last executing test programs:

2.914842973s ago: executing program 2 (id=1333):
r0 = socket(0xf, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dbb00000", @ANYRES16=r5, @ANYBLOB="0303fdfffffffcffffff0c00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x44040)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d40)={@fallback, 0xffffffffffffffff, 0x15}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r6)
close(r7)
r8 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)="db", 0x1}], 0x1}, 0x8040)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40000, 0x40, 0xcc84, 0x500, 0xfffffffffffffffe})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x2c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44080)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)

2.03796388s ago: executing program 2 (id=1337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
splice(r4, 0x0, r3, 0x0, 0x1100000000f336, 0x8)
syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r7=>0x41424344}, 0x4, 0xffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0xff}, @ipv4=@tcp={{0x2c, 0x4, 0x0, 0x9, 0x11f, 0x65, 0x0, 0x17, 0x6, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x62, 0x3, [{0x7, 0xa, "2274c86c0aa8845c"}, {0x7, 0x10, "e5f3f96d66d9eb1d22094355fc3a"}, {0x0, 0xa, "ec38c471ea20a5db"}, {0x5, 0x9, "bd02d841e23ef2"}, {0x5, 0xa, "a0bec802a897874f"}, {0x5, 0x7, "1c884ef961"}, {0x0, 0x2}, {0x5, 0xf, "462408d4655c043fef5d0e70eb"}, {0x6, 0x6, "4e2b90b9"}, {0x1, 0x7, "c8e895673f"}]}, @timestamp={0x44, 0xc, 0x65, 0x0, 0x5, [0xe, 0x2650]}, @timestamp_addr={0x44, 0x14, 0x42, 0x1, 0x3, [{@multicast2, 0x45fc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}, @lsrr={0x83, 0x17, 0x2c, [@multicast2, @rand_addr=0x64010102, @loopback, @private=0xa010100, @multicast1]}]}}, {{0x4e24, 0x4e24, r6, r7, 0x1, 0x0, 0x1a, 0xeb0fe7af0f149389, 0x6, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x7}, @md5sig={0x13, 0x12, "ed73e18ebd9bd850066f03d3ba86fad2"}, @generic={0x22, 0x5, "71b09b"}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x8}, @generic={0x0, 0xe, "4fd0b7b5b6e43426fdf2e86c"}, @exp_smc={0xfe, 0x6}, @nop, @fastopen={0x22, 0xe, "32704e267135e07bd1945a7b"}]}}, {"fb68eeaed4a4e2"}}}}, 0x12d)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r8, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x5, 0x886}, 0x10, 0x16164, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[r9], 0x0, 0x10, 0xd}, 0x94)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r13, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)

1.076076327s ago: executing program 2 (id=1350):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

1.04739614s ago: executing program 1 (id=1351):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xfaa, <r0=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r2], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002b000701feffffff000000e3027c00000c00018008000600ffffffff100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

968.377538ms ago: executing program 1 (id=1353):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x64000000}, 0x0)

966.623384ms ago: executing program 1 (id=1355):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) (async)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000180)=0x60, 0x80800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44003500442ac5aba81633c94cd4a1b4bc34adb0ed9dc060934a53d5c6b41b89797ad7e39fa3eaedf032281799adab0d506824606fc1be1b7eead63d76914369bcf23ae6b6fd40e77ce2e4e347f2abd0da77e8147c4d", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4000802)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000000400)=""/237, 0xed}], 0x3, 0x80000001, 0x4) (async)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000000400)=""/237, 0xed}], 0x3, 0x80000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

880.127567ms ago: executing program 1 (id=1357):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
close(r3)
write$tun(r2, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r0, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r1, @ANYBLOB="51000e0080000000ffffffffffff08021100000008021100000000000000000000000000640043a00100040603077f00fc0025030034042a01013c040102b308710700000000010e08760609027fffe900000000080026006c09000008000c006400000008000d000000000018005a8014007593830080040002000700010005040b0004000200"], 0xa0}}, 0x0)

879.649995ms ago: executing program 1 (id=1358):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r1, 0x604ab000)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x4}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd700000000400020202000500030000000000090001fc73797a3000000000"], 0x28}, 0x1, 0x40030000000000}, 0x14)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9b}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001840)=ANY=[@ANYBLOB="1f00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000f0000000000000000000000000000e577277ff2a2485ef300000016459944c27d67c4356af15bc0ee0401d2636c767b3f36d9f43a928d0c57af9c5c4be78527daa1619230acf80fe61e1b4e37488b4b58b29de1"], 0x50)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r7, @ANYBLOB="000000002200f7eb850000001200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3ab7c6147a2956dcb70300000f00000085000000060000009500000000000000d0a3ea6122534cf43c53d1e57740271b215cde499fbb9ab235ae6336111f49b4b7193d3087dba0d8f571a4287010a6562d900633add4f2f4dcd4dca986987f07c284367926591dd8811e5d43ffda0bb500ccb8bf049a7987a440ae1b752c8c7bfc87055159fb"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448d788dd965f7a33121800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x6ebca0db66162409}, 0x50)
sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000001600)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="18000000021408002bbd70df2508004400", @ANYRES32=r6, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4011}, 0x4040010)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
tee(0xffffffffffffffff, r9, 0x80000001, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000003c0)="95163e34f5", 0x5}, {&(0x7f0000000640)="dabf086cf2c2", 0x6}], 0x2, 0x8)
recvmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f0000001900)=""/167, 0xa5}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000001640)=""/139, 0x8b}, {&(0x7f0000000000)=""/48, 0x30}], 0x5}, 0x3}], 0x51, 0x12000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)

589.329372ms ago: executing program 0 (id=1363):
r0 = socket(0x11, 0x6, 0xfffffff9)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x1], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0xe0, 0x0, 0x0, 0x5922b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040)

526.407114ms ago: executing program 0 (id=1364):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x3c}}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r6 = accept(r2, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x4002)
setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
getsockopt$inet_tcp_int(r6, 0x6, 0x10, 0x0, &(0x7f0000000300))
setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000240)=ANY=[@ANYRES32=r5])
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRESDEC=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

469.10259ms ago: executing program 0 (id=1365):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
listen(r0, 0x8)
accept4$inet(r0, &(0x7f0000000100), 0x0, 0x80800)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000007940), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x2, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2], 0x4c}}, 0x40000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x3, 0x1001}, 0x20)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={<r5=>0x0, 0x0, 0x9, 0x7f, 0x4, 0x454, 0x5, 0x800, {0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}}, 0x42467814, 0x7fffffff, 0x2, 0x8, 0x8}}, &(0x7f00000001c0)=0xb0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000004c0)={0x8001, 0x0, 0xe4f7}, 0xc)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e20, 0x30ba47ac, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}}, 0x1000, 0x7, 0xb, 0x100000, 0x25, 0x5, 0x16}, &(0x7f0000000480)=0x9c)
r6 = socket$inet6(0xa, 0x80000, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40)

380.380372ms ago: executing program 0 (id=1366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}, {0x0, 0xfd57}], 0x2}}], 0x1, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7}, {0xb, 0xa}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r3})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x13, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

379.238422ms ago: executing program 0 (id=1367):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x50}}, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000)

299.267732ms ago: executing program 0 (id=1368):
socket(0x1e, 0x4, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
socket(0x18, 0x1, 0x3)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0xfffff000, 0x4)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x271a, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0x18ff9)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x448eade7, 0x9}, {0x0, 0x0, 0x80000000}, {0x0, 0x4, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x2, 0x4000003}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x80000004}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x10, 0xffffffff}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {0x0, 0x3}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0xaa, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {0xf8d5}, {}, {0x10000}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xb}], [{}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r7 = accept(r3, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000480)}], 0x1, 0x0)
recvmsg(r7, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

209.629194ms ago: executing program 2 (id=1369):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x80005, 0x6f}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xffa, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x100003}}], 0x3a}, 0x0)

