last executing test programs:

17.214213624s ago: executing program 1 (id=898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x401, 0x800, 0x88a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x88a8}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0xe48, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x10001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={<r5=>0x0, 0x1}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={<r6=>0x0, 0xa4c, 0x10}, &(0x7f00000006c0)=0xc)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000700)={r5, 0xb81, 0x4, 0xb, 0x9, 0x6, 0xff0, 0x6, {r6, @in6={{0xa, 0x4e20, 0x4, @private0, 0x401}}, 0x5, 0x6, 0x10000, 0xe, 0x92}}, &(0x7f00000007c0)=0xb0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414280000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff02000000fffff1fffb390c3d28892d930000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff0010d31c880000000008000096070000000000000000000000000000be0000000000000000000000724d341fa042542c84cfc729349cc78a212894fa44c9dea7ecb02a7a0c9644f4f0b10f"], 0xf8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwrite64(r9, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693)
setsockopt$inet6_mreq(r11, 0x29, 0x6, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a0247fc9f0c15b7b9260278a3eddd2ec3cf3759b9f6818233e5716b1d0e6a14fa74c0749c6b3c81d0b0", @ANYRES16=r10, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034)

16.985489092s ago: executing program 1 (id=901):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000003c0)="eff4709011580000", 0x8}], 0x1) (async)
shutdown(r0, 0x1) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000180))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000030a01010000000000000000010000000900010073797a30000000040900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000002849605500080004400095562b8100020007000000380001800c00010062697477697365002800028008000340000000020832669b3400001408000240000000120400056f9c8437c915adaf3381ef308008000140000000140900010073797a30000000001400000011000100000000000000000007ad2211a709d48639f62184589001fc5ba87fb4c847c0adcc6978a8c4c33cad6021b5c45274b720fffa7ad5db5117e696416a41604ea233d594d567e4d8e3dd895c2dd739bf108854c618c1324adc559f2b953f3ad61504d4d6e516838a74d6ad42be3cccfb54552188242451a721", @ANYRESDEC=r0], 0x6}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="00bd27b64de6a53d44772195a297e2efbfce0000", @ANYRES16=r6, @ANYBLOB="01000000008000008100000000000c0002800000000000000000400007800c00018008000100640f36beb8ca5bc9fa425758e86b98beda05e4957c745727e08554cb54fb8603d1f2f4fb7d6265f2008a4200"/92, @ANYRES32=r3, @ANYRES16=r4, @ANYRES32=r4, @ANYRES64, @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018005000100", @ANYRES32=r4, @ANYRES64=r2], 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc0d4)
r7 = socket$inet6(0xa, 0x3, 0x1000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0xc}, 0x20) (async)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async)
sendmsg$inet6(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @rand_addr=' \x01\x00', 0x2000000}, 0x1c, 0x0}, 0x4044000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
accept4(r2, 0x0, 0x0, 0x800)
setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000500)=0x10000, 0x4)
r9 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r9, &(0x7f0000000440), 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async)
sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
close(0x3) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000240)={<r10=>r0, 0x5, 0x5, 0x9}) (async)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0, <r12=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private0, @in6=@local, 0x4e21, 0x9, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0xb6f6ab86ea344308, r11, r12}, {0x6, 0x0, 0x3, 0x5, 0x3be, 0x6, 0x2000000002, 0xe}, {0x6f, 0x8000000000000002, 0x7, 0x42}, 0x5, 0x6e6bbc, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0x66a06055485916e5, @in=@remote, 0x3505, 0x2, 0x0, 0xa7, 0x1ff, 0xd47, 0x7}}, 0xe8)

16.895361092s ago: executing program 1 (id=902):
syz_init_net_socket$ax25(0x3, 0x2, 0xca)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x31, &(0x7f000001e600)=""/2, &(0x7f000001e640)=0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x34, r4, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0xfffffffffffffdf6, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0xc1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, 0x0, &(0x7f0000000140))
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
getpid()
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r9, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000001000)={'sit0\x00', 0x0, 0x700, 0x7, 0x7, 0x8, {{0xa, 0x4, 0x1, 0x37, 0x28, 0x67, 0x0, 0x4, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x14, 0xbf, 0x1, 0x1, [{@multicast2, 0xffff0000}, {@local, 0xf}]}]}}}}})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r9, 0x5000940e, &(0x7f0000000000)={{r9}, "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"})
recvmmsg(r9, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)

16.213089814s ago: executing program 2 (id=905):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000)=0x800000, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8803, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x68ed0000)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9)
r5 = socket(0x10, 0x2, 0x0)
sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff)
getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000)
setsockopt$inet_int(r4, 0x0, 0x30, &(0x7f0000000000)=0x3, 0x4)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)

16.025158479s ago: executing program 1 (id=906):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private0, 0x5}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x30)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

16.02476353s ago: executing program 1 (id=907):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8c4, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4090)
setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000180)=0x3b2, 0x4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000001020001000000"], 0x20}}, 0x0)

15.75478435s ago: executing program 0 (id=909):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0)
socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$rds(0x15, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32)
listen(r6, 0x8) (rerun: 32)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) (async)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async, rerun: 64)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) (rerun: 64)

15.665381798s ago: executing program 0 (id=910):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300020c1)
close(r0)

15.615304745s ago: executing program 0 (id=911):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="360a000000800000000000009bc5b7f0", 0x10)
close(0x3)

15.565358401s ago: executing program 0 (id=912):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x2400000000000000)

15.563733018s ago: executing program 0 (id=913):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64)
close(0x4) (rerun: 64)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0xc, 0xffffffff, 0x8001}, 0x10) (async, rerun: 32)
sendmsg$NFT_BATCH(r2, 0x0, 0x0) (rerun: 32)

15.331546537s ago: executing program 2 (id=914):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_emit_ethernet(0x34e, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0)
r2 = accept4$bt_l2cap(r1, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
shutdown(r1, 0x1)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4)
r6 = getpid()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r6)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

15.235471517s ago: executing program 2 (id=915):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0xffff, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000080)={r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)

15.234920698s ago: executing program 0 (id=916):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='v@\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf250c0000000c00058007000100696200000c00098008000200001000001c00038008000100000200000800030078050000080001007f0000003000048014000780080001000000000008000300030000000900010073797a31000000000900010073797a3000000000"], 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x448}}, 0x0)
sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a)
sendfile(r9, r10, 0x0, 0xffffffff000)
getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000300)=""/169, &(0x7f00000003c0)=0xa9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002d00010026bd7000ecdbdf250400000004000e80d6cc1128a57da123e8fe7acc5eb4335a5e7de3f9e213f5a63e5827ac01985a7b69e945dc3e1bb7c79c526e8b3a1527da761227efbbc8085abd9f41e59da21d9b67a5901e50afd8268d84be7ea8a070ff6db34b1ce418e52ef395e9bdabf8b0f2415f373ae1afb8ad94b5b619dbe2bceb9dc563d0910f47e2fcbd238614ebbd88d8d54d2b9a5565b74091e226e1b3533157c4e0f38e775e2c3cdc4f0653735b48d1156a802d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

