last executing test programs:

40.184695731s ago: executing program 1 (id=1136):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000680)={0x5, {{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x88)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a010400000000000000000a0000050900020073797a320000000034000480200001800d00010073796e70726f7879000000000c0002800800034000000008100001800800010064757000040002800900010073797a310000000014000000110001000000000e00000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000400"], 0x1c}}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000340001b000370000ffdbdf2504000080"], 0x14}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000200)=r10, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b70400000000000085000000"], 0x0}, 0x94)
read(r7, &(0x7f00000003c0)=""/114, 0x72)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

39.313794374s ago: executing program 1 (id=1151):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f000001000000000000feff1300020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

39.219240342s ago: executing program 1 (id=1152):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2a, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac1414000000000000000000020001000000000000000000000000200300050000000000020000000000000000000000000000007758c59008e85ed3b5c2147185922942fcd086434f03dbe19777614f9aa0154b65516972b2b863f6f152c7e53c8a4c9477227ff508e423976dfda55efcfe036dfffdba4f7a6e2e5240397cdbb6d366a52fe9f0a7782998d7066eb68ca8ae81309663c31405d1343c695cd39048a4ec4f6be1911a6e6c633b3b00ea6f9d6bf40b3f284b8891350bef0229f9f4b94c9e0638c0560bedf1167d877376e40aa275f7e72dc745f09bb5d1a1b82da20e782cc675a2d48d1d06aed8bc9308ce93e03e33c21d568103a5b2b11af69aa3617a9766"], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab7"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x2, 0x2)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f00000005c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x73139b57}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

39.150810659s ago: executing program 1 (id=1154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001888ff00000000000000000000000000000000ff0200000000000000000007ffffff014f194e7b2a14bf4e8b3ccda096058389725fab2000189078"], 0x52)

39.086261665s ago: executing program 1 (id=1161):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0xde, 0x25, 0x8000, 0x20408}, 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0xde, 0x25, 0x8000, 0x20408}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, 0x0, 0x0, 0x40040, 0x0, 0xfffffffffffffea4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x10000, 0x12)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES32, @ANYRESDEC=r1], 0x50)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x60}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x60}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(0xffffffffffffffff, 0x1) (async)
shutdown(0xffffffffffffffff, 0x1)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r11 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})

38.940511114s ago: executing program 1 (id=1163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a30"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4)

23.836401559s ago: executing program 32 (id=1163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a30"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4)

1.547264296s ago: executing program 0 (id=1614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x40890)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x40890) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) (async)

1.543836469s ago: executing program 0 (id=1616):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f"], 0x30}}, 0x40)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)

1.399835869s ago: executing program 0 (id=1619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000000000800b00f54391ca80000000000000006c616e0065fa173477c1a9d0b0ea0bbc7efa150004", @ANYRES32=r3, @ANYBLOB="08000400ff010000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802)

1.396350146s ago: executing program 0 (id=1620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x5, 0x2, 0x3, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
bind$alg(r1, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x14, 0xc0, &(0x7f00000003c0)="03dfe692467ba099c5b9d674198bcb65cc7b4f4b", &(0x7f0000000400)=""/192, 0x2, 0x0, 0x11, 0x41, &(0x7f00000004c0)="c3671d28d39652e3d52e2c803dbb0e76c3", &(0x7f0000000500)="2a993fbac76ec6115c961a60c05ca712736bb44ede0667d55a20f8c3960a08f23d682f23748f4b2bed9145e460dba7da98f884dd4a47eb02e0ae1a7df53662d7fa", 0x7, 0x0, 0x7}, 0x50)
syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000001c0)={@val={0x0, 0xf6}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x68, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @md5sig={0x13, 0x12, "4c4b87e502f4faa38d629a87cca98bf0"}, @fastopen={0x22, 0xe, "5e2a264473053c8d6ef98c0c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x0]}, @sack={0x5, 0xe, [0x8, 0x7ff, 0x101]}]}}}}}}}}, 0x7a)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001b00)={'wlan1\x00', <r12=>0x0})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x27}, @local, 0xffffffffffffffff, "a63675b6bb42198b172bb264f1948d8e94f4765722e238df929797c9d26cf2cd", 0x8, 0x0, 0x274, 0x100}, 0x3c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x20040810)
socket$nl_audit(0x10, 0x3, 0x9)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r13, 0x0}, 0x20)

1.320167112s ago: executing program 2 (id=1621):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xffff, 0x317c, 0x3})
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="140000000400000004000000065f492da89bc66f368993946577620313a9070e4fd6ea0fd48a33220200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000480)=@buf="7a6e8c64a8bc6fbdfbece110fef2e63d55b1b9d2ef46f637958a6c1c39c9c543cf21f228af67fcdfcdb33b289cfc0531ef8e76eefda157b528655432abc757716b925146b18ec0fc8e305fac97e2e6a8712fb99d76dd3001fbe44159688401035a6dd9072e323f956c44c4a58dcdf8a16b4fcb6f260c343d63b64f17bc8d73423d7ccca8a27c356bed1fcca851d1d23e78e518d72dbaef4dafe22cdd9ec740ef0d7dd3a35c3136782def7c20ee3877d526cfba4393d20abc041c267ed21d565fed65bad38f"}, 0x20)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)={0x20000000})
r4 = socket(0x1, 0x80802, 0x0)
r5 = epoll_create1(0x0)
r6 = socket(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
close(r5)
shutdown(r4, 0x0)
close(r3)
unshare(0x68040200)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r9)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x800}, 0x8)

1.178348967s ago: executing program 3 (id=1623):
r0 = socket$kcm(0x10, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x4000)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="a38f", 0x2}], 0x1}], 0x1, 0x40800)
splice(r4, 0x0, r1, 0x0, 0x9, 0x1200000000000000)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27e, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r6, &(0x7f0000000280)="35c01634774218a35cbb1f9434d59eebe496f03f", 0x14, 0x800, &(0x7f00000002c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x80)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0127bd7000fbdbdf25010000000000000009410000004c0018000000026574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e44195898d04b8800f1f82224f95919d9a69c07852060685e0b9e988e1b87fc104ccc53f4100"], 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000)
socket$rxrpc(0x21, 0x2, 0xa)

1.130556962s ago: executing program 3 (id=1624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xac00}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000001b00)=""/246, 0xf6}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002c40)=""/4133, 0x1025}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}, {{&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f0000003c80)=""/249, 0xf9}, {&(0x7f0000003d80)=""/255, 0xff}, {&(0x7f0000003e80)=""/211, 0xd3}, {&(0x7f0000003f80)=""/244, 0xf4}, {&(0x7f0000004080)=""/207, 0xcf}], 0x7, &(0x7f0000004180)=""/201, 0xc9}, 0x400}], 0x6, 0x40012042, 0x0)

1.060400917s ago: executing program 2 (id=1625):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r3, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 32)
r5 = accept(r3, 0x0, 0x0) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000004000000040000060b00000000000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r5}, 0x47)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
write$tun(r8, &(0x7f0000000140)={@val={0x800e, 0x28}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast2}, {0x0, 0x0, 0x8}}}}}}, 0x2e) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r10}, 0x18) (async)
getpeername$netlink(r5, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x40810)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (async)
ppoll(&(0x7f0000000180)=[{r9, 0x1214}, {r1}, {r7, 0x702}, {r4, 0x28d}, {r5, 0x40}, {r2, 0x4000}, {r5, 0x1000}, {0xffffffffffffffff, 0x8054}, {r7, 0x1}], 0x9, &(0x7f0000000300), &(0x7f0000000340)={[0x100]}, 0x8) (async)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) (async, rerun: 64)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async, rerun: 64)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)

1.059861969s ago: executing program 3 (id=1626):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
close(0x3)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=@mpls_getnetconf={0x14, 0x52, 0xd03, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000013c0)=@mpls_getnetconf={0x14, 0x52, 0xd03, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x8014)

1.059440264s ago: executing program 2 (id=1627):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x4b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x3c}}, 0x40005)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet6(r12, &(0x7f00000013c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="ce", 0x1}], 0x1}, 0x8000)
setsockopt(r12, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

990.450798ms ago: executing program 3 (id=1628):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x62}, 0x2000c041)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

989.523172ms ago: executing program 3 (id=1629):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000e00), 0x12)
bind$x25(r1, &(0x7f0000000080), 0x12)
close(r1)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)="0000ffffffffa000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a010300000000000000000100000c0900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003580000000c0a01020000000000000000010000000900020073797a32000000002c0003802800008008000640000000001c000b80180001800700e0ff627400000c00028008000140000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

898.92492ms ago: executing program 0 (id=1630):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

129.926985ms ago: executing program 2 (id=1631):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
socket$phonet(0x23, 0x2, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff00", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f00000003c0)=""/182, &(0x7f0000000080)=0xb6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r7, 0x104, 0x1, &(0x7f0000000000)=0x7, 0x4)
socket(0x15, 0x5, 0xffffffff) (async)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9005}, 0x4) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x85}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000805}, 0x0) (async)
r9 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'geneve0\x00'}) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r11, 0x331}, 0x14}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, 0x0, 0x40000)

80.072104ms ago: executing program 3 (id=1632):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x7, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r4)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="9800028040000100240001006d6f6465000000000000000000000000000000000000e0ffff0000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x24)
bind$can_raw(r9, &(0x7f0000000340)={0x1d, r10}, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
gettid()

79.265309ms ago: executing program 2 (id=1633):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
close(r1)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x20, 0x17, [0x9, 0x3, 0x6, 0x1, 0x4, 0xae0, 0x7]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x882)

9.998293ms ago: executing program 0 (id=1634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000340)=0xa2f, 0x4)
sendmsg(r3, &(0x7f0000000bc0)={&(0x7f0000000640)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}, 0x84)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}})
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ibss_ssid, 0x6, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000240), 0x4)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r10)
listen(r9, 0x0)
splice(r9, 0x0, r8, 0x0, 0x406f413, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="796529bd32000000009894000000f904be89"], 0x20}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x110, r11, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_IE={0xdd, 0x2a, [@ibss={0x6, 0x2, 0x8001}, @rann={0x7e, 0x15, {{0x0, 0x6d}, 0x9, 0x5, @broadcast, 0x10000, 0xe0e1, 0x9009}}, @tim={0x5, 0x81, {0x2, 0x53, 0xb, "54311defd8311fe363bb28f93d6a7f31ffd7eeb34e971aba27c3e7cea7697605352fccbe56f349a66849686a75d1bf97699713bcef5a4791fb0e8ee18a213d51aa1d907974f6cbf9ab28214b2b5ead5abbea13d653cdc3810091b7d4f0966a0f1ddd93d506003927672432c9f41291c1a89ec3603a0080b21ada9205fde6"}}, @prep={0x83, 0x1f, {{}, 0xa8, 0x8, @device_b, 0x0, @void, 0x1, 0x101, @broadcast, 0x7}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @peer_mgmt={0x75, 0x4, {0x1, 0x2, @void, @void, @void}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x20044051)

0s ago: executing program 2 (id=1635):
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001300)={0x0, @in={0x2, 0x4e21, @multicast1}, @llc={0x1a, 0x301, 0x40, 0x5e, 0x83, 0xb, @multicast}, @qipcrtr={0x2a, 0x3, 0x7fff}, 0x3ff, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)='ipvlan0\x00', 0xa753, 0x7, 0x9})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f00000007c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000467910000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000001740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}, {&(0x7f0000001380)=@in6={0xa, 0x4e20, 0x7fff, @mcast1, 0x4}, 0x1c, &(0x7f0000001500)=[{&(0x7f00000013c0)="865a3e253c586209c93f7594134c6e5870f36b0507e11db660e41f35f4aefa4fcaae5dbdbcbde00bfa3eb8148bd226f8c925e84bef9858807e49ebf796d41d9961fd700ed263799c517cdeea150c5f2e3395a48232feb4bb3a79b5cb5cee949a94785088e80851", 0x67}, {&(0x7f0000001440)="ca6d02056cb4e2", 0x7}, {&(0x7f0000001480)="3a0ae59a9b23659317277deea71fed23855d54555cb31b753087a195b4516f8c9a376c14965f1ee00c3ad200d2ce127d2afd0bb008334fbc83b5da067da4704b5eeeeef788b33345e8d754102aa173efd02a5bc59f82c531feab9f409f5a5a0e24fdc2c0", 0x64}], 0x3, 0x0, 0x0, 0x48011}, {&(0x7f0000001540)=@in6={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001580)="09ebe00551d7a79d4b45fc79", 0xc}, {&(0x7f00000015c0)="7cf5ac1b6b315c52d66e2e8220ba6917985ebd616e668def2b184d3ee5991cc9153f6e7b0fd0a9892356d73c2a76fd0de13d6d", 0x33}], 0x2, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000fd66d4d211902ac07f903e008400000000000000f7ff03000200080018000000000000008400000000"], 0x30}], 0x3, 0x0)
setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0xffff}, {0x0, 0x10}, {0x0, 0x10}}}, 0x24}}, 0x40040001)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000080)={'wg0\x00', <r12=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r12, 0x25, 0x2, @void}, 0x10)

kernel console output (not intermixed with test programs):