149.987039ms ago: executing program 2 (id=1370):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b000000000000000000000089480080006240000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x549f41, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000280), &(0x7f0000000700)=r5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="c705e395312d4e1a5df95256a640a7570000000087eeb182", 0xffffffffffffffe6)
r8 = accept4(r7, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$alg(r9, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)="d8a6c23ff2d1a2ece2b60fc01be1b2dc4bb9905b951b91e583fde714e2875992cc89594136df837ab4a47cbabaca1cb237ad6b783716d20a949c813c5abfe68d9641dcc71a8ea44c", 0x48}, {&(0x7f0000000300)="a20f17", 0x3}, {&(0x7f0000000640)="3ac5546e1044edd50b8de358f163db30461a21b5d12cbeb1b43e20c5b943ab383575f9d87db96c02199545c22953e01e452fab6e150c955261ad253b1cfe7d419a2000bd186badb5064e698354ef5e110c1dd144532dc15731908a16b7eb3475bd6d59e0ab9b233ffbeef221020b31ca737b364927cbc26f37550a9d21133b567ba2accba27b218e6ac2e67bbe26", 0x8e}, {&(0x7f0000000780)="6d159a4dbb720ea6893a33309557fdbc588103c90bac38abe4948e190fb604cba4b00312f002b9fa9b0623073de69622f85492de60d05dae395d80710fef937cd4856ee6777ec3bf5a38e79f9d35b7469b70edd4d0470eec253ffd88c5ee5918b437afdfdf497091abdb0bb43c983f7a38f3b9c93c4f4c07de69512fb054223607970f2167734e63dff64bf06c96ee", 0x8f}], 0x4, &(0x7f0000000400), 0x0, 0x4001}, {0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000c40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x70, 0x117, 0x2, 0x5a, "df0ab106a3dd7ed70300f5d2a16e3edde4bf76fd94828016a0d0af21bc6d5a58833ad432adc91f7a6edd045056650f1aa8a96cdff295bd76409aa8c9f26aa9c278816d790c8f15bd12159272269d265bed651b368e971cd66ca3"}, @op={0x18}, @iv={0xa8, 0x117, 0x2, 0x8e, "919ea413e9f6b682d883b80f85a9deca843b15ee5bf40f5bfbbaaf3cd61b2c6bb59509e483428ebb1f8bc31c8caac4c886a1ee88def6e9801163b646c23b935819e5aa426f5443e3383d68fd75edee2bb6cc36dbfbd1215be8b9e46b5a175707118f6503f39b33acc61ce174a8a7184477c754131766ec8969beaae047a8ec6f72d1cbf7f8a0a25a462f3ce43f0e"}, @iv={0xa0, 0x117, 0x2, 0x8b, "5a04b983cd9562e7759dc9103ed4e1f053c695debc01ee8a01ebc48450e59604f5daa5e9cd4dbbc9422c99f0008d53cf06be078264fca5dd4af5a15378c3cafff9b72bba45350dc999ded017fbd812875cabbbb57710fedb4bf2a886eb1eb8d9293f3b370201945e58e379aa4b463df0c4395224afc1044bf01843dd93fac6875c9feca9375244a99ea7db"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x218}], 0x2, 0x20048080)
sendfile(r9, r8, 0x0, 0x5)
ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f00000002c0))
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000200000005000100070000000500040003000000090002009e5acbd473797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

149.632849ms ago: executing program 2 (id=1371):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/248, 0xf8}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b80)=""/13, 0xd}], 0x1}, 0x253}, {{0x0, 0x0, 0x0}, 0x588}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006480)=""/162, 0xa2}, 0x9}, {{0x0, 0x0, 0x0}, 0xa}], 0x5, 0x0, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
bind$packet(r4, &(0x7f00000000c0)={0x11, 0x11, r6, 0x1, 0x10, 0x6, @local}, 0x14) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x5d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200f60300000020000000ffff0000b7080000000000007b8af8ff00000000b78af0ff00000000bfa1000000100000c3523e55061005c1ad81c7be8807010000f8ffffffbfa400001c11a22d07040800f0ffffffb70200000800000022", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

