.
[   74.321873][ T6103] netlink: 'syz.0.46': attribute type 2 has an invalid length.
[   74.330364][ T6101] __nla_validate_parse: 5 callbacks suppressed
[   74.330388][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'.
[   74.336759][ T6101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.372329][ T6112] netlink: 152 bytes leftover after parsing attributes in process `syz.0.48'.
[   74.375566][ T6112] block nbd0: not configured, cannot reconfigure
[   74.411317][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.644254][ T6134] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.53'.
[   74.699210][ T6137] pim6reg99999999: entered allmulticast mode
[   74.703504][ T6137] ieee802154 phy0 wpan0: encryption failed: -22
[   74.825973][ T6147] bridge_slave_0: left allmulticast mode
[   74.831428][ T6147] bridge_slave_0: left promiscuous mode
[   74.834739][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.844516][ T6147] bridge_slave_1: left allmulticast mode
[   74.846989][ T6147] bridge_slave_1: left promiscuous mode
[   74.853690][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.866498][ T6147] team0: Port device team_slave_0 removed
[   74.875043][ T6147] team0: Port device team_slave_1 removed
[   74.879179][ T6147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.882024][ T6147] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.964711][ T6152] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   75.016282][ T6152] bond0: (slave geneve2): making interface the new active one
[   75.019517][ T6152] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   75.022392][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   75.023832][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.58'.
[   75.025763][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   75.025808][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   75.035762][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   75.042332][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.045511][ T6155] tun0: tun_chr_ioctl cmd 1074025675
[   75.049793][ T6155] tun0: persist enabled
[   75.052838][ T6155] tun0: tun_chr_ioctl cmd 1074025675
[   75.056066][ T6155] tun0: persist enabled
[   75.234218][ T6161] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   75.293821][ T6161] bond0: entered promiscuous mode
[   75.297872][ T6161] bond0: entered allmulticast mode
[   75.303151][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.415586][ T6161] bond0 (unregistering): Released all slaves
[   75.506764][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   75.513349][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'.
[   75.525318][ T6168] gretap1: entered promiscuous mode
[   75.637433][ T6174] bond0: entered promiscuous mode
[   75.639672][ T6174] bond0: entered allmulticast mode
[   75.642329][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.712814][ T6174] bond0 (unregistering): Released all slaves
[   75.853704][ T6179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.67'.
[   75.856558][ T6179] block nbd0: not configured, cannot reconfigure
[   75.909383][ T6181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.68'.
[   75.915663][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'.
[   76.023405][ T6184] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   76.028841][ T6185] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   76.054379][ T6187] netlink: 104 bytes leftover after parsing attributes in process `syz.1.70'.
[   76.076915][ T6183] bond0 (unregistering): Released all slaves
[   76.106695][ T6190] netlink: 'syz.1.71': attribute type 1 has an invalid length.
[   76.145642][ T6184] bond0 (unregistering): Released all slaves
[   76.190262][ T6193] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   76.233779][ T6196] openvswitch: netlink: nsh attr 7 is out of range max 3
[   76.236160][ T6196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.482972][ T6209] batadv_slave_1: entered promiscuous mode
[   76.488215][ T6209] batman_adv: batadv0: Adding interface: macsec1
[   76.490638][ T6209] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.502515][ T6209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.506589][ T6209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.512743][ T6209] batman_adv: batadv0: Interface activated: macsec1
[   76.749707][ T6225] netlink: 'syz.2.83': attribute type 1 has an invalid length.
[   76.795838][ T6229] netlink: 'syz.1.85': attribute type 10 has an invalid length.
[   76.800889][ T6229] netlink: 'syz.1.85': attribute type 10 has an invalid length.
[   76.830967][ T6230] bond0 (unregistering): Released all slaves
[   77.104081][ T6241] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   77.807491][ T6235] bridge0: port 3(hsr_slave_0) entered blocking state
[   77.810368][ T6235] bridge0: port 3(hsr_slave_0) entered disabled state
[   77.813081][ T6235] hsr_slave_0: entered allmulticast mode
[   77.816980][ T6235] hsr_slave_0: left allmulticast mode
[   77.888491][ T6246] netlink: 'syz.2.88': attribute type 1 has an invalid length.
[   77.940839][ T6244] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   77.946395][ T5863] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   77.953767][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.124120][ T6244] bond0 (unregistering): (slave ip6gretap2): Removing an active aggregator
[   78.129911][ T6244] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface
[   78.135813][ T6244] bond0 (unregistering): Released all slaves
[   78.161454][ T6259] pim6reg: entered allmulticast mode
[   78.171409][ T6259] pim6reg: left allmulticast mode
[   79.195162][ T6283] bond0 (unregistering): (slave geneve2): Releasing active interface
[   79.202210][ T6283] bond0 (unregistering): Released all slaves
[   79.213423][ T5863] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.217069][ T5863] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.220936][ T5863] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.224167][ T5863] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.289385][ T6290] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   79.341264][ T6294] pim6reg99999999: entered allmulticast mode
[   79.401740][ T6302] __nla_validate_parse: 4 callbacks suppressed
[   79.401759][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'.
[   79.415152][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   79.421199][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'.
[   79.466291][ T6305] netlink: 152 bytes leftover after parsing attributes in process `syz.1.108'.
[   79.470230][ T6305] block nbd0: not configured, cannot reconfigure
[   79.510608][ T6302] bond0: entered promiscuous mode
[   79.513176][ T6302] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.711492][ T6324] validate_nla: 1 callbacks suppressed
[   79.711520][ T6324] netlink: 'syz.0.116': attribute type 1 has an invalid length.
[   79.773898][ T6324] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   79.784577][ T6324] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   79.789890][ T6324] bond1 (unregistering): Released all slaves
[   79.821054][ T6322] bond0: entered promiscuous mode
[   79.823238][ T6322] bond0: entered allmulticast mode
[   79.825524][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.931491][ T6332] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   79.940436][ T6332] netlink: 14 bytes leftover after parsing attributes in process `syz.2.117'.
[   79.941791][ T6322] bond0 (unregistering): Released all slaves
[   80.044184][ T6331] bond0 (unregistering): Released all slaves
[   80.243759][ T6336] bond0: entered promiscuous mode
[   80.246019][ T6336] bond0: entered allmulticast mode
[   80.250369][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.254443][ T6341] : renamed from bond_slave_0
[   80.336469][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[   80.383629][ T6346] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   80.392849][ T6346] netlink: 14 bytes leftover after parsing attributes in process `syz.0.125'.
[   80.502929][ T6352] netlink: 152 bytes leftover after parsing attributes in process `syz.2.127'.
[   80.506462][ T6352] block nbd0: not configured, cannot reconfigure
[   80.591076][ T6359] tipc: Can't bind to reserved service type 0
[   80.594400][ T6359] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   80.609934][ T6359] netlink: 14 bytes leftover after parsing attributes in process `syz.1.130'.
[   80.716966][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[   80.734545][ T6368] netlink: 'syz.0.132': attribute type 1 has an invalid length.
[   80.784075][ T6368] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.013461][ T6368] bond0 (unregistering): Released all slaves
[   81.050716][ T6388] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   81.212336][ T6403] netlink: 'syz.1.141': attribute type 1 has an invalid length.
[   81.339698][ T6413] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   81.349520][ T6413] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   81.483294][ T6416] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   81.505286][ T6416] bond2 (unregistering): Released all slaves
[   81.565704][ T6424] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   81.572496][ T6424] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   81.991553][ T6444] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   82.165094][ T6454] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   82.454378][ T6459] netlink: 'syz.2.162': attribute type 10 has an invalid length.
