last executing test programs:

1.250461264s ago: executing program 1 (id=1669):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="05303289", 0x4}, {0x0}], 0x2}, 0x4040845)

1.155513046s ago: executing program 1 (id=1672):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x1e8, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)

1.071514948s ago: executing program 1 (id=1675):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @bcast, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

956.620438ms ago: executing program 1 (id=1679):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000111401"], 0x28}}, 0x40)

875.670535ms ago: executing program 1 (id=1680):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f00000002c0)="9c81", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337", 0x68}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113", 0x15}], 0x2}}], 0x2, 0x4004894)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000004980)={'syztnl0\x00', &(0x7f0000004900)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x1, 0x1, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x28, 0x1, [{0x7, 0x2}, {0x1, 0x2}, {0x7, 0x8, "77677d928265"}, {0x5, 0x6, "7d7b5ec0"}, {0x0, 0x2}, {0x6, 0x6, "913cba64"}, {0x2, 0x4, "09f2"}, {0x1, 0x4, "bb4b"}]}, @end]}}}}})
sendmmsg$inet(r0, &(0x7f0000007340)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000f00)="f1bf762b2df497800dcf425815085540a84b34e45a2dd0c3d6959de25e4b4099be1063e1fa1aa0551a8a566a38d445c8402a7de6a415fdc02268a82f7a81246c1d9fd8535d43baacb265ad29f678e05a457003a96a3366bdeb013a8071a7c7121d79215fb3719541d13bcd571cdfd0f947dfc4bf39462818ec015a8cc563478821a523aae22623dcd131f619735980753532d31e06529ec717b0f44ecb205014e379fcccf44f79c6b1ffe1efcc6c6022124d077a367b1b00bc79158a55cb6ba852541a52f84cd61dc7be74d97a5f79ea1d9722c68345ab2e57ac77785d14de0f1c63b1fecae05e09a1e7220f122dbc127d26ca959ad4d4360b6de6661599c2c8dfa01462b1679baa2fa10c1f48db81126af7c6b960441310102ed902635b36f2f209a5062564acd554ab4fc7205500378435c802d64ef48edcd0c92a8c538f490e8ac794fd0d456b9e05781ea508e419bd33fa70cd8df0c041bbdd73a1101ccbb9b58b8d89ce948816dd6ecb61ef15161f1ba4c5dea93adc83f810ae92f1243894aa582464ad805e150f0aca68bbbb2e4fe3d8c2053d8eeccdbbe259dc9a557124492a5e3105ae0b32ae5fc87194ac37455dad4712dd68e9102b26ebb7cdb137a7acb653442c97b5d8fdc76069555375f185b1b1385ef606528aedbbfc75082be35f1bf77ec19dfcd506fe9094e95d78da6ba8b1526f30658e501471b8edbfe9e117c7aee5a3a484fcde922fba28a3960750ab5f52f1dd27841d977e4b5883f1cceabb8478487bfd031e1e5f0896cbf8489cce0280b4cf914ea97445df382b63ce9c82ae56a05699287ca6bbeaf1fa24393203a4366a89388d8e260dc7e9d0d5d8345e2764650dfe8f8414f37cf750c516ed99e5ba59926b1eb3c0cc16a289d42682fd9fdf7eff5566da634983d7ba64621290fd3a616da3c6be3e854c8d27d8ce28363506c0ea41527be5d9d1bdf49be227f2949298c29a0c6d2ed07038a6cab167bd60b8a71f3a25de8242ca88c6f9166c6bf0996c4484b632898cc4b1de741b153093d85b3ac83849a361147deb3d5eb77e21491c88b4adc955c9b1e5fd41f1d7379d01cb36e165703fe0de180fd236e892fe2901a361fd1168e7fa25d0f6eb21a2a3ab290ea4e6f8f611dec443a089efb13fc92477d3aa7a977b74e6a6e85cf99b98e2dfbe717870b987729c4aa98a98311d822bd662060fe3bb55adb9d9c44d95b50cd214b8da99ad6fe849fb3acd9eedbe6c78761e2c6887774eb2e942cebcf4be4a662fe6166e7be02217d90d09ef84d3edd40ddb253004f09d1221c8ef2aa68e0a80cd0ba83fdce38e30a6e50cc99804c3f7802cfd2fee86e9ee88ae506eb57c632620d9777b3890c0854ec5e6562c9b0af383a332368c1534eec05ba36e91d09d1aca5993c1fdf24880e02d57f3d735d1674807841ba280fb6aef0f878815b027f828bb630c92c75e5e1c439e9e1e497b69b5460c8c5bf7ae8f50b67fec3cd62bc0b67b5fc472d23d4e9bc27c9cd3db01a230612ed3b3f387e6f02700a5e72f0166214cdaa80b2b64d15e805305aaee0812444dc28ce2717432852cc0524617c027afd340993f9de4f843c02a70ace7a6eafa98d67118f8c86b3bc72589226607e876793c4bc88f0e1aab31df9dbe75731af87d908bb35a194e7ba8a98c9ddb74446e3558ccebefe197375afbf2cfddf893b95a9ace4ca4cd5e067e196af1fc6ad0f510b011226a7e3ab49e9bea546fd6f5923f8d37484f3249597548e3f50c1a0a49ea7d967f10ecee53236d346ccb310bbe9117d247497f6f59ae558e29def6bca99b8269f4743df005d2377a1da748ea92342892dc02ff0428ceaa5bffd7f19aa3da258fcf257f74896623ebddd6436f446dade95137831bc2b6d7ad30ac373c6a68aad234c87172244ede7fc7304c891bce153072bd10621250578ba2abba3ef4aabd016dc08a8305bc15525070186388ade5a98039c3b4ef2fe2cd145811b58ee091cd82f6bd0b0cc5b7d7c9ec8a7ebb20f4d4c63c76b403072a7b36a054328c70ed491326f664f70540daa91f074aa675453b88419c9b71fca890a8dcb00d4c93f4483e35eec899d41d07295d75e0ee22793789711d677d825b90a99ed605dba9ad08186b670c566364cdb7e3e127e66f1a81861c230eb6424d14c2764cff1766d1f4b6d57a26546578ee92ecd576e8a6ca71f0dd62c59e5640ecf681ce69c30ab060229c874eca0f24d7f70acb743dd610b1a403143fd02cd5b4bb7af00ec9d82eabdb99b863491aa9afe302138044ee834d5230336181abd6f42fee2974447fdaa8f7d01b2da5b1ef76d51e156f85003618f81b50da3a85a851297c31cedfe871587bbe875f766cccb6a816fa4116bdb445c009ddad330d6b9e06ca53abcb95c900ff2b0ed435560cd5693eb3997f4efdcfbb87597c90b75787f16a46b61ee70e84d96c3ae05c9b6c55784ec6aaa622040c4106a12a8fbf5d406d3045ec5a2b6e41c7978cc8995c2019051cb8ce826c35606331b9e2b400ef02a92b27505d3e3b067168b45a69b1351cf1bb090559b1351d99833480a56ed069ebfcbdcb8698b8eddc6e1716643a40945bcd7661a85142f9b055e5e1c412f219e41214145fba6c90c291f167623e60417fed85aea0e1ab76f45b0911129fa8d28dd9bebd1bc65877c18f203933b825f49c78d9bca96d11b7aaf7d544fb4f0dee4ec6b8b84aaa90053e7890d9415d7086276cec753