3][ T5988] syzkaller0: entered promiscuous mode
[   58.269794][ T5988] syzkaller0: entered allmulticast mode
[   58.283440][ T5987] tipc: Resetting bearer <eth:syzkaller0>
[   58.290587][ T5987] tipc: Disabling bearer <eth:syzkaller0>
[   58.390425][ T5992] netlink: 'syz.0.21': attribute type 4 has an invalid length.
[   58.552216][ T5999] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   58.585010][   T55] Bluetooth: hci1: command tx timeout
[   58.595174][ T5856] Bluetooth: hci0: command tx timeout
[   58.597197][   T55] Bluetooth: hci2: command tx timeout
[   58.942259][ T5979] tipc: Disabling bearer <eth:syzkaller0>
[   58.961884][ T6023] netlink: 'syz.1.28': attribute type 4 has an invalid length.
[   58.989711][ T6026] ieee802154 phy0 wpan0: encryption failed: -22
[   59.034147][ T6031] tipc: Started in network mode
[   59.044983][ T6031] tipc: Node identity fab9252489c7, cluster identity 4711
[   59.048344][ T6031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.052926][ T6031] syzkaller0: entered promiscuous mode
[   59.056132][ T6031] syzkaller0: entered allmulticast mode
[   59.074659][ T6031] tipc: Resetting bearer <eth:syzkaller0>
[   59.080859][ T6030] tipc: Resetting bearer <eth:syzkaller0>
[   59.090429][ T6030] tipc: Disabling bearer <eth:syzkaller0>
[   59.101350][ T6033] syzkaller1: entered promiscuous mode
[   59.103757][ T6033] syzkaller1: entered allmulticast mode
[   59.262804][ T6035] netlink: 'syz.2.32': attribute type 2 has an invalid length.
[   59.277201][ T6035] k*: entered promiscuous mode
[   59.282919][ T6035] netlink: 'syz.2.32': attribute type 4 has an invalid length.
[   59.313271][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.321476][ T6035] 8021q: adding VLAN 0 to HW filter on device team0
[   59.332158][ T6035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.340534][ T6037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.382153][ T6035] syz.2.32 (6035) used greatest stack depth: 19512 bytes left
[   59.716131][ T6059] ieee802154 phy0 wpan0: encryption failed: -22
[   60.308114][ T6075] wlan1: mtu less than device minimum
[   60.359862][ T6077] team0: No ports can be present during mode change
[   60.366551][ T6077] vlan0: entered promiscuous mode
[   60.379319][ T6077] team0: Port device vlan0 added
[   60.383601][ T6077] tipc: Enabled bearer <eth:team0>, priority 0
[   60.666050][   T55] Bluetooth: hci2: command tx timeout
[   60.666790][ T5856] Bluetooth: hci0: command tx timeout
[   60.668910][ T5853] Bluetooth: hci1: command tx timeout
[   60.743455][ T6087] warning: `syz.0.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.138590][ T6110] syzkaller0: entered promiscuous mode
[   61.140681][ T6110] syzkaller0: entered allmulticast mode
[   61.391028][   T24] tipc: Node number set to 1937646884
[   62.046943][ T6132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.713166][ T6157] syzkaller0: entered promiscuous mode
[   62.716663][ T6157] syzkaller0: entered allmulticast mode
[   62.745297][ T5853] Bluetooth: hci1: command tx timeout
[   62.745617][   T55] Bluetooth: hci2: command tx timeout
[   62.755104][   T55] Bluetooth: hci0: command tx timeout
[   62.779487][ T6160] __nla_validate_parse: 50 callbacks suppressed
[   62.779498][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[   62.849339][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[   62.858326][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'.
[   62.864589][ T6165] syzkaller0: entered promiscuous mode
[   62.866850][ T6165] syzkaller0: entered allmulticast mode
[   62.882333][ T6165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.887325][ T6163] tipc: Resetting bearer <eth:syzkaller0>
[   63.495539][ T6163] tipc: Disabling bearer <eth:syzkaller0>
[   63.642301][ T6168] infiniband syz2: set down
[   63.644235][ T6168] infiniband syz2: added bond0
[   63.670904][ T6168] RDS/IB: syz2: added
[   63.672665][ T6168] smc: adding ib device syz2 with port count 1
[   63.674774][ T6168] smc:    ib device syz2 port 1 has no pnetid
[   64.100076][ T6210] netlink: 104 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.180154][ T6217] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.84'.
[   64.318536][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.512203][ T6229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.520880][ T6229] syzkaller0: entered promiscuous mode
[   64.523075][ T6229] syzkaller0: entered allmulticast mode
[   64.543782][ T6229] tipc: Resetting bearer <eth:syzkaller0>
[   64.547730][ T6228] tipc: Resetting bearer <eth:syzkaller0>
[   64.557864][ T6228] tipc: Disabling bearer <eth:syzkaller0>
[   64.640342][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'.
[   64.652546][ T6238] xt_l2tp: missing protocol rule (udp|l2tpip)
[   64.670833][ T6240] validate_nla: 9 callbacks suppressed
[   64.670848][ T6240] netlink: 'syz.0.93': attribute type 13 has an invalid length.
[   64.676747][ T6241] netlink: 'syz.0.93': attribute type 13 has an invalid length.
[   64.679980][ T6241] netlink: 'syz.0.93': attribute type 17 has an invalid length.
[   64.685061][ T6240] netlink: 'syz.0.93': attribute type 17 has an invalid length.
[   64.754786][ T6241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.771075][ T6240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.792937][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'.
[   64.971685][ T6261] netlink: 'syz.1.98': attribute type 4 has an invalid length.
[   65.021320][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[   65.182816][ T6285] netlink: 'syz.1.106': attribute type 4 has an invalid length.
[   65.206580][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'.
[   65.391814][ T6296] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   65.581978][ T6309] Illegal XDP return value 65535 on prog  (id 37) dev N/A, expect packet loss!
[   65.632995][ T6316] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   65.668527][ T6320] block nbd0: Unsupported socket: shutdown callout must be supported.
[   65.689479][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.702070][ T6315] bond1: (slave geneve2): making interface the new active one
[   65.711615][ T6315] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   65.721196][ T6322] netlink: 'syz.1.119': attribute type 14 has an invalid length.
[   65.731986][ T6315] syz.0.117 (6315) used greatest stack depth: 16696 bytes left
[   65.750682][ T6322] netlink: 'syz.1.119': attribute type 14 has an invalid length.
[   65.783119][ T6331] : renamed from vlan1 (while UP)
[   65.931400][ T6338] bond2: (slave geneve3): making interface the new active one
[   65.934580][ T6338] bond2: (slave geneve3): Enslaving as an active interface with an up link
[   65.947079][ T5902] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   65.955305][ T6338] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.958957][ T5902] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   65.962729][ T5902] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   65.968170][ T5902] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   66.050167][ T6344] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.334843][ T6360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.644222][ T6373] vlan0: entered promiscuous mode
[   66.774646][ T6379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.804652][ T6381] pim6reg1: entered promiscuous mode
[   66.808911][ T6381] pim6reg1: entered allmulticast mode
[   66.833925][ T6379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.972098][ T6379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.124768][ T6379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.211617][ T5878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.238127][ T5902] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.279792][ T5902] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.283260][ T5902] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.492593][ T6415] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   67.505253][ T6415] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   67.819940][ T6426] __nla_validate_parse: 42 callbacks suppressed
[   67.819954][ T6426] netlink: 6 bytes leftover after parsing attributes in process `syz.2.148'.
[   67.842687][ T6426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.918134][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.921319][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.928662][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'.
[   67.941528][ T6433] tipc: Resetting bearer <eth:team0>
[   67.994180][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.006348][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.072416][ T5881] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.075543][ T5881] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.078528][ T5881] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.090090][ T5881] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.262932][ T6444] netlink: 256 bytes leftover after parsing attributes in process `syz.2.155'.
[   68.326507][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'.
[   68.396290][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'.
[   68.400195][ T6452] block nbd0: not configured, cannot reconfigure
[   68.431658][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.463848][ T6454] sctp: [Deprecated]: syz.2.160 (pid 6454) Use of int in maxseg socket option.
[   68.463848][ T6454] Use struct sctp_assoc_value instead
[   68.469758][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.473066][ T6454] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   68.586012][  T982] wlan0: Trigger new scan to find an IBSS to join
[   68.667817][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'.
[   68.697846][ T6463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.164'.
[   68.832416][ T6470] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   68.836372][ T6470] macvlan2: entered allmulticast mode
[   68.838775][ T6470] bond0: entered allmulticast mode
[   68.840731][ T6470] bond_slave_0: entered allmulticast mode
[   68.843007][ T6470] bond_slave_1: entered allmulticast mode
[   68.845339][ T6470] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   68.850175][ T6470] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.853915][ T6470] bond0: left allmulticast mode
[   68.856370][ T6470] bond_slave_0: left allmulticast mode
[   68.859619][ T6470] bond_slave_1: left allmulticast mode
[   68.861818][ T6470] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   68.864675][ T6470] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   68.939712][ T6472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.167'.
[   69.863636][ T6486] validate_nla: 7 callbacks suppressed
[   69.863656][ T6486] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   69.985346][ T6490] netlink: 'syz.2.171': attribute type 4 has an invalid length.
[   70.022125][ T6496] netlink: 'syz.0.172': attribute type 12 has an invalid length.
[   70.077364][ T6505] openvswitch: netlink: Flow key attr not present in new flow.
[   70.123974][ T6508] veth0_to_bond: entered allmulticast mode
[   70.235323][ T6514] netlink: 'syz.2.177': attribute type 3 has an invalid length.
[   70.239593][ T6514] netlink: 'syz.2.177': attribute type 3 has an invalid length.
[   70.294809][ T6519] dvmrp1: entered allmulticast mode
[   70.303020][ T6520] netlink: 'syz.2.180': attribute type 4 has an invalid length.
[   70.611176][ T6537] syzkaller1: entered promiscuous mode
[   70.613700][ T6537] syzkaller1: entered allmulticast mode
[   71.012817][ T6547] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   71.090974][ T6551] netlink: 'syz.0.189': attribute type 4 has an invalid length.
[   71.125859][ T6553] netlink: 'syz.0.190': attribute type 58 has an invalid length.
[   71.363523][   T47] IPVS: starting estimator thread 0...
[   71.427169][ T6579] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   71.465667][ T6571] IPVS: using max 47 ests per chain, 112800 per kthread
[   71.470831][ T6582] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[   71.626473][   T36] wlan0: Trigger new scan to find an IBSS to join
[   71.802143][ T6602] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   71.848143][ T6607] nbd: must specify an index to disconnect
[   72.516492][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.741440][ T6616] syzkaller1: entered promiscuous mode
[   72.743914][ T6616] syzkaller1: entered allmulticast mode
[   73.114912][ T6628] __nla_validate_parse: 16 callbacks suppressed
[   73.114933][ T6628] netlink: 666 bytes leftover after parsing attributes in process `syz.0.215'.
[   73.303302][ T6636] team0: Port device vlan0 removed
[   73.597346][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   73.716998][ T6650] bridge1: entered allmulticast mode
[   73.780452][ T6653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.221'.
[   73.804039][ T6653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.221'.
[   73.996750][ T6663] gretap1: entered promiscuous mode
[   74.087899][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'.
[   74.123227][ T6679] netlink: 504 bytes leftover after parsing attributes in process `syz.1.227'.
[   74.177703][ T6681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'.
[   74.552781][ T6704] bridge: RTM_NEWNEIGH with invalid ether address
[   74.586525][ T6707] syz_tun: entered allmulticast mode
[   74.607224][ T6707] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.620476][ T6707] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   74.626815][ T6705] netlink: 116 bytes leftover after parsing attributes in process `syz.1.235'.
[   74.650992][ T6709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.656399][ T6709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.673970][ T6706] syz_tun: left allmulticast mode
[   74.731825][ T6709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.736276][ T6709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.807244][ T6709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.811267][ T6709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.849602][ T6709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.853753][ T6709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.966653][ T5878] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   74.970243][ T5878] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   74.975573][ T6715] validate_nla: 6 callbacks suppressed
[   74.975581][ T6715] netlink: 'syz.2.241': attribute type 4 has an invalid length.
[   74.986163][ T5878] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   74.992612][ T5878] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   75.019357][ T5878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   75.022854][ T5878] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   75.027935][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   75.030806][ T5878] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   75.079557][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   75.082757][ T6723] netlink: 'syz.2.244': attribute type 3 has an invalid length.
[   75.128075][ T6728] batadv_slave_1: entered promiscuous mode
[   75.131907][ T6729] vxcan1: entered allmulticast mode
[   75.135669][ T6727] batadv_slave_1: left promiscuous mode
[   75.138263][ T6729] vxcan1: left allmulticast mode
[   75.171688][ T6733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.206502][ T6729] raw_sendmsg: syz.0.246 forgot to set AF_INET. Fix it!
[   75.266454][ T6739] netlink: 'syz.0.249': attribute type 4 has an invalid length.
[   75.386398][ T6752] bridge_slave_0: left allmulticast mode
[   75.393091][ T6752] bridge_slave_0: left promiscuous mode
[   75.396081][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.401845][ T6752] bridge_slave_1: left allmulticast mode
[   75.404562][ T6752] bridge_slave_1: left promiscuous mode
[   75.416043][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.428889][ T6752] bond0: (slave bond_slave_0): Releasing backup interface
[   75.441517][ T6752] bond0: (slave bond_slave_1): Releasing backup interface
[   75.448444][ T6752] team0: Port device team_slave_0 removed
[   75.453299][ T6752] team0: Port device team_slave_1 removed
[   75.459148][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.463013][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.467580][ T6752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   75.480498][ T6752] netlink: 'syz.1.253': attribute type 10 has an invalid length.
[   75.523986][ T6768] openvswitch: netlink: Key type 29 is not supported
[   75.532570][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   75.613695][ T6773] netlink: 'syz.2.257': attribute type 4 has an invalid length.
[   75.770908][ T6789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   75.775313][ T6789] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   75.778483][ T6789] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   75.782517][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.790637][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.910270][ T6805] netlink: 'syz.2.268': attribute type 4 has an invalid length.
[   75.918117][ T6807] syzkaller1: entered promiscuous mode
[   75.920121][ T6807] syzkaller1: entered allmulticast mode
[   76.044357][ T6811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.058657][ T6811] tipc: Resetting bearer <eth:syzkaller0>
[   76.160719][   T47] IPVS: starting estimator thread 0...
[   76.199661][ T5919] tipc: Node number set to 2822087567
[   76.245180][ T6817] IPVS: using max 40 ests per chain, 96000 per kthread
[   76.278319][ T6819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.289588][ T6819] netem: change failed
[   76.317657][ T6821] netlink: 'syz.2.275': attribute type 4 has an invalid length.
[   76.321989][ T6821] netlink: 'syz.2.275': attribute type 4 has an invalid length.
[   76.374456][ T6823] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   76.504353][ T6827] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.509634][ T6828] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.556988][ T6830] netlink: 'syz.2.279': attribute type 10 has an invalid length.