15.23450233s ago: executing program 2 (id=917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000040)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x140, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5bc9a11}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40004}, 0x20000001)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
bind$bt_hci(r3, &(0x7f00000003c0)={0x1f, 0x4, 0x4}, 0x6)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000500))
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
r4 = socket$unix(0x1, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x8001, 0xf5, 0x2, 0x3}]}, 0x10)
socketpair(0x3d, 0x1, 0x7, &(0x7f0000000600)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r0)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x39e6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x639}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x38}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc00c}, 0xc0001)
ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000840)={0xc021, 0x2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880))
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000008c0)=[@in6={0xa, 0x4e22, 0x434, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}], 0x1c)
pselect6(0x40, &(0x7f0000000900)={0x0, 0x400, 0x0, 0xcf58, 0x36a, 0xb, 0x8, 0x8600}, &(0x7f0000000940)={0x2, 0xfffffffffffffffb, 0x80000000, 0x2, 0x3, 0x6, 0xffffffffffffff00, 0x21f}, &(0x7f0000000980)={0xfffffffffffffffe, 0x591, 0x5, 0xd, 0x3, 0xb0e, 0xe}, &(0x7f00000009c0)={0x0, 0x989680}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0xdf0e00000000000]}, 0x8})
socket$kcm(0x29, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x9, 0xc0, 0x4, 0x8}, {0x6, 0xf9, 0x2, 0x5}, {0x7, 0x6c, 0x9, 0x80}]}, 0x10)
getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)
connect$bt_rfcomm(r3, &(0x7f0000000b80)={0x1f, @none, 0x6}, 0xa)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000bc0)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x24, 0x0, "2abb9e579ce7f96294d164354344f8ca4af7be42943747c6e24c40eb532c3f1c056f0cc886b7918cc31cba36ed2b08a1bc2e4c6013678a3c2914561afb6a936d07d45671ae5af01340fa86561be61357"}, 0xd8)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r9, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x54}}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xf0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0xf}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1a}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0xf}, @broadcast, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x5}, "af5f985097e5cdbd7d1a1ee8d19000b31c5f2584e79841ede9bcc9adffc1e838c1797643f027439be5dcce5f541354d4dc7659f6bc8613f8d87aff680e26c3331a3d5e2662735499e16b0e65385252a23d385c622e59ab9e47514b6e283bbb6f6c9bf97b43a6815d9951643b387d0dc71a45e61cdcda09cb39ddd14a1eae9c36"}}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x41}, 0x8874)

15.122452181s ago: executing program 1 (id=918):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xaa781dded7a2310b}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x547d, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000040) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xaa781dded7a2310b}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x547d, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000040)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x3fd, 0x800, 0x9a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x8100}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x2, 0xe4b, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x10001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x3fd, 0x800, 0x9a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x8100}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x2, 0xe4b, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x10001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693)
setsockopt$inet6_mreq(r9, 0x29, 0x6, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7}) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a0247fc9f0c15b7b9260278a3eddd2ec3cf3759b9f6818233e5716b1d0e6a14fa74c0749c6b3c81d0b0", @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034)

15.121664936s ago: executing program 2 (id=919):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711202000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
listen(r0, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000300))

2.574246ms ago: executing program 2 (id=920):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0xfffffffffffffff5)