[   82.609839][ T6479] bond0: entered promiscuous mode
[   82.611575][ T6479] bond0: entered allmulticast mode
[   82.613819][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.818809][ T6484] bridge_slave_0: left allmulticast mode
[   82.821158][ T6484] bridge_slave_0: left promiscuous mode
[   82.823606][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.831830][ T6484] bridge_slave_1: left allmulticast mode
[   82.834107][ T6484] bridge_slave_1: left promiscuous mode
[   82.836682][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.853075][ T6484] team0: Port device team_slave_0 removed
[   82.860258][ T6484] team0: Port device team_slave_1 removed
[   82.864328][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.867217][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.873502][ T6485] syz.0.169: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   82.874901][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.880403][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT(full) 
[   82.880418][ T6485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.880425][ T6485] Call Trace:
[   82.880429][ T6485]  <TASK>
[   82.880434][ T6485]  dump_stack_lvl+0x189/0x250
[   82.880454][ T6485]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.880464][ T6485]  ? __pfx__printk+0x10/0x10
[   82.880479][ T6485]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.880492][ T6485]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.880503][ T6485]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   82.880521][ T6485]  warn_alloc+0x214/0x310
[   82.880538][ T6485]  ? stack_depot_save_flags+0x40/0x860
[   82.880559][ T6485]  ? __pfx_warn_alloc+0x10/0x10
[   82.880574][ T6485]  ? kasan_save_track+0x4f/0x80
[   82.880588][ T6485]  ? xskq_create+0x56/0x170
[   82.880601][ T6485]  ? xsk_init_queue+0xb0/0x110
[   82.880612][ T6485]  ? xsk_setsockopt+0x4dc/0x8d0
[   82.880621][ T6485]  ? do_sock_setsockopt+0x17c/0x1b0
[   82.880629][ T6485]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   82.880636][ T6485]  ? do_syscall_64+0xfa/0x3b0
[   82.880643][ T6485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.880655][ T6485]  __vmalloc_node_range_noprof+0x125/0x12f0
[   82.880680][ T6485]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.880711][ T6485]  ? __kasan_kmalloc+0x93/0xb0
[   82.880725][ T6485]  vmalloc_user_noprof+0xad/0xf0
[   82.880737][ T6485]  ? xskq_create+0xbf/0x170
[   82.880749][ T6485]  xskq_create+0xbf/0x170
[   82.880763][ T6485]  xsk_init_queue+0xb0/0x110
[   82.880776][ T6485]  xsk_setsockopt+0x4dc/0x8d0
[   82.880789][ T6485]  ? __pfx_xsk_setsockopt+0x10/0x10
[   82.880800][ T6485]  ? __pfx_aa_sk_perm+0x10/0x10
[   82.880815][ T6485]  ? aa_sock_opt_perm+0xff/0x1b0
[   82.880824][ T6485]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   82.880833][ T6485]  ? __pfx_xsk_setsockopt+0x10/0x10
[   82.880844][ T6485]  do_sock_setsockopt+0x17c/0x1b0
[   82.880854][ T6485]  __x64_sys_setsockopt+0x13f/0x1b0
[   82.880864][ T6485]  do_syscall_64+0xfa/0x3b0
[   82.880871][ T6485]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.880882][ T6485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.880889][ T6485]  ? exc_page_fault+0x9f/0xf0
[   82.880901][ T6485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.880908][ T6485] RIP: 0033:0x7f89e0f8eba9
[   82.880917][ T6485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.880924][ T6485] RSP: 002b:00007f89e1e26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   82.880933][ T6485] RAX: ffffffffffffffda RBX: 00007f89e11d6090 RCX: 00007f89e0f8eba9
[   82.880939][ T6485] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   82.880943][ T6485] RBP: 00007f89e1011e19 R08: 0000000000000004 R09: 0000000000000000
[   82.880948][ T6485] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.880952][ T6485] R13: 00007f89e11d6128 R14: 00007f89e11d6090 R15: 00007fffa8b918e8
[   82.880965][ T6485]  </TASK>
[   82.881077][ T6485] Mem-Info:
[   82.883758][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.885657][ T6485] active_anon:9085 inactive_anon:0 isolated_anon:0
[   82.885657][ T6485]  active_file:1400 inactive_file:38244 isolated_file:0
[   82.885657][ T6485]  unevictable:1768 dirty:1575 writeback:0
[   82.885657][ T6485]  slab_reclaimable:9703 slab_unreclaimable:52535
[   82.885657][ T6485]  mapped:19232 shmem:2435 pagetables:922
[   82.885657][ T6485]  sec_pagetables:0 bounce:0
[   82.885657][ T6485]  kernel_misc_reclaimable:0
[   82.885657][ T6485]  free:300023 free_pcp:18438 free_cma:0
[   82.994071][ T6487] netlink: 'syz.0.169': attribute type 4 has an invalid length.
[   82.996322][ T6485] Node 0 active_anon:22800kB inactive_anon:0kB active_file:3924kB inactive_file:39964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30436kB dirty:1700kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.996369][ T6485] Node 1 active_anon:13540kB inactive_anon:0kB active_file:1676kB inactive_file:113012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50572kB dirty:4600kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3552kB pagetables:1856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.049165][   T24] cfg80211: failed to load regulatory.db
[   83.053543][ T6485] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.063533][ T6484] team0: Port device batadv1 removed
[   83.065462][ T6485] lowmem_reserve[]: 0 811 811 811 811
[   83.068930][ T6485] Node 0 DMA32 free:408288kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22800kB inactive_anon:0kB active_file:3924kB inactive_file:39964kB unevictable:3536kB writepending:1700kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:20864kB local_pcp:16380kB free_cma:0kB
[   83.084177][ T6488] netlink: 'syz.0.169': attribute type 4 has an invalid length.
[   83.087126][ T6485] lowmem_reserve[]: 0 0 0 0 0
[   83.089637][ T6485] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   83.103491][ T6485] lowmem_reserve[]: 0 0 854 854 854
[   83.105628][ T6485] Node 1 Normal free:317748kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13540kB inactive_anon:0kB active_file:1676kB inactive_file:113012kB unevictable:3536kB writepending:4600kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54988kB local_pcp:37124kB free_cma:0kB
[   83.153093][ T6485] lowmem_reserve[]: 0 0 0 0 0
[   83.154993][ T6485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   83.160199][ T6485] Node 0 DMA32: 2*4kB (ME) 87*8kB (UE) 9*16kB (ME) 219*32kB (UE) 64*64kB (UME) 10*128kB (UM) 7*256kB (UE) 2*512kB (UE) 3*1024kB (M) 2*2048kB (UM) 94*4096kB (M) = 408240kB
[   83.167148][ T6485] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   83.177946][ T6485] Node 1 Normal: 217*4kB (UM) 344*8kB (UM) 113*16kB (UME) 225*32kB (UME) 35*64kB (UME) 10*128kB (UM) 6*256kB (UM) 4*512kB (M) 11*1024kB (UME) 8*2048kB (UME) 66*4096kB (UM) = 317716kB
[   83.185729][ T6485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.189780][ T6485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.193422][ T6485] 42079 total pagecache pages
[   83.195412][ T6485] 0 pages in swap cache
[   83.197223][ T6485] Free swap  = 124996kB
[   83.203715][ T6485] Total swap = 124996kB
[   83.205554][ T6485] 786301 pages RAM
[   83.207104][ T6485] 0 pages HighMem/MovableOnly
[   83.215484][ T6485] 241343 pages reserved
[   83.217234][ T6485] 0 pages cma reserved
[   83.359487][ T6496] bond2: entered promiscuous mode
[   83.361560][ T6496] bond2: entered allmulticast mode
[   83.363967][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.533164][ T6496] bond2 (unregistering): Released all slaves
[   83.716966][ T6508] bond1: entered promiscuous mode
[   83.719908][ T6508] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.843310][ T6508] bond1 (unregistering): Released all slaves
[   83.864973][ T6519] syz_tun: entered allmulticast mode
[   83.878872][ T6513] dvmrp8: entered allmulticast mode
[   83.892289][ T6512] syz_tun: left allmulticast mode
[   83.894818][ T6512] dvmrp8: left allmulticast mode
[   84.336985][ T6553] netlink: 'syz.1.194': attribute type 1 has an invalid length.
[   85.134484][ T6568] __nla_validate_parse: 7 callbacks suppressed
[   85.134495][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.197'.
[   85.321354][ T6577] validate_nla: 2 callbacks suppressed
[   85.321371][ T6577] netlink: 'syz.1.200': attribute type 1 has an invalid length.
[   85.372502][ T6579] netlink: 'syz.0.202': attribute type 22 has an invalid length.
[   85.375487][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[   85.386403][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'.
[   85.396229][ T6579] netlink: 'syz.0.202': attribute type 22 has an invalid length.
[   85.400968][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.404264][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.410715][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[   85.419165][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.422677][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.707130][ T6596] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   85.719425][ T6596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.207'.
[   85.816154][ T6601] netlink: 'syz.1.210': attribute type 83 has an invalid length.
[   86.250198][ T6620] netlink: 'syz.0.216': attribute type 1 has an invalid length.
[   86.258540][ T6620] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   86.483675][ T6643] netlink: 'syz.0.223': attribute type 1 has an invalid length.
[   86.629907][ T6646] block nbd0: shutting down sockets
[   86.675569][ T6648] bond0 (unregistering): Released all slaves
[   86.715430][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[   86.910926][ T6666] netlink: 'syz.2.231': attribute type 1 has an invalid length.
[   86.942705][ T6666] bond2 (unregistering): Released all slaves
[   87.085291][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'.
[   87.111956][ T6678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.235'.
[   87.174777][ T6683] netlink: 'syz.2.236': attribute type 4 has an invalid length.
[   87.385295][ T6687] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.237'.
[   88.040334][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'.
[   88.238945][ T6726] pim6reg: entered allmulticast mode
[   88.266239][ T6729] pim6reg: left allmulticast mode
[   88.469342][ T6734] block nbd0: shutting down sockets
[   88.605043][ T6743] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   88.640894][ T6747] netlink: 'syz.2.249': attribute type 30 has an invalid length.
[   88.672558][ T6753] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   88.837176][ T6759] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.848244][ T6759] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   88.910278][ T6764] gretap2: entered promiscuous mode
[   88.921630][ T6764] bond2: (slave gretap2): making interface the new active one
[   88.926022][ T6764] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   89.327913][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[   89.392794][ T6787] bond2: entered promiscuous mode
[   89.395740][ T6787] bond2: entered allmulticast mode
[   89.399124][ T6787] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.508359][ T6787] bond2 (unregistering): Released all slaves
[   89.926446][ T6814] bond2: entered promiscuous mode
[   89.929873][ T6814] bond2: entered allmulticast mode
[   89.932666][ T6814] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.043683][ T6814] bond2 (unregistering): Released all slaves
[   90.065609][ T6820] bond0 (unregistering): Released all slaves
[   90.269280][ T6829] __nla_validate_parse: 10 callbacks suppressed
[   90.269299][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'.
[   90.275992][ T6829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'.
[   90.351994][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'.
[   90.436746][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'.
[   90.517911][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'.
[   90.531659][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'.
[   90.571286][ T6846] validate_nla: 2 callbacks suppressed
[   90.571302][ T6846] netlink: 'syz.1.280': attribute type 1 has an invalid length.
[   90.625957][ T6846] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.678962][ T6846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.686651][ T6842] bond2: (slave ip6gretap2): making interface the new active one
[   90.702143][ T6842] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link
[   90.721822][ T6846] veth3: entered promiscuous mode
[   90.725870][ T6846] bond2: (slave veth3): Enslaving as an active interface with a down link
[   90.744821][ T6842] erspan0: entered allmulticast mode
[   90.797794][ T6842] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   90.862531][ T6861] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   91.182144][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'.