[   76.572883][ T6830] team0: Port device dummy0 added
[   76.605669][  T791] cfg80211: failed to load regulatory.db
[   76.654687][ T6835] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   76.787348][ T6849] syz_tun: entered allmulticast mode
[   76.825622][ T6848] syz_tun: left allmulticast mode
[   76.966566][ T6855] tipc: Resetting bearer <eth:syzkaller0>
[   77.195849][ T6865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   77.861082][ T6883] macsec1: entered promiscuous mode
[   77.863059][ T6883] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   77.866990][ T6883] macsec1: entered allmulticast mode
[   77.868976][ T6883] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   77.874717][ T6883] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   77.879509][ T6883] tipc: Resetting bearer <eth:syzkaller0>
[   77.892331][ T6883] macsec0: mtu less than device minimum
[   77.962652][ T6890] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   78.049056][ T6892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.625735][ T6911] __nla_validate_parse: 8 callbacks suppressed
[   78.625751][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'.
[   78.631958][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   78.752197][ T6914] netlink: 140 bytes leftover after parsing attributes in process `syz.0.301'.
[   78.757556][ T6917] netlink: 140 bytes leftover after parsing attributes in process `syz.0.301'.
[   78.770770][ T6914] 8021q: adding VLAN 0 to HW filter on device team0
[   78.774506][ T6914] bond0: (slave team0): Enslaving as an active interface with an up link
[   78.843378][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.302'.
[   79.142626][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[   79.165199][ T6942] team0: entered promiscuous mode
[   79.167175][ T6942] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.389346][ T6950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'.
[   79.818860][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'.
[   79.934762][ T6983] netlink: 3 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.989899][ T6983] batadv1: entered promiscuous mode
[   79.996706][ T6983] batadv1: entered allmulticast mode
[   80.090002][ T6992] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   80.173695][ T7001] validate_nla: 8 callbacks suppressed
[   80.173707][ T7001] netlink: 'syz.0.321': attribute type 16 has an invalid length.
[   80.182694][ T7001] netlink: 'syz.0.321': attribute type 17 has an invalid length.
[   80.358314][ T7012] netlink: 'syz.1.322': attribute type 10 has an invalid length.
[   80.368373][ T7014] IPv6: NLM_F_REPLACE set, but no existing node found!
[   80.410525][ T7016] netlink: 'syz.1.322': attribute type 10 has an invalid length.
[   80.640351][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   80.656916][ T7012] dummy0: entered promiscuous mode
[   80.659277][ T7012] team0: Port device dummy0 added
[   80.676984][ T7016] dummy0: left promiscuous mode
[   80.680568][ T7016] team0: Port device dummy0 removed
[   80.691340][ T7016] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   80.699350][ T5881] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   80.702456][ T5881] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   80.706373][ T5881] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   80.710188][ T5881] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   80.716096][ T5881] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   80.718979][ T5881] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   80.735573][ T5881] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   80.738496][ T5881] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   81.194371][ T7041] vlan0: entered promiscuous mode
[   81.197381][ T7041] batadv0: entered promiscuous mode
[   81.292939][ T7046] netlink: 'syz.2.329': attribute type 3 has an invalid length.
[   81.567470][ T7062] netlink: 'syz.2.335': attribute type 16 has an invalid length.
[   81.574273][ T7065] team0: Device ipip0 is up. Set it down before adding it as a team port
[   81.597340][ T7062] netlink: 'syz.2.335': attribute type 13 has an invalid length.
[   81.666914][ T7065] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.935498][ T7084] siw: device registration error -23
[   81.999283][ T7086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.007695][ T7085] tipc: Resetting bearer <eth:syzkaller0>
[   82.712084][ T7085] tipc: Disabling bearer <eth:syzkaller0>
[   82.801063][ T7094] ..0: renamed from hsr0
[   82.804305][ T7094] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.808159][ T7094] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.812088][ T7094] ..0: entered allmulticast mode
[   82.814053][ T7094] hsr_slave_0: entered allmulticast mode
[   82.818776][ T7094] hsr_slave_1: entered allmulticast mode
[   82.821877][ T7094] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   82.928774][ T7100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.104661][ T7110] Bluetooth: MGMT ver 1.23
[   83.293868][ T7126] netlink: 'syz.2.349': attribute type 4 has an invalid length.
[   83.299876][ T7127] netlink: 'syz.0.348': attribute type 11 has an invalid length.
[   83.528838][ T7147] netlink: 'syz.1.356': attribute type 4 has an invalid length.
[   83.706979][ T7158] __nla_validate_parse: 57 callbacks suppressed
[   83.706999][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'.
[   83.782366][ T7152] : renamed from wg2
[   84.080168][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   84.136624][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'.
[   84.152593][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   84.196546][ T7174] netlink: 'syz.0.362': attribute type 4 has an invalid length.
[   84.204609][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'.
[   84.513683][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   84.881628][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'.
[   85.233543][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[   85.275993][ T7208] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   85.279497][ T7208] validate_nla: 2 callbacks suppressed
[   85.279510][ T7208] netlink: 'syz.0.373': attribute type 2 has an invalid length.
[   85.288357][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   85.289046][ T7208] netlink: 51 bytes leftover after parsing attributes in process `syz.0.373'.
[   85.378312][ T7220] team0: No ports can be present during mode change
[   85.382589][ T7220] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[   85.390963][ T7220] tipc: Enabled bearer <eth:team0>, priority 0
[   85.476231][ T7225] netlink: 'syz.0.377': attribute type 8 has an invalid length.
[   87.023959][ T7317] netlink: 'syz.2.386': attribute type 4 has an invalid length.
[   87.089884][ T7328] netlink: 'syz.1.387': attribute type 7 has an invalid length.
[   87.169897][ T7345] syzkaller0: entered promiscuous mode
[   87.174667][ T7345] syzkaller0: entered allmulticast mode
[   87.187908][ T7343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.231123][ T7343] tipc: Resetting bearer <eth:syzkaller0>
[   87.244273][ T7343] tipc: Disabling bearer <eth:syzkaller0>
[   87.334558][ T7367] veth0_to_bond: entered allmulticast mode
[   87.823873][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.134555][ T7415] ipvlan2: entered promiscuous mode
[   88.137580][ T7415] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   88.450679][ T7438] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[   88.453471][ T7437] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[   88.665232][   T55] Bluetooth: hci0: command tx timeout
[   88.699037][ T7457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.701795][ T7457] syzkaller0: entered promiscuous mode
[   88.703815][ T7457] syzkaller0: entered allmulticast mode
[   88.718664][ T7457] tipc: Resetting bearer <eth:syzkaller0>
[   88.722370][ T7456] tipc: Resetting bearer <eth:syzkaller0>
[   88.733630][ T7456] tipc: Disabling bearer <eth:syzkaller0>
[   89.813664][ T7489] netlink: 'syz.0.429': attribute type 26 has an invalid length.
[   89.983560][ T7506] openvswitch: netlink: Key type 156 is out of range max 32
[   90.004341][ T7509] __nla_validate_parse: 18 callbacks suppressed
[   90.004353][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'.
[   90.203033][ T7526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.216704][ T7526] syzkaller0: entered promiscuous mode
[   90.218626][ T7526] syzkaller0: entered allmulticast mode
[   90.238413][ T7526] tipc: Resetting bearer <eth:syzkaller0>
[   90.247400][ T7526] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   90.272850][ T7533] tipc: Resetting bearer <eth:syzkaller0>
[   90.286397][ T7533] tipc: Disabling bearer <eth:syzkaller0>
[   90.379138][ T7550] syzkaller0: entered allmulticast mode
[   90.400797][ T7553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.450'.
[   90.406102][ T7553] netlink: 156 bytes leftover after parsing attributes in process `syz.0.450'.
[   90.434134][ T7541] syzkaller0: left allmulticast mode
[   90.543602][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.454'.
[   90.691108][ T7584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.929865][ T7597] netlink: 'syz.1.462': attribute type 13 has an invalid length.
[   90.935040][ T7597] netlink: 'syz.1.462': attribute type 17 has an invalid length.
[   90.980706][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.983941][ T7597] team0: left promiscuous mode
[   90.986911][ T7597] 8021q: adding VLAN 0 to HW filter on device team0
[   90.989594][ T7597] tipc: Resetting bearer <eth:team0>
[   90.992024][ T7597] tipc: Resetting bearer <eth:team0>
[   90.996253][ T7597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.002145][ T7599] xfrm0: entered promiscuous mode
[   91.004001][ T7599] xfrm0: entered allmulticast mode
[   91.233445][ T7607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.465'.
[   91.240133][ T7607] netlink: 56 bytes leftover after parsing attributes in process `syz.2.465'.
[   91.247812][ T7607] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   91.251409][ T7607] gretap1: entered promiscuous mode
[   91.253322][ T7607] gretap1: entered allmulticast mode
[   91.262469][ T7607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.362024][ T7616] netlink: 80 bytes leftover after parsing attributes in process `syz.2.469'.
[   91.479767][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[   91.728980][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881212b3400: rx timeout, send abort
[   91.758934][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.920198][ T7638] netlink: 156 bytes leftover after parsing attributes in process `syz.2.477'.
[   92.229346][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881212b3000: rx timeout, send abort
[   92.233874][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881212b3400: abort rx timeout. Force session deactivation
[   92.262735][ T7658] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[   92.385767][ T7660] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.436329][ T7664] tipc: Resetting bearer <eth:syzkaller0>
[   92.449580][ T7664] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   92.451971][ T7664] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   92.493350][ T7670] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[   92.510104][ T7670] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   92.513573][ T7670] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   92.522855][ T7670] bond2: (slave vcan1): making interface the new active one
[   92.526995][ T7670] bond2: (slave vcan1): Enslaving as an active interface with an up link
[   92.537276][ T7670] bond2: (slave vcan2): The slave device specified does not support setting the MAC address
[   92.547977][ T7670] bond2: (slave vcan2): Enslaving as a backup interface with an up link
[   92.555760][ T7672] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.597186][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[   92.620610][ T7690] netlink: 'syz.1.490': attribute type 1 has an invalid length.
[   92.628220][ T7690] netlink: 'syz.1.490': attribute type 2 has an invalid length.
[   92.659693][ T7692] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   92.732728][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881212b3000: abort rx timeout. Force session deactivation
[   92.799747][ T7712] netlink: 'syz.1.498': attribute type 6 has an invalid length.
[   92.852008][ T7717] sctp: [Deprecated]: syz.0.500 (pid 7717) Use of int in max_burst socket option deprecated.
[   92.852008][ T7717] Use struct sctp_assoc_value instead
[   92.928219][ T7730] ip_vti0: mtu less than device minimum
[   92.941468][ T7718] netlink: 'syz.0.500': attribute type 1 has an invalid length.
[   92.944741][ T7731] netlink: 'syz.0.500': attribute type 1 has an invalid length.
[   93.122398][ T7752] netlink: 'syz.2.509': attribute type 13 has an invalid length.
[   93.986574][ T7796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.270984][ T7823] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   94.321049][ T7825] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20001
[   94.416704][ T7823] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   94.421676][ T7823] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   94.428340][ T7823] bond0 (unregistering): Released all slaves
[   94.723484][ T7845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.729787][ T7845] tipc: Resetting bearer <eth:syzkaller0>
[   95.039224][ T7866] __nla_validate_parse: 17 callbacks suppressed
[   95.039237][ T7866] netlink: 104 bytes leftover after parsing attributes in process `syz.2.543'.
[   95.052641][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[   95.072382][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'.
[   95.123847][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'.
[   95.127207][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'.
[   95.416040][ T7880] netlink: 500 bytes leftover after parsing attributes in process `syz.1.548'.
[   95.580462][ T7895] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.631502][ T7906] netlink: 156 bytes leftover after parsing attributes in process `syz.1.555'.
[   95.852374][ T7914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.557'.
[   95.949517][ T7926] validate_nla: 8 callbacks suppressed
[   95.949536][ T7926] netlink: 'syz.0.559': attribute type 2 has an invalid length.
[   95.964290][ T7926] : entered promiscuous mode
[   95.968125][ T7926] netlink: 'syz.0.559': attribute type 2 has an invalid length.
[   96.054286][ T7926] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.559'.
[   96.167155][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'.
[   96.239525][ T7947] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.270456][ T7947] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.275243][ T5881] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:305e:94ff:fe52:c08a error=-28
[   96.276374][ T7947] bond5: (slave macvlan2): Enslaving as a backup interface with an up link
[   96.281932][ T5881] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:305e:94ff:fe52:c08a error=-28
[   96.287668][ T7947] bond0: (slave team0): Releasing backup interface
[   96.290770][ T7947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.356801][ T5878] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   96.362457][ T5878] bond5: (slave macvlan2): link status up again after 0 ms
[   96.369546][ T7961] netlink: 'syz.0.568': attribute type 10 has an invalid length.
[   96.385650][ T5902] bond5: (slave macvlan2): link status up again after 0 ms
[   96.388581][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[   96.467803][ T5902] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   96.482608][ T7976] netlink: 'syz.1.572': attribute type 4 has an invalid length.
[   96.495339][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[   96.606675][ T7989] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   96.611116][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[   96.735132][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[   96.880603][ T8003] netlink: 'syz.2.582': attribute type 4 has an invalid length.
[   97.060161][ T8011] team0: Mode changed to "broadcast"
[   97.064273][ T8011] vlan0: entered promiscuous mode
[   97.114657][ T8011] tipc: Enabled bearer <eth:team0>, priority 0
[   97.194212][ T8018] tap0: tun_chr_ioctl cmd 1074025677
[   97.198854][ T8018] tap0: linktype set to 0
[   97.551747][ T8029] netlink: 'syz.1.589': attribute type 4 has an invalid length.
[   97.876253][ T8054] netlink: 'syz.1.596': attribute type 4 has an invalid length.
[   97.998311][ T8064] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[   98.031156][ T8064] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.046960][ T8065] bond3: (slave geneve2): making interface the new active one
[   98.051419][ T8065] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   98.065296][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.083176][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.089884][ T5902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.103667][ T5902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.225132][ T5919] tipc: Node number set to 1324283766
[   98.268294][ T8082] netlink: 'syz.1.604': attribute type 9 has an invalid length.
[   98.325971][ T8086] team0: Mode changed to "broadcast"
[   98.363145][ T8086] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   98.985082][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   99.198143][ T8128] @: renamed from veth0_vlan
[   99.239871][ T8131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   99.351395][ T8139] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.583634][ T8150] gtp0: entered allmulticast mode
[   99.630950][ T8160] team0: No ports can be present during mode change