0s ago: executing program 1 (id=1372):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = socket(0x2000000000000021, 0x2, 0x10000000000002)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$unix(r10, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
sendmsg(r11, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041)
ioctl$SIOCNRDECOBS(r11, 0x89e2)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53385' (ED25519) to the list of known hosts.
syzkaller login: [   48.927863][ T5836] cgroup: Unknown subsys name 'net'
[   49.033429][ T5836] cgroup: Unknown subsys name 'cpuset'
[   49.038001][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.467287][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.497475][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.501693][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.504536][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.507480][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.510443][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.566291][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.569040][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.575553][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.578421][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.581235][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.612187][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.616662][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.620730][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.624935][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.631695][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.744433][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.903067][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   54.908553][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.911735][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.914197][ T5847] bridge_slave_0: entered allmulticast mode
[   54.916910][ T5847] bridge_slave_0: entered promiscuous mode
[   54.921563][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.924120][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.926619][ T5847] bridge_slave_1: entered allmulticast mode
[   54.929406][ T5847] bridge_slave_1: entered promiscuous mode
[   54.971634][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.983109][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.034215][ T5847] team0: Port device team_slave_0 added
[   55.053741][ T5847] team0: Port device team_slave_1 added
[   55.055930][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.058298][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.061189][ T5853] bridge_slave_0: entered allmulticast mode
[   55.063956][ T5853] bridge_slave_0: entered promiscuous mode
[   55.090279][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.092991][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.095577][ T5853] bridge_slave_1: entered allmulticast mode
[   55.098504][ T5853] bridge_slave_1: entered promiscuous mode
[   55.110037][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.113155][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.122796][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.137581][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.139950][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.149641][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.165868][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.169287][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   55.183683][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.226126][ T5853] team0: Port device team_slave_0 added
[   55.254239][ T5847] hsr_slave_0: entered promiscuous mode
[   55.257651][ T5847] hsr_slave_1: entered promiscuous mode
[   55.262659][ T5853] team0: Port device team_slave_1 added
[   55.327590][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.329966][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.338652][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.345399][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.348261][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.358287][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.363014][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.366169][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.369320][ T5855] bridge_slave_0: entered allmulticast mode
[   55.373864][ T5855] bridge_slave_0: entered promiscuous mode
[   55.395294][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.398242][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.402318][ T5855] bridge_slave_1: entered allmulticast mode
[   55.405865][ T5855] bridge_slave_1: entered promiscuous mode
[   55.453652][ T5853] hsr_slave_0: entered promiscuous mode
[   55.456537][ T5853] hsr_slave_1: entered promiscuous mode
[   55.459123][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.461753][ T5853] Cannot create hsr debugfs directory
[   55.497462][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.502720][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.575315][ T5855] team0: Port device team_slave_0 added
[   55.587979][ T5855] team0: Port device team_slave_1 added
[   55.651931][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.654288][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.663871][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.671764][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.674899][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.683353][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.694338][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.712021][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.721840][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.765468][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.784649][ T5855] hsr_slave_0: entered promiscuous mode
[   55.787854][ T5855] hsr_slave_1: entered promiscuous mode
[   55.791922][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   55.794378][ T5855] Cannot create hsr debugfs directory
[   55.878051][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.890518][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.913157][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.931328][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.000246][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.004633][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.009953][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.017689][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.064177][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.094569][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.109227][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.123422][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.126655][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.135699][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.138773][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.157607][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.163360][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.173776][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.176117][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.196548][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.199354][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.208841][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   56.233125][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.235465][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.248972][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.251709][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.285890][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.357966][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.392710][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.415061][ T5847] veth0_vlan: entered promiscuous mode
[   56.433097][ T5847] veth1_vlan: entered promiscuous mode
[   56.448116][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.454108][ T5853] veth0_vlan: entered promiscuous mode
[   56.463635][ T5853] veth1_vlan: entered promiscuous mode
[   56.479222][ T5847] veth0_macvtap: entered promiscuous mode
[   56.494163][ T5847] veth1_macvtap: entered promiscuous mode
[   56.507933][ T5853] veth0_macvtap: entered promiscuous mode
[   56.516840][ T5853] veth1_macvtap: entered promiscuous mode
[   56.523600][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.529206][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.531506][ T5233] Bluetooth: hci0: command tx timeout
[   56.536061][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.541359][ T5855] veth0_vlan: entered promiscuous mode
[   56.552418][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.564417][ T5855] veth1_vlan: entered promiscuous mode
[   56.567511][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.571999][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.596311][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.610975][ T5233] Bluetooth: hci1: command tx timeout
[   56.633554][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.652450][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.655736][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.669820][ T5855] veth0_macvtap: entered promiscuous mode
[   56.688406][ T5855] veth1_macvtap: entered promiscuous mode
[   56.691207][ T5233] Bluetooth: hci2: command tx timeout
[   56.694523][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.705586][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.708569][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.712870][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.721940][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.727528][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.749063][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.765937][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.784519][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.790629][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.793693][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.796728][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.799832][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.824425][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.832557][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.862300][ T5913] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   56.867579][ T5913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.876474][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.879083][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.885777][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.894208][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.934560][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.938744][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.032092][ T5923] netlink: 'syz.2.4': attribute type 10 has an invalid length.
[   57.037054][ T5923] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.054646][ T5923] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   57.086081][ T5927] bond0: default FDB implementation only supports local addresses
[   57.094922][ T5927] netlink: 'syz.2.5': attribute type 62 has an invalid length.
[   57.142774][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'.
[   57.283777][ T5941] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.666895][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   57.724322][ T5951] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11'.
[   57.852480][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.864648][ T5966] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   57.903560][ T5969] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   58.065568][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.189201][ T5989] netlink: 468 bytes leftover after parsing attributes in process `syz.2.22'.
[   58.306153][ T5990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.21'.
[   58.488951][ T6001] tipc: Started in network mode
[   58.491433][ T6001] tipc: Node identity dea1d92dd586, cluster identity 4711
[   58.494657][ T6001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.498219][ T6001] syzkaller0: entered promiscuous mode
[   58.505588][ T6001] syzkaller0: entered allmulticast mode
[   58.608647][ T6011] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   58.611826][ T5233] Bluetooth: hci0: command tx timeout
[   58.683217][ T6001] tipc: Resetting bearer <eth:syzkaller0>
[   58.694256][ T5233] Bluetooth: hci1: command tx timeout
[   58.700692][ T6001] tipc: Disabling bearer <eth:syzkaller0>
[   58.723637][ T6007] syzkaller0: create flow: hash 1224564208 index 1
[   58.766030][ T6006] syzkaller0: delete flow: hash 1224564208 index 1
[   58.771661][ T5233] Bluetooth: hci2: command tx timeout
[   59.535325][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   59.539653][ T6022] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (180)
[   59.653536][ T6040] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   59.751688][ T6047] Zero length message leads to an empty skb