c8dd1c390fed94a154e19fc62e05264a9c18fe90e327c02fb118d32cf52546f79e0c53cbd108d21258ce2af81237da7433d4f6a8f450b5e38a50aa8f70acecf6403908fbe9c2029103e6880ad8904548a38ef8702ff12aeef4796262df7af010c4eff347e3d4c8fd0c3d756b95a4f443f6fb548875a96b0e8f5da9921b076cec6a279c4470e0326561142ddf8a1c955984dfa7352874bce54c375f9c760ddaceeffd0415ef9d69599bfcae93232d2520a55595a6417623c4429e0a9fcc63afa84793cf3ade59fa8aab05223b8ccec9c1571d6614c6f815e768b8d3abe6350a663e63848552455be8f74a51c756be19dc659ce345332469f541f2605f9193bf68f5b5c340952b7600617122b00177bb54e6a38ad5d48622264bffefcff766196532d0ee2194193fdaed206bd21f8c799ee5489bd0dd93e32d21403b7ce969302a779554885e02046e3e1f6342528d8adb7d65b0b4d45fc9796dcf51196a7ca1a123e7eb091dfac45bb5ae59cf180a27a97d64fff5f8c1281e6dd9941956df3cf923c3f71d0e0d62668407dcc04686794b5d427523081ee60c1c266ba2cbe4b70789d5a3b7af4b2db8db203e32a0d4c37d75c4197d9ebc26ff1bad8d006eb0054be3fb6bd8c1df9173c342b89d524169739c07fad5b62400859e0cc43dfc1d1464e4a8e6fe580ef27cc47f478377c2fd73f1cd414b76d3bb9f8cf0800e9eccc89ee08527e8a39130ab246390a170d2e9ab1fbec1ec5faba1a9e6759921885c61b97f9e12d08665975c10d928cd6bd337d5daba5d071397ac7b6d3c7a335fab47006ff0b33b4e21d3982df03517e864fddad387f94c015ba62a454671ea0119e143a8899eb0a279012e6afd957f2e80c74dba1278ce30de2a857498db4ef45ef1c5b5d120c10edad370ec88d1a641214360ce2a6cfb7dc3f0fcc73e975d6d238cb984564e5ef51abff9e2a4214433013d6a867255c3a8da2a12223d931dada0e5986d791bfd5257a9333c910922a55303fc474873d1722cee20c17ce4d394bf2dc3ab284c7bc5f88961a9cbdc5e5a8176a9448bee1f7304e44ea4241bcd914281dd7105d320e8d02d579c3b93b32bb3ed7df4863b795ec76573492f036d15108b213eeef990464a265caf08b115e0522db8c6e5b2d9c8ac5d0004f4751ef2664976395f4faf5c6f80a3b5bf03c0e17987ac9d4345e65fa827259a9e4fc6ab97dde390a6c89e77875c079b67f67361cc7ed7f7336f6346d4af5d1e4acd8ce537e5fa1ea8341ce770b907b5e06aeacb6dede70e41a20e54e20804c117f5bb1f815bcb0622b2bafd72223f0c3a70e9daf80efa1f451b12bece941db943cd9bb0e4b25152618b63ce7d25dfc07c0cab17d54a52fd5d7f14ce7a66071cc0ba5ff1d24c37b03e6581eee4936228ae4d2b6a1e0a8b16105b448abbf4a598156ea8331198f08ee8339d5a90cdbf7ed256cc9264cff7a18a8371ed0fdf48f5294bf273310fd169505efd58f03b38c601bc65be7e94173939b4bfb446dfc4597346ad2304b70261bdd40ad8cb19117f5c77fcd1efea3b337a9ac673080f1da445cda28dba186831c53be98790534b893b4fc0a99532eda25283183a1931427d24898edfc375ee661a03e5d8de20b026471839601d0db0b47baf57b493ec26442013ca96026e5dd7b18cf030388a2604f63fde200d6c2f42ff6ec41693ac77757e1481f3cc4bb783be05bd9bbfecff0b5eb2fc1c78227c73cb3fbc41e902aa789bcaf10a19ab00242e2e7defa1eb428fee770b8145331a522d39d345dfd15aa0bffbba5ee6d78ee1547f505f3aa5e759b959a1b9707c1f62d4abec6774b2ffed01e0046d77fd3d70cd87d5c986430bea0e5be155773d5729ed31d12a37210cb5aae55114ec423f4f75b58aa84db8798035c1913e99bdfb8e5fcd571fcd19bd458b1a194f53cd5b3116ab7396906f9b593808f9667b280cee6d4e8ab0ed13ac7a9ca854e134b671cc9bf2d9626075d05b2e3a79d0fd8c4cc428e3dc9225de35b4ab561a9fa9934710041b0bc73537a1e547f0f5341dbf0b912da7eca8575e24b444ccdb75fde0fcc60b9dd64b62ab37ef7bf1764e629442eae3114c923b1d0b49d8dba83402724114b7e8272cfae0b88ad386866ef7f0a941c63c836fe7a6bc5a85a9868cdd00393d14e82755781eed851199c6b25de0f6c3fc773e1ef3486f2b27550a866bc1ce80fe387a598d54737bf9bd07e9b7cafa9affd256402f9d5fdc946e4db3a1aefd958f6f10c5bda949aaf2c64f7f1f67585faaca3036ace3409efede04b2c79a3cd3c1ed27f7dd7c889fac57bc7e1f5b7ee5b488888365e954b4952a7c3a765c815d4d5a978afc15d9ae26f256c3755befbb814ba7204234cf5391db6d7e87fffdfaa823bc97ab475d822c98380a89d4c6c1aaca9e03d652dbf7a2ea8ebf4c75e0d0cd072f7cfba2e75ff4157670b8eb835f5923c7ff8cb5186c78fac149b4410a5cfed8fa1ab2fb334252024bb541c336bcc40f9cbb192124e89e9e1c98dd45d86adeb66cbbfa1dbbb28a63c993e90c4338abd8febaf1ff845ba9939d92fe0564a4c9ba02edfbe253bdee136182b8d83599c0aa8a536c37dd1f36fab71184b7ff28c97dc2083b722d4e439fef92f6bc011acf52b4f097184a09a6bd15364", 0xef4}, {&(0x7f0000000300)="3173d6255340d1a1cc34bcf545ef316f346fd67fb49fa07e2012e496337979a7d0f65e7cc0ec3ea71bc164e57c15e3a21825562f5ddafd43277f5a3ce4ad2f726aa7e04362fa142a0d8195ab3c329e5d1916957404afff711062a08393058b3f6e736bada75f591d717c836314e6cd6b7565896a1b8b6e2b4225a4644765f1c6bf716e6497ae", 0x86}, {&(0x7f0000000180)="aaa6726b16e15c8d67894eee1b1aa1c93d046ff21005d788bd22c0f46fb15ff26f9ad67b085dfcb8c873895d45d6419de3d805dfeb92f34fe9ea139d0dc15e3d95491f7b0f130ed9370325882907b5ab1ff5a7b60094dc4f32ae331491c2f35052333545aaf14b8ae7ad6ee9f9ca1fe7fb487e9f59d2", 0x76}, {&(0x7f0000000200)="33864c8146848db3b36b7ce404e84ccd725c03d859ebcfdded9cc9d922210928c57557ede3b942229c5d52c1b8de74d11c3cc9a86f48ef", 0x37}, {&(0x7f0000000400)="25e7c4ef0e00cc79c5694472ec0f2a365a8621a581496e90bc53ea9027485770f0ca10dcd7b37776e08d6e70e16c53d3ad6dd3f976674de9aabd029f7d91cf20ad0ca94221a668e80d3e0a59bace5f6e500ecbe1fdbd0ab83da7612e6996b29cd0078e2fb9b254f27135307d3fb942d56d", 0x71}, {0x0}], 0x6}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004c00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000007080)=[{0x0}, {0x0}, {&(0x7f0000006fc0)="e921b1a03068b332c73c392821dbececf44dd15ae363bf2bed28462ac08fb60d8c2b3be57f037fdee846c1dfcebe03a3f3b545b67269fedd2c2aceac13a122fd8827ba2da184ec3141d1874c12de309dfbb809a4abdf9018aa53406eac50ff9523b66c435e681d9a2228373c9b29a30028c6599ebe0d19daea314d612d4e1afe3d7af6fb20f0863dc88ec734aba51c6e0e40ed670ce4518869efca35c557767ea9206635", 0xa4}], 0x3}}], 0x3, 0x80)