[   99.650331][ T8160] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   99.786577][ T8163] nbd1: detected capacity change from 0 to 127
[   99.795158][ T8167] block nbd1: Receive control failed (result -104)
[   99.817045][ T8165] netlink: 'syz.1.621': attribute type 4 has an invalid length.
[  100.044018][ T8186] can: request_module (can-proto-5) failed.
[  100.503655][ T8219] __nla_validate_parse: 21 callbacks suppressed
[  100.503675][ T8219] netlink: 324 bytes leftover after parsing attributes in process `syz.1.636'.
[  100.827568][ T8234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.641'.
[  100.831041][ T8235] netlink: 48 bytes leftover after parsing attributes in process `syz.2.641'.
[  100.845626][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'.
[  100.929704][ T8242] team0: Unable to change to the same mode the team is in
[  100.970177][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[  100.973964][ T8237] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  100.979938][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.983792][ T8247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.288091][ T8261] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.648'.
[  101.310287][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'.
[  101.335326][ T5902] net_ratelimit: 35 callbacks suppressed
[  101.335345][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  101.341614][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'.
[  101.455926][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  101.537765][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'.
[  101.574604][ T8283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.581776][ T8282] tipc: Resetting bearer <eth:syzkaller0>
[  102.527081][ T8282] tipc: Disabling bearer <eth:syzkaller0>
[  102.555220][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  102.665543][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  102.772065][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'.
[  102.778845][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  102.787578][ T8318] team0: Unable to change to the same mode the team is in
[  102.844501][ T8324] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  102.895166][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  103.025373][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  103.079830][ T8332] validate_nla: 3 callbacks suppressed
[  103.079841][ T8332] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[  103.084220][ T8332] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[  103.155843][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  103.253980][ T8363] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[  103.262596][ T8362] nbd: couldn't find a device at index 0
[  103.285385][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  103.344702][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.348425][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.395775][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  103.491597][ T8383] bridge0: entered allmulticast mode
[  103.500819][ T8383] pim6reg: entered allmulticast mode
[  103.635367][ T8390] pim6reg1: entered promiscuous mode
[  103.637333][ T8390] pim6reg1: entered allmulticast mode
[  103.759066][ T8405] netlink: 'syz.1.684': attribute type 4 has an invalid length.
[  103.839861][ T8407] netlink: 'syz.0.685': attribute type 58 has an invalid length.
[  103.861508][ T8412] team0: No ports can be present during mode change
[  103.867906][ T8412] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  104.214793][ T8434] netlink: 'syz.1.694': attribute type 21 has an invalid length.
[  104.280827][ T8434] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.400336][ T8446] veth0: entered promiscuous mode
[  104.500607][ T8446] veth0: left promiscuous mode
[  104.888206][ T8478] IPVS: Unknown mcast interface: veth1_to_bridge
[  105.282784][ T8492] team0: Unable to change to the same mode the team is in
[  105.383792][ T8494] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  105.690008][ T8505] __nla_validate_parse: 17 callbacks suppressed
[  105.690024][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[  105.753624][ T8507] Bluetooth: MGMT ver 1.23
[  106.095050][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.718'.
[  106.227674][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'.
[  106.344637][ T8563] netlink: 'syz.0.723': attribute type 4 has an invalid length.
[  106.345020][    C0] net_ratelimit: 43 callbacks suppressed
[  106.345034][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.385677][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  106.509048][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  106.533957][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.724'.
[  106.652483][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'.
[  106.659163][ T8589] netlink: 34 bytes leftover after parsing attributes in process `syz.0.728'.
[  106.674315][ T8589] netlink: 'syz.0.728': attribute type 10 has an invalid length.
[  106.675511][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  106.729134][ T8589] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.795657][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  106.881565][ T8589] block nbd0: Unsupported socket: shutdown callout must be supported.
[  106.932262][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  106.994023][ T8614] netlink: 'syz.1.730': attribute type 4 has an invalid length.
[  107.095074][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  107.193455][ T8642] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.205911][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  107.328319][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  107.386079][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  108.122048][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.744'.
[  108.137834][ T8673] team0: Unable to change to the same mode the team is in
[  108.142587][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'.
[  108.179230][ T8673] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  108.240161][ T8681] veth0: entered promiscuous mode
[  108.417589][ T8681] veth0: left promiscuous mode
[  108.424794][ T8689] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  108.429624][ T8689] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.452851][ T8691] netlink: 'syz.1.750': attribute type 4 has an invalid length.
[  108.534077][ T8693] delete_channel: no stack
[  108.552165][ T8700] netlink: 256 bytes leftover after parsing attributes in process `syz.2.749'.
[  108.566101][ T8700] netlink: 48 bytes leftover after parsing attributes in process `syz.2.749'.
[  109.353198][ T8722] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  109.416692][ T8727] team0: Unable to change to the same mode the team is in
[  109.473530][ T8735] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  109.562625][ T8738] netlink: 'syz.2.762': attribute type 3 has an invalid length.
[  109.598502][ T8744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.601272][ T8744] IPv6: NLM_F_CREATE should be set when creating new route
[  109.604063][ T8744] IPv6: NLM_F_CREATE should be set when creating new route
[  109.624054][ T8746] netlink: 'syz.1.765': attribute type 1 has an invalid length.
[  110.277004][ T8762] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  110.432862][ T8766] netlink: 'syz.0.770': attribute type 3 has an invalid length.
[  110.614456][ T8786] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  110.726033][ T8791] netlink: 'syz.1.777': attribute type 3 has an invalid length.
[  110.729390][ T8791] __nla_validate_parse: 11 callbacks suppressed
[  110.729402][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'.
[  111.006533][ T8810] gretap3: entered promiscuous mode
[  111.011995][ T8813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.784'.
[  111.016329][ T8813] netlink: 43 bytes leftover after parsing attributes in process `syz.1.784'.
[  111.019992][ T8813] netlink: 'syz.1.784': attribute type 5 has an invalid length.
[  111.023351][ T8813] netlink: 43 bytes leftover after parsing attributes in process `syz.1.784'.
[  111.081986][ T8818] netlink: 'syz.2.785': attribute type 3 has an invalid length.
[  111.089703][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'.
[  111.105182][ T8821] netlink: 'syz.1.786': attribute type 9 has an invalid length.
[  111.193194][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'.
[  111.445173][ T5902] net_ratelimit: 38 callbacks suppressed
[  111.445187][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  111.554980][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  111.615078][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  111.700393][ T8843] syzkaller1: entered promiscuous mode
[  111.702851][ T8843] syzkaller1: entered allmulticast mode
[  111.725448][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  111.835725][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  111.882439][ T8847] netlink: 'syz.2.793': attribute type 3 has an invalid length.
[  111.888235][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'.
[  111.937189][ T8850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.956867][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  111.981272][ T8852] netlink: 112 bytes leftover after parsing attributes in process `syz.2.796'.
[  112.010686][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'.
[  112.014711][ T8856] team0: No ports can be present during mode change
[  112.018499][ T8856] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  112.065108][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  112.175708][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  112.285523][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  112.406508][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  112.511334][ T6025] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[  112.515727][ T6025] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[  112.549209][ T8883] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  112.551763][ T8883] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  112.971646][ T8890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.194245][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.809'.
[  113.240532][ T8918] netem: change failed
[  113.404459][ T8939] team0: No ports can be present during mode change
[  113.413787][ T8939] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  113.580910][ T8962] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.588424][ T8962] tipc: Resetting bearer <eth:syzkaller0>
[  113.622177][ T8964] validate_nla: 1 callbacks suppressed
[  113.622190][ T8964] netlink: 'syz.1.821': attribute type 29 has an invalid length.
[  113.643717][ T8967] bond0: (slave rose0): Error: Device can not be enslaved while up
[  113.903740][ T8987] ip6tnl2: entered promiscuous mode
[  113.906806][ T8987] ip6tnl2: entered allmulticast mode
[  113.909721][ T8987] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  114.192565][ T9004] block nbd0: not configured, cannot reconfigure
[  114.228396][ T9011] netlink: 'syz.0.833': attribute type 3 has an invalid length.
[  114.279032][ T9013] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  114.306325][ T9013] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.327350][ T9013] bond4: (slave gretap4): making interface the new active one
[  114.330925][ T9013] bond4: (slave gretap4): Enslaving as an active interface with an up link
[  115.807996][ T9075] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  115.811151][ T9075] netlink: 'syz.0.851': attribute type 11 has an invalid length.
[  115.814281][ T9075] __nla_validate_parse: 85 callbacks suppressed
[  115.814288][ T9075] netlink: 220 bytes leftover after parsing attributes in process `syz.0.851'.
[  115.900400][ T9080] netlink: 'syz.0.853': attribute type 10 has an invalid length.
[  115.903203][ T9080] macvlan0: entered allmulticast mode
[  115.908067][ T9080] veth1_vlan: entered allmulticast mode
[  115.912719][ T9080] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  116.145794][ T9090] netlink: 'syz.0.856': attribute type 3 has an invalid length.
[  116.148623][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'.
[  116.347911][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'.
[  116.473646][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.862'.
[  116.481646][ T9105] netlink: 'syz.2.862': attribute type 4 has an invalid length.
[  116.485523][ T9105] netlink: 'syz.2.862': attribute type 4 has an invalid length.
[  116.555030][ T5881] net_ratelimit: 31 callbacks suppressed
[  116.555044][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  116.667594][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  116.721272][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[  116.724561][ T9113] netlink: 'syz.2.865': attribute type 30 has an invalid length.
[  116.754938][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  116.759218][ T5881] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.760324][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[  116.762698][ T5881] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.771692][ T5881] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.774831][ T5881] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.802023][ T9113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.812474][ T9117] netlink: 740 bytes leftover after parsing attributes in process `syz.1.866'.
[  116.830830][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'.
[  116.838765][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  116.893967][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'.
[  116.944989][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  117.057636][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  117.176535][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  117.242877][ T9140] netlink: 128 bytes leftover after parsing attributes in process `syz.0.874'.
[  117.285833][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  117.396351][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  117.505014][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  118.012080][ T9170] team0: No ports can be present during mode change
[  118.020359][ T9170] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  118.689933][ T9198] validate_nla: 5 callbacks suppressed
[  118.689944][ T9198] netlink: 'syz.0.890': attribute type 10 has an invalid length.
[  119.292302][ T9228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  119.634517][ T9244] veth0: entered promiscuous mode
[  119.648303][ T9244] veth0 (unregistering): left promiscuous mode
[  119.830900][ T9257] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  119.834329][ T9257] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  120.050886][ T9266] netlink: 'syz.2.910': attribute type 4 has an invalid length.
[  120.303034][ T9274] veth7: entered promiscuous mode
[  120.342709][ T3975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.347763][ T3975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.522004][ T9293] netlink: 'syz.0.915': attribute type 1 has an invalid length.
[  120.743429][ T9302] netlink: 'syz.1.917': attribute type 4 has an invalid length.
[  120.934613][ T9315] netlink: 'syz.1.921': attribute type 4 has an invalid length.
[  120.958456][ T9315] netlink: 'syz.1.921': attribute type 4 has an invalid length.
[  121.085604][ T9322] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  121.089803][ T9322] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  121.124618][ T9322] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003
[  121.129143][ T9322] __nla_validate_parse: 18 callbacks suppressed
[  121.129152][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[  121.309174][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'.
[  121.508757][ T9331] netlink: 'syz.0.926': attribute type 4 has an invalid length.
[  121.544530][ T9334] netlink: 'syz.2.927': attribute type 4 has an invalid length.
[  121.596891][ T5902] net_ratelimit: 38 callbacks suppressed
[  121.596903][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  121.615048][ T9339] netlink: 'syz.2.928': attribute type 3 has an invalid length.
[  121.621260][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'.
[  121.644639][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.930'.
[  121.648634][ T9341] team0: Unable to change to the same mode the team is in
[  121.682109][ T9341] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  121.716502][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  121.825305][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  121.935272][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.075318][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.110065][ T9360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.935'.
[  122.113841][ T9360] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.186081][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.294937][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  122.305547][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.425034][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.522632][ T9377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.941'.
[  122.525930][ T9377] netlink: 1 bytes leftover after parsing attributes in process `syz.1.941'.
[  122.538793][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.544349][ T9386] netlink: 'syz.2.944': attribute type 3 has an invalid length.
[  122.590309][ T9391] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.947'.
[  122.596084][ T9391] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.947'.
[  122.665782][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  122.933127][ T9415] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  123.090709][ T9430] team0: Unable to change to the same mode the team is in