[   59.816930][ T6050] team_slave_0: entered promiscuous mode
[   59.819020][ T6050] team_slave_1: entered promiscuous mode
[   59.824780][ T6050] macsec1: entered promiscuous mode
[   59.826943][ T6050] team0: entered promiscuous mode
[   59.836901][ T6054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.43'.
[   59.913843][ T6062] netlink: 'syz.0.46': attribute type 74 has an invalid length.
[   59.949973][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'.
[   59.960411][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   60.128364][ T6080] netlink: 'syz.2.52': attribute type 29 has an invalid length.
[   60.162020][ T6086] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[   60.184723][ T6091] ieee802154 phy0 wpan0: encryption failed: -22
[   60.207090][ T6091] dvmrp1: entered allmulticast mode
[   60.266414][ T6091] tipc: Started in network mode
[   60.268275][ T6091] tipc: Node identity aee53b884cc2, cluster identity 4711
[   60.272055][ T6091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.277314][ T6091] syzkaller0: entered promiscuous mode
[   60.279222][ T6091] syzkaller0: entered allmulticast mode
[   60.303579][ T6091] tipc: Resetting bearer <eth:syzkaller0>
[   60.308359][ T6090] tipc: Resetting bearer <eth:syzkaller0>
[   60.317588][ T6090] tipc: Disabling bearer <eth:syzkaller0>
[   60.405178][ T6101] vlan0: entered promiscuous mode
[   60.507682][ T6108] netlink: 'syz.0.59': attribute type 1 has an invalid length.
[   60.629660][ T6110] Bluetooth: MGMT ver 1.23
[   60.690692][ T5233] Bluetooth: hci0: command tx timeout
[   60.697483][ T6117] netlink: 'syz.0.62': attribute type 10 has an invalid length.
[   60.704622][ T6117] 8021q: adding VLAN 0 to HW filter on device team0
[   60.708438][ T6117] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.717136][ T6117] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   60.735337][ T6117] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.743578][ T6117] bond_slave_0: entered promiscuous mode
[   60.745532][ T6117] bond_slave_1: entered promiscuous mode
[   60.747533][ T6117] team_slave_0: entered promiscuous mode
[   60.749464][ T6117] team_slave_1: entered promiscuous mode
[   60.751421][ T6117] syz_tun: entered promiscuous mode
[   60.753705][ T6117] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   60.757597][ T6117] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   60.770399][ T5233] Bluetooth: hci1: command tx timeout
[   60.850336][ T5233] Bluetooth: hci2: command tx timeout
[   61.342825][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.579914][ T6164] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   61.871926][ T6188] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.886820][ T6188] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002
[   61.898068][ T6188] dvmrp0: entered allmulticast mode
[   61.946618][ T6198] __nla_validate_parse: 5 callbacks suppressed
[   61.946633][ T6198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.84'.
[   62.026025][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'.
[   62.107259][ T6206] bridge0: port 3(batadv1) entered blocking state
[   62.111015][ T6206] bridge0: port 3(batadv1) entered disabled state
[   62.113930][ T6206] batadv1: entered allmulticast mode
[   62.118334][ T6206] batadv1: entered promiscuous mode
[   62.395077][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'.
[   62.398659][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   62.402781][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   62.609917][ T6241] ieee802154 phy0 wpan0: encryption failed: -22
[   62.617565][ T5875] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   62.621279][ T5875] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   62.628700][ T6227] validate_nla: 4 callbacks suppressed
[   62.628710][ T6227] netlink: 'syz.0.92': attribute type 4 has an invalid length.
[   62.770332][ T5850] Bluetooth: hci0: command tx timeout
[   62.852263][ T5850] Bluetooth: hci1: command tx timeout
[   62.930378][ T5850] Bluetooth: hci2: command tx timeout
[   62.998606][ T6272] netlink: del zone limit has 8 unknown bytes
[   63.030825][ T6274] bond0: Error: Cannot enslave bond to itself.
[   63.202695][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'.
[   63.206940][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'.
[   63.228144][ T6296] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   63.297369][ T6300] 8021q: adding VLAN 0 to HW filter on device team0
[   63.311503][ T6300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.444890][ T6311] trusted_key: syz.1.115 sent an empty control message without MSG_MORE.
[   63.624023][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.653304][ T6328] v: renamed from veth1_vlan (while UP)
[   63.797863][ T6340] netlink: 'syz.0.124': attribute type 13 has an invalid length.
[   63.804769][ T6340] netlink: 'syz.0.124': attribute type 17 has an invalid length.
[   63.874999][ T6340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.940817][ T6342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.975176][ T6347] pimreg: entered allmulticast mode
[   64.295907][ T6351] netlink: 'syz.1.126': attribute type 1 has an invalid length.
[   64.533130][ T6362] tipc: Can't bind to reserved service type 0
[   64.725629][ T6379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.134'.
[   64.751803][ T6385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.136'.
[   64.808355][ T6381] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.010983][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[   65.033539][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.037495][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.106904][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.118602][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.232336][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.236309][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.251949][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.255610][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.302222][ T6405] syzkaller1: entered promiscuous mode
[   65.304549][ T6405] syzkaller1: entered allmulticast mode
[   65.598177][ T6429] netlink: 'syz.0.149': attribute type 1 has an invalid length.
[   65.808328][ T6452] tipc: Enabling <ib:lo> not permitted
[   65.815808][ T6452] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   66.009668][ T6471] netlink: 'syz.0.161': attribute type 10 has an invalid length.
[   66.021747][ T6471] batman_adv: batadv0: Adding interface: virt_wifi0
[   66.024111][ T6471] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.044772][ T6471] batman_adv: batadv0: Interface activated: virt_wifi0
[   66.051457][ T6471] netlink: 'syz.0.161': attribute type 10 has an invalid length.
[   66.089506][ T6479] netlink: 'syz.2.164': attribute type 18 has an invalid length.
[   67.310250][ T6518] __nla_validate_parse: 14 callbacks suppressed
[   67.310263][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'.
[   67.364901][ T6523] netlink: 9 bytes leftover after parsing attributes in process `syz.1.180'.
[   67.766600][ T6572] tipc: Started in network mode
[   67.768350][ T6572] tipc: Node identity , cluster identity 4711
[   67.770640][ T6572] tipc: Failed to obtain node identity
[   67.772515][ T6572] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.823263][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[   68.362937][ T6609] IPv6: NLM_F_CREATE should be specified when creating new route
[   68.454601][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'.
[   68.508367][ T6619] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   68.783325][ T6619] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   68.864446][ T6626] netlink: 48 bytes leftover after parsing attributes in process `syz.1.207'.
[   68.963712][ T6637] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[   69.061093][ T6652] netlink: 48 bytes leftover after parsing attributes in process `syz.1.216'.
[   69.098629][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.213'.
[   69.251989][ T6674] netlink: 104 bytes leftover after parsing attributes in process `syz.0.223'.
[   69.257832][ T6678] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.226'.
[   69.412396][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   69.608073][ T6710] gtp0: entered promiscuous mode
[   69.627195][ T6704] macvlan3: entered allmulticast mode
[   69.629313][ T6704] veth1_vlan: entered allmulticast mode
[   69.633358][ T6704] veth1_vlan: left allmulticast mode
[   69.727561][ T6719] openvswitch: netlink: IPv4 tun info is not correct
[   69.849385][ T6729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.856093][ T6729] syzkaller0: entered promiscuous mode
[   69.858029][ T6729] syzkaller0: entered allmulticast mode
[   69.875491][ T6729] tipc: Resetting bearer <eth:syzkaller0>
[   69.881231][ T6728] tipc: Resetting bearer <eth:syzkaller0>
[   69.893596][ T6728] tipc: Disabling bearer <eth:syzkaller0>
[   69.997605][ T6737] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   70.159971][ T6756] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[   70.180805][ T6756] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.282953][ T6760] tipc: Invalid UDP bearer configuration
[   70.283000][ T6760] tipc: Enabling of bearer <udp:s0> rejected, failed to enable media
[   70.337496][ T6773] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   70.343636][ T6768] netlink: 'syz.2.258': attribute type 6 has an invalid length.
[   70.432202][ T6780] netlink: 'syz.2.263': attribute type 25 has an invalid length.
[   70.434802][ T6780] netlink: 'syz.2.263': attribute type 7 has an invalid length.
[   70.538971][ T6793] netlink: 'syz.2.266': attribute type 5 has an invalid length.
[   70.555482][ T6793] netlink: 'syz.2.266': attribute type 7 has an invalid length.
[   70.575419][ T6793] : entered promiscuous mode
[   70.758838][ T6813] dvmrp0: left allmulticast mode
[   70.761433][ T6813] pimreg: left allmulticast mode
[   70.795364][ T6815] netlink: 'syz.1.274': attribute type 29 has an invalid length.
[   70.881748][ T6830] netlink: 'syz.1.278': attribute type 16 has an invalid length.
[   70.933040][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.146720][ T6863] sctp: [Deprecated]: syz.0.290 (pid 6863) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.146720][ T6863] Use struct sctp_sack_info instead
[   71.155977][ T6863] sctp: [Deprecated]: syz.0.290 (pid 6863) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.155977][ T6863] Use struct sctp_sack_info instead
[   71.219181][ T6864] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   71.779132][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.783505][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.788463][ T6882] bridge0: entered allmulticast mode
[   71.797932][ T6882] bridge_slave_1: left allmulticast mode
[   71.818756][ T6882] bridge_slave_1: left promiscuous mode
[   71.823984][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.830015][ T6882] bridge_slave_0: left allmulticast mode
[   71.832911][ T6882] bridge_slave_0: left promiscuous mode
[   71.835486][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.424416][ T6961] __nla_validate_parse: 21 callbacks suppressed
[   72.424427][ T6961] netlink: 388 bytes leftover after parsing attributes in process `syz.0.319'.
[   72.477904][ T6970] dvmrp1: entered allmulticast mode
[   72.483467][ T6970] dvmrp1: left allmulticast mode
[   72.666370][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[   72.673212][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.676349][ T6989] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.681689][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.684713][ T6989] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.692999][ T6989] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   72.696036][ T6989] batman_adv: batadv0: Removing interface: virt_wifi0
[   72.784411][ T6996] sit2: entered promiscuous mode
[   72.910394][ T7014] netlink: 208 bytes leftover after parsing attributes in process `syz.1.337'.
[   72.916745][ T7015] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   72.920942][ T7015] macvtap1: entered promiscuous mode
[   72.926434][ T7015] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   73.192850][ T7033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.231181][ T7034] 8021q: adding VLAN 0 to HW filter on device batadv1
[   73.234577][ T7034] batadv1: entered promiscuous mode
[   73.237677][ T7034] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   73.243002][ T7034] team0: Failed to send options change via netlink (err -105)
[   73.246209][ T7034] team0: Port device batadv1 added