875.080886ms ago: executing program 0 (id=1682):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0)

766.918668ms ago: executing program 0 (id=1684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008005}, 0x0)

766.295429ms ago: executing program 0 (id=1686):
r0 = socket$inet6(0xa, 0x1, 0x84)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0x1, 0x2e, @empty, @rand_addr=' \x01\x00', 0x80, 0x700, 0x8, 0xedda}})

718.239593ms ago: executing program 0 (id=1688):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0)

655.450971ms ago: executing program 0 (id=1690):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffff9, 0x4)

586.837596ms ago: executing program 0 (id=1692):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8000)
epoll_create1(0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
socket(0x2, 0x6, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

476.165701ms ago: executing program 2 (id=1695):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)

406.294065ms ago: executing program 2 (id=1696):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000))
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0)
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000240)=0x4)
recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r4, 0xd3)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f50000"], 0x1eb)
sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xf3b04ff45d9e12fb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x41100, 0x4}, 0x94)

155.278622ms ago: executing program 2 (id=1697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33220}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x36}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}]}, 0x48}}, 0x0)

154.741985ms ago: executing program 2 (id=1698):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0xfffffffb, 0x4)

86.082235ms ago: executing program 2 (id=1699):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2b, 'cpuset'}]}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005bc0)=@newlink={0x48, 0x10, 0x40b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24f2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = accept4(r2, &(0x7f0000000280)=@qipcrtr, &(0x7f0000000040)=0x80, 0x800)
getsockopt$inet6_tcp_int(r4, 0x6, 0x9, &(0x7f00000001c0), &(0x7f0000000300)=0x4)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000380)={0x1, @broadcast})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0)