[  123.101488][ T9430] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  123.507454][ T9468] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.669663][ T9477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.721427][ T9479] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  123.724477][ T9479] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  123.967689][ T9486] validate_nla: 2 callbacks suppressed
[  123.967707][ T9486] netlink: 'syz.1.977': attribute type 4 has an invalid length.
[  124.313154][ T9507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.173382][ T9521] netlink: 'syz.1.988': attribute type 3 has an invalid length.
[  125.387531][ T9536] nbd: nbd1 already in use
[  125.390633][ T9536] block nbd1: NBD_DISCONNECT
[  125.392717][ T9536] block nbd1: Send disconnect failed -32
[  125.398487][ T9536] block nbd1: shutting down sockets
[  125.408060][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.412142][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  125.415663][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.419589][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  125.423274][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.427380][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  125.430831][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.434930][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  125.438494][ T5851] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.444761][ T5851] Buffer I/O error on dev nbd1, logical block 0, async page read
[  125.455175][ T5851] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.464944][ T5851] Buffer I/O error on dev nbd1, logical block 1, async page read
[  125.468382][ T5851] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.472491][ T5851] Buffer I/O error on dev nbd1, logical block 2, async page read
[  125.485122][ T5851] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.488917][ T5851] Buffer I/O error on dev nbd1, logical block 3, async page read
[  125.492346][ T5851] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.505444][ T5851] Buffer I/O error on dev nbd1, logical block 0, async page read
[  125.509300][ T5851] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.513199][ T5851] Buffer I/O error on dev nbd1, logical block 1, async page read
[  125.527765][ T5851] ldm_validate_partition_table(): Disk read failed.
[  125.533079][ T5851] Dev nbd1: unable to read RDB block 0
[  125.537883][ T5851]  nbd1: unable to read partition table
[  125.554381][ T5851] ldm_validate_partition_table(): Disk read failed.
[  125.563428][ T5851] Dev nbd1: unable to read RDB block 0
[  125.569462][ T5851]  nbd1: unable to read partition table
[  125.800079][ T9561] delete_channel: no stack
[  126.195291][ T9593] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  126.198744][ T9593] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  126.203477][ T9593] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  126.256880][ T9598] netlink: 'syz.2.1012': attribute type 3 has an invalid length.
[  126.259557][ T9598] __nla_validate_parse: 19 callbacks suppressed
[  126.259564][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'.
[  126.422602][ T9614] batadv_slave_1: entered promiscuous mode
[  126.423408][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'.
[  126.432109][ T9618] team0: Unable to change to the same mode the team is in
[  126.442129][ T9613] batadv_slave_1: left promiscuous mode
[  126.471420][ T9623] ipvlan0: entered promiscuous mode
[  126.473902][ T9618] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  126.589409][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'.
[  126.609682][ T5902] net_ratelimit: 82 callbacks suppressed
[  126.609702][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  126.624622][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'.
[  126.631159][ T9633] bond0: (slave rose0): Error: Device can not be enslaved while up
[  126.726542][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  126.835507][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  126.946225][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.000418][ T9663] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1030'.
[  127.004134][ T9663] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1030'.
[  127.010161][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1030'.
[  127.016637][ T9663] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1030'.
[  127.019972][ T9663] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1030'.
[  127.023499][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1030'.
[  127.075469][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.188224][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.295617][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.333033][ T9688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.339470][ T9688] syzkaller0: entered promiscuous mode
[  127.342089][ T9688] syzkaller0: entered allmulticast mode
[  127.354536][ T9688] tipc: Resetting bearer <eth:syzkaller0>
[  127.416203][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.525223][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.641894][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  127.686867][ T9710] macsec0: entered promiscuous mode
[  127.689421][ T9710] ip6gretap0: entered promiscuous mode
[  127.692065][ T9710] macsec0: entered allmulticast mode
[  127.694592][ T9710] ip6gretap0: entered allmulticast mode
[  127.742746][ T9717] team0: Unable to change to the same mode the team is in
[  127.779164][ T9717] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  128.019639][ T9738] sctp: [Deprecated]: syz.0.1052 (pid 9738) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.019639][ T9738] Use struct sctp_sack_info instead
[  128.066858][ T9742] netlink: 'syz.0.1053': attribute type 1 has an invalid length.
[  128.103873][ T9745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.182844][ T9752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.187195][ T9752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.265700][ T9752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.269347][ T9752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.320554][ T9752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.325197][ T9752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.382531][ T9752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.386421][ T9752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.447470][ T5902] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.450894][ T5902] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.464157][ T5902] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.469129][ T5902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.479272][ T9767] macvtap0: entered promiscuous mode
[  128.481416][ T9767] macvtap0: entered allmulticast mode
[  128.483723][ T9767] bond0: entered allmulticast mode
[  128.486066][ T9767] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  128.488489][ T9767] bond0: entered promiscuous mode
[  128.490363][ T9767] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  128.492948][ T9767] macvlan0: entered promiscuous mode
[  128.496441][ T9767] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  128.498996][ T9767] team0: Device macvtap0 failed to register rx_handler
[  128.501949][ T9767] bond0: left allmulticast mode
[  128.503654][ T9767] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  128.506873][ T9767] bond0: left promiscuous mode
[  128.508674][ T9767] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  128.511353][ T9767] macvlan0: left promiscuous mode
[  128.539066][ T5902] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.541896][ T5902] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.550712][ T5902] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.553834][ T5902] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.672586][ T9774] netlink: 'syz.1.1063': attribute type 3 has an invalid length.
[  128.793704][ T9789] netlink: 'syz.1.1069': attribute type 142 has an invalid length.
[  128.829362][ T9795] team0: No ports can be present during mode change
[  128.833442][ T9795] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  129.124044][ T9800] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  129.187170][ T9806] ipvlan0: entered promiscuous mode
[  129.192257][ T9806] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  129.197202][ T9806] netlink: 'syz.0.1073': attribute type 11 has an invalid length.
[  129.694087][ T9825] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.698674][ T9825] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  129.702099][ T9825] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  129.710209][ T9812] netlink: 'syz.0.1076': attribute type 6 has an invalid length.
[  130.003692][ T9844] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  130.006442][ T9844] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  130.009397][ T9842] syzkaller0: left promiscuous mode
[  130.011862][ T9842] syzkaller0: left allmulticast mode
[  130.043679][ T9844] netlink: 'syz.2.1085': attribute type 39 has an invalid length.
[  130.043684][ T9845] netlink: 'syz.2.1085': attribute type 39 has an invalid length.
[  130.115872][ T9849] tipc: Resetting bearer <eth:team0>
[  130.131945][ T9849] tipc: Resetting bearer <eth:syzkaller0>
[  130.771210][ T9890] netlink: 'syz.2.1096': attribute type 10 has an invalid length.
[  131.232230][ T9911] netlink: 'syz.0.1105': attribute type 21 has an invalid length.
[  131.323820][ T9915] __nla_validate_parse: 25 callbacks suppressed
[  131.323833][ T9915] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1112'.
[  131.615559][ T5878] net_ratelimit: 37 callbacks suppressed
[  131.615572][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  131.725323][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  131.835115][ T5902] bond5: (slave macvlan2): failed to get link speed/duplex
[  131.945106][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.126029][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.157475][ T9936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1110'.
[  132.236047][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.336293][ T9950] xt_socket: unknown flags 0xd0
[  132.355111][ T9950] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.360313][ T9950] bond0: (slave bond2): Enslaving as an active interface with a down link
[  132.405695][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.515102][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.545610][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[  132.555777][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1120'.
[  132.572045][ T9971] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1121'.
[  132.625062][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.639991][ T9973] netlink: 'syz.1.1122': attribute type 4 has an invalid length.
[  132.668505][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  132.735130][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  132.796228][   T33] audit: type=1800 audit(1757987017.852:2): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1127" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1707 res=0 errno=0
[  132.824490][ T9992] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1129'.
[  132.828032][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'.
[  132.832165][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'.
[  132.837982][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'.
[  132.852928][ T9993] bond3: entered promiscuous mode
[  132.862640][ T9993] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.871919][ T9993] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.874530][ T9993] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  132.881377][ T9993] bond3: (slave vcan1): Error -95 calling set_mac_address
[  133.221207][T10019] netlink: 'syz.1.1136': attribute type 16 has an invalid length.
[  133.223923][T10019] netlink: 'syz.1.1136': attribute type 17 has an invalid length.
[  133.257587][T10019] 8021q: adding VLAN 0 to HW filter on device team0
[  133.260474][T10019] tipc: Resetting bearer <eth:team0>
[  133.351899][T10021] pim6reg1: entered promiscuous mode
[  133.354359][T10021] pim6reg1: entered allmulticast mode
[  133.825072][T10050] tipc: Enabling <ib:lo> not permitted
[  133.827069][T10050] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  133.947074][T10061] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.982307][T10066] k*: entered promiscuous mode
[  133.994093][T10066] tipc: Resetting bearer <eth:team0>
[  133.996544][T10066] tipc: Resetting bearer <eth:team0>
[  134.041657][T10070] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  134.044140][T10070] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  134.065874][T10070] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.161677][T10086] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  134.166301][T10087] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  134.208426][T10091] tipc: Resetting bearer <eth:syzkaller0>
[  134.267853][T10095] siw: device registration error -23
[  134.290015][T10093] geneve3: entered promiscuous mode
[  134.292455][T10093] geneve3: entered allmulticast mode
[  134.299366][ T5863] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.302544][ T5863] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.305659][ T5863] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  134.309122][ T5863] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.312131][ T5863] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.319901][ T5863] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  134.324325][ T5863] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.328223][ T5863] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.331996][ T5863] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  134.335618][ T5863] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.338496][ T5863] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.341383][ T5863] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  134.356397][T10095] smc: removing ib device syz2
[  134.642216][T10111] validate_nla: 3 callbacks suppressed
[  134.642231][T10111] netlink: 'syz.2.1169': attribute type 4 has an invalid length.
[  134.674084][T10113] sctp: [Deprecated]: syz.2.1170 (pid 10113) Use of int in max_burst socket option deprecated.
[  134.674084][T10113] Use struct sctp_assoc_value instead
[  134.716658][T10118] block nbd0: not configured, cannot reconfigure
[  134.721462][T10119] block nbd0: not configured, cannot reconfigure
[  134.842936][T10127] wg2: entered promiscuous mode
[  134.845231][T10127] wg2: entered allmulticast mode
[  134.948474][T10133] netlink: 'syz.2.1174': attribute type 4 has an invalid length.
[  135.003797][T10135] nbd: illegal input index 65508
[  135.392594][T10149] netlink: 'syz.0.1178': attribute type 4 has an invalid length.
[  135.939208][T10168] bond0: (slave rose0): Error: Device can not be enslaved while up
[  135.990427][T10170] netlink: 'syz.2.1185': attribute type 1 has an invalid length.
[  136.020931][T10170] 8021q: adding VLAN 0 to HW filter on device bond5
[  136.038757][T10170] bond5: (slave ip6erspan0): making interface the new active one
[  136.043758][T10170] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  136.102608][T10170] netlink: 'syz.2.1185': attribute type 3 has an invalid length.
[  136.107500][T10170] netlink: 'syz.2.1185': attribute type 1 has an invalid length.
[  136.213181][T10191] netlink: 'syz.0.1191': attribute type 9 has an invalid length.
[  136.295122][T10199] netlink: 'syz.0.1193': attribute type 9 has an invalid length.
[  136.415046][T10204] __nla_validate_parse: 17 callbacks suppressed
[  136.415063][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'.
[  136.446212][T10204] bridge0 (unregistering): left allmulticast mode
[  136.524765][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'.
[  136.646317][T10213] can: request_module (can-proto-5) failed.
[  136.653313][T10217] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1199'.
[  136.665127][ T5878] net_ratelimit: 33 callbacks suppressed
[  136.665138][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  136.724018][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'.
[  136.728524][T10223] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1201'.
[  136.741423][T10223] netlink: 'syz.2.1201': attribute type 10 has an invalid length.
[  136.743305][T10225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.770257][T10223] block nbd2: Unsupported socket: shutdown callout must be supported.
[  136.775081][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  136.822908][T10230] netlink: 'syz.2.1204': attribute type 4 has an invalid length.
[  136.888430][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  136.962412][T10244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1210'.
[  136.995042][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.105610][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.215094][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.312300][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'.
[  137.325117][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.445543][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.553568][T10287] 8021q: adding VLAN 0 to HW filter on device bond6
[  137.573203][T10287] bond6: (slave veth7): Enslaving as an active interface with a down link
[  137.582395][T10288] gretap2: entered promiscuous mode
[  137.587309][T10288] bond6: (slave gretap2): making interface the new active one
[  137.591313][T10288] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  137.626230][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.636070][T10293] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  137.735068][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  137.870662][T10315] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1225'.
[  137.888044][T10315] sctp: [Deprecated]: syz.2.1225 (pid 10315) Use of int in maxseg socket option.
[  137.888044][T10315] Use struct sctp_assoc_value instead
[  137.980999][T10329] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1227'.