[   91.243304][ T6882] bond3: entered promiscuous mode
[   91.245865][ T6882] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.306125][ T6888] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   91.445361][ T6882] bond3 (unregistering): Released all slaves
[   91.571723][ T6898] netlink: 296 bytes leftover after parsing attributes in process `syz.2.297'.
[   91.670518][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'.
[   91.712288][ T6894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   91.715788][ T6894] IPv6: NLM_F_CREATE should be set when creating new route
[   91.744723][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'.
[   91.952453][ T6908] bond0 (unregistering): Released all slaves
[   91.999199][  T792] IPVS: starting estimator thread 0...
[   92.060614][ T6921] nbd: must specify a device to reconfigure
[   92.108263][ T6919] IPVS: using max 42 ests per chain, 100800 per kthread
[   92.636960][ T6972] bond0 (unregistering): Released all slaves
[   92.717955][ T6978] block nbd0: shutting down sockets
[   92.751133][ T6987] netlink: 'syz.0.320': attribute type 3 has an invalid length.
[   92.754106][ T6987] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   92.762229][ T6982] syzkaller0: entered promiscuous mode
[   92.767962][ T6982] syzkaller0: entered allmulticast mode
[   93.051249][ T7003] syz.0.326 uses obsolete (PF_INET,SOCK_PACKET)
[   93.079614][ T7003] bridge0: port 1(batadv2) entered blocking state
[   93.082110][ T7003] bridge0: port 1(batadv2) entered disabled state
[   93.084827][ T7003] batadv2: entered allmulticast mode
[   93.089464][ T7003] batadv2: entered promiscuous mode
[   93.288993][ T7017] bond0: entered promiscuous mode
[   93.291306][ T7017] bond0: entered allmulticast mode
[   93.300574][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.413207][ T7017] bond0 (unregistering): Released all slaves
[   93.497931][ T7029] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   93.577470][ T5857] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[   93.581291][ T5857] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[   93.698819][ T7037] bridge_slave_1: left allmulticast mode
[   93.701289][ T7037] bridge_slave_1: left promiscuous mode
[   93.703939][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.711525][ T7037] bridge_slave_0: left allmulticast mode
[   93.713375][ T7037] bridge_slave_0: left promiscuous mode
[   93.715347][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.382706][ T7054] netlink: 'syz.2.340': attribute type 4 has an invalid length.
[   94.390453][ T7054] netlink: 'syz.2.340': attribute type 4 has an invalid length.
[   94.511320][ T7069] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   94.558695][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.725331][ T7069] bond0 (unregistering): Released all slaves
[   94.764448][ T7080] bond0: entered promiscuous mode
[   94.766794][ T7080] bond0: entered allmulticast mode
[   94.774386][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.003594][ T7080] bond0 (unregistering): Released all slaves
[   95.105513][ T7090] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[   95.116136][ T7090] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[   95.164795][    T9] IPVS: starting estimator thread 0...
[   95.259402][ T7101] IPVS: using max 51 ests per chain, 122400 per kthread
[   95.351493][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.489340][ T7119] __nla_validate_parse: 16 callbacks suppressed
[   95.489358][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'.
[   95.722600][ T7129] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   95.726296][ T7129] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   95.975715][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'.
[   96.000022][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'.
[   96.373118][ T7156] netlink: 27 bytes leftover after parsing attributes in process `syz.2.370'.
[   96.381561][ T7156] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   96.385698][ T7156] netlink: 14 bytes leftover after parsing attributes in process `syz.2.370'.
[   96.510706][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.805482][ T7171] netlink: 'syz.2.375': attribute type 1 has an invalid length.
[   96.844825][ T7171] bond3 (unregistering): Released all slaves
[   97.013948][ T7178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.378'.
[   97.041333][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[   97.221184][ T7187] bond3: entered promiscuous mode
[   97.223301][ T7187] bond3: entered allmulticast mode
[   97.229426][ T7187] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.344819][ T7194] ip6gre1: entered allmulticast mode
[   97.531579][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'.
[   97.560054][ T7211] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[   97.563173][ T7211] netlink: 244 bytes leftover after parsing attributes in process `syz.2.390'.
[   97.580920][ T7210] bond0: entered promiscuous mode
[   97.583038][ T7210] bond0: entered allmulticast mode
[   97.585724][ T7210] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.626040][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'.
[   97.710190][ T7210] bond0 (unregistering): Released all slaves
[   97.880452][ T7225] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   97.926887][ T7225] bond4 (unregistering): Released all slaves
[   98.244712][ T7253] syzkaller1: entered promiscuous mode
[   98.249892][ T7253] syzkaller1: entered allmulticast mode
[   98.255135][ T7253] netlink: 'syz.1.402': attribute type 1 has an invalid length.
[   98.351989][ T7253] bond0: (slave bridge0): making interface the new active one
[   98.363091][ T7253] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   98.502047][ T7266] syzkaller1: entered promiscuous mode
[   98.504411][ T7266] syzkaller1: entered allmulticast mode
[   98.634099][ T7280] Bluetooth: MGMT ver 1.23
[   98.803820][ T7290] bond4: entered promiscuous mode
[   98.806381][ T7290] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.899733][ T7290] bond4 (unregistering): Released all slaves
[   98.927410][ T7294] pim6reg: entered allmulticast mode
[   99.303247][ T7296] bond0 (unregistering): (slave bridge0): Releasing active interface
[   99.313093][ T7296] bond0 (unregistering): Released all slaves
[  100.826333][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.835739][ T7338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.884214][ T7338] veth1_vlan: left allmulticast mode
[  100.950825][ T7338] batman_adv: batadv0: Interface deactivated: macsec1
[  100.991181][ T7340] geneve3: entered promiscuous mode
[  100.993484][ T7340] geneve3: entered allmulticast mode
[  101.002602][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.006040][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  101.011397][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.014989][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  101.023830][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.030558][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  101.034001][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.038741][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  101.169102][ T7350] __nla_validate_parse: 5 callbacks suppressed
[  101.169114][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.426'.
[  101.451274][ T7367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.430'.
[  101.462679][ T7368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.591099][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'.
[  101.779756][ T7382] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  101.931013][ T7390] bond0: entered promiscuous mode
[  101.933090][ T7390] bond0: entered allmulticast mode
[  101.935627][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.030320][ T7390] bond0 (unregistering): Released all slaves
[  102.251313][ T7404] netlink: 'syz.0.438': attribute type 10 has an invalid length.
[  102.277721][ T7404] team0: Port device dummy0 added
[  102.292688][ T7406] netlink: 'syz.2.440': attribute type 13 has an invalid length.
[  102.299201][ T7406] netlink: 'syz.2.440': attribute type 17 has an invalid length.
[  102.363755][ T7406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.371652][ T7407] xfrm0: entered promiscuous mode
[  102.373728][ T7407] xfrm0: entered allmulticast mode
[  102.453209][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.440'.
[  102.469107][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.530165][ T7405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.779730][ T7413] netlink: 'syz.1.442': attribute type 3 has an invalid length.
[  102.791306][ T7413] netlink: 'syz.1.442': attribute type 1 has an invalid length.
[  102.816572][ T7413] bond0 (unregistering): Released all slaves
[  102.949960][ T7418] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[  102.984099][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.039130][ T7424] netlink: 152 bytes leftover after parsing attributes in process `syz.1.444'.
[  103.043105][ T7424] block nbd0: not configured, cannot reconfigure
[  103.487006][ T7458] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  103.613440][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[  103.622414][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[  103.666692][ T7475] bond0: entered promiscuous mode
[  103.677813][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.822733][ T7486] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  103.865490][ T7475] bond0 (unregistering): Released all slaves
[  103.922625][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[  103.969262][ T7475] bond0: entered promiscuous mode
[  103.974054][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.075879][ T7475] bond0 (unregistering): Released all slaves
[  104.140673][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[  104.186480][ T7475] bond0: entered promiscuous mode
[  104.190063][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.285810][ T7475] bond0 (unregistering): Released all slaves
[  104.344473][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'.
[  104.390558][ T7475] bond0: entered promiscuous mode
[  104.394270][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.489139][ T7475] bond0 (unregistering): Released all slaves
[  104.713448][ T7510] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  104.951868][ T7527] netlink: 'syz.1.471': attribute type 10 has an invalid length.
[  105.104498][ T7532] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  105.470395][ T7555] netlink: 'syz.1.482': attribute type 1 has an invalid length.
[  105.501905][ T7559] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  106.536644][ T7555] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  106.541260][ T7559] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  106.753226][ T7569] bond0 (unregistering): Released all slaves
[  106.831112][ T7587] __nla_validate_parse: 4 callbacks suppressed
[  106.831130][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'.
[  106.832112][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'.
[  106.897130][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'.
[  106.982845][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.491'.
[  107.034029][ T7591] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  107.096512][ T7598] bond3: entered promiscuous mode
[  107.100178][ T7598] bond3: entered allmulticast mode
[  107.104199][ T7598] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.265695][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'.
[  107.289016][ T7598] bond3 (unregistering): Released all slaves
[  107.606257][ T7631] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  107.614441][ T7631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.505'.
[  107.736065][ T7638] validate_nla: 5 callbacks suppressed
[  107.736085][ T7638] netlink: 'syz.0.508': attribute type 12 has an invalid length.
[  107.867870][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'.
[  107.948087][ T7647] bond0 (unregistering): Released all slaves
[  108.103285][ T7643] bond0 (unregistering): Released all slaves
[  108.133819][ T7651] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.512'.