6.08921ms ago: executing program 2 (id=1700):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 1 (id=1701):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53554' (ED25519) to the list of known hosts.
syzkaller login: [   56.720977][ T5813] cgroup: Unknown subsys name 'net'
[   56.866874][ T5813] cgroup: Unknown subsys name 'cpuset'
[   56.884563][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.153625][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.395492][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.401124][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.403990][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.407900][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.411191][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.429685][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.434111][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.437832][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.441953][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.445152][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.447974][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.451327][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.454888][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.470270][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.473574][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.730996][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   64.771111][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   64.807907][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   64.854441][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.857983][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.861200][ T5836] bridge_slave_0: entered allmulticast mode
[   64.864931][ T5836] bridge_slave_0: entered promiscuous mode
[   64.894636][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.897362][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.900131][ T5836] bridge_slave_1: entered allmulticast mode
[   64.904191][ T5836] bridge_slave_1: entered promiscuous mode
[   64.960902][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.988267][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.991280][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.994673][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.997481][ T5831] bridge_slave_0: entered allmulticast mode
[   65.002106][ T5831] bridge_slave_0: entered promiscuous mode
[   65.025635][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.028434][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.031260][ T5831] bridge_slave_1: entered allmulticast mode
[   65.035880][ T5831] bridge_slave_1: entered promiscuous mode
[   65.089605][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.094164][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.097025][ T5835] bridge_slave_0: entered allmulticast mode
[   65.100051][ T5835] bridge_slave_0: entered promiscuous mode
[   65.105930][ T5836] team0: Port device team_slave_0 added
[   65.122921][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.125435][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.127803][ T5835] bridge_slave_1: entered allmulticast mode
[   65.130876][ T5835] bridge_slave_1: entered promiscuous mode
[   65.136874][ T5836] team0: Port device team_slave_1 added
[   65.142959][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.173327][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.213079][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.216613][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.219280][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.229923][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.246101][ T5831] team0: Port device team_slave_0 added
[   65.250350][ T5831] team0: Port device team_slave_1 added
[   65.253936][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.267626][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.269881][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.278400][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.316868][ T5835] team0: Port device team_slave_0 added
[   65.321009][ T5835] team0: Port device team_slave_1 added
[   65.324213][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.326552][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.335446][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.340345][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.343270][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.352829][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.418530][ T5836] hsr_slave_0: entered promiscuous mode
[   65.422106][ T5836] hsr_slave_1: entered promiscuous mode
[   65.425731][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.428335][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.438389][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.445020][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.447150][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.458594][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.518408][ T5831] hsr_slave_0: entered promiscuous mode
[   65.521474][ T5831] hsr_slave_1: entered promiscuous mode
[   65.524601][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.527496][ T5831] Cannot create hsr debugfs directory
[   65.586607][ T5835] hsr_slave_0: entered promiscuous mode
[   65.588931][ T5835] hsr_slave_1: entered promiscuous mode
[   65.591032][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.594220][ T5835] Cannot create hsr debugfs directory
[   65.867359][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.876780][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.898150][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.909834][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.943547][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.957626][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.965133][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.986683][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.040875][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.055347][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.063301][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.076392][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.147429][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.180147][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   66.198060][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.201052][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.207579][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.210380][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.259123][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.317311][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   66.336115][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.339003][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.361057][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.363901][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.381121][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.441464][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   66.464675][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.467534][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.484620][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.484671][ T5834] Bluetooth: hci0: command tx timeout
[   66.487385][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.489705][ T5841] Bluetooth: hci2: command tx timeout
[   66.517079][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.561859][ T5841] Bluetooth: hci1: command tx timeout
[   66.604689][ T5831] veth0_vlan: entered promiscuous mode
[   66.624581][ T5831] veth1_vlan: entered promiscuous mode
[   66.649968][ T5831] veth0_macvtap: entered promiscuous mode
[   66.656411][ T5831] veth1_macvtap: entered promiscuous mode
[   66.669405][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.681019][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.687605][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.690708][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.696113][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.698797][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.760362][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.796553][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.799350][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.856542][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.861950][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.867037][ T5836] veth0_vlan: entered promiscuous mode
[   66.881403][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.888169][ T5836] veth1_vlan: entered promiscuous mode
[   66.926117][ T5836] veth0_macvtap: entered promiscuous mode
[   66.935605][ T5835] veth0_vlan: entered promiscuous mode
[   66.941528][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.944672][ T5836] veth1_macvtap: entered promiscuous mode
[   66.956874][ T5835] veth1_vlan: entered promiscuous mode
[   66.995916][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.007624][ T5835] veth0_macvtap: entered promiscuous mode
[   67.023221][ T5835] veth1_macvtap: entered promiscuous mode
[   67.029425][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.053658][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.056390][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.059284][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.073664][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.084396][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.089275][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.099933][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.104939][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.107652][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.110557][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.217790][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.220575][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.278513][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.281271][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.284070][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.284096][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.342171][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.344639][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.406160][ T5909] netlink: 'syz.2.8': attribute type 13 has an invalid length.
[   67.410007][ T5909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   67.425126][ T5909] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   67.500713][ T5912] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   67.851350][ T5934] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   68.563188][ T5841] Bluetooth: hci2: command tx timeout
[   68.563863][ T5834] Bluetooth: hci0: command tx timeout
[   68.634024][ T5834] Bluetooth: hci1: command tx timeout
[   68.894744][ T5991] Bluetooth: MGMT ver 1.23
[   69.089640][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'.
[   69.283394][ T6017] warning: `syz.2.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.710922][ T6045] Zero length message leads to an empty skb
[   70.009976][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.227532][ T6082] tipc: Started in network mode
[   70.229218][ T6082] tipc: Node identity 860afd9cacd1, cluster identity 4711
[   70.233628][ T6082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.281788][ T6082] syzkaller0: entered promiscuous mode