[  137.984103][T10329] ..0: renamed from hsr0
[  137.988390][T10329] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.992674][T10329] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.996607][T10329] ..0: entered allmulticast mode
[  137.999096][T10329] hsr_slave_0: entered allmulticast mode
[  138.001263][T10329] hsr_slave_1: entered allmulticast mode
[  138.823436][T10334] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1230'.
[  139.145240][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  139.894758][T10367] validate_nla: 7 callbacks suppressed
[  139.894772][T10367] netlink: 'syz.0.1242': attribute type 30 has an invalid length.
[  139.959719][T10369] netlink: 'syz.0.1243': attribute type 4 has an invalid length.
[  140.016856][T10376] lo speed is unknown, defaulting to 1000
[  140.018960][T10376] lo speed is unknown, defaulting to 1000
[  140.021474][T10376] lo speed is unknown, defaulting to 1000
[  140.046821][T10376] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  140.100046][T10376] lo speed is unknown, defaulting to 1000
[  140.104635][T10376] lo speed is unknown, defaulting to 1000
[  140.111429][T10376] lo speed is unknown, defaulting to 1000
[  140.193780][T10384] lo speed is unknown, defaulting to 1000
[  140.969230][T10393] netlink: 'syz.0.1250': attribute type 1 has an invalid length.
[  141.000997][T10395] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.057267][T10397] netlink: 'syz.0.1252': attribute type 9 has an invalid length.
[  141.092885][T10397] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  141.234946][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  141.725120][ T5881] net_ratelimit: 36 callbacks suppressed
[  141.725141][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  141.835430][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  141.895551][T10406] lo speed is unknown, defaulting to 1000
[  141.938816][T10407] veth0: entered promiscuous mode
[  141.945788][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  141.992454][T10407] veth0: left promiscuous mode
[  142.027207][T10413] netlink: 'syz.2.1257': attribute type 4 has an invalid length.
[  142.057822][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  142.165294][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  142.203594][T10420] vxcan1: entered allmulticast mode
[  142.275229][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  142.385160][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  142.495268][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  142.605237][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  142.715377][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  143.092792][T10432] __nla_validate_parse: 4 callbacks suppressed
[  143.092806][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'.
[  143.373764][T10435] netlink: 'syz.0.1264': attribute type 4 has an invalid length.
[  143.407263][T10437] netlink: 'syz.0.1265': attribute type 10 has an invalid length.
[  143.410522][T10438] syz.0.1265: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.417811][T10438] CPU: 1 UID: 0 PID: 10438 Comm: syz.0.1265 Not tainted syzkaller #0 PREEMPT(full) 
[  143.417822][T10438] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.417827][T10438] Call Trace:
[  143.417832][T10438]  <TASK>
[  143.417836][T10438]  dump_stack_lvl+0x189/0x250
[  143.417853][T10438]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.417862][T10438]  ? __pfx__printk+0x10/0x10
[  143.417874][T10438]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  143.417884][T10438]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  143.417892][T10438]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  143.417902][T10438]  warn_alloc+0x214/0x310
[  143.417915][T10438]  ? stack_depot_save_flags+0x40/0x860
[  143.417928][T10438]  ? __pfx_warn_alloc+0x10/0x10
[  143.417940][T10438]  ? kasan_save_track+0x4f/0x80
[  143.417950][T10438]  ? xskq_create+0x56/0x170
[  143.417959][T10438]  ? xsk_init_queue+0xb0/0x110
[  143.417965][T10438]  ? xsk_setsockopt+0x4dc/0x8d0
[  143.417971][T10438]  ? do_sock_setsockopt+0x17c/0x1b0
[  143.417981][T10438]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  143.417990][T10438]  ? do_syscall_64+0xfa/0x3b0
[  143.417999][T10438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.418009][T10438]  __vmalloc_node_range_noprof+0x125/0x12f0
[  143.418032][T10438]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.418042][T10438]  ? xskq_create+0x56/0x170
[  143.418051][T10438]  ? __kasan_kmalloc+0x93/0xb0
[  143.418062][T10438]  vmalloc_user_noprof+0xad/0xf0
[  143.418073][T10438]  ? xskq_create+0xbf/0x170
[  143.418081][T10438]  xskq_create+0xbf/0x170
[  143.418090][T10438]  xsk_init_queue+0xb0/0x110
[  143.418099][T10438]  xsk_setsockopt+0x4dc/0x8d0
[  143.418107][T10438]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.418114][T10438]  ? __pfx_aa_sk_perm+0x10/0x10
[  143.418127][T10438]  ? aa_sock_opt_perm+0xff/0x1b0
[  143.418136][T10438]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  143.418145][T10438]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.418152][T10438]  do_sock_setsockopt+0x17c/0x1b0
[  143.418163][T10438]  __x64_sys_setsockopt+0x13f/0x1b0
[  143.418175][T10438]  do_syscall_64+0xfa/0x3b0
[  143.418183][T10438]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.418191][T10438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.418198][T10438]  ? exc_page_fault+0x9f/0xf0
[  143.418207][T10438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.418214][T10438] RIP: 0033:0x7fc90938eba9
[  143.418221][T10438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.418227][T10438] RSP: 002b:00007fc9075f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.418235][T10438] RAX: ffffffffffffffda RBX: 00007fc9095d6090 RCX: 00007fc90938eba9
[  143.418240][T10438] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  143.418244][T10438] RBP: 00007fc909411e19 R08: 0000000000000004 R09: 0000000000000000
[  143.418248][T10438] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.418253][T10438] R13: 00007fc9095d6128 R14: 00007fc9095d6090 R15: 00007ffd36fdd328
[  143.418264][T10438]  </TASK>
[  143.418267][T10438] Mem-Info:
[  143.552954][T10438] active_anon:5655 inactive_anon:0 isolated_anon:0
[  143.552954][T10438]  active_file:1399 inactive_file:38274 isolated_file:0
[  143.552954][T10438]  unevictable:1768 dirty:133 writeback:0
[  143.552954][T10438]  slab_reclaimable:10207 slab_unreclaimable:86795
[  143.552954][T10438]  mapped:18394 shmem:2451 pagetables:1135
[  143.552954][T10438]  sec_pagetables:0 bounce:0
[  143.552954][T10438]  kernel_misc_reclaimable:0
[  143.552954][T10438]  free:219211 free_pcp:28337 free_cma:0
[  143.575446][T10438] Node 0 active_anon:12608kB inactive_anon:0kB active_file:3432kB inactive_file:15608kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27384kB dirty:192kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6556kB pagetables:1844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.592136][T10438] Node 1 active_anon:10012kB inactive_anon:0kB active_file:2164kB inactive_file:137488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46192kB dirty:340kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:2696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.607063][T10438] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.620099][T10437] netlink: 'syz.0.1265': attribute type 4 has an invalid length.
[  143.623823][T10438] lowmem_reserve[]: 0 811 811 811 811
[  143.629556][T10437] netlink: 'syz.0.1265': attribute type 4 has an invalid length.
[  143.636517][T10438] Node 0 DMA32 free:325572kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12608kB inactive_anon:0kB active_file:3432kB inactive_file:15608kB unevictable:3536kB writepending:192kB present:1556484kB managed:830856kB mlocked:0kB bounce:0kB free_pcp:45980kB local_pcp:20352kB free_cma:0kB
[  143.653041][T10438] lowmem_reserve[]: 0 0 0 0 0
[  143.655516][T10438] Node 1 DMA32 free:362092kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:25148kB local_pcp:25080kB free_cma:0kB
[  143.671670][T10438] lowmem_reserve[]: 0 0 854 854 854
[  143.674121][T10438] Node 1 Normal free:183968kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10020kB inactive_anon:0kB active_file:2164kB inactive_file:137488kB unevictable:3536kB writepending:340kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43712kB local_pcp:24668kB free_cma:0kB
[  143.691112][T10438] lowmem_reserve[]: 0 0 0 0 0
[  143.693350][T10438] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  143.699716][T10438] Node 0 DMA32: 869*4kB (UME) 239*8kB (UME) 132*16kB (ME) 191*32kB (UME) 148*64kB (UME) 7*128kB (UME) 1*256kB (U) 2*512kB (UE) 1*1024kB (M) 6*2048kB (UME) 70*4096kB (UM) = 325292kB
[  143.712845][T10438] Node 1 DMA32: 0*4kB 3*8kB (UM) 4*16kB (UM) 3*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 86*4096kB (UM) = 362104kB
[  143.775083][T10438] Node 1 Normal: 1272*4kB (UME) 479*8kB (UME) 495*16kB (UME) 314*32kB (UME) 217*64kB (UME) 131*128kB (UME) 97*256kB (UME) 79*512kB (UM) 71*1024kB (UM) 2*2048kB (ME) 8*4096kB (UM) = 232392kB
[  143.781997][T10438] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.795545][T10438] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.799370][T10438] 42147 total pagecache pages
[  143.801408][T10438] 0 pages in swap cache
[  143.805242][T10438] Free swap  = 124996kB
[  143.815035][T10438] Total swap = 124996kB
[  143.817127][T10438] 786301 pages RAM
[  143.818785][T10438] 0 pages HighMem/MovableOnly
[  143.820814][T10438] 241355 pages reserved
[  143.822612][T10438] 0 pages cma reserved
[  144.838768][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1270'.
[  144.850196][T10451] team0: Unable to change to the same mode the team is in
[  144.858172][T10451] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  145.201555][T10468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.941926][T10485] netlink: 'syz.0.1279': attribute type 10 has an invalid length.
[  145.951160][T10485] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  146.103396][T10495] netlink: 'syz.0.1282': attribute type 1 has an invalid length.
[  146.128450][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'.
[  146.275573][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'.
[  146.278857][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'.
[  146.368889][T10512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.411575][T10516] bond0: (slave rose0): Error: Device can not be enslaved while up
[  146.493898][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'.
[  146.735191][   T13] net_ratelimit: 34 callbacks suppressed
[  146.735212][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  146.855135][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  146.965105][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.085193][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.195299][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.230803][T10524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1293'.
[  147.309702][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.332897][T10527] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.438589][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.519010][T10542] netlink: 'syz.2.1299': attribute type 4 has an invalid length.
[  147.545350][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.655423][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.665795][T10551] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1301'.
[  147.719330][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.728681][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.765382][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  147.920743][T10557] netlink: 'syz.0.1302': attribute type 1 has an invalid length.
[  147.925565][T10557] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  148.530846][T10565] netlink: 'syz.2.1304': attribute type 1 has an invalid length.
[  148.596346][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'.
[  148.961907][T10570] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1306'.
[  149.121384][T10577] netlink: 'syz.0.1308': attribute type 4 has an invalid length.
[  149.199177][T10584] nbd: must specify a size in bytes for the device
[  149.569450][T10595] netlink: 'syz.2.1315': attribute type 4 has an invalid length.
[  149.612508][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.617514][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.621006][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.624735][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.629064][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.659087][T10598] lo speed is unknown, defaulting to 1000
[  149.661305][T10602] netlink: 'syz.2.1317': attribute type 1 has an invalid length.
[  149.663924][T10602] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1317'.
[  149.779995][T10598] chnl_net:caif_netlink_parms(): no params data found
[  149.843540][T10598] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.847780][T10598] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.850881][T10598] bridge_slave_0: entered allmulticast mode
[  149.854525][T10598] bridge_slave_0: entered promiscuous mode
[  149.859624][T10598] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.862575][T10598] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.866082][T10598] bridge_slave_1: entered allmulticast mode
[  149.870068][T10598] bridge_slave_1: entered promiscuous mode
[  149.904487][T10598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.912104][T10598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.953483][T10598] team0: Port device team_slave_0 added
[  149.957005][T10598] team0: Port device team_slave_1 added
[  149.984060][T10598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.987735][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.004931][T10598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.010236][T10598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.014142][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.025450][T10598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.079734][T10598] hsr_slave_0: entered promiscuous mode
[  150.082905][T10598] hsr_slave_1: entered promiscuous mode
[  150.172809][T10628] netlink: 'syz.2.1322': attribute type 4 has an invalid length.
[  150.349155][T10598] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.361316][T10598] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  150.392318][T10598] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  150.403717][T10598] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  150.460037][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1327'.
[  150.466972][T10645] team0: No ports can be present during mode change
[  150.471585][T10645] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  150.518774][T10598] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.537075][T10598] 8021q: adding VLAN 0 to HW filter on device team0
[  150.544638][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.547918][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.560731][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.563998][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.736924][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.776990][T10598] veth0_vlan: entered promiscuous mode
[  150.785090][T10598] veth1_vlan: entered promiscuous mode
[  150.812098][T10598] veth0_macvtap: entered promiscuous mode
[  150.817017][T10598] veth1_macvtap: entered promiscuous mode
[  150.827367][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.836418][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.843634][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.848346][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.853276][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.861490][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.933168][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.938826][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.963104][ T7311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.966953][ T7311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.407608][T10676] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.411899][T10676] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  151.417773][T10676] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  151.421376][T10676] tipc: Resetting bearer <eth:syzkaller0>
[  151.715500][ T5853] Bluetooth: hci3: command tx timeout
[  151.755366][ T5881] net_ratelimit: 29 callbacks suppressed
[  151.755383][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  151.866490][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  151.975153][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.095422][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.205344][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.253500][T10692] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1337'.
[  152.274816][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1337'.
[  152.278910][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'.
[  152.288403][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1338'.
[  152.293931][T10694] team0: No ports can be present during mode change
[  152.301023][T10694] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  152.315405][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.339249][T10696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1339'.
[  152.398737][T10699] netlink: 'syz.3.1340': attribute type 10 has an invalid length.
[  152.405822][T10699] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  152.449417][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.469353][T10700] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  152.472716][T10700] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  152.478119][T10699] netlink: 'syz.3.1340': attribute type 11 has an invalid length.
[  152.478155][T10700] netlink: 'syz.3.1340': attribute type 11 has an invalid length.