0s ago: executing program 32 (id=916):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='v@\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf250c0000000c00058007000100696200000c00098008000200001000001c00038008000100000200000800030078050000080001007f0000003000048014000780080001000000000008000300030000000900010073797a31000000000900010073797a3000000000"], 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r8], 0x448}}, 0x0)
sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a)
sendfile(r9, r10, 0x0, 0xffffffff000)
getsockopt$sock_buf(r9, 0x1, 0x1c, &(0x7f0000000300)=""/169, &(0x7f00000003c0)=0xa9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000002d00010026bd7000ecdbdf250400000004000e80d6cc1128a57da123e8fe7acc5eb4335a5e7de3f9e213f5a63e5827ac01985a7b69e945dc3e1bb7c79c526e8b3a1527da761227efbbc8085abd9f41e59da21d9b67a5901e50afd8268d84be7ea8a070ff6db34b1ce418e52ef395e9bdabf8b0f2415f373ae1afb8ad94b5b619dbe2bceb9dc563d0910f47e2fcbd238614ebbd88d8d54d2b9a5565b74091e226e1b3533157c4e0f38e775e2c3cdc4f0653735b48d1156a802d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58365' (ED25519) to the list of known hosts.
syzkaller login: [   48.130637][ T5771] cgroup: Unknown subsys name 'net'
[   48.235151][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.240733][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.116482][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.057896][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.061636][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.064293][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.067030][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.070047][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.072560][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.076355][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.101352][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.105064][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.112319][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.112579][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.117684][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.121513][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.129446][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.132666][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.429540][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.451399][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.510963][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.612894][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.616514][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.619912][ T5841] bridge_slave_0: entered allmulticast mode
[   56.623741][ T5841] bridge_slave_0: entered promiscuous mode
[   56.654190][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.657433][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.661149][ T5841] bridge_slave_1: entered allmulticast mode
[   56.664304][ T5841] bridge_slave_1: entered promiscuous mode
[   56.681304][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.683957][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.686789][ T5845] bridge_slave_0: entered allmulticast mode
[   56.691070][ T5845] bridge_slave_0: entered promiscuous mode
[   56.695505][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.698547][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.702176][ T5845] bridge_slave_1: entered allmulticast mode
[   56.705933][ T5845] bridge_slave_1: entered promiscuous mode
[   56.719797][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.722733][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.725635][ T5850] bridge_slave_0: entered allmulticast mode
[   56.729711][ T5850] bridge_slave_0: entered promiscuous mode
[   56.766254][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.769485][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.772497][ T5850] bridge_slave_1: entered allmulticast mode
[   56.776436][ T5850] bridge_slave_1: entered promiscuous mode
[   56.795150][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.801454][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.819216][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.832113][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.837235][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.851630][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.856366][ T5845] team0: Port device team_slave_0 added
[   56.885011][ T5845] team0: Port device team_slave_1 added
[   56.901931][ T5841] team0: Port device team_slave_0 added
[   56.913431][ T5850] team0: Port device team_slave_0 added
[   56.926982][ T5841] team0: Port device team_slave_1 added
[   56.931000][ T5850] team0: Port device team_slave_1 added
[   56.967539][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.970633][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.978579][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.995034][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.997702][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.008230][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.013484][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.016130][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.026003][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.031467][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.034115][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.043859][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.053519][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.055745][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.064286][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.068291][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.071240][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.079660][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.121764][ T5845] hsr_slave_0: entered promiscuous mode
[   57.124241][ T5845] hsr_slave_1: entered promiscuous mode
[   57.146244][ T5850] hsr_slave_0: entered promiscuous mode
[   57.148659][ T5850] hsr_slave_1: entered promiscuous mode
[   57.152146][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.154031][ T5850] Cannot create hsr debugfs directory
[   57.169186][ T5841] hsr_slave_0: entered promiscuous mode
[   57.171948][ T5841] hsr_slave_1: entered promiscuous mode
[   57.174177][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   57.176491][ T5841] Cannot create hsr debugfs directory
[   57.441973][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.449668][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.455809][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.461883][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.536416][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.546298][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.560113][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.579946][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.659359][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.665809][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.680196][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.686844][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.705371][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.741249][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.768283][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.771268][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.776884][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.779852][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.805678][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.845325][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.863667][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.866086][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.882810][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.885723][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.950290][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.981390][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.996783][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.999841][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.043405][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.045695][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.093717][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.146548][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.176120][ T5845] veth0_vlan: entered promiscuous mode
[   58.180408][ T5847] Bluetooth: hci2: command tx timeout
[   58.182869][ T5847] Bluetooth: hci1: command tx timeout
[   58.185504][ T5237] Bluetooth: hci0: command tx timeout
[   58.188459][ T5845] veth1_vlan: entered promiscuous mode
[   58.219348][ T5845] veth0_macvtap: entered promiscuous mode
[   58.227273][ T5845] veth1_macvtap: entered promiscuous mode
[   58.248075][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.265475][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.288244][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.292785][ T5850] veth0_vlan: entered promiscuous mode
[   58.314672][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.324284][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.329661][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.333508][ T5850] veth1_vlan: entered promiscuous mode
[   58.345888][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.416500][ T5841] veth0_vlan: entered promiscuous mode
[   58.429275][ T5850] veth0_macvtap: entered promiscuous mode
[   58.441124][ T5841] veth1_vlan: entered promiscuous mode
[   58.451620][ T5850] veth1_macvtap: entered promiscuous mode
[   58.490728][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.495688][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.502949][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.519065][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.545769][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.553142][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.558049][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.561585][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.594468][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.604760][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.614257][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.625461][ T5841] veth0_macvtap: entered promiscuous mode
[   58.642534][ T5841] veth1_macvtap: entered promiscuous mode
[   58.683187][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.704506][ T5910] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   58.709832][ T5910] syzkaller1: entered promiscuous mode
[   58.712074][ T5910] syzkaller1: entered allmulticast mode
[   58.715312][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.717584][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.718370][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.766603][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.771431][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.775812][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.783911][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.786907][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.791915][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.892249][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.895092][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.964867][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.967959][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.006049][ T5920] Zero length message leads to an empty skb
[   59.133635][ T5926] Illegal XDP return value 67108866 on prog  (id 4) dev N/A, expect packet loss!
[   59.273271][ T5936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.276355][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   59.520888][ T5958] dvmrp8: entered allmulticast mode
[   60.012052][ T5998] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   60.039063][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   60.085659][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.27'.
[   60.117669][ T6000] netlink: 'syz.2.27': attribute type 16 has an invalid length.
[   60.121275][ T6000] netlink: 'syz.2.27': attribute type 17 has an invalid length.
[   60.150228][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.153045][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.206945][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.213751][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.220876][ T6002] IPv6: NLM_F_REPLACE set, but no existing node found!
[   60.259364][ T5237] Bluetooth: hci1: command tx timeout
[   60.260035][ T5847] Bluetooth: hci0: command tx timeout
[   60.269529][ T5847] Bluetooth: hci2: command tx timeout
[   60.311619][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'.
[   60.316042][ T5873] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.323793][ T5873] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.327103][ T5873] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.331718][ T5873] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.755772][ T6023] Bluetooth: MGMT ver 1.23
[   60.757673][ T6023] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[   60.767838][ T6018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.32'.
[   60.877867][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'.
[   60.882035][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.896397][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   60.962980][ T6038] netlink: 'syz.0.39': attribute type 10 has an invalid length.