[   73.265548][ T7033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.332771][ T7033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.405493][ T7033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.517036][ T5909] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.528477][ T5909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.538172][ T5909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.548677][ T5909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.804473][ T7071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.348'.
[   73.903136][ T7075] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   74.534628][ T7099] syzkaller1: entered promiscuous mode
[   74.536485][ T7099] syzkaller1: entered allmulticast mode
[   74.541349][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'.
[   74.633453][ T7102] netlink: 360 bytes leftover after parsing attributes in process `syz.2.355'.
[   74.654680][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[   74.781762][ T7115] tipc: New replicast peer: 208.253.78.183
[   74.784948][ T7115] tipc: Enabled bearer <udp:s>, priority 10
[   74.877790][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'.
[   74.878273][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.364'.
[   75.036192][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.369'.
[   75.139421][ T7141] netlink: zone id is out of range
[   75.143796][ T7141] netlink: zone id is out of range
[   75.145730][ T7141] netlink: zone id is out of range
[   75.147624][ T7141] netlink: zone id is out of range
[   75.149566][ T7141] netlink: zone id is out of range
[   75.153978][ T7141] netlink: zone id is out of range
[   75.156073][ T7141] netlink: zone id is out of range
[   75.157844][ T7141] netlink: zone id is out of range
[   75.159556][ T7141] netlink: get zone limit has 8 unknown bytes
[   75.576390][ T7155] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   75.901135][   T10] tipc: Node number set to 187160877
[   76.507840][ T7187] ieee802154 phy0 wpan0: encryption failed: -90
[   76.896007][ T7208] Illegal XDP return value 85305927 on prog  (id 160) dev N/A, expect packet loss!
[   77.021251][ T7222] validate_nla: 3 callbacks suppressed
[   77.021267][ T7222] netlink: 'syz.1.396': attribute type 10 has an invalid length.
[   77.177461][ T7235] !: renamed from dummy0 (while UP)
[   77.226165][   T33] audit: type=1800 audit(1756897525.908:2): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.400" name="memory.events" dev="tmpfs" ino=693 res=0 errno=0
[   77.465508][ T7253] __nla_validate_parse: 13 callbacks suppressed
[   77.465524][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'.
[   77.607903][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'.
[   78.301700][ T7321] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[   78.304612][ T7321] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[   78.307512][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'.
[   78.311912][ T7321] block nbd1: shutting down sockets
[   78.387870][ T7334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.408'.
[   78.512294][ T7353] netlink: 'syz.2.414': attribute type 83 has an invalid length.
[   78.598487][ T7360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.601905][ T7360] netlink: 52 bytes leftover after parsing attributes in process `syz.1.417'.
[   78.604916][ T7360] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[   78.608724][ T7360] syzkaller0: entered promiscuous mode
[   78.611224][ T7360] syzkaller0: entered allmulticast mode
[   78.668070][ T7359] tipc: Resetting bearer <eth:syzkaller0>
[   78.677489][ T7359] tipc: Disabling bearer <eth:syzkaller0>
[   78.755035][ T7369] netlink: 48 bytes leftover after parsing attributes in process `syz.0.420'.
[   79.137076][ T7413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.432'.
[   79.173469][ T7413] team0: Port device team_slave_0 removed
[   79.332230][ T7426] netlink: 'syz.0.435': attribute type 11 has an invalid length.
[   79.368402][ T7433] netlink: 'syz.1.437': attribute type 4 has an invalid length.
[   79.399487][ T7436] geneve2: entered promiscuous mode
[   79.403336][ T7436] geneve2: entered allmulticast mode
[   79.489895][ T7446] netlink: 404 bytes leftover after parsing attributes in process `syz.1.443'.
[   79.496207][ T7447] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   79.499829][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'.
[   79.505347][ T7446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'.
[   79.621792][ T7460] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[   79.635040][ T7462] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[   79.640653][ T7462] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   79.672967][ T7468] ieee802154 phy0 wpan0: encryption failed: -22
[   79.929877][ T7487] macvlan3: entered promiscuous mode
[   79.931819][ T7487] bond0: entered promiscuous mode
[   79.933848][ T7487] team0: entered promiscuous mode
[   79.942478][ T7487] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   80.909175][ T7524] gretap0: entered promiscuous mode
[   80.926761][ T7525] syzkaller0: entered promiscuous mode
[   80.929467][ T7525] syzkaller0: entered allmulticast mode
[   81.174746][   T95] cfg80211: failed to load regulatory.db
[   81.256322][ T7551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.260979][ T7553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.336377][ T7578] veth0_to_bond: entered promiscuous mode
[   81.338296][ T7578] veth0_to_bond: entered allmulticast mode
[   81.437317][ T7593] Unsupported ieee802154 address type: 0
[   81.813921][ T7624] netlink: 'syz.2.492': attribute type 8 has an invalid length.
[   81.825974][ T7628] net_ratelimit: 6 callbacks suppressed
[   81.825982][ T7628] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   81.854348][ T7630] lo: entered allmulticast mode
[   81.856368][ T7630] lo: left allmulticast mode
[   82.009202][ T7636] bond3: (slave ip6gretap1): making interface the new active one
[   82.015576][ T7636] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   82.293575][ T7641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.585302][ T7648] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[   82.633816][ T7648] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   82.655009][ T7648] veth3: entered promiscuous mode
[   82.662556][ T7648] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   82.667473][ T7648] __nla_validate_parse: 18 callbacks suppressed
[   82.667486][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'.
[   82.676558][ T7648] 8021q: adding VLAN 0 to HW filter on device bond3
[   82.681234][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   82.791563][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.154785][ T7674] veth0_to_bridge: entered allmulticast mode
[   83.550016][ T7689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.554484][ T7686] syzkaller0: entered promiscuous mode
[   83.556443][ T7686] syzkaller0: entered allmulticast mode
[   83.627752][ T7687] tipc: Resetting bearer <eth:syzkaller0>
[   83.656101][ T7687] tipc: Disabling bearer <eth:syzkaller0>
[   83.802333][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.511'.
[   83.835482][ T7718] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   83.852646][ T7718] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   83.856763][ T7718] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   84.431096][ T7762] netlink: 'syz.1.517': attribute type 10 has an invalid length.
[   84.564699][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[   84.615147][ T7773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.521'.
[   84.667267][ T7778] syzkaller1: entered promiscuous mode
[   84.669810][ T7778] syzkaller1: entered allmulticast mode
[   84.882261][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'.
[   84.917631][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'.
[   84.968378][ T7792] netlink: 'syz.1.529': attribute type 4 has an invalid length.
[   85.101079][ T7805] netlink: 308 bytes leftover after parsing attributes in process `syz.2.533'.
[   85.105222][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[   85.115246][ T7805] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   85.126532][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'.
[   85.216636][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.536'.
[   85.221272][ T7819] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   85.397726][ T7858] openvswitch: netlink: Message has 8 unknown bytes.
[   85.443087][ T7864] macsec2: entered promiscuous mode
[   85.445581][ T7864] macsec2: entered allmulticast mode
[   85.521028][ T7872] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   85.591661][ T7876] pim6reg: entered allmulticast mode
[   85.699718][ T7871] pim6reg: left allmulticast mode
[   85.850789][ T7894] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.922908][ T7894] bond4 (unregistering): Released all slaves
[   86.312756][ T7915] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   86.816373][ T5875] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[   86.873672][ T7942] tipc: Started in network mode
[   86.875831][ T7942] tipc: Node identity be3cc81ae9ad, cluster identity 4711
[   86.879000][ T7942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.885235][ T7942] syzkaller0: entered promiscuous mode
[   86.887765][ T7942] syzkaller0: entered allmulticast mode
[   86.899047][ T7942] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   86.909557][ T7942] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[   86.918253][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[   86.924877][ T7942] netlink: 'syz.2.565': attribute type 10 has an invalid length.
[   86.928520][ T7942] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   86.942939][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   86.946822][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   86.952082][ T7941] tipc: Resetting bearer <eth:syzkaller0>
[   86.959918][ T7941] tipc: Disabling bearer <eth:syzkaller0>
[   86.966353][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   86.971059][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   87.257357][ T7922] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   87.291010][ T7953] netlink: 'syz.2.569': attribute type 23 has an invalid length.
[   87.397728][ T7961] netlink: 'syz.1.572': attribute type 62 has an invalid length.
[   87.523228][ T7978] netlink: 'syz.1.578': attribute type 5 has an invalid length.
[   87.810724][ T7991] __nla_validate_parse: 10 callbacks suppressed
[   87.810741][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'.
[   87.940559][ T8001] netlink: 'syz.0.585': attribute type 10 has an invalid length.
[   87.946163][ T8001] team0: Device ipvlan1 failed to register rx_handler
[   88.147833][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'.
[   88.151336][ T8007] batadv1: left allmulticast mode
[   88.153622][ T8007] batadv1: left promiscuous mode
[   88.156353][ T8007] bridge0: port 3(batadv1) entered disabled state
[   88.161657][ T8007] bridge_slave_1: left allmulticast mode
[   88.164019][ T8007] bridge_slave_1: left promiscuous mode
[   88.166663][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.173802][ T8007] bridge_slave_0: left allmulticast mode
[   88.176289][ T8007] bridge_slave_0: left promiscuous mode
[   88.178899][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.450705][ T5850] Bluetooth: hci0: command 0x0c20 tx timeout
[   88.472527][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'.
[   88.478875][ T8016] team1 (uninitialized): Failed to send options change via netlink (err -105)
[   88.493166][ T8016] team1: entered promiscuous mode
[   88.494961][ T8016] team1: entered allmulticast mode
[   88.578154][ T8025] sctp: [Deprecated]: syz.1.594 (pid 8025) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.578154][ T8025] Use struct sctp_sack_info instead
[   88.607113][ T8025] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   88.714283][ T8038] netlink: 72 bytes leftover after parsing attributes in process `syz.1.598'.
[   88.887807][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'.
[   89.799044][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.611'.
[   89.802429][ T8088] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[   89.845543][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'.
[   89.884116][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'.
[   89.919800][ T8098] netlink: 48 bytes leftover after parsing attributes in process `syz.2.615'.
[   90.025037][ T5909] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   90.029561][ T8106] netlink: 'syz.1.616': attribute type 39 has an invalid length.
[   90.075664][ T8107] delete_channel: no stack
[   90.166995][ T8110] netlink: 19 bytes leftover after parsing attributes in process `syz.2.619'.
[   90.234630][ T8112] netem: incorrect gi model size
[   90.236610][ T8112] netem: change failed
[   90.263750][ T8114] vlan0: entered promiscuous mode
[   90.944111][ T8138] netlink: 'syz.1.628': attribute type 2 has an invalid length.
[   90.956771][ T8138] : entered promiscuous mode
[   91.159257][ T8149] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[   91.644185][ T8162] Unsupported ieee802154 address type: 0