[   70.283762][ T6082] syzkaller0: entered allmulticast mode
[   70.286801][ T6082] tipc: Resetting bearer <eth:syzkaller0>
[   70.344051][ T6080] tipc: Resetting bearer <eth:syzkaller0>
[   70.634575][ T5834] Bluetooth: hci0: command tx timeout
[   70.642435][ T5834] Bluetooth: hci2: command tx timeout
[   70.714015][ T5834] Bluetooth: hci1: command tx timeout
[   71.219301][ T6080] tipc: Disabling bearer <eth:syzkaller0>
[   71.225219][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'.
[   71.231810][ T6095] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   71.265674][ T6098] syz_tun: entered promiscuous mode
[   71.270884][ T6098] syz_tun: entered allmulticast mode
[   71.298551][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.301246][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.437810][ T6110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.102'.
[   71.450626][ T6110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.102'.
[   71.459002][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'.
[   72.075847][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   72.079305][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   72.085999][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   72.091014][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   72.718475][ T5834] Bluetooth: hci2: command tx timeout
[   72.720649][ T5834] Bluetooth: hci0: command tx timeout
[   72.762777][ T6175] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   72.803422][ T5841] Bluetooth: hci1: command tx timeout
[   73.067871][ T6191] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.308597][ T6203] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   73.340595][ T6203] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   73.948995][ T6239] netlink: 'syz.1.156': attribute type 3 has an invalid length.
[   74.055268][ T6247] netlink: 'syz.1.158': attribute type 11 has an invalid length.
[   74.776537][ T6288] __nla_validate_parse: 1 callbacks suppressed
[   74.776553][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.783811][ T6288] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   74.786884][ T6288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.119771][ T6313] netlink: 596 bytes leftover after parsing attributes in process `syz.0.191'.
[   75.125531][ T6312] ieee802154 phy0 wpan0: encryption failed: -90
[   75.365478][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[   75.368360][ T6333] nbd: illegal input index -381222912
[   75.578478][ T6353] netlink: 'syz.2.209': attribute type 1 has an invalid length.
[   75.609271][ T6353] bond2: (slave gretap1): making interface the new active one
[   75.615104][ T6353] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   75.624870][ T6353] syz.2.209 (6353) used greatest stack depth: 19816 bytes left
[   75.647957][ T6358] netlink: 76 bytes leftover after parsing attributes in process `syz.1.211'.
[   75.748885][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'.
[   75.869339][ T6369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.216'.
[   76.405277][ T6352] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   76.541984][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[   76.655364][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'.
[   76.864203][ T6443] netlink: 300 bytes leftover after parsing attributes in process `syz.0.248'.
[   76.942090][ T6450] xt_hashlimit: max too large, truncated to 1048576
[   76.946350][ T6450] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   77.185269][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'.
[   77.467999][ T6484] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   77.497001][ T6485] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   78.064566][ T6504] netlink: 'syz.1.274': attribute type 2 has an invalid length.
[   78.255671][ T6514] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.337767][ T6520] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   78.789527][ T6544] sctp: [Deprecated]: syz.0.293 (pid 6544) Use of int in max_burst socket option.
[   78.789527][ T6544] Use struct sctp_assoc_value instead
[   80.343509][ T6604] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82
[   80.579035][ T6616] netlink: 'syz.1.324': attribute type 21 has an invalid length.
[   80.582367][ T6616] IPv6: NLM_F_CREATE should be specified when creating new route
[   80.674500][ T6624] __nla_validate_parse: 4 callbacks suppressed
[   80.674512][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'.
[   80.689837][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'.
[   81.146340][ T6654] netlink: 'syz.2.343': attribute type 7 has an invalid length.
[   81.149665][ T6654] netlink: 'syz.2.343': attribute type 8 has an invalid length.
[   81.153535][ T6654] netlink: 'syz.2.343': attribute type 4 has an invalid length.
[   81.157318][ T6654] netlink: 204 bytes leftover after parsing attributes in process `syz.2.343'.
[   81.575398][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'.
[   81.591820][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.352'.
[   81.910406][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'.
[   81.914321][ T6695] bridge_slave_1: left allmulticast mode
[   81.916082][ T6695] bridge_slave_1: left promiscuous mode
[   81.919003][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.928594][ T6695] bridge_slave_0: left allmulticast mode
[   81.930316][ T6695] bridge_slave_0: left promiscuous mode
[   81.933325][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.457080][ T6707] netlink: 'syz.1.365': attribute type 1 has an invalid length.
[   82.460982][ T6707] netlink: 'syz.1.365': attribute type 4 has an invalid length.
[   82.467212][ T6707] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.365'.
[   82.825073][ T6736] netlink: del zone limit has 8 unknown bytes
[   82.900713][ T6742] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[   82.952799][ T6742] bond1: (slave gretap1): making interface the new active one
[   82.956467][ T6742] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   83.069406][ T6746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.188882][ T6746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.271288][ T6761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.390'.
[   83.310546][ T6746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.355667][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.390'.
[   83.408121][ T6746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.503726][ T6770] netlink: 'syz.0.393': attribute type 2 has an invalid length.
[   83.546363][ T6746] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.561322][ T6746] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.597884][ T6746] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.633195][ T6746] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.766806][ T6824] tipc: Started in network mode
[   84.768646][ T6824] tipc: Node identity e6b3b3715f55, cluster identity 4711
[   84.780453][ T6824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.791557][ T6824] syzkaller0: entered promiscuous mode
[   84.794784][ T6824] syzkaller0: entered allmulticast mode
[   84.816164][ T6824] tipc: Resetting bearer <eth:syzkaller0>
[   84.824682][ T6823] tipc: Resetting bearer <eth:syzkaller0>
[   84.840542][ T6823] tipc: Disabling bearer <eth:syzkaller0>
[   84.891907][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'.
[   84.928351][ T6827] geneve2: entered allmulticast mode
[   84.960981][ T6830] netlink: 'syz.0.421': attribute type 10 has an invalid length.
[   84.983287][ T6830] 8021q: adding VLAN 0 to HW filter on device team0
[   84.988338][ T6830] bond0: (slave team0): Enslaving as an active interface with an up link
[   85.044929][ T5893] IPVS: starting estimator thread 0...
[   85.142144][ T6833] IPVS: using max 35 ests per chain, 84000 per kthread
[   86.155341][ T6875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.158730][ T6875] syzkaller0: entered promiscuous mode
[   86.162751][ T6875] syzkaller0: entered allmulticast mode
[   86.178496][ T6875] tipc: Resetting bearer <eth:syzkaller0>
[   86.186112][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[   86.196976][ T6874] tipc: Disabling bearer <eth:syzkaller0>
[   86.219254][ T6879] __nla_validate_parse: 1 callbacks suppressed
[   86.219268][ T6879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'.
[   86.454259][ T6888] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   86.642219][   T24] cfg80211: failed to load regulatory.db
[   86.713029][ T6902] xt_hashlimit: max too large, truncated to 1048576
[   87.474598][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.463'.
[   87.478711][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'.
[   87.740297][ T6945] netlink: 92 bytes leftover after parsing attributes in process `syz.2.472'.
[   87.748077][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.472'.
[   88.248573][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'.
[   88.332772][ T6980] team_slave_0: entered promiscuous mode
[   88.335858][ T6980] team_slave_1: entered promiscuous mode
[   88.340481][ T6980] vlan2: entered promiscuous mode
[   88.344352][ T6980] team0: entered promiscuous mode
[   88.627563][ T6993] tipc: New replicast peer: 255.255.255.255
[   88.630657][ T6993] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.687287][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   88.935615][ T7007] sctp: [Deprecated]: syz.1.500 (pid 7007) Use of int in maxseg socket option.
[   88.935615][ T7007] Use struct sctp_assoc_value instead
[   89.040101][ T7015] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.504'.
[   89.195096][    T9] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   89.486719][ T7041] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.559582][ T7044] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[   89.590317][ T7044] bond3: entered promiscuous mode
[   89.595141][ T7044] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.617941][ T7044] bond3: (slave dummy0): making interface the new active one
[   89.621028][ T7044] dummy0: entered promiscuous mode
[   89.627122][ T7044] bond3: (slave dummy0): Enslaving as an active interface with an up link
[   89.691168][ T7047] Driver unsupported XDP return value 0 on prog  (id 84) dev N/A, expect packet loss!
[   89.743456][  T791] tipc: Node number set to 719060380
[   89.833097][    T9] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[   90.383991][ T7084] netlink: 'syz.1.536': attribute type 1 has an invalid length.
[   90.386309][ T7084] netlink: 244 bytes leftover after parsing attributes in process `syz.1.536'.
[   90.387670][ T7085] gretap2: entered promiscuous mode
[   90.396679][ T7085] gretap2: entered allmulticast mode
[   90.674365][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[   90.988315][ T7128] netlink: 'syz.2.552': attribute type 11 has an invalid length.
[   91.065799][ T7142] netlink: 'syz.0.558': attribute type 1 has an invalid length.
[   91.068880][ T7142] netlink: 'syz.0.558': attribute type 2 has an invalid length.
[   91.299214][ T7172] netlink: 'syz.2.569': attribute type 11 has an invalid length.
[   91.302413][ T7172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.569'.
[   91.651129][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.653711][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.786875][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.806117][ T7191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.026224][ T7191] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.028817][ T7191] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.032670][ T7191] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.036194][ T7191] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.186562][ T7207] syzkaller0: entered promiscuous mode