[   60.966844][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.970084][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.977450][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.979759][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.982507][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.984777][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.992170][ T6038] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   60.996439][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'.
[   60.999984][ T6038] bridge_slave_1: left allmulticast mode
[   61.001883][ T6038] bridge_slave_1: left promiscuous mode
[   61.011771][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.022767][ T6038] bridge_slave_0: left allmulticast mode
[   61.024936][ T6038] bridge_slave_0: left promiscuous mode
[   61.027225][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.040494][ T6038] bond0: (slave bridge0): Releasing backup interface
[   61.135126][ T6044] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   61.143717][ T6044] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   61.152307][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.160068][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.244889][ T5856] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.258986][ T5856] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.265775][ T5856] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.269621][ T5856] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.276130][ T6054] netlink: 'syz.2.41': attribute type 13 has an invalid length.
[   61.279759][ T6054] netlink: 'syz.2.41': attribute type 17 has an invalid length.
[   61.336101][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.341094][ T6054] 8021q: adding VLAN 0 to HW filter on device team0
[   61.347194][ T6054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.355381][ T6051] xfrm0: entered promiscuous mode
[   61.357583][ T6051] xfrm0: entered allmulticast mode
[   61.719840][ T5909] IPVS: starting estimator thread 0...
[   61.821014][ T6064] IPVS: using max 39 ests per chain, 93600 per kthread
[   61.835877][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[   61.907880][ T6070] tipc: Started in network mode
[   61.910190][ T6070] tipc: Node identity d210cc116c9, cluster identity 4711
[   61.913211][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.916436][ T6070] syzkaller0: entered promiscuous mode
[   61.918768][ T6070] syzkaller0: entered allmulticast mode
[   61.932559][ T6070] tipc: Resetting bearer <eth:syzkaller0>
[   61.941876][ T6069] tipc: Resetting bearer <eth:syzkaller0>
[   61.952400][ T6069] tipc: Disabling bearer <eth:syzkaller0>
[   62.283210][ T6100] netlink: 'syz.1.54': attribute type 3 has an invalid length.
[   62.307768][ T6105] netlink: 'syz.0.55': attribute type 10 has an invalid length.
[   62.313829][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'.
[   62.340335][ T6108] netlink: 'syz.1.56': attribute type 10 has an invalid length.
[   62.340779][ T5847] Bluetooth: hci2: command tx timeout
[   62.345533][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.345729][ T5849] Bluetooth: hci1: command tx timeout
[   62.348778][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.350554][ T5237] Bluetooth: hci0: command tx timeout
[   62.360500][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.363597][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.366574][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.369478][ T6108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.377628][ T6108] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   62.681674][   T47] IPVS: starting estimator thread 0...
[   62.789503][ T6131] IPVS: using max 40 ests per chain, 96000 per kthread
[   62.971975][ T6136] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   62.995729][ T6136] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   63.007877][ T6136] bridge_slave_1: left allmulticast mode
[   63.010864][ T6136] bridge_slave_1: left promiscuous mode
[   63.014208][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.026190][ T6136] bridge_slave_0: left allmulticast mode
[   63.028504][ T6136] bridge_slave_0: left promiscuous mode
[   63.032176][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.050250][ T6136] bond0: (slave bridge0): Releasing backup interface
[   63.612478][ T6157] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[   63.619620][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.622252][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.627363][ T6157] bridge_slave_1: left allmulticast mode
[   63.630582][ T6157] bridge_slave_1: left promiscuous mode
[   63.632760][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.637060][ T6157] bridge_slave_0: left allmulticast mode
[   63.639662][ T6157] bridge_slave_0: left promiscuous mode
[   63.641978][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.658214][ T6157] bond0: (slave bridge0): Releasing backup interface
[   64.339801][ T6176] __nla_validate_parse: 7 callbacks suppressed
[   64.339816][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   64.419027][ T5847] Bluetooth: hci2: command tx timeout
[   64.420834][ T5847] Bluetooth: hci1: command tx timeout
[   64.422549][ T5847] Bluetooth: hci0: command tx timeout
[   64.527988][ T6190] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.565470][ T6190] netlink: 96 bytes leftover after parsing attributes in process `syz.0.72'.
[   64.878606][ T6205] xfrm0: left promiscuous mode
[   64.881153][ T6205] xfrm0: left allmulticast mode
[   64.985133][ T6211] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   65.206637][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   65.216565][ T6224] validate_nla: 2 callbacks suppressed
[   65.216593][ T6224] netlink: 'syz.1.82': attribute type 16 has an invalid length.
[   65.222084][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'.
[   65.264281][ T6229] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[   65.271315][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'.
[   65.420365][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'.
[   65.488057][ T6243] netlink: 244 bytes leftover after parsing attributes in process `syz.1.86'.
[   65.560732][ T6238] team0 (unregistering): Port device team_slave_0 removed
[   65.566736][ T6238] team0 (unregistering): Port device team_slave_1 removed
[   65.676253][ T6254] netlink: 'syz.1.90': attribute type 4 has an invalid length.
[   65.870767][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   65.873921][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   65.883472][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'.
[   65.954072][ T6269] netlink: 'syz.2.95': attribute type 5 has an invalid length.
[   66.029774][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.038327][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.042534][ T6271] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   66.125054][ T5856] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.131486][ T5856] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.191826][ T5856] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.195496][ T5856] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.972312][ T6286] tipc: Started in network mode
[   66.974026][ T6286] tipc: Node identity ac14142f, cluster identity 4711
[   66.976688][ T6286] tipc: New replicast peer: 0.0.0.0
[   66.978805][ T6286] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.702129][ T6346] xt_l2tp: v2 sid > 0xffff: 1114112
[   67.832562][ T6350] netlink: 'syz.2.118': attribute type 74 has an invalid length.
[   67.844536][ T6351] netlink: 'syz.2.118': attribute type 74 has an invalid length.
[   67.981855][ T5313] tipc: Node number set to 2886997039
[   68.866987][ T6392] ieee802154 phy0 wpan0: encryption failed: -22
[   69.132905][ T6398] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   69.244577][ T6403] netlink: 'syz.1.133': attribute type 2 has an invalid length.
[   69.245345][ T6402] netlink: 'syz.1.133': attribute type 2 has an invalid length.
[   70.307785][ T6431] __nla_validate_parse: 55 callbacks suppressed
[   70.307802][ T6431] netlink: 72 bytes leftover after parsing attributes in process `syz.0.139'.
[   70.531054][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'.
[   70.701219][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.142'.
[   70.705070][ T6437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'.
[   70.708782][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[   70.798631][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   71.031118][ T6450] IPv6: NLM_F_REPLACE set, but no existing node found!
[   71.143510][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.145640][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.326141][ T6464] netlink: 244 bytes leftover after parsing attributes in process `syz.0.148'.
[   71.355228][ T6464] tipc: Started in network mode
[   71.358804][ T6464] tipc: Node identity ac14142f, cluster identity 4711
[   71.363120][ T6464] tipc: New replicast peer: 0.0.0.0
[   71.365602][ T6464] tipc: Enabled bearer <udp:syz2>, priority 10
[   71.370494][ T6464] tipc: New replicast peer: 255.255.255.255
[   71.410147][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'.
[   71.464046][ T6470] netlink: 836 bytes leftover after parsing attributes in process `syz.0.151'.
[   71.593782][ T6479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.153'.
[   71.899650][ T6484] lo: entered allmulticast mode
[   71.931976][ T6483] lo: left allmulticast mode
[   72.048524][ T6497] Can't find ip_set type hash:n
[   72.125364][ T6506] trusted_key: syz.1.159 sent an empty control message without MSG_MORE.
[   72.358992][ T5313] tipc: Node number set to 2886997039
[   72.846598][ T2206] cfg80211: failed to load regulatory.db
[   73.141964][ T6529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.564259][ T6571] netlink: 'syz.2.176': attribute type 10 has an invalid length.
[   74.907041][ T6586] netlink: 'syz.1.179': attribute type 2 has an invalid length.
[   74.945905][ T6586] batadv_slave_1: entered promiscuous mode
[   74.955585][ T6585] batadv_slave_1: left promiscuous mode
[   75.068092][ T6588] syzkaller0: entered promiscuous mode
[   75.070686][ T6588] syzkaller0: entered allmulticast mode
[   75.774503][ T6599] __nla_validate_parse: 9 callbacks suppressed
[   75.774524][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'.
[   76.735284][ T6638] netlink: 244 bytes leftover after parsing attributes in process `syz.1.195'.
[   76.800133][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.195'.
[   77.349519][ T6672] netlink: 'syz.1.205': attribute type 14 has an invalid length.
[   77.359292][ T6678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.206'.
[   77.365364][ T6678] netlink: 104 bytes leftover after parsing attributes in process `syz.2.206'.
[   77.396456][ T6672] netlink: 'syz.1.205': attribute type 3 has an invalid length.
[   77.400827][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   78.217891][ T6720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.221378][ T6720] syzkaller0: entered promiscuous mode
[   78.223292][ T6720] syzkaller0: entered allmulticast mode
[   78.242192][ T6720] tipc: Resetting bearer <eth:syzkaller0>
[   78.245502][ T6719] tipc: Resetting bearer <eth:syzkaller0>
[   78.255206][ T6719] tipc: Disabling bearer <eth:syzkaller0>
[   78.467164][ T6732] netlink: 'syz.2.217': attribute type 16 has an invalid length.
[   78.471406][ T6732] netlink: 'syz.2.217': attribute type 17 has an invalid length.
[   78.475850][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'.
[   78.495199][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'.
[   78.501648][ T6732] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.583473][ T6739] bond0: (slave bond_slave_0): Releasing backup interface
[   78.588693][ T6739] bond0: (slave bond_slave_1): Releasing backup interface
[   78.594649][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.598647][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.603532][ T6739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   78.675552][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.220'.
[   80.259144][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'.
[   80.311421][ T6789] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   80.502171][ T6793] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   80.902830][ T6812] netlink: 6 bytes leftover after parsing attributes in process `syz.2.234'.
[   80.905948][ T6812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.993032][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'.
[   80.996100][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'.
[   81.018299][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'.
[   81.022944][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'.
[   81.028199][ T6821] netlink: 'syz.0.238': attribute type 13 has an invalid length.
[   81.037280][ T6821] netlink: 'syz.0.238': attribute type 17 has an invalid length.
[   81.111201][ T6826] atomic_op ffff88802915c198 conn xmit_atomic 0000000000000000
[   81.122758][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.126177][ T6821] 8021q: adding VLAN 0 to HW filter on device team0
[   81.142653][ T6821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.525086][ T6863] netlink: 'syz.1.252': attribute type 10 has an invalid length.
[   82.883606][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'.
[   82.887126][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'.
[   83.091053][ T6889] netlink: 'syz.0.259': attribute type 16 has an invalid length.
[   83.093725][ T6889] netlink: 'syz.0.259': attribute type 17 has an invalid length.
[   83.142858][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[   83.151167][ T6889] IPv6: NLM_F_REPLACE set, but no existing node found!