[  152.555232][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.571075][T10705] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1341'.
[  152.589540][T10705] vlan2: entered allmulticast mode
[  152.593543][T10705] erspan0: entered allmulticast mode
[  152.685971][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  152.796193][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  153.172907][T10741] netlink: 'syz.0.1351': attribute type 4 has an invalid length.
[  153.511227][T10769] team0: No ports can be present during mode change
[  153.515923][T10769] vlan0: entered promiscuous mode
[  153.522391][T10769] team0: Port device vlan0 added
[  153.529812][T10769] tipc: Started in network mode
[  153.531960][T10769] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  153.535935][T10769] tipc: Enabled bearer <eth:team0>, priority 0
[  153.785179][ T5853] Bluetooth: hci3: command 0x041b tx timeout
[  154.261256][T10777] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.280154][T10777] __nla_validate_parse: 3 callbacks suppressed
[  154.280168][T10777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1358'.
[  154.322107][T10784] netlink: 'syz.0.1360': attribute type 4 has an invalid length.
[  154.375904][T10782] netem: change failed
[  154.405257][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1358'.
[  154.463702][T10789] netlink: 'syz.0.1361': attribute type 13 has an invalid length.
[  154.467164][T10789] netlink: 'syz.0.1361': attribute type 17 has an invalid length.
[  154.572258][T10789] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  154.577021][T10789] dummy0: entered promiscuous mode
[  154.590952][T10789] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.592372][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'.
[  154.612934][T10789] 8021q: adding VLAN 0 to HW filter on device team0
[  154.617324][T10789] tipc: Resetting bearer <eth:team0>
[  154.620204][T10789] tipc: Resetting bearer <eth:team0>
[  154.628615][T10791] xfrm0: entered promiscuous mode
[  154.630910][T10791] xfrm0: entered allmulticast mode
[  154.649932][T10796] lo speed is unknown, defaulting to 1000
[  154.655187][  T792] tipc: Node number set to 11578026
[  154.791282][T10795] netlink: 'syz.3.1363': attribute type 10 has an invalid length.
[  154.797372][T10795] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.801251][T10795] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.812273][T10795] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.815467][T10795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.818821][T10795] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.821853][T10795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.831975][T10795] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  154.838787][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'.
[  154.840127][T10805] netlink: 'syz.2.1366': attribute type 16 has an invalid length.
[  154.842633][T10795] bridge_slave_1: left allmulticast mode
[  154.848158][T10795] bridge_slave_1: left promiscuous mode
[  154.849718][T10805] netlink: 'syz.2.1366': attribute type 17 has an invalid length.
[  154.850822][T10795] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.859768][T10795] bridge_slave_0: left allmulticast mode
[  154.862171][T10795] bridge_slave_0: left promiscuous mode
[  154.864794][T10795] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.888076][T10795] bond0: (slave bridge0): Releasing backup interface
[  154.972672][T10805] ip6gretap0: entered promiscuous mode
[  154.978926][T10805] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.982857][T10805] 8021q: adding VLAN 0 to HW filter on device team0
[  154.988803][T10805] tipc: Resetting bearer <eth:team0>
[  154.995842][ T5919] lo speed is unknown, defaulting to 1000
[  154.999039][ T5919] syz1: Port: 1 Link ACTIVE
[  155.561423][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'.
[  155.584837][T10811] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1368'.
[  155.663982][T10815] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1368'.
[  155.713432][T10811] lo speed is unknown, defaulting to 1000
[  155.720978][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'.
[  155.859031][T10829] lo speed is unknown, defaulting to 1000
[  155.863765][T10827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1373'.
[  155.885385][ T5853] Bluetooth: hci3: command 0x041b tx timeout
[  155.916902][ T5919] IPVS: starting estimator thread 0...
[  155.929824][T10839] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.934074][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'.
[  156.015001][T10837] IPVS: using max 80 ests per chain, 192000 per kthread
[  156.815976][   T12] net_ratelimit: 38 callbacks suppressed
[  156.815996][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  156.935324][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.045452][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.062892][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  157.156968][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.324993][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.430091][T10932] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  157.433325][T10932] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  157.438341][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.545729][   T13] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.581934][T10948] validate_nla: 2 callbacks suppressed
[  157.581946][T10948] netlink: 'syz.3.1402': attribute type 10 has an invalid length.
[  157.622018][T10954] netlink: 'syz.2.1404': attribute type 13 has an invalid length.
[  157.625202][T10954] netlink: 'syz.2.1404': attribute type 17 has an invalid length.
[  157.630602][T10954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.655817][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.765635][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  157.954309][T10973] netlink: 'syz.3.1409': attribute type 5 has an invalid length.
[  157.957694][   T55] Bluetooth: hci3: command 0x041b tx timeout
[  158.073816][T10976] netlink: 'syz.2.1411': attribute type 4 has an invalid length.
[  158.283906][T10995] team0: Unable to change to the same mode the team is in
[  158.290680][T10995] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  158.625857][T11013] team0: Port device dummy0 removed
[  158.630129][T11013] bond0: (slave bond_slave_0): Releasing backup interface
[  158.637572][T11013] bond0: (slave bond_slave_1): Releasing backup interface
[  158.642866][T11013] team0: Port device team_slave_0 removed
[  158.647020][T11013] team0: Port device team_slave_1 removed
[  158.650328][   T32] tipc: Resetting bearer <eth:team0>
[  158.839061][T11022] netlink: 'syz.2.1425': attribute type 13 has an invalid length.
[  158.842498][T11022] netlink: 'syz.2.1425': attribute type 17 has an invalid length.
[  158.850900][T11022] tipc: Resetting bearer <eth:team0>
[  158.859504][T11022] xfrm0: entered promiscuous mode
[  158.861978][T11022] xfrm0: entered allmulticast mode
[  158.887944][T11022] lo speed is unknown, defaulting to 1000
[  159.177643][T11037] netlink: 'syz.2.1429': attribute type 1 has an invalid length.
[  159.345142][T11047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.427724][T11053] __nla_validate_parse: 19 callbacks suppressed
[  159.427736][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1433'.
[  159.488623][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'.
[  159.640276][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'.
[  159.694243][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1436'.
[  159.699025][T11065] team0: Mode changed to "broadcast"
[  159.750129][T11065] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.025088][   T55] Bluetooth: hci3: command 0x041b tx timeout
[  160.730435][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'.
[  160.733698][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'.
[  160.822196][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'.
[  160.837343][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'.
[  161.008299][T11109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.012498][T11109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.181655][T11117] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  161.273720][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'.
[  161.320830][T11124] macvtap1: entered allmulticast mode
[  161.323179][T11124] veth0_macvtap: entered allmulticast mode
[  161.331897][T11124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1455'.
[  161.887909][   T12] net_ratelimit: 39 callbacks suppressed
[  161.887926][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.045348][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.107606][ T5853] Bluetooth: hci3: command 0x041b tx timeout
[  162.149940][T11156] sch_fq: defrate 0 ignored.
[  162.155032][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.265200][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.375617][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.485248][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.595167][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.706592][ T5878] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.825884][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  162.853769][T11191] nbd: must specify a size in bytes for the device
[  162.879250][T11193] netlink: 'syz.0.1475': attribute type 1 has an invalid length.
[  162.897199][T11193] 8021q: adding VLAN 0 to HW filter on device bond7
[  162.913960][T11193] ipvlan3: entered allmulticast mode
[  162.917636][T11193] bond7: entered allmulticast mode
[  162.936830][T11193] bond7: (slave gretap3): making interface the new active one
[  162.950888][T11193] gretap3: entered allmulticast mode
[  162.963752][T11193] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  162.987155][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  163.060225][T11204] lo speed is unknown, defaulting to 1000
[  163.391111][T11215] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.404626][T11215] pim6reg1: entered promiscuous mode
[  163.406688][T11215] pim6reg1: entered allmulticast mode
[  163.871646][T11235] netlink: 'syz.3.1487': attribute type 2 has an invalid length.
[  163.890471][T11233] netlink: 'syz.0.1486': attribute type 5 has an invalid length.
[  163.893861][T11233] netlink: 'syz.0.1486': attribute type 6 has an invalid length.
[  164.055370][T11246] netlink: 'syz.3.1490': attribute type 10 has an invalid length.
[  164.068155][T11247] netlink: 'syz.0.1489': attribute type 1 has an invalid length.
[  164.158008][T11246] tipc: Resetting bearer <eth:team0>
[  164.185227][ T5853] Bluetooth: hci3: command 0x041b tx timeout
[  164.227698][T11246] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  164.238531][T11246] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  164.247627][T11246] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.258611][T11246] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.318023][T11246] team0: Failed to send port change of device vlan0 via netlink (err -105)
[  164.410434][T11246] veth0_macvtap: left allmulticast mode
[  164.425048][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.435228][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.439085][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.454329][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.486589][T11253] gre1: entered allmulticast mode
[  164.521852][T11257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.526293][T11257] syzkaller0: entered promiscuous mode
[  164.528214][T11257] syzkaller0: entered allmulticast mode
[  164.542324][T11257] tipc: Resetting bearer <eth:syzkaller0>
[  164.548266][T11256] tipc: Resetting bearer <eth:syzkaller0>
[  164.563226][T11256] tipc: Disabling bearer <eth:syzkaller0>
[  164.571398][T11259] __nla_validate_parse: 9 callbacks suppressed
[  164.571409][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1494'.
[  164.694617][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  164.845161][T11287] nbd0: detected capacity change from 0 to 63
[  164.849723][T11288] block nbd0: NBD_DISCONNECT
[  164.853261][T11288] block nbd0: Disconnected due to user request.
[  164.856916][T11288] block nbd0: shutting down sockets
[  164.863735][    C0] blk_print_req_error: 138 callbacks suppressed
[  164.863749][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.870560][    C0] buffer_io_error: 138 callbacks suppressed
[  164.870573][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.876877][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.880916][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.884355][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.888312][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  164.891853][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.895854][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  164.900883][T10603] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.907733][T10603] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.911363][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1504'.
[  164.916013][T10603] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.925331][T10603] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.930275][T10603] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.934280][T10603] Buffer I/O error on dev nbd0, logical block 2, async page read
[  164.942015][T10603] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.947597][T10603] Buffer I/O error on dev nbd0, logical block 3, async page read
[  164.951176][T10603] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.957699][T10603] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.961264][T10603] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.968751][T11292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.972593][T10603] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.980468][T10603] ldm_validate_partition_table(): Disk read failed.
[  164.985003][T10603] Dev nbd0: unable to read RDB block 0
[  164.990623][T10603]  nbd0: unable to read partition table
[  165.006342][T10603] ldm_validate_partition_table(): Disk read failed.
[  165.011460][T10603] Dev nbd0: unable to read RDB block 0
[  165.021424][T10603]  nbd0: unable to read partition table
[  165.032544][T11293] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1505'.
[  165.044764][T11293] netlink: 'syz.0.1505': attribute type 10 has an invalid length.
[  165.162117][T11298] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1507'.
[  165.168745][T11298] tipc: New replicast peer: 255.255.255.255
[  165.173244][T11298] tipc: Enabled bearer <udp:syz2>, priority 10
[  165.204049][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'.
[  165.259292][T11305] syzkaller1: entered promiscuous mode
[  165.261212][T11305] syzkaller1: entered allmulticast mode
[  165.343062][T11314] netlink: 'syz.2.1514': attribute type 2 has an invalid length.
[  165.347418][T11314] netlink: 'syz.2.1514': attribute type 1 has an invalid length.
[  165.398539][T11316] lo speed is unknown, defaulting to 1000
[  165.546510][T11316] netlink: 'syz.0.1515': attribute type 2 has an invalid length.
[  165.612758][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  165.620354][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  165.837746][T11345] siw: device registration error -23
[  165.963543][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'.
[  166.321404][T11364] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.396307][T11364] 8021q: adding VLAN 0 to HW filter on device team0
[  166.399824][T11364] tipc: Resetting bearer <eth:team0>
[  166.402663][T11364] tipc: Resetting bearer <eth:team0>
[  166.410036][T11365] xfrm0: entered promiscuous mode
[  166.412500][T11365] xfrm0: entered allmulticast mode
[  166.433563][T11366] lo speed is unknown, defaulting to 1000
[  166.526182][T11369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1532'.
[  166.965108][ T5881] net_ratelimit: 31 callbacks suppressed
[  166.965121][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.075942][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.185721][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.307637][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.393228][T11437] delete_channel: no stack
[  167.445334][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.565106][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.675158][T11251] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.818218][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  167.925674][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  168.045241][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  168.908181][T11499] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  168.913879][T11499] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  169.212980][T11514] validate_nla: 9 callbacks suppressed
[  169.212997][T11514] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  169.221396][T11514] netlink: 'syz.0.1574': attribute type 4 has an invalid length.
[  169.550549][T11251] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  169.848617][T11528] __nla_validate_parse: 25 callbacks suppressed
[  169.848628][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'.
[  169.854141][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  170.320952][T11536] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1579'.
[  170.325573][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1579'.
[  170.331922][T11536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.343290][T11538] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1580'.
[  170.348788][T11536] tipc: Resetting bearer <eth:syzkaller0>
[  170.359991][T11538] netlink: 'syz.3.1580': attribute type 16 has an invalid length.
[  170.363396][T11538] netlink: 'syz.3.1580': attribute type 17 has an invalid length.
[  170.376098][T11536] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  170.379568][T11536] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  170.394696][T11538] tipc: Resetting bearer <eth:team0>