[   92.191501][ T7207] syzkaller0: entered allmulticast mode
[   92.340198][ T7218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.346039][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'.
[   92.549738][ T7229] netlink: 'syz.0.588': attribute type 21 has an invalid length.
[   92.561893][ T7229] netlink: 128 bytes leftover after parsing attributes in process `syz.0.588'.
[   92.565538][ T7229] netlink: 'syz.0.588': attribute type 4 has an invalid length.
[   92.567812][ T7229] netlink: 'syz.0.588': attribute type 5 has an invalid length.
[   92.575839][ T7229] netlink: 3 bytes leftover after parsing attributes in process `syz.0.588'.
[   93.966530][ T7283] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   93.966911][   T24] IPVS: starting estimator thread 0...
[   94.051945][ T7285] IPVS: using max 62 ests per chain, 148800 per kthread
[   94.528717][ T7324] netlink: 'syz.2.631': attribute type 5 has an invalid length.
[   94.635854][ T7336] pim6reg: entered allmulticast mode
[   94.640362][ T7336] pim6reg: left allmulticast mode
[   94.790446][ T7348] netlink: 'syz.2.642': attribute type 21 has an invalid length.
[   94.800285][ T7348] netlink: 'syz.2.642': attribute type 22 has an invalid length.
[   94.820730][ T7348] netlink: 'syz.2.642': attribute type 23 has an invalid length.
[   94.824413][ T7350] xt_l2tp: invalid flags combination: c
[   94.830103][ T7348] netlink: 'syz.2.642': attribute type 25 has an invalid length.
[   94.835624][ T7348] netlink: 'syz.2.642': attribute type 26 has an invalid length.
[   94.838536][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.642'.
[   94.948311][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[   94.957683][ T7360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   94.960592][ T7360] IPv6: NLM_F_CREATE should be set when creating new route
[   94.977447][ T7356] bond3: (slave dummy0): Releasing active interface
[   94.979436][ T7356] dummy0 (unregistering): left promiscuous mode
[   94.987779][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'.
[   95.153768][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'.
[   95.154119][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'.
[   95.159257][ T7377] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   95.161509][ T7377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.443299][ T7399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.663'.
[   96.584618][ T7492] netlink: 'syz.1.704': attribute type 21 has an invalid length.
[   96.587299][ T7492] netlink: 128 bytes leftover after parsing attributes in process `syz.1.704'.
[   96.590553][ T7492] netlink: 'syz.1.704': attribute type 4 has an invalid length.
[   96.594444][ T7492] netlink: 3 bytes leftover after parsing attributes in process `syz.1.704'.
[   97.406141][ T7549] netlink: 84 bytes leftover after parsing attributes in process `syz.0.726'.
[   97.411737][ T7549] netlink: 84 bytes leftover after parsing attributes in process `syz.0.726'.
[   97.802544][ T7572] bridge0: entered promiscuous mode
[   97.970458][ T7580] netlink: 'syz.0.742': attribute type 4 has an invalid length.
[   98.048830][ T7582] syzkaller0: entered promiscuous mode
[   98.058674][ T7582] syzkaller0: entered allmulticast mode
[   99.436500][ T7610] netlink: 'syz.2.754': attribute type 9 has an invalid length.
[   99.438139][ T7608] pim6reg: entered allmulticast mode
[   99.439693][ T7610] netlink: 'syz.2.754': attribute type 6 has an invalid length.
[   99.465202][ T7608] pim6reg: left allmulticast mode
[   99.757619][ T7634] xt_hashlimit: size too large, truncated to 1048576
[  100.436805][ T7658] openvswitch: netlink: Message has 4 unknown bytes.
[  101.057368][ T7710] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  101.091366][ T7712] tipc: Started in network mode
[  101.093415][ T7712] tipc: Node identity 5e6a1ad80b7b, cluster identity 4711
[  101.096213][ T7712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.142781][ T7712] syzkaller0: entered promiscuous mode
[  101.144608][ T7712] syzkaller0: entered allmulticast mode
[  101.146827][ T7712] tipc: Resetting bearer <eth:syzkaller0>
[  101.152289][ T7711] tipc: Resetting bearer <eth:syzkaller0>
[  102.157123][    T9] tipc: Node number set to 1427184344
[  102.644937][ T7711] tipc: Disabling bearer <eth:syzkaller0>
[  103.223327][ T7799] xt_CT: No such helper "pptp"
[  103.228027][ T7799] --map-set only usable from mangle table
[  103.350802][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.353935][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.359747][ T7812] netlink: 52 bytes leftover after parsing attributes in process `syz.1.836'.
[  103.365335][ T7812] netlink: 52 bytes leftover after parsing attributes in process `syz.1.836'.
[  103.368413][ T7812] netlink: 52 bytes leftover after parsing attributes in process `syz.1.836'.
[  103.432872][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'.
[  103.466879][ T7807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.481489][ T7807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.627810][ T7807] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.634233][ T7807] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.637607][ T7807] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.644316][ T7807] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.677298][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'.
[  104.217122][ T7835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.221099][ T7835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.225458][ T7835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.229088][ T7835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.233644][ T7835] geneve2: entered allmulticast mode
[  104.325927][ T7839] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  104.329797][ T7841] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  104.667934][ T7871] validate_nla: 2 callbacks suppressed
[  104.667977][ T7871] netlink: 'syz.2.863': attribute type 1 has an invalid length.
[  104.875925][ T7891] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  104.984804][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'.
[  104.987484][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'.
[  104.993711][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'.
[  104.996970][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.875'.
[  105.003902][ T7900] netlink: 'syz.0.875': attribute type 6 has an invalid length.
[  105.347560][ T7921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  105.567651][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.885'.
[  105.669698][ T7942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.436133][ T7987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  107.118166][ T8042] netlink: 'syz.1.934': attribute type 3 has an invalid length.
[  108.507259][ T8122] __nla_validate_parse: 7 callbacks suppressed
[  108.507271][ T8122] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.968'.
[  108.536897][ T8120] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.968'.
[  108.570458][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.575690][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.581767][   T24] IPVS: starting estimator thread 0...
[  108.587161][ T8120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.624160][ T8126] netlink: 176 bytes leftover after parsing attributes in process `syz.0.970'.
[  108.648603][ T8128] macvlan0: entered promiscuous mode
[  108.652769][ T8128] netlink: 'syz.2.971': attribute type 1 has an invalid length.
[  108.661818][ T8128] netlink: 'syz.2.971': attribute type 2 has an invalid length.
[  108.683785][ T8124] IPVS: using max 53 ests per chain, 127200 per kthread
[  109.213967][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'.
[  109.427905][    C0] Unknown status report in ack skb
[  109.488825][ T8158] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  109.563661][ T8160] netlink: 'syz.1.985': attribute type 1 has an invalid length.
[  109.607248][ T8160] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.627179][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv1
[  109.634846][ T8160] bond2: (slave batadv1): making interface the new active one
[  109.643245][ T8160] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  109.949312][ T8172] netlink: 596 bytes leftover after parsing attributes in process `syz.1.988'.
[  110.029192][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'.
[  110.049754][   T33] audit: type=1804 audit(1752100546.167:2): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.990" name="/newroot/335/cgroup.controllers" dev="tmpfs" ino=1710 res=1 errno=0
[  110.072500][   T33] audit: type=1800 audit(1752100546.167:3): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="cgroup.controllers" dev="tmpfs" ino=1710 res=0 errno=0
[  110.081550][   T33] audit: type=1800 audit(1752100546.197:4): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="cgroup.controllers" dev="tmpfs" ino=1710 res=0 errno=0
[  110.349276][ T8194] netlink: 'syz.1.1000': attribute type 1 has an invalid length.
[  110.721078][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1009'.
[  110.775656][ T8216] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  110.779117][ T8216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1010'.
[  110.793087][ T8216] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.797206][ T8216] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.800565][ T8216] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.804738][ T8216] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.816458][ T8216] geneve0: entered promiscuous mode
[  110.821368][ T8216] team0: Port device geneve0 added
[  111.750780][ T8235] xt_TCPMSS: Only works on TCP SYN packets
[  111.757393][ T8232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.217387][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'.
[  112.368900][ T8277] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  113.456755][ T8349] netlink: 'syz.2.1071': attribute type 1 has an invalid length.
[  113.460328][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'.
[  113.541153][ T8357] netlink: 'syz.0.1075': attribute type 29 has an invalid length.
[  113.555310][ T8357] netlink: 'syz.0.1075': attribute type 29 has an invalid length.
[  113.562183][ T8357] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1075'.
[  113.819657][ T8369] netlink: 'syz.0.1079': attribute type 10 has an invalid length.
[  113.829800][ T8369] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  114.194990][ T8373] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  114.649868][ T8401] netlink: 'syz.1.1093': attribute type 1 has an invalid length.
[  114.652679][ T8401] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1093'.
[  114.764164][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.861877][   T33] audit: type=1107 audit(1752100550.977:5): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  117.149601][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'.
[  117.250462][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'.
[  117.630736][ T8473] tc_dump_action: action bad kind
[  118.219851][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  118.517816][ T8500] tipc: Invalid UDP bearer configuration