[   83.401593][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[   83.408245][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[   83.463423][ T6897] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   83.555391][ T6904] netlink: 'syz.2.265': attribute type 10 has an invalid length.
[   83.820125][ T6928] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   83.822989][ T6928] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   83.831873][ T6928] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   83.838800][ T6928] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[   83.843279][ T6928] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   84.000172][ T6943] ieee802154 phy0 wpan0: encryption failed: -22
[   84.172231][ T6965] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   84.325382][ T6979] dummy0: entered allmulticast mode
[   84.426491][ T6989] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   86.027205][ T7064] syzkaller0: entered promiscuous mode
[   86.029558][ T7064] syzkaller0: entered allmulticast mode
[   86.986866][ T7082] validate_nla: 2 callbacks suppressed
[   86.986877][ T7082] netlink: 'syz.2.316': attribute type 11 has an invalid length.
[   87.128641][ T7097] __nla_validate_parse: 16 callbacks suppressed
[   87.128652][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   87.399454][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.325'.
[   87.403049][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'.
[   87.406514][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.325'.
[   87.410222][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.325'.
[   87.449116][ T7109] netlink: 'syz.2.325': attribute type 1 has an invalid length.
[   87.824047][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'.
[   88.104734][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'.
[   88.108401][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'.
[   88.121153][ T7143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.334'.
[   88.124731][ T7143] tc_dump_action: action bad kind
[   89.027569][ T7160] syzkaller1: entered promiscuous mode
[   89.029632][ T7160] syzkaller1: entered allmulticast mode
[   89.068438][ T7168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.107732][ T7165] bond0: (slave bond_slave_0): Releasing backup interface
[   89.117928][ T7165] bond0: (slave bond_slave_1): Releasing backup interface
[   89.123101][ T7165] team0: Port device team_slave_0 removed
[   89.126117][ T7165] team0: Port device team_slave_1 removed
[   89.128551][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.132455][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.136035][ T7165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   89.205391][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'.
[   89.567172][ T7189] netlink: 'syz.0.347': attribute type 9 has an invalid length.
[   90.207323][ T7218] Bluetooth: MGMT ver 1.23
[   90.918720][ T7248] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   91.189135][ T7258] netlink: 'syz.2.366': attribute type 1 has an invalid length.
[   92.250050][ T7320] ieee802154 phy0 wpan0: encryption failed: -22
[   92.296867][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.306007][ T7317] 8021q: adding VLAN 0 to HW filter on device team0
[   92.314893][ T7317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.512126][ T7330] netlink: 'syz.2.385': attribute type 21 has an invalid length.
[   92.514616][ T7330] __nla_validate_parse: 3 callbacks suppressed
[   92.514627][ T7330] netlink: 156 bytes leftover after parsing attributes in process `syz.2.385'.
[   92.667509][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[   92.684937][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'.
[   93.132443][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'.
[   93.138314][ T7370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'.
[   93.142979][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.398'.
[   93.146848][ T7370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'.
[   93.150329][ T7370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'.
[   93.646872][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'.
[   93.688525][ T7409] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   93.737841][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.976934][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'.
[   94.414145][ T7448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   95.761078][ T7504] dvmrp1: tun_chr_ioctl cmd 1074025677
[   95.764489][ T7504] dvmrp1: linktype set to 773
[   95.766603][ T7504] dvmrp1: tun_chr_ioctl cmd 1074025677
[   95.768749][ T7504] dvmrp1: linktype set to 773
[   95.771751][ T7504] dvmrp1: tun_chr_ioctl cmd 1074025677
[   95.775333][ T7504] dvmrp1: linktype set to 773
[   95.777560][ T7503] dvmrp1: tun_chr_ioctl cmd 1074296322
[   95.780917][ T7504] dvmrp1: tun_chr_ioctl cmd 1074025677
[   95.783071][ T7504] dvmrp1: linktype set to 773
[   96.936092][ T7525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.084482][ T7536] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   97.207405][ T7542] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.241940][ T7547] pim6reg1: entered promiscuous mode
[   97.244102][ T7547] pim6reg1: entered allmulticast mode
[   97.285215][ T7549] netlink: 'syz.1.441': attribute type 5 has an invalid length.
[   97.679908][ T7581] __nla_validate_parse: 76 callbacks suppressed
[   97.679932][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'.
[   97.685014][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'.
[   97.689299][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'.
[   97.692251][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'.
[   98.639922][ T7601] bond0 (unregistering): Released all slaves
[   98.658408][ T7605] veth3: entered promiscuous mode
[   98.715305][ T7614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.455'.
[   98.751281][ T7616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.456'.
[   98.773213][ T7618] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   98.782570][ T7619] netlink: 165 bytes leftover after parsing attributes in process `syz.0.457'.
[   98.886487][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   99.611632][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[   99.650626][ T7641] syzkaller0: entered promiscuous mode
[   99.653027][ T7641] syzkaller0: entered allmulticast mode
[  101.189222][ T7670] syz.1.471: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.195053][ T7670] CPU: 0 UID: 0 PID: 7670 Comm: syz.1.471 Not tainted syzkaller #0 PREEMPT(full) 
[  101.195065][ T7670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.195070][ T7670] Call Trace:
[  101.195085][ T7670]  <TASK>
[  101.195090][ T7670]  dump_stack_lvl+0x189/0x250
[  101.195107][ T7670]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.195118][ T7670]  ? __pfx__printk+0x10/0x10
[  101.195133][ T7670]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.195146][ T7670]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.195158][ T7670]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.195171][ T7670]  warn_alloc+0x214/0x310
[  101.195193][ T7670]  ? __pfx_warn_alloc+0x10/0x10
[  101.195213][ T7670]  ? __get_vm_area_node+0x28f/0x300
[  101.195225][ T7670]  ? nf_tables_newset+0x132b/0x2530
[  101.195239][ T7670]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  101.195264][ T7670]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.195282][ T7670]  ? rcu_is_watching+0x15/0xb0
[  101.195296][ T7670]  ? nf_tables_newset+0x132b/0x2530
[  101.195310][ T7670]  ? nf_tables_newset+0x132b/0x2530
[  101.195324][ T7670]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  101.195342][ T7670]  ? nf_tables_newset+0x132b/0x2530
[  101.195358][ T7670]  ? nft_table_lookup+0x211/0x230
[  101.195368][ T7670]  ? nft_set_lookup+0x128/0x150
[  101.195380][ T7670]  ? nft_hash_privsize+0x6f/0xf0
[  101.195392][ T7670]  nf_tables_newset+0x132b/0x2530
[  101.195408][ T7670]  ? __pfx_nf_tables_newset+0x10/0x10
[  101.195433][ T7670]  ? __nla_parse+0x40/0x60
[  101.195451][ T7670]  nfnetlink_rcv+0x1132/0x2520
[  101.195496][ T7670]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  101.195619][ T7670]  ? netlink_deliver_tap+0x2e/0x1b0
[  101.195650][ T7670]  netlink_unicast+0x82f/0x9e0
[  101.195671][ T7670]  ? __pfx_netlink_unicast+0x10/0x10
[  101.195684][ T7670]  ? netlink_sendmsg+0x642/0xb30
[  101.195694][ T7670]  ? skb_put+0x11b/0x210
[  101.195706][ T7670]  netlink_sendmsg+0x805/0xb30
[  101.195718][ T7670]  ? __pfx_netlink_sendmsg+0x10/0x10
[  101.195728][ T7670]  ? aa_sock_msg_perm+0xf1/0x1d0
[  101.195750][ T7670]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  101.195758][ T7670]  ? __pfx_netlink_sendmsg+0x10/0x10
[  101.195767][ T7670]  __sock_sendmsg+0x21c/0x270
[  101.195786][ T7670]  ____sys_sendmsg+0x505/0x830
[  101.195803][ T7670]  ? __pfx_____sys_sendmsg+0x10/0x10
[  101.195824][ T7670]  ? import_iovec+0x74/0xa0
[  101.195844][ T7670]  ___sys_sendmsg+0x21f/0x2a0
[  101.195862][ T7670]  ? __pfx____sys_sendmsg+0x10/0x10
[  101.195905][ T7670]  ? __fget_files+0x2a/0x420
[  101.195924][ T7670]  ? __fget_files+0x3a0/0x420
[  101.195944][ T7670]  __x64_sys_sendmsg+0x19b/0x260
[  101.195955][ T7670]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  101.195969][ T7670]  ? rcu_is_watching+0x15/0xb0
[  101.195978][ T7670]  ? do_syscall_64+0xbe/0x3b0
[  101.195993][ T7670]  do_syscall_64+0xfa/0x3b0
[  101.196003][ T7670]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.196020][ T7670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.196031][ T7670]  ? exc_page_fault+0x9f/0xf0
[  101.196050][ T7670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.196062][ T7670] RIP: 0033:0x7fad1d58ec29
[  101.196076][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.196087][ T7670] RSP: 002b:00007fad1e47d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  101.196100][ T7670] RAX: ffffffffffffffda RBX: 00007fad1d7d6090 RCX: 00007fad1d58ec29
[  101.196109][ T7670] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009
[  101.196117][ T7670] RBP: 00007fad1d611e41 R08: 0000000000000000 R09: 0000000000000000
[  101.196125][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.196132][ T7670] R13: 00007fad1d7d6128 R14: 00007fad1d7d6090 R15: 00007ffe4616aa68
[  101.196150][ T7670]  </TASK>
[  101.219289][ T7670] Mem-Info:
[  101.321476][ T7670] active_anon:5358 inactive_anon:0 isolated_anon:0
[  101.321476][ T7670]  active_file:1129 inactive_file:38251 isolated_file:0
[  101.321476][ T7670]  unevictable:1768 dirty:60 writeback:0
[  101.321476][ T7670]  slab_reclaimable:10129 slab_unreclaimable:79591
[  101.321476][ T7670]  mapped:18211 shmem:2440 pagetables:930
[  101.321476][ T7670]  sec_pagetables:0 bounce:0
[  101.321476][ T7670]  kernel_misc_reclaimable:0
[  101.321476][ T7670]  free:261436 free_pcp:29198 free_cma:0
[  101.336237][ T7670] Node 0 active_anon:12776kB inactive_anon:0kB active_file:2732kB inactive_file:21560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48532kB dirty:76kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6824kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.346567][ T7670] Node 1 active_anon:8656kB inactive_anon:0kB active_file:1784kB inactive_file:131444kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24312kB dirty:164kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4836kB pagetables:1300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.356260][ T7670] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.365666][ T7670] lowmem_reserve[]: 0 814 814 814 814
[  101.367386][ T7670] Node 0 DMA32 free:384868kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12776kB inactive_anon:0kB active_file:2732kB inactive_file:21560kB unevictable:3536kB writepending:76kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:52308kB local_pcp:31540kB free_cma:0kB
[  101.377163][ T7670] lowmem_reserve[]: 0 0 0 0 0
[  101.379238][ T7670] Node 1 DMA32 free:458492kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  101.388398][ T7670] lowmem_reserve[]: 0 0 854 854 854
[  101.390247][ T7670] Node 1 Normal free:187024kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8656kB inactive_anon:0kB active_file:1784kB inactive_file:131444kB unevictable:3536kB writepending:164kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:64368kB local_pcp:17944kB free_cma:0kB
[  101.400095][ T7670] lowmem_reserve[]: 0 0 0 0 0
[  101.401565][ T7670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  101.405338][ T7670] Node 0 DMA32: 130*4kB (UME) 109*8kB (UM) 55*16kB (UM) 86*32kB (UM) 155*64kB (UM) 64*128kB (UM) 23*256kB (UME) 13*512kB (UM) 9*1024kB (UME) 4*2048kB (UM) 81*4096kB (UM) = 384864kB
[  101.410832][ T7670] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  101.416111][ T7670] Node 1 Normal: 1109*4kB (UM) 513*8kB (UM) 134*16kB (UME) 542*32kB (UME) 249*64kB (UME) 76*128kB (UM) 27*256kB (UME) 5*512kB (U) 13*1024kB (UM) 8*2048kB (UME) 23*4096kB (UM) = 187068kB
[  101.421897][ T7670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.424900][ T7670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.427903][ T7670] 41820 total pagecache pages
[  101.429449][ T7670] 0 pages in swap cache
[  101.430891][ T7670] Free swap  = 124996kB
[  101.432204][ T7670] Total swap = 124996kB
[  101.433490][ T7670] 786301 pages RAM
[  101.434679][ T7670] 0 pages HighMem/MovableOnly
[  101.436112][ T7670] 240658 pages reserved
[  101.437397][ T7670] 0 pages cma reserved
[  102.156705][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'.
[  102.232296][ T7721] syzkaller1: entered promiscuous mode
[  102.234162][ T7721] syzkaller1: entered allmulticast mode