[   91.801698][ T8183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   91.803716][ T8184] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   92.567572][ T8215] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   92.576380][ T8214] IPVS: stopping master sync thread 8215 ...
[   92.743570][ T8221] 8021q: VLANs not supported on gre0
[   92.817897][ T8228] pimreg: tun_chr_ioctl cmd 2147767506
[   92.843047][ T8231] __nla_validate_parse: 10 callbacks suppressed
[   92.843055][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.653'.
[   92.885191][ T8233] netlink: 'syz.0.654': attribute type 1 has an invalid length.
[   93.023492][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'.
[   93.049077][ T8251] netlink: 'syz.0.659': attribute type 11 has an invalid length.
[   93.128889][ T8256] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   93.135107][ T8257] sock: sock_timestamping_bind_phc: sock not bind to device
[   93.273845][ T8260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.375737][ T8259] tipc: Disabling bearer <eth:syzkaller0>
[   93.862857][ T8300] netlink: 'syz.0.675': attribute type 11 has an invalid length.
[   93.992335][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'.
[   94.049588][ T8312] syzkaller0: entered promiscuous mode
[   94.055252][ T8312] syzkaller0: entered allmulticast mode
[   94.097654][ T8317] sch_fq: defrate 828268421 ignored.
[   94.158247][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.163942][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[   94.203444][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'.
[   94.473315][ T8346] netlink: 'syz.0.688': attribute type 32 has an invalid length.
[   94.484882][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'.
[   94.632007][ T8356] netlink: 'syz.1.690': attribute type 10 has an invalid length.
[   94.635262][ T8357] netlink: 'syz.1.690': attribute type 10 has an invalid length.
[   94.639732][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.690'.
[   94.645815][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.665823][ T8357] batadv0: entered promiscuous mode
[   94.668176][ T8357] batadv0: entered allmulticast mode
[   94.671221][ T8357] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   94.973361][   T10] IPVS: starting estimator thread 0...
[   95.059599][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[   95.070625][ T8365] IPVS: using max 80 ests per chain, 192000 per kthread
[   95.124941][ T8379] netlink: 'syz.1.695': attribute type 3 has an invalid length.
[   95.127514][ T8379] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.695'.
[   95.542325][ T8422] netlink: 'syz.1.708': attribute type 3 has an invalid length.
[   96.380004][ T8441] netlink: 'syz.0.712': attribute type 6 has an invalid length.
[   96.423986][ T8446] netlink: 'syz.2.714': attribute type 1 has an invalid length.
[   96.530818][ T8452] C: renamed from team_slave_0 (while UP)
[   96.535797][ T8452] netlink: 'syz.1.713': attribute type 4 has an invalid length.
[   96.539440][ T8452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   96.572576][ T8453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.577651][ T8453] syzkaller0: entered promiscuous mode
[   96.579480][ T8453] syzkaller0: entered allmulticast mode
[   96.668158][ T8445] syzkaller0: mtu less than device minimum
[   96.675640][ T8466] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   96.688804][ T8444] tipc: Resetting bearer <eth:syzkaller0>
[   96.719772][ T8444] tipc: Disabling bearer <eth:syzkaller0>
[   96.978343][ T8487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.028991][ T8487] tipc: Resetting bearer <eth:syzkaller0>
[   97.034488][ T8486] tipc: Disabling bearer <eth:syzkaller0>
[   97.221517][ T8502] sctp: [Deprecated]: syz.1.724 (pid 8502) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.221517][ T8502] Use struct sctp_sack_info instead
[   97.496987][ T8513] netlink: 'syz.2.731': attribute type 42 has an invalid length.
[   97.918310][ T8534] __nla_validate_parse: 8 callbacks suppressed
[   97.918322][ T8534] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.739'.
[   97.962317][ T8537] syzkaller0: entered promiscuous mode
[   97.964266][ T8537] syzkaller0: entered allmulticast mode
[   98.085185][ T8545] syzkaller0: create flow: hash 1224564208 index 1
[   98.114555][ T5875] syzkaller0: tun_net_xmit 76
[   98.116779][ T5875] syzkaller0: tun_net_xmit 48
[   98.136228][ T8550] netlink: 'syz.0.745': attribute type 1 has an invalid length.
[   98.140321][ T5889] syzkaller0: tun_net_xmit 76
[   98.151694][ T8550] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.163037][ T8550] macvlan4: entered promiscuous mode
[   98.165253][ T8550] macvlan4: entered allmulticast mode
[   98.167503][ T8550] bond4: entered promiscuous mode
[   98.169437][ T8550] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   98.172998][ T8550] bond4: left promiscuous mode
[   98.197802][ T8546] syzkaller0: delete flow: hash 1224564208 index 1
[   98.214268][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'.
[   98.894724][ T8552] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   98.897684][ T8552] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[   98.927402][ T8562] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   99.031029][ T8574] syzkaller0: entered promiscuous mode
[   99.032869][ T8574] syzkaller0: entered allmulticast mode
[   99.167120][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'.
[   99.945395][ T8597] netlink: 5 bytes leftover after parsing attributes in process `syz.1.758'.
[  100.103732][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'.
[  100.116922][ T8618] syz.0.765 (8618) used obsolete PPPIOCDETACH ioctl
[  100.127145][ T8618] netlink: 'syz.0.765': attribute type 26 has an invalid length.
[  100.177942][ T8629] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  100.181058][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'.
[  100.192531][ T8628] bond0: invalid ARP target 0.0.0.0 specified for addition
[  100.194928][ T8628] bond0: option arp_ip_target: invalid value (0)
[  100.306247][ T8629] netlink: 'syz.2.763': attribute type 3 has an invalid length.
[  100.313872][ T8629] netlink: 'syz.2.763': attribute type 1 has an invalid length.
[  100.319088][ T8629] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.763'.
[  100.347215][ T8643] IPv6: addrconf: prefix option has invalid lifetime
[  100.355895][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'.
[  100.585598][ T8665] syzkaller0: entered promiscuous mode
[  100.587996][ T8665] syzkaller0: entered allmulticast mode
[  100.596197][ T8665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.601501][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  101.346434][ T8664] tipc: Disabling bearer <eth:syzkaller0>
[  101.443594][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.753852][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'.
[  102.002525][ T8700] syzkaller1: entered promiscuous mode
[  102.004411][ T8700] syzkaller1: entered allmulticast mode
[  102.611754][ T8702] netlink: 'syz.1.791': attribute type 3 has an invalid length.
[  102.615051][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[  102.678429][ T8710] netlink: 'syz.2.795': attribute type 2 has an invalid length.
[  102.821992][ T8721] syzkaller0: entered allmulticast mode
[  102.971452][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'.
[  102.974510][ T8735] openvswitch: netlink: Flow key attr not present in new flow.
[  103.032903][ T8739] netlink: 'syz.2.807': attribute type 16 has an invalid length.
[  103.035742][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.807'.
[  103.036171][ T8740] netlink: 'syz.2.807': attribute type 16 has an invalid length.
[  103.042067][ T8740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.807'.
[  103.188529][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'.
[  103.221945][ T8757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.225091][ T8757] syzkaller0: entered promiscuous mode
[  103.227352][ T8757] syzkaller0: entered allmulticast mode
[  103.233571][ T8757] tipc: Resetting bearer <eth:syzkaller0>
[  103.236665][ T8756] tipc: Resetting bearer <eth:syzkaller0>
[  103.237481][ T8759] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  103.250462][ T8756] tipc: Disabling bearer <eth:syzkaller0>
[  103.427188][ T5875] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.435515][ T5875] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.439675][ T5875] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.446046][ T5875] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.511439][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.822'.
[  103.515099][ T8778] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  103.517979][ T8778] netlink: 'syz.2.822': attribute type 1 has an invalid length.
[  103.522844][ T8778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.822'.
[  103.537293][ T8781] netlink: 'syz.0.823': attribute type 4 has an invalid length.
[  103.620019][ T8788] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.826'.
[  103.748679][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.828'.
[  103.928275][ T8799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.935260][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'.
[  103.939015][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'.
[  103.959634][ T8799] bond4: entered promiscuous mode
[  103.961703][ T8799] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.157720][ T7834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.165895][ T7834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.361116][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.369881][ T8833] bond0: (slave rose0): Enslaving as an active interface with an up link
[  104.474889][ T8845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.477564][ T8845] syzkaller0: entered promiscuous mode
[  104.479519][ T8845] syzkaller0: entered allmulticast mode
[  104.505725][ T8845] tipc: Resetting bearer <eth:syzkaller0>
[  104.519993][ T8844] tipc: Resetting bearer <eth:syzkaller0>
[  104.537166][ T8844] tipc: Disabling bearer <eth:syzkaller0>
[  104.568237][ T8853] netlink: 'syz.2.848': attribute type 10 has an invalid length.
[  104.575876][ T8853] 8021q: adding VLAN 0 to HW filter on device team0
[  104.580732][ T8853] bond0: (slave team0): Enslaving as an active interface with an up link
[  104.968738][ T8885] syzkaller1: tun_chr_ioctl cmd 1074025677
[  104.971358][ T8885] syzkaller1: linktype set to 823
[  105.139182][ T8888] netlink: 'syz.2.857': attribute type 1 has an invalid length.
[  105.164667][ T8888] bond5: (slave bridge4): making interface the new active one
[  105.168394][ T8888] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  105.672573][ T8906] netlink: 'syz.0.864': attribute type 1 has an invalid length.
[  105.685861][ T8906] 8021q: adding VLAN 0 to HW filter on device bond6
[  105.697214][ T8906] veth7: entered promiscuous mode
[  105.702145][ T8906] bond6: (slave veth7): Enslaving as an active interface with an up link
[  105.853758][ T8916] netlink: 'syz.0.868': attribute type 21 has an invalid length.
[  105.957168][ T8920] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  105.970791][ T8923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.973557][ T8923] syzkaller0: entered promiscuous mode
[  105.975397][ T8923] syzkaller0: entered allmulticast mode
[  105.985608][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  105.999427][ T8922] tipc: Resetting bearer <eth:syzkaller0>
[  106.009746][ T8922] tipc: Disabling bearer <eth:syzkaller0>
[  106.043399][ T8930] sctp: [Deprecated]: syz.0.872 (pid 8930) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.043399][ T8930] Use struct sctp_sack_info instead
[  106.160782][   T55] block nbd1: Receive control failed (result -32)
[  106.293598][ T8957] netlink: 'syz.1.881': attribute type 32 has an invalid length.
[  106.341651][ T8960] ip6tnl1: entered promiscuous mode
[  106.445969][ T8970] syzkaller0: entered promiscuous mode
[  106.448338][ T8970] syzkaller0: entered allmulticast mode
[  106.466862][ T8970] veth0_to_team: mtu less than device minimum
[  106.587260][ T8984] netlink: 'syz.2.889': attribute type 21 has an invalid length.
[  106.589857][ T8984] netlink: 'syz.2.889': attribute type 22 has an invalid length.
[  106.593152][ T8984] netlink: 'syz.2.889': attribute type 23 has an invalid length.
[  106.624640][ T8988] vlan3: entered allmulticast mode
[  106.686186][ T8993] netlink: 'syz.1.893': attribute type 10 has an invalid length.
[  106.686669][ T8996] netlink: 'syz.1.893': attribute type 10 has an invalid length.
[  106.698757][ T8997] netlink: 'syz.2.894': attribute type 9 has an invalid length.
[  106.929192][ T9021] ip6tnl2: entered promiscuous mode
[  107.049181][ T9024] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  107.364564][ T9055] openvswitch: netlink: IP tunnel dst address not specified
[  107.396325][ T9055] ip6erspan0: entered promiscuous mode