[  118.517846][ T8500] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  118.914075][ T8534] openvswitch: netlink: IP tunnel dst address not specified
[  119.055463][ T8547] lo speed is unknown, defaulting to 1000
[  119.058496][ T8547] lo speed is unknown, defaulting to 1000
[  119.067728][ T8547] lo speed is unknown, defaulting to 1000
[  119.090051][ T8547] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  119.107929][ T8547] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  119.149876][ T8547] lo speed is unknown, defaulting to 1000
[  119.156372][ T8547] lo speed is unknown, defaulting to 1000
[  119.160345][ T8547] lo speed is unknown, defaulting to 1000
[  119.347178][ T8570] netlink: 'syz.2.1168': attribute type 3 has an invalid length.
[  119.351354][ T8571] xt_cgroup: path and classid specified
[  119.363927][ T8572] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1162'.
[  119.382720][ T8571] netlink: zone id is out of range
[  119.384765][ T8571] netlink: zone id is out of range
[  119.386900][ T8571] netlink: zone id is out of range
[  119.388895][ T8571] netlink: zone id is out of range
[  119.390855][ T8571] netlink: zone id is out of range
[  119.414162][ T8571] netlink: zone id is out of range
[  119.416233][ T8571] netlink: zone id is out of range
[  119.418230][ T8571] netlink: zone id is out of range
[  119.435724][ T8571] netlink: zone id is out of range
[  119.446506][ T8577] netlink: 'syz.0.1166': attribute type 4 has an invalid length.
[  119.456295][ T8577] netlink: 'syz.0.1166': attribute type 2 has an invalid length.
[  120.113697][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  120.117253][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'.
[  120.120691][ T8629] netlink: 'syz.1.1196': attribute type 12 has an invalid length.
[  120.126838][ T8629] netlink: 'syz.1.1196': attribute type 11 has an invalid length.
[  120.234354][ T8635] pimreg3: entered allmulticast mode
[  120.429676][ T8649] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1204'.
[  120.680199][ T8663] IPVS: length: 8 != 446622349272
[  120.806721][ T8668] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  120.816530][ T8668] netlink: 'syz.0.1215': attribute type 4 has an invalid length.
[  121.102110][ T8668] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.126076][ T8668] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.284209][ T8668] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.289092][ T8668] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.293146][ T8668] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.296734][ T8668] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.484208][ T8689] netlink: 'syz.0.1223': attribute type 1 has an invalid length.
[  121.486466][ T8687] lo speed is unknown, defaulting to 1000
[  121.679783][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'.
[  121.899661][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'.
[  122.379910][ T8731] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1242'.
[  122.606016][ T8745] netlink: 'syz.2.1249': attribute type 2 has an invalid length.
[  122.608980][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'.
[  122.769032][ T8761] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1256'.
[  122.836454][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'.
[  122.996383][ T8784] xt_hashlimit: size too large, truncated to 1048576
[  123.020823][ T8789] netlink: 'syz.2.1268': attribute type 6 has an invalid length.
[  123.024269][ T8789] netlink: 'syz.2.1268': attribute type 7 has an invalid length.
[  123.071090][ T8790] : renamed from bridge_slave_0
[  124.856029][ T8975] xt_cgroup: invalid path, errno=-2
[  124.947404][ T8985] batadv_slave_0: entered promiscuous mode
[  124.949819][ T8984] batadv_slave_0: left promiscuous mode
[  125.128270][ T9001] validate_nla: 5 callbacks suppressed
[  125.128281][ T9001] netlink: 'syz.2.1363': attribute type 4 has an invalid length.
[  125.136297][ T9001] netlink: 'syz.2.1363': attribute type 4 has an invalid length.
[  125.143973][ T5893] lo speed is unknown, defaulting to 1000
[  125.149820][ T5893] syz1: Port: 1 Link ACTIVE
[  125.196477][ T9007] __nla_validate_parse: 4 callbacks suppressed
[  125.196488][ T9007] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1367'.
[  125.320985][ T9021] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1372'.
[  125.370375][ T9025] vlan0: entered promiscuous mode
[  125.433917][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'.
[  125.486214][ T9036] netlink: 'syz.0.1377': attribute type 10 has an invalid length.
[  125.509965][ T9035] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  125.518955][ T9035] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  125.842677][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'.
[  125.919215][ T9082] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  126.106451][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'.
[  126.153771][ T9110] net_ratelimit: 14 callbacks suppressed
[  126.153786][ T9110] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  126.217321][ T5841] Bluetooth: hci2: link tx timeout
[  126.221499][ T5841] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  126.225256][ T5841] Bluetooth: hci2: link tx timeout
[  126.227220][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.886160][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'.
[  127.533913][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[  127.568239][ T9198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.177874][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'.
[  128.232002][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  128.280334][ T9247] netlink: 'syz.1.1467': attribute type 2 has an invalid length.
[  128.309272][ T9247] : entered promiscuous mode
[  128.514791][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'.
[  128.852101][ T9287] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1485'.
[  130.312111][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  130.706041][ T9413] netlink: 'syz.1.1542': attribute type 1 has an invalid length.
[  130.709113][ T9413] __nla_validate_parse: 4 callbacks suppressed
[  130.709124][ T9413] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1542'.
[  130.717599][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  131.075553][ T9429] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1550'.
[  131.534764][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'.
[  131.797949][ T9465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1567'.
[  131.907725][ T9475] netlink: 'syz.1.1571': attribute type 1 has an invalid length.
[  131.910695][ T9475] netlink: 'syz.1.1571': attribute type 2 has an invalid length.
[  132.034804][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'.
[  132.127521][ T9497] bridge0: port 3(gretap0) entered blocking state
[  132.129633][ T9497] bridge0: port 3(gretap0) entered disabled state
[  132.148912][ T9497] gretap0: entered allmulticast mode
[  132.153068][ T9497] gretap0: entered promiscuous mode
[  132.326215][ T9507] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  132.423808][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'.
[  132.455179][ T9524] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  132.465572][ T9524] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  132.475769][ T9524] bond1 (unregistering): Released all slaves
[  132.639218][ T9537] netlink: 'syz.0.1595': attribute type 4 has an invalid length.
[  132.643891][ T9537] netlink: 'syz.0.1595': attribute type 2 has an invalid length.
[  132.717025][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.002003][ T9564] netlink: 'syz.1.1605': attribute type 4 has an invalid length.
[  133.216295][ T9577] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present!
[  133.346861][ T9590] netlink: 'syz.1.1618': attribute type 1 has an invalid length.
[  133.349302][ T9590] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1618'.
[  133.474191][ T9600] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1623'.
[  133.807893][ T9607] lo speed is unknown, defaulting to 1000
[  134.239471][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1641'.
[  134.392573][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  134.759742][ T9680] lo speed is unknown, defaulting to 1000
[  134.938978][ T9698] SET target dimension over the limit!
[  135.200975][ T9717] netlink: 'syz.2.1678': attribute type 23 has an invalid length.
[  135.374881][ T9730] IPv6: NLM_F_CREATE should be specified when creating new route
[  136.204849][ T9772] 
[  136.205871][ T9772] =============================
[  136.207362][ T9772] WARNING: suspicious RCU usage
[  136.209184][ T9772] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  136.213506][ T9772] -----------------------------
[  136.215559][ T9772] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  136.219052][ T9772] 
[  136.219052][ T9772] other info that might help us debug this:
[  136.219052][ T9772] 
[  136.223836][ T9772] 
[  136.223836][ T9772] rcu_scheduler_active = 2, debug_locks = 1
[  136.227134][ T9772] 1 lock held by syz.1.1701/9772:
[  136.229110][ T9772]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  136.233761][ T9772] 
[  136.233761][ T9772] stack backtrace:
[  136.236119][ T9772] CPU: 1 UID: 0 PID: 9772 Comm: syz.1.1701 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  136.236139][ T9772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.236150][ T9772] Call Trace:
[  136.236157][ T9772]  <TASK>
[  136.236200][ T9772]  dump_stack_lvl+0x189/0x250
[  136.236227][ T9772]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.236245][ T9772]  ? __pfx__printk+0x10/0x10
[  136.236267][ T9772]  ? print_lock_name+0xde/0x100
[  136.236288][ T9772]  lockdep_rcu_suspicious+0x140/0x1d0
[  136.236309][ T9772]  task_cls_state+0x1a5/0x1d0
[  136.236334][ T9772]  bpf_get_cgroup_classid_curr+0x18/0x60
[  136.236384][ T9772]  bpf_prog_841aec7193f618b3+0x1b/0x21
[  136.236398][ T9772]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  136.236422][ T9772]  bpf_prog_test_run_syscall+0x312/0x4b0
[  136.236443][ T9772]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  136.236462][ T9772]  ? __fget_files+0x2a/0x420
[  136.236487][ T9772]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  136.236508][ T9772]  bpf_prog_test_run+0x2c7/0x340
[  136.236528][ T9772]  __sys_bpf+0x4a4/0x860
[  136.236543][ T9772]  ? __pfx___sys_bpf+0x10/0x10
[  136.236576][ T9772]  ? exc_page_fault+0x76/0xf0
[  136.236604][ T9772]  ? rcu_is_watching+0x15/0xb0
[  136.236627][ T9772]  __x64_sys_bpf+0x7c/0x90
[  136.236648][ T9772]  do_syscall_64+0xfa/0x3b0
[  136.236662][ T9772]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.236673][ T9772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.236686][ T9772]  ? exc_page_fault+0x9f/0xf0
[  136.236706][ T9772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.236720][ T9772] RIP: 0033:0x7effd078e929
[  136.236734][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.236747][ T9772] RSP: 002b:00007effd151e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  136.236765][ T9772] RAX: ffffffffffffffda RBX: 00007effd09b5fa0 RCX: 00007effd078e929
[  136.236775][ T9772] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a
[  136.236783][ T9772] RBP: 00007effd0810b39 R08: 0000000000000000 R09: 0000000000000000
[  136.236790][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.236798][ T9772] R13: 0000000000000000 R14: 00007effd09b5fa0 R15: 00007ffe2251cad8
[  136.236819][ T9772]  </TASK>