[  108.549214][ T7673] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[  108.604657][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.723523][ T7673] bond0 (unregistering): Released all slaves
[  108.748522][ T7684] bond0 (unregistering): Released all slaves
[  109.051859][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.072951][ T7701] bond0: (slave macvlan2): Opening slave failed
[  109.135368][ T7707] team0: Port device dummy0 removed
[  109.161933][ T7707] bond2: (slave gretap2): Releasing active interface
[  109.186273][ T7707] batadv2: left allmulticast mode
[  109.190109][ T7707] batadv2: left promiscuous mode
[  109.192843][ T7707] bridge0: port 1(batadv2) entered disabled state
[  109.398376][ T7718] bond0 (unregistering): Released all slaves
[  109.538876][ T7723] netlink: 'syz.2.532': attribute type 12 has an invalid length.
[  109.586857][ T7730] netlink: 'syz.0.534': attribute type 10 has an invalid length.
[  109.632986][ T7730] netlink: 'syz.0.534': attribute type 10 has an invalid length.
[  110.297996][ T7752] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[  110.322048][ T7752] bond0 (unregistering): Released all slaves
[  110.504603][ T7762] tap0: tun_chr_ioctl cmd 1074812118
[  110.634386][ T7763] netlink: 'syz.2.541': attribute type 5 has an invalid length.
[  110.658462][ T7762] ieee802154 phy0 wpan0: encryption failed: -22
[  110.826372][ T7773] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[  110.954412][ T7781] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[  111.011069][ T7781] bond0 (unregistering): Released all slaves
[  111.132041][ T7787] netlink: 92 bytes leftover after parsing attributes in process `syz.2.547'.
[  111.152548][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'.
[  111.319695][ T7797] syzkaller0: entered promiscuous mode
[  111.321968][ T7797] syzkaller0: entered allmulticast mode
[  111.630325][ T7823] IPVS: Unknown mcast interface: /ptp0
[  112.496605][ T7839] __nla_validate_parse: 5 callbacks suppressed
[  112.496627][ T7839] netlink: 152 bytes leftover after parsing attributes in process `syz.2.562'.
[  112.505072][ T7839] block nbd0: not configured, cannot reconfigure
[  112.556677][ T7843] veth0_to_bridge: entered promiscuous mode
[  112.656492][ T7853] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[  113.453690][ T7889] netlink: 'syz.1.576': attribute type 1 has an invalid length.
[  113.636723][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'.
[  113.642875][ T7900] netlink: 'syz.0.579': attribute type 1 has an invalid length.
[  113.691512][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.833187][ T7900] bond0 (unregistering): Released all slaves
[  113.851275][ T7912] netlink: 'syz.1.583': attribute type 1 has an invalid length.
[  113.910261][ T7907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'.
[  113.936200][ T7907] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.026621][ T7922] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  114.141582][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'.
[  114.177040][ T7926] xfrm0: left promiscuous mode
[  114.183780][ T7926] xfrm0: left allmulticast mode
[  114.206710][ T7930] netlink: 3 bytes leftover after parsing attributes in process `syz.1.589'.
[  114.222790][ T7930] batadv1: entered promiscuous mode
[  114.224909][ T7930] batadv1: entered allmulticast mode
[  114.261348][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.590'.
[  114.365305][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  114.430602][ T7945] netlink: 'syz.1.594': attribute type 1 has an invalid length.
[  114.435295][ T7948] pim6reg: entered allmulticast mode
[  114.439247][ T7948] pim6reg: left allmulticast mode
[  114.459430][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.594'.
[  114.501269][ T7952] bond0: (slave rose0): Error: Device can not be enslaved while up
[  114.512345][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'.
[  114.580569][ T7956] dvmrp8: entered allmulticast mode
[  114.675343][ T7955] dvmrp8: left allmulticast mode
[  114.704206][ T7961] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  114.729609][ T7961] netlink: 14 bytes leftover after parsing attributes in process `syz.1.600'.
[  114.840489][ T7973] bond4: entered promiscuous mode
[  114.842889][ T7973] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.965954][ T7973] bond4 (unregistering): Released all slaves
[  114.983181][ T7970] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  114.989870][ T7981] bond0 (unregistering): Released all slaves
[  115.069952][ T7985] veth0_to_bond: entered promiscuous mode
[  116.365410][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.442706][ T8034] netlink: 'syz.2.624': attribute type 1 has an invalid length.
[  116.480525][ T8034] bond0 (unregistering): Released all slaves
[  116.765133][ T8051] bond3: entered promiscuous mode
[  116.769203][ T8051] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.873897][ T8051] bond3 (unregistering): Released all slaves
[  116.934123][ T8055] bond4: entered promiscuous mode
[  116.936496][ T8055] bond4: entered allmulticast mode
[  116.940706][ T8055] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.066740][ T8055] bond4 (unregistering): Released all slaves
[  117.212372][ T8059] bond0 (unregistering): Released all slaves
[  117.353195][ T8072] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[  117.362866][ T8072] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  117.415213][ T8079] raw_sendmsg: syz.1.637 forgot to set AF_INET. Fix it!
[  117.688708][ T8094] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  117.692201][ T8094] __nla_validate_parse: 6 callbacks suppressed
[  117.692212][ T8094] netlink: 14 bytes leftover after parsing attributes in process `syz.1.641'.
[  117.779026][ T8102] netlink: 'syz.1.644': attribute type 29 has an invalid length.
[  117.782545][ T8102] netlink: 'syz.1.644': attribute type 29 has an invalid length.
[  117.786166][ T8102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.644'.
[  117.833595][ T8104] netlink: 'syz.1.646': attribute type 3 has an invalid length.
[  117.836479][ T8104] netlink: 'syz.1.646': attribute type 3 has an invalid length.
[  118.104690][ T5896] IPVS: starting estimator thread 0...
[  118.121327][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'.
[  118.126706][ T8127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.126837][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.650'.
[  118.143003][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'.
[  118.163530][ T8130] bond0: entered promiscuous mode
[  118.165988][ T8130] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.208194][ T8129] IPVS: using max 54 ests per chain, 129600 per kthread
[  118.310962][ T8130] bond0 (unregistering): Released all slaves
[  118.480159][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[  118.536735][ T8137] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  118.545377][ T8137] validate_nla: 26 callbacks suppressed
[  118.545390][ T8137] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[  118.693568][ T8144] netlink: 'syz.2.654': attribute type 1 has an invalid length.
[  118.782077][ T8149] netlink: 'syz.0.656': attribute type 10 has an invalid length.
[  118.798510][ T8150] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[  118.799284][ T8149] netlink: 5852 bytes leftover after parsing attributes in process `syz.0.656'.
[  118.805105][ T8150] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  118.989779][ T8166] netlink: 'syz.2.661': attribute type 10 has an invalid length.
[  119.770260][ T8188] netlink: 'syz.1.670': attribute type 1 has an invalid length.
[  119.824413][ T8188] netlink: 'syz.1.670': attribute type 8 has an invalid length.
[  119.934616][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[  119.941522][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'.
[  119.999342][ T8198] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  120.002647][ T8199] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  120.150093][ T8209] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  120.187239][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[  120.285021][ T8218] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  120.617774][   T52] wlan0: Trigger new scan to find an IBSS to join
[  120.989113][ T8251] bond0: entered promiscuous mode
[  120.991360][ T8251] bond0: entered allmulticast mode
[  120.994386][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.093224][ T8251] bond0 (unregistering): Released all slaves
[  121.206402][ T8254] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  121.635252][ T8287] bond0: entered promiscuous mode
[  121.649371][ T8287] bond0: entered allmulticast mode
[  121.654151][ T8287] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.849365][ T8287] bond0 (unregistering): Released all slaves
[  122.025850][ T8284] bond0 (unregistering): Released all slaves
[  122.412834][ T8311] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  122.502198][ T8315] bond0: entered promiscuous mode
[  122.504279][ T8315] bond0: entered allmulticast mode
[  122.509620][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.601499][ T8315] bond0 (unregistering): Released all slaves
[  122.690592][ T8322] bond0: entered promiscuous mode
[  122.692808][ T8322] bond0: entered allmulticast mode
[  122.703333][ T8322] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.801363][ T8322] bond0 (unregistering): Released all slaves
[  122.822247][ T8327] veth0: entered promiscuous mode
[  122.926772][ T8327] __nla_validate_parse: 8 callbacks suppressed
[  122.927125][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'.
[  122.962870][ T8329] netlink: 8168 bytes leftover after parsing attributes in process `syz.1.714'.
[  123.053918][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  123.065470][ T7345] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.065568][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  123.073868][ T5863] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.077179][ T5863] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.080858][ T5863] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.122543][ T8335] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  123.129866][ T8335] netlink: 14 bytes leftover after parsing attributes in process `syz.2.717'.
[  123.191864][ T8337] dvmrp1: entered allmulticast mode
[  123.203170][ T8337] dvmrp1: left allmulticast mode
[  123.437020][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'.
[  123.465317][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'.
[  123.570565][ T8325] veth0: left promiscuous mode
[  123.612239][ T8366] netlink: 92 bytes leftover after parsing attributes in process `syz.2.726'.
[  124.151085][ T8379] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.167424][ T5857] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.178092][ T5857] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.181362][ T5857] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.186631][ T5857] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.226904][ T8388] validate_nla: 7 callbacks suppressed
[  124.226923][ T8388] netlink: 'syz.1.729': attribute type 1 has an invalid length.
[  124.266689][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.368467][ T8388] bond0 (unregistering): Released all slaves
[  124.371756][ T8393] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  124.376533][ T8393] netlink: 14 bytes leftover after parsing attributes in process `syz.0.731'.
[  124.618203][ T8411] syz.2.738 (8411) used obsolete PPPIOCDETACH ioctl
[  124.622665][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'.