[  107.545925][ T9067] 8021q: adding VLAN 0 to HW filter on device bond8
[  107.549630][ T9067] bond7: (slave bond8): making interface the new active one
[  107.553064][ T9067] bond7: (slave bond8): Enslaving as an active interface with an up link
[  107.569356][ T9067] bond7: (slave gretap2): Enslaving as a backup interface with an up link
[  107.583508][ T9067] 8021q: adding VLAN 0 to HW filter on device bond7
[  107.620847][ T9074] block nbd2: shutting down sockets
[  107.686666][ T9085] bond0: (slave wlan1): Releasing backup interface
[  108.124703][ T9112] __nla_validate_parse: 19 callbacks suppressed
[  108.124713][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'.
[  108.967612][ T9145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.939'.
[  109.229478][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'.
[  109.293501][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'.
[  109.317093][ T9160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.344685][ T9160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.472303][ T9160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.497556][ T9169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.826418][ T5909] bond0: (slave bond_slave_0): interface is now down
[  109.833756][ T5909] bond0: (slave bond_slave_1): interface is now down
[  109.834850][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.836458][ T5909] bond0: (slave team0): interface is now down
[  109.844419][ T9188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  109.870930][   T13] bond0: (slave bond_slave_0): interface is now down
[  109.874501][   T13] bond0: (slave bond_slave_1): interface is now down
[  109.877441][   T13] bond0: (slave team0): interface is now down
[  109.886874][   T13] bond0: now running without any active interface!
[  109.954678][ T9197] netlink: 140 bytes leftover after parsing attributes in process `syz.2.954'.
[  110.153405][ T9203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.156599][ T9203] syzkaller0: entered promiscuous mode
[  110.158690][ T9203] syzkaller0: entered allmulticast mode
[  110.169044][ T9203] tipc: Resetting bearer <eth:syzkaller0>
[  110.183050][ T9205] tipc: Resetting bearer <eth:syzkaller0>
[  110.189530][ T9205] tipc: Disabling bearer <eth:syzkaller0>
[  110.237857][ T9208] validate_nla: 12 callbacks suppressed
[  110.237865][ T9208] netlink: 'syz.0.957': attribute type 2 has an invalid length.
[  110.267339][ T9210] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002
[  110.418685][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.961'.
[  110.436958][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'.
[  110.542482][ T9223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.546072][ T9223] syzkaller0: entered promiscuous mode
[  110.548340][ T9223] syzkaller0: entered allmulticast mode
[  110.562733][ T9223] tipc: Resetting bearer <eth:syzkaller0>
[  110.569251][ T9222] tipc: Resetting bearer <eth:syzkaller0>
[  110.586767][ T9222] tipc: Disabling bearer <eth:syzkaller0>
[  110.646883][ T9226] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[  110.760788][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'.
[  110.764764][ T9230] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  110.816995][ T9238] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  110.819995][ T9240] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  110.874360][ T9248] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.915306][ T9251] netlink: 92 bytes leftover after parsing attributes in process `syz.2.973'.
[  110.951461][ T9261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.955671][ T9262] syzkaller0: entered promiscuous mode
[  110.957444][ T9262] syzkaller0: entered allmulticast mode
[  111.262079][ T9306] raw_sendmsg: syz.2.985 forgot to set AF_INET. Fix it!
[  111.292366][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'.
[  111.294514][ T9296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.297996][ T9306] netlink: 'syz.2.985': attribute type 2 has an invalid length.
[  111.322173][ T9296] tipc: Resetting bearer <eth:syzkaller0>
[  112.090420][   T10] tipc: Node number set to 1469171738
[  112.119516][ T9296] tipc: Disabling bearer <eth:syzkaller0>
[  112.398373][ T9355] TCP: TCP_TX_DELAY enabled
[  112.656871][ T9387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.698873][ T9393] 8021q: adding VLAN 0 to HW filter on device batadv2
[  112.701742][ T9393] batadv2: entered promiscuous mode
[  112.710625][ T9393] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  112.722412][ T9393] team0: Failed to send options change via netlink (err -105)
[  112.725510][ T9393] team0: Port device batadv2 added
[  112.751780][ T9387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.761354][ T9396] sctp: [Deprecated]: syz.2.1012 (pid 9396) Use of int in maxseg socket option.
[  112.761354][ T9396] Use struct sctp_assoc_value instead
[  112.811429][ T9387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.867658][ T9387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.908294][ T9408] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  112.944570][ T9324] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.968402][ T9324] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.975401][ T9324] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.987488][ T9324] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.208400][ T9425] netlink: 'syz.1.1022': attribute type 11 has an invalid length.
[  113.211887][ T9427] __nla_validate_parse: 11 callbacks suppressed
[  113.211898][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'.
[  113.231401][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'.
[  113.234810][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1022'.
[  113.457855][ T5909] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  114.227811][ T9437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.514938][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.530690][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.539531][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.543558][ T9462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.544622][ T9463] netlink: 'syz.1.1030': attribute type 3 has an invalid length.
[  114.550882][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.554556][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.557845][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  114.677571][ T9469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.680909][ T9469] syzkaller0: entered promiscuous mode
[  114.683374][ T9469] syzkaller0: entered allmulticast mode
[  114.699027][ T9469] tipc: Resetting bearer <eth:syzkaller0>
[  114.704837][ T9469] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  114.717160][ T9468] tipc: Resetting bearer <eth:syzkaller0>
[  114.727740][ T9468] tipc: Disabling bearer <eth:syzkaller0>
[  114.823204][ T9473] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  114.825916][ T9473] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  114.950752][ T9473] netem: invalid attributes len -16
[  114.952874][ T9473] netem: change failed
[  114.976878][ T9473] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  114.991601][ T9473] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  115.002218][ T9473] vlan2: entered allmulticast mode
[  115.004297][ T9473] veth1: entered allmulticast mode
[  115.084698][ T9488] sctp: [Deprecated]: syz.1.1040 (pid 9488) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.084698][ T9488] Use struct sctp_sack_info instead
[  115.239230][ T9493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.459679][ T9511] netlink: 'syz.1.1046': attribute type 3 has an invalid length.
[  115.468125][ T9511] syz_tun: entered allmulticast mode
[  115.508246][ T9511] dvmrp1: left allmulticast mode
[  115.567029][ T9511] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  115.574657][ T9511] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  115.594841][ T9510] syz_tun: left allmulticast mode
[  115.699208][ T9518] syzkaller0: entered promiscuous mode
[  115.701289][ T9518] syzkaller0: entered allmulticast mode
[  115.845106][ T9486] delete_channel: no stack
[  116.623682][ T9526] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.715925][ T9526] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.771991][ T9526] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.807235][ T9547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.853553][ T9526] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.903861][ T9558] syzkaller1: entered promiscuous mode
[  116.905719][ T9558] syzkaller1: entered allmulticast mode
[  116.972276][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.992978][ T5746] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.996451][ T5746] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.999089][ T5746] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.125097][ T9575] netlink: 'syz.1.1065': attribute type 8 has an invalid length.
[  118.351090][  T793] IPVS: starting estimator thread 0...
[  118.440299][ T9654] IPVS: using max 81 ests per chain, 194400 per kthread
[  118.505548][ T9659] __nla_validate_parse: 66 callbacks suppressed
[  118.505563][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'.
[  119.204845][ T9679] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1088'.
[  120.208650][ T9694] syzkaller1: entered promiscuous mode
[  120.216860][ T9694] syzkaller1: entered allmulticast mode
[  120.221151][ T9694] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1093'.
[  120.296957][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'.
[  120.354366][ T9697] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.366169][ T9697] sch_fq: defrate 257 ignored.
[  120.517454][ T9699] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1095'.
[  120.750529][ T9707] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  120.754440][ T9708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1097'.
[  120.757378][ T9707] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1097'.
[  120.814961][ T9708] bond0 (unregistering): left promiscuous mode
[  120.817141][ T9708] bond_slave_0: left promiscuous mode
[  120.819193][ T9708] bond_slave_1: left promiscuous mode
[  120.821200][ T9708] team0: left promiscuous mode
[  120.822875][ T9708] team_slave_1: left promiscuous mode
[  120.824750][ T9708] batadv2: left promiscuous mode
[  120.826889][ T9708] syz_tun: left promiscuous mode
[  120.837810][ T9708] bond1: (slave macvlan2): Removing an active aggregator
[  120.841838][ T9708] bond1: (slave macvlan2): Releasing backup interface
[  120.856322][ T9708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.863155][ T9708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.867521][ T9708] bond0 (unregistering): (slave team0): Releasing backup interface
[  120.873455][ T9708] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  120.877015][ T9708] bond0 (unregistering): Released all slaves
[  120.937573][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1098'.
[  120.943862][ T9714] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1098'.
[  120.949329][ T9711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.023276][ T9729] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1103'.
[  121.189720][ T9752] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[  121.209102][ T9752] bond7: (slave geneve3): making interface the new active one
[  121.213761][ T9752] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  121.216649][ T5909] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  121.219570][ T5909] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  121.225421][ T9750] macvlan4: entered allmulticast mode
[  121.227175][ T9750] veth1_vlan: entered allmulticast mode
[  121.230821][ T5909] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  121.234986][ T5909] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  121.243995][ T9755] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  121.504607][ T9781] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  121.664095][ T9799] netlink: 'syz.2.1129': attribute type 11 has an invalid length.
[  121.704173][ T9797] batadv0: left promiscuous mode
[  121.706827][ T9797] batadv0: left allmulticast mode
[  121.723584][ T9797] veth0_to_bridge: left allmulticast mode
[  121.753165][ T9797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.776899][ T9797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.835717][ T9797] vlan0: left promiscuous mode
[  121.893865][ T9797] sit2: left promiscuous mode
[  121.907865][ T9797] veth3: left promiscuous mode
[  121.924541][ T9797] macsec2: left promiscuous mode
[  121.926250][ T9797] macsec2: left allmulticast mode
[  121.929193][ T9797] ip6tnl1: left promiscuous mode
[  121.932788][ T9797] ip6tnl2: left promiscuous mode
[  121.937253][ T9797] ip6erspan0: left promiscuous mode
[  121.949313][ T9797] veth1_vlan: left allmulticast mode
[  121.951629][ T9797] macvlan4: left allmulticast mode