[  170.404055][T11536] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1579'.
[  170.539291][T11552] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  170.545711][T11552] bond0: entered promiscuous mode
[  170.547928][T11552] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  170.551119][T11552] macvlan0: entered promiscuous mode
[  170.682803][T11574] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1591'.
[  170.691237][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1591'.
[  170.705325][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.709508][T11574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.710422][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.721126][T11574] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1591'.
[  170.787241][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'.
[  170.884626][T11577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.889857][T11582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.991045][T11603] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.096242][T11611] netlink: 'syz.3.1599': attribute type 30 has an invalid length.
[  171.242970][T11623] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  171.248179][T11623] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  171.561287][T11650] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  171.697673][T11677] netlink: 'syz.0.1616': attribute type 2 has an invalid length.
[  171.749741][T11679] bridge3: entered allmulticast mode
[  171.949119][T11691] netlink: 'syz.3.1622': attribute type 1 has an invalid length.
[  172.030886][T11689] lo speed is unknown, defaulting to 1000
[  172.105762][ T5881] net_ratelimit: 39 callbacks suppressed
[  172.105782][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.211025][T11708] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  172.235933][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.351682][T11716] tipc: Resetting bearer <eth:team0>
[  172.364270][T11716] xfrm0: left promiscuous mode
[  172.366388][T11716] xfrm0: left allmulticast mode
[  172.368883][T11716] vlan0: left promiscuous mode
[  172.375316][T11716] mac80211_hwsim hwsim14 wlan1: left promiscuous mode
[  172.377880][T11716] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  172.380415][T11716] vlan2: left allmulticast mode
[  172.382320][T11716] erspan0: left allmulticast mode
[  172.384452][T11716] macvtap1: left allmulticast mode
[  172.386857][T11716] gre1: left allmulticast mode
[  172.392099][T11716] bridge3: left allmulticast mode
[  172.415223][T11251] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.525218][ T5881] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.635341][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.745250][T11251] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.826157][ T5853] Bluetooth: hci3: command 0x041b tx timeout
[  172.855181][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  172.965174][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  173.090091][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  173.131462][T11725] team0: No ports can be present during mode change
[  173.150785][T11725] vlan0: entered promiscuous mode
[  173.157384][T11725] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  173.218358][   T12] bond5: (slave macvlan2): failed to get link speed/duplex
[  173.232561][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.244030][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.287269][ T6025] ------------[ cut here ]------------
[  173.289593][ T6025] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  173.293308][ T6025] WARNING: CPU: 1 PID: 6025 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  173.297342][ T6025] Modules linked in:
[  173.299890][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  173.304676][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.309035][ T6025] Workqueue: mld mld_ifc_work
[  173.311040][ T6025] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  173.313493][ T6025] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 8c b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 0f 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  173.320632][ T6025] RSP: 0018:ffffc9000686e478 EFLAGS: 00010246
[  173.322750][ T6025] RAX: 686b651e7e41f100 RBX: 000000000000000c RCX: ffff888109a51cc0
[  173.325787][ T6025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  173.328837][ T6025] RBP: dffffc0000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  173.332003][ T6025] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff88810b2619a8
[  173.335537][ T6025] R13: 0000000000000000 R14: ffff888030318e40 R15: ffff88803031b0d8
[  173.338985][ T6025] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  173.342740][ T6025] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.345737][ T6025] CR2: 00007f5d531c71d0 CR3: 000000010ee82000 CR4: 00000000000006f0
[  173.349168][ T6025] Call Trace:
[  173.350721][ T6025]  <TASK>
[  173.352016][ T6025]  rate_control_send_low+0x194/0x7a0
[  173.354331][ T6025]  ? kthread+0x711/0x8a0
[  173.356329][ T6025]  rate_control_get_rate+0x20b/0x5d0
[  173.358673][ T6025]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  173.361138][ T6025]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  173.363765][ T6025]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  173.364740][T11739] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.366498][ T6025]  invoke_tx_handlers_late+0xba/0x18a0
[  173.366588][ T6025]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  173.366615][ T6025]  ieee80211_tx_dequeue+0x308e/0x4360
[  173.366674][ T6025]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  173.366689][ T6025]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.366728][ T6025]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  173.366752][ T6025]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  173.388314][ T6025]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.390692][ T6025]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  173.393207][ T6025]  ? do_raw_spin_unlock+0x4d/0x240
[  173.395584][ T6025]  ieee80211_queue_skb+0x1a31/0x21c0
[  173.397950][ T6025]  ieee80211_tx+0x297/0x460
[  173.399982][ T6025]  ? __pfx_ieee80211_tx+0x10/0x10
[  173.402263][ T6025]  ? ieee80211_xmit+0x315/0x400
[  173.404452][ T6025]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  173.407185][ T6025]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  173.409882][ T6025]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  173.412741][ T6025]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  173.415612][ T6025]  ieee80211_subif_start_xmit+0xe0/0x510
[  173.418083][ T6025]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  173.420831][ T6025]  ? __pfx_netif_skb_features+0x10/0x10
[  173.423280][ T6025]  ? call_rcu+0x6ff/0x9c0
[  173.425316][ T6025]  ? __lock_acquire+0xab9/0xd20
[  173.427250][ T6025]  dev_hard_start_xmit+0x2d7/0x830
[  173.428995][ T6025]  __dev_queue_xmit+0x1b8d/0x3b50
[  173.430745][ T6025]  ? register_lock_class+0x51/0x320
[  173.432518][ T6025]  ? __dev_queue_xmit+0x27b/0x3b50
[  173.434256][ T6025]  ? __pfx___dev_queue_xmit+0x10/0x10
[  173.436159][ T6025]  ? read_seqbegin+0x122/0x250
[  173.437789][ T6025]  ? neigh_resolve_output+0x438/0x750
[  173.439530][ T6025]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.441287][ T6025]  ? read_seqbegin+0x1ac/0x250
[  173.442919][ T6025]  ? __pfx_read_seqbegin+0x10/0x10
[  173.444667][ T6025]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.446562][ T6025]  ? eth_header+0x11b/0x200
[  173.448103][ T6025]  ? __asan_memcpy+0x40/0x70
[  173.449704][ T6025]  ip6_finish_output2+0xfb3/0x1480
[  173.451489][ T6025]  ? __pfx_ip6_finish_output2+0x10/0x10
[  173.453342][ T6025]  ? ip6_mtu+0x7d/0x490
[  173.454762][ T6025]  ? ip6_mtu+0x38c/0x490
[  173.456279][ T6025]  ? ip6_finish_output+0x2ef/0x4e0
[  173.458029][ T6025]  ? ip6_output+0x126/0x550
[  173.459577][ T6025]  ip6_output+0x340/0x550
[  173.461064][ T6025]  NF_HOOK+0x9e/0x380
[  173.462435][ T6025]  ? NF_HOOK+0x101/0x380
[  173.463862][ T6025]  ? __pfx_NF_HOOK+0x10/0x10
[  173.465523][ T6025]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  173.467564][ T6025]  ? do_raw_spin_unlock+0x4d/0x240
[  173.469350][ T6025]  ? icmp6_dst_alloc+0x3a5/0x420
[  173.471147][ T6025]  ? icmp6_dst_alloc+0x3a5/0x420
[  173.472957][ T6025]  mld_sendpack+0x8d4/0xe60
[  173.474547][ T6025]  ? mld_sendpack+0x1e7/0xe60
[  173.476249][ T6025]  ? __pfx_mld_sendpack+0x10/0x10
[  173.477974][ T6025]  mld_ifc_work+0x83e/0xd60
[  173.479788][ T6025]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.481529][ T6025]  ? process_scheduled_works+0x9ef/0x17b0
[  173.483463][ T6025]  process_scheduled_works+0xae1/0x17b0
[  173.485449][ T6025]  ? __pfx_process_scheduled_works+0x10/0x10
[  173.487480][ T6025]  worker_thread+0x8a0/0xda0
[  173.489052][ T6025]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  173.491247][ T6025]  ? __kthread_parkme+0x7b/0x200
[  173.492949][ T6025]  kthread+0x711/0x8a0
[  173.494344][ T6025]  ? __pfx_worker_thread+0x10/0x10
[  173.496186][ T6025]  ? __pfx_kthread+0x10/0x10
[  173.497780][ T6025]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.499789][ T6025]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.502066][ T6025]  ? __pfx_kthread+0x10/0x10
[  173.503760][ T6025]  ret_from_fork+0x439/0x7d0
[  173.505506][ T6025]  ? __pfx_ret_from_fork+0x10/0x10
[  173.507324][ T6025]  ? __switch_to_asm+0x39/0x70
[  173.508957][ T6025]  ? __switch_to_asm+0x33/0x70
[  173.510675][ T6025]  ? __pfx_kthread+0x10/0x10
[  173.512226][ T6025]  ret_from_fork_asm+0x1a/0x30
[  173.513956][ T6025]  </TASK>
[  173.515134][ T6025] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  173.517716][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  173.521013][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.524534][ T6025] Workqueue: mld mld_ifc_work
[  173.526183][ T6025] Call Trace:
[  173.527363][ T6025]  <TASK>
[  173.528438][ T6025]  dump_stack_lvl+0x99/0x250
[  173.530062][ T6025]  ? __asan_memcpy+0x40/0x70
[  173.532072][ T6025]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.533853][ T6025]  ? __pfx__printk+0x10/0x10
[  173.535379][ T6025]  vpanic+0x281/0x750
[  173.536726][ T6025]  ? __pfx__printk+0x10/0x10
[  173.538298][ T6025]  ? __pfx_vpanic+0x10/0x10
[  173.539863][ T6025]  ? is_bpf_text_address+0x292/0x2b0
[  173.541875][ T6025]  panic+0xb9/0xc0
[  173.543246][ T6025]  ? __pfx_panic+0x10/0x10
[  173.544846][ T6025]  __warn+0x31b/0x4b0
[  173.546267][ T6025]  ? __rate_control_send_low+0x5df/0x820
[  173.548292][ T6025]  ? __rate_control_send_low+0x5df/0x820
[  173.550256][ T6025]  report_bug+0x2be/0x4f0
[  173.552041][ T6025]  ? __rate_control_send_low+0x5df/0x820
[  173.553938][ T6025]  ? __rate_control_send_low+0x5df/0x820
[  173.555893][ T6025]  ? __rate_control_send_low+0x5e1/0x820
[  173.557850][ T6025]  handle_bug+0x84/0x160
[  173.559356][ T6025]  exc_invalid_op+0x1a/0x50
[  173.560987][ T6025]  asm_exc_invalid_op+0x1a/0x20
[  173.562663][ T6025] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  173.564786][ T6025] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 8c b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 0f 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  173.571632][ T6025] RSP: 0018:ffffc9000686e478 EFLAGS: 00010246
[  173.573760][ T6025] RAX: 686b651e7e41f100 RBX: 000000000000000c RCX: ffff888109a51cc0
[  173.576444][ T6025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  173.579137][ T6025] RBP: dffffc0000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  173.581997][ T6025] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff88810b2619a8
[  173.584740][ T6025] R13: 0000000000000000 R14: ffff888030318e40 R15: ffff88803031b0d8
[  173.587391][ T6025]  ? __rate_control_send_low+0x5de/0x820
[  173.589389][ T6025]  rate_control_send_low+0x194/0x7a0
[  173.591507][ T6025]  ? kthread+0x711/0x8a0
[  173.593323][ T6025]  rate_control_get_rate+0x20b/0x5d0
[  173.595133][ T6025]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  173.597041][ T6025]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  173.599182][ T6025]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  173.601526][ T6025]  invoke_tx_handlers_late+0xba/0x18a0
[  173.603532][ T6025]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  173.605560][ T6025]  ieee80211_tx_dequeue+0x308e/0x4360
[  173.607407][ T6025]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  173.609379][ T6025]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.611582][ T6025]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  173.614033][ T6025]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  173.616235][ T6025]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.618042][ T6025]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  173.619995][ T6025]  ? do_raw_spin_unlock+0x4d/0x240
[  173.621789][ T6025]  ieee80211_queue_skb+0x1a31/0x21c0
[  173.623587][ T6025]  ieee80211_tx+0x297/0x460
[  173.625134][ T6025]  ? __pfx_ieee80211_tx+0x10/0x10
[  173.626793][ T6025]  ? ieee80211_xmit+0x315/0x400
[  173.628437][ T6025]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  173.630573][ T6025]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  173.632825][ T6025]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  173.634974][ T6025]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  173.637067][ T6025]  ieee80211_subif_start_xmit+0xe0/0x510
[  173.638949][ T6025]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  173.641150][ T6025]  ? __pfx_netif_skb_features+0x10/0x10
[  173.643017][ T6025]  ? call_rcu+0x6ff/0x9c0
[  173.644513][ T6025]  ? __lock_acquire+0xab9/0xd20
[  173.646157][ T6025]  dev_hard_start_xmit+0x2d7/0x830
[  173.647905][ T6025]  __dev_queue_xmit+0x1b8d/0x3b50
[  173.649672][ T6025]  ? register_lock_class+0x51/0x320
[  173.651844][ T6025]  ? __dev_queue_xmit+0x27b/0x3b50
[  173.653592][ T6025]  ? __pfx___dev_queue_xmit+0x10/0x10
[  173.655430][ T6025]  ? read_seqbegin+0x122/0x250
[  173.657053][ T6025]  ? neigh_resolve_output+0x438/0x750
[  173.658876][ T6025]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.660817][ T6025]  ? read_seqbegin+0x1ac/0x250
[  173.662441][ T6025]  ? __pfx_read_seqbegin+0x10/0x10
[  173.664184][ T6025]  ? __local_bh_enable_ip+0x12d/0x1c0
[  173.666008][ T6025]  ? eth_header+0x11b/0x200
[  173.667561][ T6025]  ? __asan_memcpy+0x40/0x70
[  173.669107][ T6025]  ip6_finish_output2+0xfb3/0x1480
[  173.671098][ T6025]  ? __pfx_ip6_finish_output2+0x10/0x10
[  173.673023][ T6025]  ? ip6_mtu+0x7d/0x490
[  173.674432][ T6025]  ? ip6_mtu+0x38c/0x490
[  173.675792][ T6025]  ? ip6_finish_output+0x2ef/0x4e0
[  173.677506][ T6025]  ? ip6_output+0x126/0x550
[  173.679040][ T6025]  ip6_output+0x340/0x550
[  173.680567][ T6025]  NF_HOOK+0x9e/0x380
[  173.681914][ T6025]  ? NF_HOOK+0x101/0x380
[  173.683374][ T6025]  ? __pfx_NF_HOOK+0x10/0x10
[  173.684887][ T6025]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  173.686809][ T6025]  ? do_raw_spin_unlock+0x4d/0x240
[  173.688627][ T6025]  ? icmp6_dst_alloc+0x3a5/0x420
[  173.690459][ T6025]  ? icmp6_dst_alloc+0x3a5/0x420
[  173.692332][ T6025]  mld_sendpack+0x8d4/0xe60
[  173.693856][ T6025]  ? mld_sendpack+0x1e7/0xe60
[  173.695473][ T6025]  ? __pfx_mld_sendpack+0x10/0x10
[  173.697150][ T6025]  mld_ifc_work+0x83e/0xd60
[  173.698691][ T6025]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.700502][ T6025]  ? process_scheduled_works+0x9ef/0x17b0
[  173.702461][ T6025]  process_scheduled_works+0xae1/0x17b0
[  173.704568][ T6025]  ? __pfx_process_scheduled_works+0x10/0x10
[  173.706620][ T6025]  worker_thread+0x8a0/0xda0
[  173.708328][ T6025]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  173.710755][ T6025]  ? __kthread_parkme+0x7b/0x200
[  173.712605][ T6025]  kthread+0x711/0x8a0
[  173.713973][ T6025]  ? __pfx_worker_thread+0x10/0x10
[  173.715709][ T6025]  ? __pfx_kthread+0x10/0x10
[  173.717308][ T6025]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.719130][ T6025]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.721138][ T6025]  ? __pfx_kthread+0x10/0x10
[  173.722784][ T6025]  ret_from_fork+0x439/0x7d0
[  173.724532][ T6025]  ? __pfx_ret_from_fork+0x10/0x10
[  173.726345][ T6025]  ? __switch_to_asm+0x39/0x70
[  173.728176][ T6025]  ? __switch_to_asm+0x33/0x70
[  173.730336][ T6025]  ? __pfx_kthread+0x10/0x10
[  173.732126][ T6025]  ret_from_fork_asm+0x1a/0x30
[  173.733832][ T6025]  </TASK>
[  173.735715][ T6025] Kernel Offset: disabled
[  173.737267][ T6025] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:44:18  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4601b RBX=1ffff11026cc7f69 RCX=ffff88803052d640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90008af78e0 RSP=ffffc90008af7758
R8 =ffffffff8fa38e37 R9 =1ffffffff1f471c6 R10=dffffc0000000000 R11=fffffbfff1f471c7
R12=ffff88813663fb48 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81bfbf5d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555f1f1500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffffffdfa50000 CR3=00000000356ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc909412e53
XMM06=0000000000000000 00007fc909412e4d XMM07=0000000000000000 00007fc909412e61
XMM08=0000000000000000 00007fc909412ee7 XMM09=0000000000000000 00007fc909412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000686dc10
R8 =ffff888020130237 R9 =1ffff11004026046 R10=dffffc0000000000 R11=ffffffff854f9640
R12=dffffc0000000000 R13=ffffffff99b028d9 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f96bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d531c71d0 CR3=000000010ee82000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007facc3da7498 00007facc3da7470 XMM03=00007facc3da74a8 00007facc3da74a0
XMM04=00007facc490d100 00007facc3da7460 XMM05=00007facc3da7478 00007facc3da74c0
XMM06=00007facc3da74b8 00007facc3da74b0 XMM07=00007facc3da74a8 00007facc3da74a0
XMM08=61685f6670620001 0024000100540000 XMM09=0000000000000000 00007facc3c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