[  124.671566][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  124.716855][ T8413] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  124.731083][ T8413] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  124.737423][ T8414] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  124.743951][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  124.753195][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  124.756417][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  124.776985][ T8413] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  124.802879][ T8413] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  124.817225][ T8427] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  124.823945][ T8427] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  125.311719][ T8467] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  125.384512][ T8467] bond0 (unregistering): Released all slaves
[  125.504421][ T8478] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  125.871387][ T8496] netlink: 'syz.1.753': attribute type 1 has an invalid length.
[  125.874777][ T8496] netlink: 'syz.1.753': attribute type 2 has an invalid length.
[  125.924803][ T8496] bond0: entered promiscuous mode
[  125.930557][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.174952][ T8496] bond0 (unregistering): Released all slaves
[  126.245286][ T8514] netlink: 'syz.2.756': attribute type 1 has an invalid length.
[  126.525999][ T8528] bond6: entered promiscuous mode
[  126.531429][ T8528] bond6: entered allmulticast mode
[  126.534485][ T8528] 8021q: adding VLAN 0 to HW filter on device bond6
[  126.644362][ T8528] bond6 (unregistering): Released all slaves
[  126.666724][ T8536] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  126.910083][ T8555] veth0_to_bond: entered allmulticast mode
[  127.363556][ T8586] erspan0: left allmulticast mode
[  127.374221][ T8586] veth3: left promiscuous mode
[  127.378697][ T8586] geneve3: left promiscuous mode
[  127.380737][ T8586] geneve3: left allmulticast mode
[  127.404096][ T7345] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.412483][ T7345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  127.416271][ T7345] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  127.440432][ T7345] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.444114][ T7345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  127.450140][ T7345] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  127.453660][ T7345] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.457141][ T7345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  127.462935][ T7345] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  127.472144][ T7345] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.478298][ T7345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  127.482068][ T7345] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  127.671950][ T8601] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  127.702416][ T8605] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[  127.731911][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.774061][ T8605] veth7: entered promiscuous mode
[  127.780196][ T8605] erspan0: entered allmulticast mode
[  127.783570][ T8605] bond2: (slave erspan0): Releasing active interface
[  127.786332][ T8605] ip6gretap2: entered promiscuous mode
[  128.142405][ T8625] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.145641][ T8625] bridge0: port 1(bond4) entered blocking state
[  128.149187][ T8625] bridge0: port 1(bond4) entered disabled state
[  128.152005][ T8625] bond4: entered allmulticast mode
[  128.380963][ T8633] netlink: 'syz.1.789': attribute type 4 has an invalid length.
[  128.386620][ T8634] netlink: 'syz.1.789': attribute type 11 has an invalid length.
[  128.685527][ T8651] __nla_validate_parse: 16 callbacks suppressed
[  128.685538][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.793'.
[  129.026756][ T8667] bond0: (slave rose0): Error: Device can not be enslaved while up
[  129.061212][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[  129.609375][ T8704] netlink: 'syz.2.807': attribute type 1 has an invalid length.
[  129.676739][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  129.846452][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'.
[  129.909822][ T8717] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  129.942838][ T8717] bond7 (unregistering): Released all slaves
[  130.546814][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'.
[  130.553831][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'.
[  130.607799][ T8743] bond5: entered promiscuous mode
[  130.613327][ T8743] 8021q: adding VLAN 0 to HW filter on device bond5
[  130.698895][ T8743] bond5 (unregistering): Released all slaves
[  130.749069][ T8744] bond5: entered promiscuous mode
[  130.751607][ T8744] 8021q: adding VLAN 0 to HW filter on device bond5
[  130.800065][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'.
[  130.829684][ T8744] bond5 (unregistering): Released all slaves
[  130.858428][ T8754] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  130.864668][ T8754] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  131.023802][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.827'.
[  131.056511][ T8762] 8021q: adding VLAN 0 to HW filter on device bond5
[  131.156258][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'.
[  131.184947][ T8780] bond6: entered promiscuous mode
[  131.187524][ T8780] 8021q: adding VLAN 0 to HW filter on device bond6
[  131.236242][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'.
[  131.309888][ T8780] bond6 (unregistering): Released all slaves
[  131.416536][ T8796] netlink: 'syz.0.834': attribute type 1 has an invalid length.
[  131.482506][ T8795] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  131.531628][ T8801] bond0 (unregistering): Released all slaves
[  131.554308][ T8805] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  131.561035][ T8803] netlink: 'syz.1.838': attribute type 1 has an invalid length.
[  131.598137][ T8803] bond6 (unregistering): Released all slaves
[  131.736856][ T8813] bond0: entered promiscuous mode
[  131.745796][ T8813] bond0: entered allmulticast mode
[  131.748245][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.820495][ T8813] bond0 (unregistering): Released all slaves
[  132.105132][ T8844] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  132.164506][ T8844] bond0 (unregistering): Released all slaves
[  132.271049][ T8850] bond0 (unregistering): Released all slaves
[  132.334352][ T8854] syzkaller1: entered promiscuous mode
[  132.336626][ T8854] syzkaller1: entered allmulticast mode
[  132.399260][ T8859] netlink: 'syz.2.856': attribute type 10 has an invalid length.
[  132.534624][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.537127][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.618889][ T8873] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  132.930017][ T8902] bond0: entered promiscuous mode
[  132.930224][ T8909] netlink: 'syz.1.871': attribute type 1 has an invalid length.
[  132.931649][ T8902] bond0: entered allmulticast mode
[  132.931955][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.020645][ T8902] bond0 (unregistering): Released all slaves
[  133.023180][ T8915] block nbd0: not configured, cannot reconfigure
[  133.085561][ T8919] netlink: 'syz.1.874': attribute type 1 has an invalid length.
[  133.108845][ T8919] bond0 (unregistering): Released all slaves
[  133.119670][ T8922] block nbd0: not configured, cannot reconfigure
[  133.125458][ T8917] bond0 (unregistering): Released all slaves
[  133.569336][ T8937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.671945][ T8943] macvtap1: entered promiscuous mode
[  133.674198][ T8943] team0: entered promiscuous mode
[  133.676505][ T8943] macvtap1: entered allmulticast mode
[  133.680236][ T8943] team0: entered allmulticast mode
[  133.682772][ T8943] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  133.691330][ T8943] team0: left allmulticast mode
[  133.693365][ T8943] team0: left promiscuous mode
[  133.865781][ T8953] __nla_validate_parse: 24 callbacks suppressed
[  133.865797][ T8953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.883'.
[  133.871939][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.883'.
[  133.908744][ T8954] bond0: entered promiscuous mode
[  133.910939][ T8954] bond0: entered allmulticast mode
[  133.913519][ T8954] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.948712][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'.
[  133.993896][ T8954] bond0 (unregistering): Released all slaves
[  134.046908][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  134.134879][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'.
[  134.204974][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.893'.
[  134.233637][ T8984] bond0: entered promiscuous mode
[  134.238729][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'.
[  134.239665][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.313241][ T8984] bond0 (unregistering): Released all slaves
[  134.542477][ T9003] bond0 (unregistering): Released all slaves
[  134.752743][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'.
[  134.807996][ T9020] validate_nla: 3 callbacks suppressed
[  134.808008][ T9020] netlink: 'syz.0.904': attribute type 4 has an invalid length.
[  134.832850][ T9020] netlink: 'syz.0.904': attribute type 4 has an invalid length.
[  134.864582][ T9023] netlink: 'syz.1.903': attribute type 10 has an invalid length.
[  135.102564][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'.
[  135.133750][ T9043] bond0: entered promiscuous mode
[  135.135505][ T9043] bond0: entered allmulticast mode
[  135.154542][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.265951][ T9043] bond0 (unregistering): Released all slaves
[  135.387152][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.917'.
[  136.102109][ T9103] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000
[  136.165855][ T9105] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  136.239520][ T9112] netlink: 'syz.0.934': attribute type 1 has an invalid length.
[  136.454735][ T9130] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  136.582660][ T9142] bond0 (unregistering): Released all slaves
[  136.590561][ T9155] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  136.660323][ T9160] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  137.624765][ T9187] bond0: entered promiscuous mode
[  137.626777][ T9187] bond0: entered allmulticast mode
[  137.630703][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.851639][ T9205] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  137.874318][ T9205] bond8 (unregistering): Released all slaves
[  137.892764][ T9208] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  137.899118][ T9208] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20003
[  137.952632][ T9212] netlink: 'syz.0.966': attribute type 1 has an invalid length.
[  137.994435][ T9212] 8021q: adding VLAN 0 to HW filter on device bond3
[  138.119124][ T9212] bond3 (unregistering): Released all slaves
[  138.147804][ T9219] bridge5: entered promiscuous mode
[  138.150102][ T9219] bridge5: entered allmulticast mode
[  138.571621][ T9242] netlink: 'syz.1.976': attribute type 2 has an invalid length.
[  138.936805][ T9246] __nla_validate_parse: 13 callbacks suppressed
[  138.936824][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'.
[  138.944150][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.948374][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.953913][ T9246] batman_adv: batadv0: Removing interface: macsec1
[  139.141631][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'.
[  139.154412][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'.
[  139.158588][ T9253] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  139.199362][ T9253] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  139.312468][ T9257] bond0 (unregistering): Released all slaves
[  139.593392][ T9276] IPv6: sit1: Disabled Multicast RS
[  139.596486][ T9276] sit1: entered allmulticast mode
[  139.895543][ T9291] bond0: entered promiscuous mode
[  139.897729][ T9291] bond0: entered allmulticast mode
[  139.900223][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.989497][ T9291] bond3: entered promiscuous mode
[  139.991548][ T9291] bond3: entered allmulticast mode
[  139.994078][ T9291] 8021q: adding VLAN 0 to HW filter on device bond3
[  140.085065][ T9291] bond4: entered promiscuous mode
[  140.087073][ T9291] bond4: entered allmulticast mode
[  140.089592][ T9291] 8021q: adding VLAN 0 to HW filter on device bond4
[  140.178215][ T9291] bond5: entered promiscuous mode
[  140.180320][ T9291] bond5: entered allmulticast mode
[  140.182689][ T9291] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.272928][ T9291] bond6: entered promiscuous mode
[  140.275078][ T9291] bond6: entered allmulticast mode
[  140.277708][ T9291] 8021q: adding VLAN 0 to HW filter on device bond6
[  140.396787][ T9291] bond7: entered promiscuous mode
[  140.400575][ T9291] bond7: entered allmulticast mode
[  140.402478][ T9291] 8021q: adding VLAN 0 to HW filter on device bond7
[  140.404905][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'.