[  102.472279][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.474701][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.477273][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.479945][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.482446][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.484806][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.487109][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.489648][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.491885][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.494311][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.498173][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.501117][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.503447][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.505776][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.508010][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.511692][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.514646][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.517712][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.521249][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.524265][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.527484][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.530078][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.531239][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.534730][ T7737] 8021q: adding VLAN 0 to HW filter on device team0
[  102.535748][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.542263][ T7737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.549649][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.552400][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.555074][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.559250][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.562845][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.565533][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.568244][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.572551][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.575605][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.578453][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.582127][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.584880][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.587647][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.590800][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.593601][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.596356][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.599299][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.602425][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.605181][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.608928][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.612034][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.614842][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.617610][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.621917][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.625473][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.628227][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.631124][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.634137][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.636957][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.640122][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.642922][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.645711][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.648448][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.651371][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.654594][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.657323][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.660433][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.663179][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.665915][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.668554][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.671538][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.674292][ T7735] IPVS: ip_vs_edit_dest(): server weight less than zero
[  102.907406][ T7762] __nla_validate_parse: 20 callbacks suppressed
[  102.907418][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'.
[  102.918215][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.496'.
[  102.922856][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'.
[  102.926113][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'.
[  102.931946][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[  102.932703][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[  103.074241][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'.
[  103.295219][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'.
[  103.295224][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'.
[  103.345700][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'.
[  103.599868][ T7794] netlink: 'syz.0.506': attribute type 4 has an invalid length.
[  104.212516][ T7826] ip6gre1: entered allmulticast mode
[  104.275509][ T7832] netlink: 'syz.1.516': attribute type 9 has an invalid length.
[  104.531427][ T7849] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  104.652779][ T7852] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000
[  105.568350][ T7868] syzkaller0: entered promiscuous mode
[  105.570815][ T7868] syzkaller0: entered allmulticast mode
[  106.780666][ T7889] IPv6: sit1: Disabled Multicast RS
[  107.725669][ T7916] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  109.011793][ T7936] __nla_validate_parse: 14 callbacks suppressed
[  109.011808][ T7936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.545'.
[  109.018273][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.545'.
[  109.022566][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[  109.131709][ T7941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'.
[  109.135452][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'.
[  109.139605][ T7941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'.
[  109.143646][ T7941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'.
[  109.302870][ T7955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.552'.
[  110.377268][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'.
[  110.680485][ T8017] netlink: 88 bytes leftover after parsing attributes in process `syz.0.566'.
[  111.805874][ T8060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.809130][ T8061] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.980984][ T8177] vlan1: entered promiscuous mode
[  114.071266][ T8186] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  114.191319][ T8190] netlink: 'syz.1.620': attribute type 29 has an invalid length.
[  114.194615][ T8197] syz_tun: refused to change device tx_queue_len
[  114.288120][ T8203] __nla_validate_parse: 15 callbacks suppressed
[  114.288134][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[  114.297238][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  114.506953][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'.
[  114.762527][ T8231] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  114.923127][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'.
[  115.248169][ T8274] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  115.300741][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'.
[  116.000871][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  116.296528][ T8318] netdevsim netdevsim1: Direct firmware load for .
[  116.296528][ T8318]  failed with error -2
[  116.300259][ T8318] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  116.300259][ T8318] 
[  117.299200][ T8337] netlink: 'syz.1.660': attribute type 16 has an invalid length.
[  117.301876][ T8337] netlink: 'syz.1.660': attribute type 17 has an invalid length.
[  117.308346][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'.
[  117.315307][ T8337] IPv6: NLM_F_REPLACE set, but no existing node found!
[  117.575088][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.661'.
[  118.221018][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'.
[  118.460116][ T8382] netlink: 36 bytes leftover after parsing attributes in process `syz.2.673'.
[  118.652030][ T8397] netlink: 'syz.2.677': attribute type 10 has an invalid length.
[  119.221819][ T8431] IPVS: dh: FWM 3 0x00000003 - no destination available
[  119.433185][ T8442] __nla_validate_parse: 7 callbacks suppressed
[  119.433199][ T8442] netlink: 100 bytes leftover after parsing attributes in process `syz.2.689'.
[  119.451118][ T8454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.690'.
[  119.486189][ T8454] netlink: 124 bytes leftover after parsing attributes in process `syz.0.690'.
[  119.581882][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'.
[  119.668039][ T8471] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  119.724353][ T8475] netlink: 248 bytes leftover after parsing attributes in process `syz.0.697'.
[  119.743493][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'.
[  119.793544][ T8478] netlink: 296 bytes leftover after parsing attributes in process `syz.1.699'.
[  119.821221][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  119.866637][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'.
[  120.029836][ T8501] netlink: 'syz.0.706': attribute type 10 has an invalid length.
[  120.034727][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[  120.179867][ T8510] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.186521][ T8510] sit2: entered promiscuous mode
[  120.188167][ T8510] sit2: entered allmulticast mode
[  120.196258][ T8510] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.198702][ T8510] bond1: (slave sit2): The slave device specified does not support setting the MAC address
[  120.202268][ T8510] bond1: (slave sit2): Setting fail_over_mac to active for active-backup mode
[  120.207256][ T8510] bond1: (slave sit2): making interface the new active one
[  120.210681][ T8510] bond1: (slave sit2): Enslaving as an active interface with an up link
[  120.366964][ T5893] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  120.370745][ T5893] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  120.378275][ T5893] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  120.579637][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  120.760978][ T8532] syzkaller1: entered promiscuous mode
[  120.763005][ T8532] syzkaller1: entered allmulticast mode
[  120.865676][ T8537] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  121.046918][ T8551] syzkaller1: entered promiscuous mode
[  121.049081][ T8551] syzkaller1: entered allmulticast mode
[  121.052410][ T8551] syzkaller1: left promiscuous mode
[  121.054457][ T8551] syzkaller1: left allmulticast mode
[  121.322792][ T8567] sctp: [Deprecated]: syz.0.725 (pid 8567) Use of int in max_burst socket option deprecated.
[  121.322792][ T8567] Use struct sctp_assoc_value instead
[  121.403967][ T8569] netlink: 'syz.0.726': attribute type 10 has an invalid length.
[  121.998344][ T8595] IPVS: length: 14 != 8
[  122.015995][ T8595] sctp: [Deprecated]: syz.1.734 (pid 8595) Use of int in max_burst socket option.
[  122.015995][ T8595] Use struct sctp_assoc_value instead
[  122.240300][ T8603] ieee802154 phy0 wpan0: encryption failed: -22
[  122.344609][ T8610] geneve2: entered promiscuous mode
[  122.349095][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.353097][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.356696][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.360773][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.844547][ T8677] netlink: 'syz.2.763': attribute type 4 has an invalid length.
[  124.130223][ T8697] ip6gre1: left allmulticast mode
[  124.135830][ T8697] geneve2: left promiscuous mode
[  124.140078][ T5873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.149077][ T5873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.151873][ T5873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.156510][ T5873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.335748][ T8724] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[  124.474326][ T8735] Bluetooth: MGMT ver 1.23
[  124.578088][ T8741] ieee802154 phy0 wpan0: encryption failed: -22
[  125.404513][ T8764] __nla_validate_parse: 206 callbacks suppressed
[  125.404523][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.791'.
[  125.472495][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'.
[  125.476566][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'.
[  125.767499][ T8788] 8021q: VLANs not supported on sit0
[  126.252233][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  126.272874][ T8818] syzkaller0: entered promiscuous mode
[  126.275230][ T8818] syzkaller0: entered allmulticast mode
[  126.327255][ T8820] ieee802154 phy0 wpan0: encryption failed: -22
[  126.576497][ T8843] netlink: 56 bytes leftover after parsing attributes in process `syz.1.814'.
[  126.582063][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  127.311899][ T8872] netlink: 'syz.0.819': attribute type 1 has an invalid length.
[  127.314815][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'.
[  127.535398][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'.
[  127.544647][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'.
[  127.560609][ T8878] netlink: 104 bytes leftover after parsing attributes in process `syz.2.821'.
[  128.314767][ T8936] netlink: 'syz.2.835': attribute type 10 has an invalid length.
[  128.787077][ T8952] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  128.790910][ T8952] nbd: error processing sock list
[  128.794893][ T8952] block nbd0: shutting down sockets
[  129.623064][ T9014] netlink: 'syz.2.861': attribute type 1 has an invalid length.