VM DIAGNOSIS:
22:36:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000002 RBX=ffff888022539cc0 RCX=0000000000010001 RDX=0000000000010000
RSI=ffffffff8b89a520 RDI=ffffffff8be28fc0 RBP=ffffc90000007fe0 RSP=ffffc90000007f50
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=0000000000000000 R13=0000000000000000 R14=1ffff92000000fec R15=dffffc0000000000
RIP=ffffffff8b6f01d1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555722a7500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3415ee56c0 CR3=0000000029af8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe11ab85478 00007fe11ab85450 XMM03=00007fe11ab85488 00007fe11ab85480
XMM04=00007fe11b6ed100 00007fe11ab85440 XMM05=00007fe11ab85458 00007fe11ab854a0
XMM06=00007fe11ab85498 00007fe11ab85490 XMM07=00007fe11ab85488 00007fe11ab85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe11aa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f9e RDI=0000000000000f9f RBP=00000000000003f8 RSP=ffffc90008f77550
R8 =ffff8880219a0237 R9 =1ffff11004334046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7901 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007effd151e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3051fffc CR3=000000003bdb8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007effd0985478 00007effd0985450 XMM03=00007effd0985488 00007effd0985480
XMM04=00007effd14ed100 00007effd0985440 XMM05=00007effd0985458 00007effd09854a0
XMM06=00007effd0985498 00007effd0985490 XMM07=00007effd0985488 00007effd0985480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007effd0811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