[  140.506413][ T9291] bond8: entered promiscuous mode
[  140.508498][ T9291] bond8: entered allmulticast mode
[  140.510982][ T9291] 8021q: adding VLAN 0 to HW filter on device bond8
[  140.612660][ T9291] bond9: entered promiscuous mode
[  140.614809][ T9291] bond9: entered allmulticast mode
[  140.617093][ T9291] 8021q: adding VLAN 0 to HW filter on device bond9
[  140.680409][ T9303] netlink: 14 bytes leftover after parsing attributes in process `syz.2.993'.
[  140.704782][ T9308] bond0: entered promiscuous mode
[  140.707046][ T9308] bond0: entered allmulticast mode
[  140.712289][ T9308] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.824735][ T9308] bond0 (unregistering): Released all slaves
[  140.862764][ T9291] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  140.938823][ T9314] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  141.032983][ T9320] 8021q: adding VLAN 0 to HW filter on device bond8
[  141.310414][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  141.569256][ T9359] openvswitch: netlink: Message has 8 unknown bytes.
[  141.830346][ T9376] bond0 (unregistering): Released all slaves
[  141.963283][ T9390] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1016'.
[  141.966816][ T9390] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1016'.
[  141.982179][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1017'.
[  142.028491][ T9390] netlink: 'syz.1.1016': attribute type 10 has an invalid length.
[  142.072358][ T9394] bond0: entered promiscuous mode
[  142.074207][ T9394] bond0: entered allmulticast mode
[  142.076698][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.218224][ T9394] bond0 (unregistering): Released all slaves
[  142.310010][ T9407] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  142.313939][ T9407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1024'.
[  142.366170][ T9411] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  142.434887][ T9417] geneve5: entered promiscuous mode
[  142.436475][ T9417] geneve5: entered allmulticast mode
[  142.479157][ T9422] lo: entered promiscuous mode
[  142.480849][ T9422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.573124][ T9430] nbd: couldn't find a device at index 0
[  142.658318][ T9432] bond10: entered promiscuous mode
[  142.660869][ T9432] 8021q: adding VLAN 0 to HW filter on device bond10
[  142.771492][ T9432] bond10 (unregistering): Released all slaves
[  142.890731][ T9436] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  143.100545][ T9438] veth0_to_bond: left promiscuous mode
[  143.206523][ T9438] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  143.223398][ T9438] gretap1: left promiscuous mode
[  143.264705][ T9438] gretap2: left promiscuous mode
[  143.297936][ T9438] macvtap1: left promiscuous mode
[  143.299859][ T9438] macvtap1: left allmulticast mode
[  143.307079][ T9438] bond0: left promiscuous mode
[  143.310236][ T9438] bond0: left allmulticast mode
[  143.315915][ T9438] bond3: left promiscuous mode
[  143.320177][ T9438] bond3: left allmulticast mode
[  143.323656][ T9438] bond4: left promiscuous mode
[  143.325602][ T9438] bond4: left allmulticast mode
[  143.330579][ T9438] bond5: left promiscuous mode
[  143.332329][ T9438] bond5: left allmulticast mode
[  143.334965][ T9438] bond6: left promiscuous mode
[  143.336625][ T9438] bond6: left allmulticast mode
[  143.340487][ T9438] bond7: left promiscuous mode
[  143.342322][ T9438] bond7: left allmulticast mode
[  143.344947][ T9438] bond8: left promiscuous mode
[  143.346585][ T9438] bond8: left allmulticast mode
[  143.349666][ T9438] bond9: left promiscuous mode
[  143.351431][ T9438] bond9: left allmulticast mode
[  143.354148][ T5863] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.358900][ T5863] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.430488][ T5863] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.434068][ T5863] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.436789][ T9450] netlink: 'syz.1.1037': attribute type 2 has an invalid length.
[  143.442115][ T5863] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.445516][ T9450] netlink: 'syz.1.1037': attribute type 1 has an invalid length.
[  143.446019][ T5863] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.517702][ T5863] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.517748][ T9443] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  143.521119][ T5863] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.763062][ T9454] bond0 (unregistering): Released all slaves
[  143.922849][ T9473] bond0: entered promiscuous mode
[  143.924707][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.988915][ T9473] bond0 (unregistering): Released all slaves
[  144.000347][ T9450] syzkaller1: entered allmulticast mode
[  144.059178][ T9482] __nla_validate_parse: 10 callbacks suppressed
[  144.059201][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1043'.
[  144.088579][ T9482] bond0: entered promiscuous mode
[  144.091341][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.114328][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'.
[  144.130549][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'.
[  144.204656][ T9482] bond0 (unregistering): Released all slaves
[  144.223099][ T9485] : renamed from bond_slave_0
[  144.380172][ T9492] bond0: entered promiscuous mode
[  144.382330][ T9492] bond0: entered allmulticast mode
[  144.384905][ T9492] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.514756][ T9492] bond0 (unregistering): Released all slaves
[  144.575971][ T9506] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1050'.
[  144.581354][ T9506] nbd: couldn't find a device at index 0
[  144.639974][ T9510] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  144.678670][ T9510] bond0 (unregistering): Released all slaves
[  144.901324][ T9527] netlink: 'syz.0.1057': attribute type 1 has an invalid length.
[  145.293482][ T9534] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1059'.
[  145.301045][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'.
[  145.391179][ T9542] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  145.395711][ T9542] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1060'.
[  145.544564][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'.
[  145.549959][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'.
[  145.555384][ T9553] : renamed from bond_slave_0
[  145.673994][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'.
[  145.707911][ T9563] netlink: 'syz.2.1068': attribute type 10 has an invalid length.
[  145.832394][ T9570] netlink: 'syz.1.1070': attribute type 1 has an invalid length.
[  145.873696][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.962440][ T9570] bond0 (unregistering): Released all slaves
[  146.133266][ T9591] netlink: 'syz.0.1076': attribute type 1 has an invalid length.
[  146.213724][ T9596] bond4: left allmulticast mode
[  146.217052][ T9596] bridge0: port 1(bond4) entered disabled state
[  146.228681][ T9598] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  146.302983][ T9600] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  146.368833][ T9603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.823521][ T9644] bond10 (unregistering): Released all slaves
[  147.042980][ T9672] bond0 (unregistering): Released all slaves
[  147.341027][ T9693] nbd: couldn't find a device at index 0
[  147.372961][ T9676] infiniband syz2: set down
[  147.376448][ T9676] infiniband syz2: added ipvlan0
[  147.382556][ T9676] syz2: rxe_create_cq: returned err = -12
[  147.386007][ T9676] infiniband syz2: Couldn't create ib_mad CQ
[  147.391606][ T9676] infiniband syz2: Couldn't open port 1
[  147.429847][ T9676] RDS/IB: syz2: added
[  147.431884][ T9676] smc: adding ib device syz2 with port count 1
[  147.434547][ T9676] smc:    ib device syz2 port 1 has pnetid 
[  147.578746][ T9711] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  147.622100][ T9703] validate_nla: 3 callbacks suppressed
[  147.622115][ T9703] netlink: 'syz.1.1108': attribute type 33 has an invalid length.
[  147.662483][ T9714] netlink: 'syz.0.1111': attribute type 1 has an invalid length.
[  147.703817][ T9714] bond10 (unregistering): Released all slaves
[  148.082338][ T9740] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  148.098303][ T9740] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.101374][ T9740] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  148.106777][ T9740] bond5: (slave vcan0): Error -95 calling set_mac_address
[  148.140480][ T9742] bond5: (slave vcan0): The slave device specified does not support setting the MAC address
[  148.145470][ T9742] bond5: (slave vcan0): Error -95 calling set_mac_address
[  148.206060][ T9740] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.274444][ T9748] netlink: 'syz.1.1122': attribute type 1 has an invalid length.
[  148.306414][ T9748] bond0 (unregistering): Released all slaves
[  148.541654][ T9778] pim6reg1: entered allmulticast mode
[  148.598770][ T9780] bond0: entered promiscuous mode
[  148.601121][ T9780] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.604122][ T9782] openvswitch: netlink: Flow actions attr not present in new flow.
[  148.693867][ T9780] bond0 (unregistering): Released all slaves
[  148.707005][ T9793] bond0 (unregistering): Released all slaves
[  148.965510][ T9811] netlink: 'syz.2.1140': attribute type 1 has an invalid length.
[  148.995980][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.024845][ T9811] bond0: (slave geneve2): making interface the new active one
[  149.029363][ T9811] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  149.033558][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.038238][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.045995][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.049802][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.128526][ T9819] bond9: entered promiscuous mode
[  149.130556][ T9819] bond9: entered allmulticast mode
[  149.133169][ T9819] 8021q: adding VLAN 0 to HW filter on device bond9
[  149.222968][ T9819] bond9 (unregistering): Released all slaves
[  149.250291][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.303116][ T9825] __nla_validate_parse: 18 callbacks suppressed
[  149.303130][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  149.387253][ T9827] 8021q: adding VLAN 0 to HW filter on device bond9
[  149.511183][ T9831] netlink: 'syz.2.1145': attribute type 5 has an invalid length.