[  130.002701][ T9054] netlink: 'syz.0.874': attribute type 10 has an invalid length.
[  130.292604][ T9068] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  130.393569][ T9075] bond1: entered promiscuous mode
[  130.395724][ T9075] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.441304][ T9073] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  130.582693][ T9087] __nla_validate_parse: 17 callbacks suppressed
[  130.582712][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'.
[  130.813663][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'.
[  130.972385][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'.
[  131.017750][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[  131.723624][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[  131.800442][ T9134] netlink: 'syz.1.894': attribute type 10 has an invalid length.
[  131.804849][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'.
[  131.963595][ T9147] netlink: 'syz.2.897': attribute type 10 has an invalid length.
[  131.966381][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  132.080721][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  132.447769][ T9174] sctp: [Deprecated]: syz.0.903 (pid 9174) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.447769][ T9174] Use struct sctp_sack_info instead
[  132.455558][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.903'.
[  132.459185][ T9174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'.
[  132.582394][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.584506][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  149.731750][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.734970][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.737868][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.740612][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.743026][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.895953][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  149.899801][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  149.902470][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  149.905239][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  149.907672][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  149.963145][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  149.966865][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  149.970018][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  149.973762][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  149.976840][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.189674][ T9239] chnl_net:caif_netlink_parms(): no params data found
[  151.779036][ T5847] Bluetooth: hci3: command tx timeout
[  151.939133][ T5847] Bluetooth: hci5: command tx timeout
[  152.019084][ T5847] Bluetooth: hci4: command tx timeout
[  153.859003][ T5847] Bluetooth: hci3: command tx timeout
[  154.019083][ T5847] Bluetooth: hci5: command tx timeout
[  154.099091][ T5847] Bluetooth: hci4: command tx timeout
[  155.939055][ T5847] Bluetooth: hci3: command tx timeout
[  156.099077][ T5847] Bluetooth: hci5: command tx timeout
[  156.179075][ T5847] Bluetooth: hci4: command tx timeout
[  158.019075][ T5847] Bluetooth: hci3: command tx timeout
[  158.179153][ T5847] Bluetooth: hci5: command tx timeout
[  158.259128][ T5847] Bluetooth: hci4: command tx timeout
[  239.108873][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  239.111455][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9227/1:b..l
[  239.115095][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=23405, q=1374 ncpus=2)
[  239.118385][    C0] task:syz.1.918       state:R  running task     stack:24744 pid:9227  tgid:9225  ppid:5841   task_flags:0x400140 flags:0x00004004
[  239.124311][    C0] Call Trace:
[  239.125743][    C0]  <TASK>
[  239.126936][    C0]  __schedule+0x1798/0x4cc0
[  239.128792][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  239.130768][    C0]  ? kasan_save_track+0x3e/0x80
[  239.132665][    C0]  ? __pfx_ip_list_rcv+0x10/0x10
[  239.134618][    C0]  ? __pfx___schedule+0x10/0x10
[  239.136593][    C0]  ? __netif_receive_skb_list_core+0x7d2/0x800
[  239.139045][    C0]  ? preempt_schedule+0xae/0xc0
[  239.140995][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  239.143180][    C0]  preempt_schedule_common+0x83/0xd0
[  239.145278][    C0]  preempt_schedule+0xae/0xc0
[  239.147167][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[  239.149301][    C0]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  239.151751][    C0]  preempt_schedule_thunk+0x16/0x30
[  239.153853][    C0]  __local_bh_enable_ip+0x13e/0x1c0
[  239.155945][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  239.158213][    C0]  ? rcu_is_watching+0x15/0xb0
[  239.160136][    C0]  ? netif_receive_skb_list+0xc0/0x450
[  239.162214][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  239.164428][    C0]  bpf_test_run_xdp_live+0x1868/0x1b10
[  239.166617][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  239.168830][    C0]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  239.171128][    C0]  ? bpf_prog_test_run_xdp+0x37c/0x1000
[  239.173333][    C0]  ? __lock_acquire+0xab9/0xd20
[  239.175321][    C0]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  239.177682][    C0]  ? _copy_from_user+0x94/0xb0
[  239.179634][    C0]  ? bpf_test_init+0x133/0x170
[  239.181531][    C0]  ? xdp_convert_md_to_buff+0x5b/0x330
[  239.183724][    C0]  bpf_prog_test_run_xdp+0x713/0x1000
[  239.185896][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  239.188209][    C0]  ? __fget_files+0x2a/0x420
[  239.190027][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  239.192255][    C0]  bpf_prog_test_run+0x2c7/0x340
[  239.193974][    C0]  __sys_bpf+0x581/0x870
[  239.195406][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  239.197022][    C0]  ? rcu_is_watching+0x15/0xb0
[  239.198505][    C0]  __x64_sys_bpf+0x7c/0x90
[  239.199912][    C0]  do_syscall_64+0xfa/0x3b0
[  239.201344][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.203210][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  239.205315][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.207610][    C0] RIP: 0033:0x7fad1d58ec29
[  239.209375][    C0] RSP: 002b:00007fad1e47d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  239.212449][    C0] RAX: ffffffffffffffda RBX: 00007fad1d7d6090 RCX: 00007fad1d58ec29
[  239.215140][    C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  239.218019][    C0] RBP: 00007fad1d611e41 R08: 0000000000000000 R09: 0000000000000000
[  239.220886][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.223520][    C0] R13: 00007fad1d7d6128 R14: 00007fad1d7d6090 R15: 00007ffe4616aa68
[  239.226143][    C0]  </TASK>
[  239.227224][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 7715 jiffies! g23405 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  239.231154][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=11447
[  239.233907][    C0] rcu: rcu_preempt kthread starved for 7716 jiffies! g23405 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  239.237488][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  239.240917][    C0] rcu: RCU grace-period kthread stack dump:
[  239.243165][    C0] task:rcu_preempt     state:I stack:27160 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  239.247376][    C0] Call Trace:
[  239.248493][    C0]  <TASK>
[  239.249488][    C0]  __schedule+0x1798/0x4cc0
[  239.251041][    C0]  ? __lock_acquire+0xab9/0xd20
[  239.252707][    C0]  ? __pfx___schedule+0x10/0x10
[  239.254361][    C0]  ? schedule+0x91/0x360
[  239.255861][    C0]  schedule+0x165/0x360
[  239.257323][    C0]  schedule_timeout+0x12b/0x270
[  239.258946][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  239.260777][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  239.262703][    C0]  ? __pfx_process_timeout+0x10/0x10
[  239.264448][    C0]  ? prepare_to_swait_event+0x341/0x380
[  239.266263][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  239.267920][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.269776][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  239.271852][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  239.273665][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  239.275327][    C0]  ? finish_swait+0xcd/0x1f0
[  239.276920][    C0]  rcu_gp_kthread+0x99/0x390
[  239.278622][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  239.280390][    C0]  ? __kthread_parkme+0x7b/0x200
[  239.282101][    C0]  ? __kthread_parkme+0x1a1/0x200
[  239.284099][    C0]  kthread+0x711/0x8a0
[  239.285741][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  239.287462][    C0]  ? __pfx_kthread+0x10/0x10
[  239.288964][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.290519][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.292164][    C0]  ? __pfx_kthread+0x10/0x10
[  239.293613][    C0]  ret_from_fork+0x439/0x7d0
[  239.295433][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  239.297401][    C0]  ? __switch_to_asm+0x39/0x70
[  239.299227][    C0]  ? __switch_to_asm+0x33/0x70
[  239.301104][    C0]  ? __pfx_kthread+0x10/0x10
[  239.302864][    C0]  ret_from_fork_asm+0x1a/0x30
[  239.304703][    C0]  </TASK>
[  239.305786][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  239.308062][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  239.311467][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.315422][    C0] RIP: 0010:__kasan_check_read+0xa/0x20
[  239.317423][    C0] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
[  239.324016][    C0] RSP: 0018:ffffc900000078b8 EFLAGS: 00000202
[  239.326417][    C0] RAX: 0000000000000001 RBX: ffff88810ff53c40 RCX: ffffffff8b758e5c
[  239.329569][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810ff53c40
[  239.332185][    C0] RBP: ffffc900000079b8 R08: ffff88810ff53c43 R09: 1ffff11021fea788
[  239.334655][    C0] R10: dffffc0000000000 R11: ffffed1021fea789 R12: 1ffff92000000f20
[  239.337198][    C0] R13: 0000000000000001 R14: ffffc90000007920 R15: 1ffff11021fea788
[  239.339903][    C0] FS:  0000000000000000(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[  239.342816][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.345123][    C0] CR2: 000055e26c2a8f78 CR3: 000000000df36000 CR4: 00000000000006f0
[  239.348287][    C0] Call Trace:
[  239.349623][    C0]  <IRQ>
[  239.350586][    C0]  native_queued_spin_lock_slowpath+0xbc/0x8e0
[  239.352491][    C0]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[  239.354591][    C0]  ? __lock_acquire+0xab9/0xd20
[  239.356124][    C0]  queued_spin_lock_slowpath+0x43/0x50
[  239.358271][    C0]  do_raw_spin_lock+0x21f/0x290
[  239.360201][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  239.362172][    C0]  __xfrm_state_delete+0xba/0xca0
[  239.364168][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  239.366298][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  239.368410][    C0]  xfrm_timer_handler+0x18f/0xa00
[  239.370444][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  239.372650][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  239.375038][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.377092][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.379427][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.381938][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  239.384113][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  239.386012][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  239.387729][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  239.389715][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  239.391624][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  239.393241][    C0]  handle_softirqs+0x286/0x870
[  239.394841][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  239.396507][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  239.398310][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  239.400197][    C0]  __irq_exit_rcu+0xca/0x1f0
[  239.402049][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  239.404126][    C0]  irq_exit_rcu+0x9/0x30
[  239.405836][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  239.408050][    C0]  </IRQ>
[  239.409233][    C0]  <TASK>
[  239.410391][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  239.412697][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  239.414472][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 49 15 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  239.420837][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  239.422806][    C0] RAX: 14af33b5d29f6100 RBX: ffffffff819683f8 RCX: 14af33b5d29f6100
[  239.425664][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b06d9 RDI: ffffffff8be33f00
[  239.428736][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  239.431842][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa2ee30
[  239.434852][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  239.437978][    C0]  ? do_idle+0x1e8/0x510
[  239.439711][    C0]  default_idle+0x13/0x20
[  239.441425][    C0]  default_idle_call+0x74/0xb0
[  239.443314][    C0]  do_idle+0x1e8/0x510
[  239.444953][    C0]  ? __pfx_do_idle+0x10/0x10
[  239.446753][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  239.448814][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.451024][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.453111][    C0]  cpu_startup_entry+0x44/0x60
[  239.454670][    C0]  rest_init+0x2de/0x300
[  239.456028][    C0]  start_kernel+0x3a9/0x410
[  239.457455][    C0]  x86_64_start_reservations+0x24/0x30
[  239.459558][    C0]  x86_64_start_kernel+0x143/0x1c0
[  239.461594][    C0]  common_startup_64+0x13e/0x147
[  239.463557][    C0]  </TASK>