[  149.528818][ T9838] netlink: 'syz.0.1147': attribute type 1 has an invalid length.
[  149.589956][ T9838] 8021q: adding VLAN 0 to HW filter on device bond10
[  149.690493][ T9838] bond10 (unregistering): Released all slaves
[  149.881508][ T9847] bond0 (unregistering): (slave geneve2): Releasing active interface
[  149.896559][ T9847] bond0 (unregistering): Released all slaves
[  149.913497][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.022241][ T9851] bond0 (unregistering): Released all slaves
[  150.042371][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.045537][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.091562][ T9849] bond0: entered promiscuous mode
[  150.094202][ T9849] bond0: entered allmulticast mode
[  150.096729][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.235366][ T9872] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  150.279727][ T9849] bond0 (unregistering): Released all slaves
[  150.311123][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.579441][ T9888] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1163'.
[  150.590750][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'.
[  150.594232][ T9888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'.
[  150.604251][ T9888] geneve5: entered promiscuous mode
[  150.606274][ T9888] geneve5: entered allmulticast mode
[  150.610627][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.618122][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.622152][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.626149][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.668407][ T9892] netlink: 'syz.1.1164': attribute type 1 has an invalid length.
[  150.712038][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.792589][ T9892] bond0 (unregistering): Released all slaves
[  151.310825][ T9934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1176'.
[  151.315603][ T9934] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  151.319627][ T9934] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1176'.
[  151.353153][ T9939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1177'.
[  151.577162][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  151.726694][ T9956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1181'.
[  151.740341][ T9958] netlink: 'syz.2.1181': attribute type 1 has an invalid length.
[  151.861991][ T9966] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  151.944343][ T9972] bond0 (unregistering): Released all slaves
[  152.163994][ T9991] bond0: entered promiscuous mode
[  152.166489][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.409865][T10007] bond6 (unregistering): Released all slaves
[  152.920984][T10041] validate_nla: 1 callbacks suppressed
[  152.921003][T10041] netlink: 'syz.1.1201': attribute type 1 has an invalid length.
[  152.968048][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.977253][T10041] 8021q: adding VLAN 0 to HW filter on device bond6
[  153.159432][T10041] bond6 (unregistering): Released all slaves
[  153.293960][T10051] ipvlan0: entered promiscuous mode
[  153.680647][T10077] bond0: entered promiscuous mode
[  153.683151][T10077] bond0: entered allmulticast mode
[  153.685121][T10077] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.820657][T10086] netlink: 'syz.2.1212': attribute type 1 has an invalid length.
[  153.827595][T10086] netlink: 'syz.2.1212': attribute type 1 has an invalid length.
[  153.915894][T10093] bond10: entered promiscuous mode
[  153.918640][T10093] 8021q: adding VLAN 0 to HW filter on device bond10
[  153.957725][T10098] netlink: 'syz.1.1215': attribute type 13 has an invalid length.
[  153.960428][T10098] netlink: 'syz.1.1215': attribute type 17 has an invalid length.
[  154.003545][T10093] bond10 (unregistering): Released all slaves
[  154.038576][T10098] erspan0: left allmulticast mode
[  154.076963][T10098] 8021q: adding VLAN 0 to HW filter on device team0
[  154.083173][T10098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.129145][T10098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.185657][T10100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.210964][T10105] bond10: entered promiscuous mode
[  154.213847][T10105] bond10: entered allmulticast mode
[  154.216485][T10105] 8021q: adding VLAN 0 to HW filter on device bond10
[  154.314994][T10105] bond10 (unregistering): Released all slaves
[  154.664857][T10118] __nla_validate_parse: 14 callbacks suppressed
[  154.664873][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'.
[  154.882916][T10129] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1226'.
[  154.886526][T10128] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  154.933675][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'.
[  154.990781][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'.
[  154.994800][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'.
[  155.025916][T10134] bond0: entered promiscuous mode
[  155.029178][T10134] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.232897][T10098] syz.1.1215 (10098) used greatest stack depth: 19992 bytes left
[  155.361941][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1232'.
[  155.582370][T10151] tipc: Started in network mode
[  155.584407][T10151] tipc: Node identity 7604c9159195, cluster identity 4711
[  155.592219][T10151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.599111][T10152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.603350][T10151] syzkaller0: entered promiscuous mode
[  155.605778][T10151] syzkaller0: entered allmulticast mode
[  155.637790][T10150] tipc: Resetting bearer <eth:syzkaller0>
[  155.656830][T10150] tipc: Disabling bearer <eth:syzkaller0>
[  155.683416][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1235'.
[  155.692831][ T5863] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.696735][ T5863] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.702917][ T5863] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.705870][ T5863] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.742990][T10158] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  155.968673][T10181] netlink: 'syz.1.1242': attribute type 1 has an invalid length.
[  155.972637][T10182] netlink: 'syz.1.1242': attribute type 1 has an invalid length.
[  155.994426][T10164] bond0 (unregistering): Released all slaves
[  156.191067][T10202] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  156.247001][T10196] bond0 (unregistering): Released all slaves
[  156.377096][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'.
[  156.378506][T10198] bond0 (unregistering): Released all slaves
[  156.766782][T10240] netlink: 'syz.0.1258': attribute type 2 has an invalid length.
[  156.821774][   T64] smc: removing ib device syz2
[  156.992495][  T975] ==================================================================
[  156.995698][  T975] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  156.999087][  T975] Read of size 8 at addr ffff8881102d62e8 by task kworker/1:3/975
[  157.003392][  T975] 
[  157.004326][  T975] CPU: 1 UID: 0 PID: 975 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  157.004342][  T975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.004352][  T975] Workqueue: infiniband ib_cache_event_task
[  157.004381][  T975] Call Trace:
[  157.004390][  T975]  <TASK>
[  157.004397][  T975]  dump_stack_lvl+0x189/0x250
[  157.004415][  T975]  ? rcu_is_watching+0x15/0xb0
[  157.004427][  T975]  ? __kasan_check_byte+0x12/0x40
[  157.004446][  T975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.004458][  T975]  ? rcu_is_watching+0x15/0xb0
[  157.004468][  T975]  ? lock_release+0x4b/0x3e0
[  157.004481][  T975]  ? __virt_addr_valid+0x1c8/0x5c0
[  157.004492][  T975]  ? __virt_addr_valid+0x4a5/0x5c0
[  157.004501][  T975]  print_report+0xca/0x240
[  157.004509][  T975]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  157.004519][  T975]  kasan_report+0x118/0x150
[  157.004530][  T975]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  157.004541][  T975]  __ethtool_get_link_ksettings+0x6e/0x190
[  157.004551][  T975]  ib_get_eth_speed+0x15e/0x7b0
[  157.004562][  T975]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  157.004572][  T975]  ? do_raw_spin_unlock+0x4d/0x240
[  157.004582][  T975]  ? rxe_query_port+0x6b/0x3b0
[  157.004596][  T975]  rxe_query_port+0x93/0x3b0
[  157.004608][  T975]  ib_query_port+0x170/0x830
[  157.004618][  T975]  ib_cache_update+0x1a9/0xbf0
[  157.004626][  T975]  ? register_lock_class+0x51/0x320
[  157.004637][  T975]  ? __pfx_ib_cache_update+0x10/0x10
[  157.004646][  T975]  ? process_scheduled_works+0x9ef/0x17b0
[  157.004655][  T975]  ib_cache_event_task+0xd8/0x1c0
[  157.004666][  T975]  ? process_scheduled_works+0x9ef/0x17b0
[  157.004675][  T975]  process_scheduled_works+0xae1/0x17b0
[  157.004694][  T975]  ? __pfx_process_scheduled_works+0x10/0x10
[  157.004710][  T975]  worker_thread+0x8a0/0xda0
[  157.004722][  T975]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.004740][  T975]  ? __kthread_parkme+0x7b/0x200
[  157.004754][  T975]  kthread+0x711/0x8a0
[  157.004768][  T975]  ? __pfx_worker_thread+0x10/0x10
[  157.004778][  T975]  ? __pfx_kthread+0x10/0x10
[  157.004792][  T975]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.004806][  T975]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.004823][  T975]  ? __pfx_kthread+0x10/0x10
[  157.004837][  T975]  ret_from_fork+0x3fc/0x770
[  157.004849][  T975]  ? __pfx_ret_from_fork+0x10/0x10
[  157.004862][  T975]  ? __switch_to_asm+0x39/0x70
[  157.004875][  T975]  ? __switch_to_asm+0x33/0x70
[  157.004888][  T975]  ? __pfx_kthread+0x10/0x10
[  157.004903][  T975]  ret_from_fork_asm+0x1a/0x30
[  157.004919][  T975]  </TASK>
[  157.004923][  T975] 
[  157.088759][  T975] Allocated by task 5846:
[  157.090141][  T975]  kasan_save_track+0x3e/0x80
[  157.091877][  T975]  __kasan_kmalloc+0x93/0xb0
[  157.093630][  T975]  __kvmalloc_node_noprof+0x30d/0x5f0
[  157.095618][  T975]  alloc_netdev_mqs+0xa3/0x11b0
[  157.097535][  T975]  rtnl_create_link+0x31f/0xd10
[  157.099483][  T975]  rtnl_newlink_create+0x25c/0xb00
[  157.101519][  T975]  rtnl_newlink+0x16d6/0x1c70
[  157.103411][  T975]  rtnetlink_rcv_msg+0x7cf/0xb70
[  157.105378][  T975]  netlink_rcv_skb+0x208/0x470
[  157.107288][  T975]  netlink_unicast+0x82f/0x9e0
[  157.109217][  T975]  netlink_sendmsg+0x805/0xb30
[  157.111149][  T975]  __sock_sendmsg+0x21c/0x270
[  157.113036][  T975]  __sys_sendto+0x3bd/0x520
[  157.114822][  T975]  __x64_sys_sendto+0xde/0x100
[  157.116422][  T975]  do_syscall_64+0xfa/0x3b0
[  157.117896][  T975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.119791][  T975] 
[  157.120549][  T975] Freed by task 10231:
[  157.121794][  T975]  kasan_save_track+0x3e/0x80
[  157.123271][  T975]  kasan_save_free_info+0x46/0x50
[  157.124836][  T975]  __kasan_slab_free+0x5b/0x80
[  157.126339][  T975]  kfree+0x18e/0x440
[  157.127552][  T975]  device_release+0x9c/0x1c0
[  157.128983][  T975]  kobject_put+0x22b/0x480
[  157.130383][  T975]  netdev_run_todo+0xd2e/0xea0
[  157.131904][  T975]  rtnl_dellink+0x537/0x710
[  157.133319][  T975]  rtnetlink_rcv_msg+0x7cf/0xb70
[  157.134850][  T975]  netlink_rcv_skb+0x208/0x470
[  157.136532][  T975]  netlink_unicast+0x82f/0x9e0
[  157.138258][  T975]  netlink_sendmsg+0x805/0xb30
[  157.140184][  T975]  __sock_sendmsg+0x21c/0x270
[  157.142112][  T975]  ____sys_sendmsg+0x505/0x830
[  157.143725][  T975]  ___sys_sendmsg+0x21f/0x2a0
[  157.145259][  T975]  __x64_sys_sendmsg+0x19b/0x260
[  157.147068][  T975]  do_syscall_64+0xfa/0x3b0
[  157.148905][  T975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.151316][  T975] 
[  157.152296][  T975] The buggy address belongs to the object at ffff8881102d6000
[  157.152296][  T975]  which belongs to the cache kmalloc-cg-4k of size 4096
[  157.157672][  T975] The buggy address is located 744 bytes inside of
[  157.157672][  T975]  freed 4096-byte region [ffff8881102d6000, ffff8881102d7000)
[  157.162790][  T975] 
[  157.163659][  T975] The buggy address belongs to the physical page:
[  157.166021][  T975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1102d0
[  157.169218][  T975] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  157.172438][  T975] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  157.175325][  T975] page_type: f5(slab)
[  157.176846][  T975] raw: 057ff00000000040 ffff88801a44b500 ffffea00040c5800 0000000000000002
[  157.180048][  T975] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  157.183243][  T975] head: 057ff00000000040 ffff88801a44b500 ffffea00040c5800 0000000000000002
[  157.186536][  T975] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  157.189694][  T975] head: 057ff00000000003 ffffea000440b401 00000000ffffffff 00000000ffffffff
[  157.192915][  T975] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  157.196201][  T975] page dumped because: kasan: bad access detected
[  157.198619][  T975] page_owner tracks the page as allocated
[  157.200788][  T975] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 57145760640, free_ts 57133402025
[  157.208028][  T975]  post_alloc_hook+0x240/0x2a0
[  157.209638][  T975]  get_page_from_freelist+0x21e4/0x22c0
[  157.211622][  T975]  __alloc_frozen_pages_noprof+0x181/0x370
[  157.213517][  T975]  alloc_pages_mpol+0x232/0x4a0
[  157.215171][  T975]  allocate_slab+0x8a/0x370
[  157.216697][  T975]  ___slab_alloc+0xbeb/0x1420
[  157.218396][  T975]  __kvmalloc_node_noprof+0x429/0x5f0
[  157.220217][  T975]  seq_read_iter+0x1fd/0xe10
[  157.221943][  T975]  vfs_read+0x55a/0xa30
[  157.223412][  T975]  ksys_read+0x145/0x250
[  157.224903][  T975]  do_syscall_64+0xfa/0x3b0
[  157.226455][  T975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.228584][  T975] page last free pid 5831 tgid 5831 stack trace:
[  157.231058][  T975]  __free_frozen_pages+0xbc4/0xd30
[  157.232776][  T975]  __slab_free+0x303/0x3c0
[  157.234582][  T975]  qlist_free_all+0x97/0x140
[  157.236443][  T975]  kasan_quarantine_reduce+0x148/0x160
[  157.238475][  T975]  __kasan_slab_alloc+0x22/0x80
[  157.240341][  T975]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  157.242175][  T975]  getname_flags+0xb8/0x540
[  157.243718][  T975]  vfs_fstatat+0x43/0x170
[  157.245174][  T975]  __x64_sys_newfstatat+0x116/0x190
[  157.246859][  T975]  do_syscall_64+0xfa/0x3b0
[  157.248560][  T975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.250942][  T975] 
[  157.251891][  T975] Memory state around the buggy address:
[  157.254123][  T975]  ffff8881102d6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.256708][  T975]  ffff8881102d6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.259073][  T975] >ffff8881102d6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.261548][  T975]                                                           ^
[  157.264090][  T975]  ffff8881102d6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.266573][  T975]  ffff8881102d6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  157.269604][  T975] ==================================================================
[  157.455574][  T975] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  157.458302][  T975] CPU: 1 UID: 0 PID: 975 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  157.461691][  T975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.465477][  T975] Workqueue: infiniband ib_cache_event_task
[  157.467753][  T975] Call Trace:
[  157.468998][  T975]  <TASK>
[  157.470123][  T975]  dump_stack_lvl+0x99/0x250
[  157.471828][  T975]  ? __asan_memcpy+0x40/0x70
[  157.473639][  T975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.475623][  T975]  ? __pfx__printk+0x10/0x10
[  157.477337][  T975]  vpanic+0x281/0x750
[  157.478823][  T975]  ? preempt_schedule+0xae/0xc0
[  157.480665][  T975]  ? __pfx_vpanic+0x10/0x10
[  157.482391][  T975]  ? preempt_schedule_common+0x83/0xd0
[  157.484385][  T975]  ? preempt_schedule+0xae/0xc0
[  157.486186][  T975]  ? __pfx_preempt_schedule+0x10/0x10
[  157.488207][  T975]  panic+0xb9/0xc0
[  157.489460][  T975]  ? __pfx_panic+0x10/0x10
[  157.490796][  T975]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  157.492572][  T975]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  157.494470][  T975]  check_panic_on_warn+0x89/0xb0
[  157.496409][  T975]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  157.498493][  T975]  end_report+0x78/0x160
[  157.499765][  T975]  kasan_report+0x129/0x150
[  157.501357][  T975]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  157.503710][  T975]  __ethtool_get_link_ksettings+0x6e/0x190
[  157.505979][  T975]  ib_get_eth_speed+0x15e/0x7b0
[  157.507513][  T975]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  157.509603][  T975]  ? do_raw_spin_unlock+0x4d/0x240
[  157.511615][  T975]  ? rxe_query_port+0x6b/0x3b0
[  157.513149][  T975]  rxe_query_port+0x93/0x3b0
[  157.514623][  T975]  ib_query_port+0x170/0x830
[  157.516184][  T975]  ib_cache_update+0x1a9/0xbf0
[  157.517988][  T975]  ? register_lock_class+0x51/0x320
[  157.519715][  T975]  ? __pfx_ib_cache_update+0x10/0x10
[  157.521542][  T975]  ? process_scheduled_works+0x9ef/0x17b0
[  157.523501][  T975]  ib_cache_event_task+0xd8/0x1c0
[  157.525190][  T975]  ? process_scheduled_works+0x9ef/0x17b0
[  157.527185][  T975]  process_scheduled_works+0xae1/0x17b0
[  157.529025][  T975]  ? __pfx_process_scheduled_works+0x10/0x10
[  157.530918][  T975]  worker_thread+0x8a0/0xda0
[  157.532530][  T975]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.535026][  T975]  ? __kthread_parkme+0x7b/0x200
[  157.537022][  T975]  kthread+0x711/0x8a0
[  157.538669][  T975]  ? __pfx_worker_thread+0x10/0x10
[  157.540715][  T975]  ? __pfx_kthread+0x10/0x10
[  157.542594][  T975]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.544685][  T975]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.546699][  T975]  ? __pfx_kthread+0x10/0x10
[  157.548478][  T975]  ret_from_fork+0x3fc/0x770
[  157.550614][  T975]  ? __pfx_ret_from_fork+0x10/0x10
[  157.552694][  T975]  ? __switch_to_asm+0x39/0x70
[  157.554596][  T975]  ? __switch_to_asm+0x33/0x70
[  157.556476][  T975]  ? __pfx_kthread+0x10/0x10
[  157.558339][  T975]  ret_from_fork_asm+0x1a/0x30
[  157.560264][  T975]  </TASK>
[  157.562099][  T975] Kernel Offset: disabled
[  157.563782][  T975] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:13:58  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff99c856a0 RBX=ffffffff99cef298 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888024931cc0 RBP=ffffffff84d0640a RSP=ffffc90006c36d10
R8 =0000000000000001 R9 =0000000000000001 R10=dffffc0000000000 R11=fffffbfff1f47307
R12=0000000000000000 R13=ffffffff99cef298 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff819d615d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efe6121b6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000ad8000 CR3=00000000282ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f89e11a7498 00007f89e11a7470 XMM03=00007f89e11a74a8 00007f89e11a74a0
XMM04=00007f89e1d0d100 00007f89e11a7460 XMM05=00007f89e11a7478 00007f89e11a74c0
XMM06=00007f89e11a74b8 00007f89e11a74b0 XMM07=00007f89e11a74a8 00007f89e11a74a0
XMM08=0000000000000000 00007f89e1012ee7 XMM09=0000000000000000 00007f89e1012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006a46f90
R8 =ffff88801fe88237 R9 =1ffff11003fd1046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd911 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2dfb428440 CR3=00000000282ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