VM DIAGNOSIS:
11:55:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000029 RBX=0000000000000029 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006c30
R8 =ffff8880218b0237 R9 =1ffff11004316046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad7909 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e26c2a8f78 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000039e48c43 0000000000000000 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8a2392e5 RBX=000000002c0a0000 RCX=0000000000000000 RDX=ffff888123811cc0
RSI=00000000cdd30000 RDI=000000002c0a0000 RBP=ffffc900029cf230 RSP=ffffc900029cf0d8
R8 =0000000000000000 R9 =ffffffff8a2391c0 R10=dffffc0000000000 R11=fffff52000539e0c
R12=dffffc0000000000 R13=ffff88801afedf80 R14=00000000cdd30000 R15=ffffc900029cf6a0
RIP=ffffffff81bfaf81 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fad1e45c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fad1e45bfc8 CR3=0000000029fd8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fad1d7a7498 00007fad1d7a7470 XMM03=00007fad1d7a74a8 00007fad1d7a74a0
XMM04=00007fad1e30d100 00007fad1d7a7460 XMM05=00007fad1d7a7478 00007fad1d7a74c0
XMM06=00007fad1d7a74b8 00007fad1d7a74b0 XMM07=00007fad1d7a74a8 00007fad1d7a74a0
XMM08=0000000000000000 00007fad1d612f0f XMM09=0000000000000000 00007fad1d612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