[  121.955906][  T793] syz0: Port: 1 Link DOWN
[  121.966640][ T9806] hsr_slave_0: left promiscuous mode
[  121.969045][ T9806] hsr_slave_1: left promiscuous mode
[  121.984686][ T5909] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.988172][ T5909] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.992018][ T5909] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.997137][ T5909] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.442520][ T9842] netlink: 'syz.0.1142': attribute type 5 has an invalid length.
[  122.775700][ T9869] netlink: 'syz.0.1152': attribute type 11 has an invalid length.
[  122.825849][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.874837][ T9874] netlink: 'syz.0.1154': attribute type 1 has an invalid length.
[  122.938046][ T9883] sctp: [Deprecated]: syz.0.1158 (pid 9883) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.938046][ T9883] Use struct sctp_sack_info instead
[  123.071630][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.117000][ T9903] netlink: 'syz.2.1162': attribute type 1 has an invalid length.
[  123.492614][ T9946] tipc: Resetting bearer <eth:syzkaller0>
[  123.538899][ T9951] __nla_validate_parse: 18 callbacks suppressed
[  123.538908][ T9951] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1176'.
[  123.549747][ T9951] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1176'.
[  123.555354][ T9951] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1176'.
[  123.558961][ T9951] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1176'.
[  123.566927][ T9951] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1176'.
[  123.676384][ T9969] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  123.679744][ T9969] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  123.759870][ T9972] pimreg3: entered allmulticast mode
[  123.789906][ T9976] netlink: 'syz.0.1183': attribute type 1 has an invalid length.
[  123.792670][ T9976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.801788][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'.
[  123.902296][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'.
[  123.906812][ T9987] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  124.064250][ T9996] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  124.327810][T10018] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1199'.
[  124.334507][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1199'.
[  124.377375][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1200'.
[  124.481562][T10028] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  124.567423][T10036] Bluetooth: MGMT ver 1.23
[  124.616191][T10040] sctp: [Deprecated]: syz.2.1206 (pid 10040) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.616191][T10040] Use struct sctp_sack_info instead
[  124.648259][T10042] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  125.576148][T10054] bond0: (slave team0): Releasing backup interface
[  125.583173][T10054] bridge_slave_0: left promiscuous mode
[  125.585260][T10054] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.590758][T10054] bridge_slave_1: left allmulticast mode
[  125.592674][T10054] bridge_slave_1: left promiscuous mode
[  125.594636][T10054] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.598607][T10054] bond0: (slave bond_slave_0): Releasing backup interface
[  125.603418][T10054] bond0: (slave bond_slave_1): Releasing backup interface
[  125.608696][T10054] team0: Port device team_slave_0 removed
[  125.612986][T10054] team0: Port device team_slave_1 removed
[  125.615338][T10054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.618152][T10054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.622592][T10054] bond3: (slave ip6gretap1): Releasing active interface
[  125.629254][T10054] bond5: (slave bridge4): Releasing active interface
[  125.635993][T10054] bond7: (slave geneve3): Releasing active interface
[  125.643633][ T5909] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.647449][ T5909] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.659590][ T5909] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.663518][ T5909] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  125.673895][T10054] netlink: 'syz.2.1213': attribute type 10 has an invalid length.
[  125.748610][T10068] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.753040][T10068] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.210370][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  126.344690][T10075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.395525][T10079] sctp: [Deprecated]: syz.2.1218 (pid 10079) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.395525][T10079] Use struct sctp_sack_info instead
[  126.518855][T10084] bridge: RTM_NEWNEIGH with invalid ether address
[  126.522408][T10084] netlink: 'syz.0.1220': attribute type 12 has an invalid length.
[  127.566333][T10123] netlink: 'syz.0.1232': attribute type 13 has an invalid length.
[  127.627274][T10135] netlink: 'syz.0.1235': attribute type 15 has an invalid length.
[  128.290241][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  128.824315][T10162] __nla_validate_parse: 17 callbacks suppressed
[  128.824328][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  128.838573][T10162] veth0_to_bond: entered allmulticast mode
[  128.878697][T10171] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1248'.
[  128.931465][T10174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1247'.
[  129.073241][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1249'.
[  129.128508][T10181] netlink: 'syz.1.1251': attribute type 30 has an invalid length.
[  129.156398][T10179] syzkaller0: entered promiscuous mode
[  129.158479][T10179] syzkaller0: entered allmulticast mode
[  130.159601][T10196] netlink: zone id is out of range
[  130.162067][T10196] netlink: zone id is out of range
[  130.164456][T10196] netlink: zone id is out of range
[  130.166668][T10196] netlink: zone id is out of range
[  130.168846][T10196] netlink: zone id is out of range
[  130.177054][T10196] netlink: zone id is out of range
[  130.179607][T10196] netlink: zone id is out of range
[  130.182754][T10196] netlink: zone id is out of range
[  130.184935][T10196] netlink: zone id is out of range
[  130.188332][T10196] netlink: zone id is out of range
[  130.328164][T10213] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  130.449833][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'.
[  130.466119][T10226] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  130.470884][T10226] netlink: 'syz.1.1263': attribute type 10 has an invalid length.
[  130.559221][T10227] 8021q: adding VLAN 0 to HW filter on device bond7
[  130.574993][T10226] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  130.581186][T10226] bond7: (slave macvlan5): Enslaving as a backup interface with an up link
[  130.795000][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[  131.178965][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1272'.
[  131.280832][T10261] lo speed is unknown, defaulting to 1000
[  131.283433][T10261] lo speed is unknown, defaulting to 1000
[  131.286493][T10261] lo speed is unknown, defaulting to 1000
[  131.300296][T10261] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  131.332399][T10261] lo speed is unknown, defaulting to 1000
[  131.336301][T10261] lo speed is unknown, defaulting to 1000
[  131.341032][T10261] lo speed is unknown, defaulting to 1000
[  131.476755][T10276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'.
[  131.482667][T10276] netlink: 'syz.2.1279': attribute type 7 has an invalid length.
[  131.492131][T10276] netlink: 'syz.2.1279': attribute type 8 has an invalid length.
[  131.495442][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'.
[  132.093856][T10288] netlink: 'syz.0.1282': attribute type 10 has an invalid length.
[  132.098366][T10288] netlink: 'syz.0.1282': attribute type 10 has an invalid length.
[  132.159058][T10290] bond1: option mode: unable to set because the bond device is up
[  132.169358][T10290] netlink: 'syz.0.1282': attribute type 4 has an invalid length.
[  132.179405][ T5889] lo speed is unknown, defaulting to 1000
[  132.182553][ T5889] syz2: Port: 1 Link DOWN
[  132.382648][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.639440][T10299] ip6gre1: entered allmulticast mode
[  132.733950][T10301] "syz.1.1286" (10301) uses obsolete ecb(arc4) skcipher
[  133.145932][T10319] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  133.173105][T10322] tipc: Failed to remove unknown binding: 66,1,1/1469171738:89402021/89402023
[  133.176060][T10322] tipc: Failed to remove unknown binding: 66,1,1/1469171738:89402021/89402023
[  133.248265][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'.
[  133.783053][   T56] block nbd2: Receive control failed (result -32)
[  133.987036][T10384] team0: Port device team_slave_1 removed
[  133.994420][T10384] bond6: (slave veth7): Releasing backup interface
[  133.999215][T10384] bond7: (slave bond8): Releasing backup interface
[  134.003920][T10384] bond7: (slave bond8): the permanent HWaddr of slave - 1e:bf:28:38:9a:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  134.009405][T10384] bond7: (slave gretap2): making interface the new active one
[  134.029859][T10384] bond7: (slave gretap2): Releasing backup interface
[  134.039768][T10384] team0: Port device batadv2 removed
[  134.061022][T10384] syz.0.1310 (10384) used greatest stack depth: 16208 bytes left
[  134.175249][T10396] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  134.434790][T10414] syzkaller1: entered promiscuous mode
[  134.436957][T10414] syzkaller1: entered allmulticast mode
[  134.439932][T10414] netlink: 'syz.2.1320': attribute type 4 has an invalid length.
[  134.445536][T10414] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  134.686555][T10421] lo speed is unknown, defaulting to 1000
[  135.093949][T10451] bridge: RTM_NEWNEIGH with invalid ether address
[  135.156659][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'.
[  135.204696][T10456] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1334'.
[  135.250391][   T13] net_ratelimit: 58 callbacks suppressed
[  135.250406][   T13] bond7: (slave macvlan5): failed to get link speed/duplex
[  135.266405][T10458] IPv6: sit1: Disabled Multicast RS
[  135.360782][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  135.470301][   T13] bond7: (slave macvlan5): failed to get link speed/duplex
[  135.580417][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  135.690387][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  135.800190][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  135.910257][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  136.020322][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  136.140753][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  136.169215][T10465] syzkaller1: entered promiscuous mode
[  136.173674][T10465] syzkaller1: entered allmulticast mode
[  136.184391][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  136.187522][T10461] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  136.200760][T10461] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  136.239301][T10471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1337'.
[  136.250864][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  136.345719][   T33] audit: type=1800 audit(1756897585.028:3): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1338" name="memory.events" dev="tmpfs" ino=2083 res=0 errno=0
[  136.436603][T10478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1340'.
[  136.441999][T10478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1340'.
[  136.457279][T10478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1340'.
[  136.461273][T10478] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1340'.
[  136.465145][T10478] netlink: 'syz.0.1340': attribute type 6 has an invalid length.
[  136.467948][T10480] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1339'.
[  136.468128][T10478] netlink: 'syz.0.1340': attribute type 5 has an invalid length.
[  136.474465][T10478] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1340'.
[  136.687460][T10489] netlink: 'syz.0.1344': attribute type 11 has an invalid length.
[  137.116235][T10515] netlink: 'syz.1.1351': attribute type 1 has an invalid length.
[  137.131092][T10512] siw: device registration error -23
[  137.204223][T10524] netlink: 'syz.0.1356': attribute type 12 has an invalid length.
[  137.234572][T10529] xt_policy: neither incoming nor outgoing policy selected
[  137.314865][T10535] netlink: 'syz.0.1359': attribute type 11 has an invalid length.
[  137.457511][T10545] netlink: 'syz.0.1360': attribute type 3 has an invalid length.
[  137.746553][T10564] netlink: 'syz.0.1366': attribute type 8 has an invalid length.
[  137.916272][T10574] netlink: 'syz.2.1369': attribute type 1 has an invalid length.
[  138.138173][T10583] tun0: tun_chr_ioctl cmd 2147767520
[  138.155360][T10583] 
[  138.156351][T10583] ======================================================
[  138.159190][T10583] WARNING: possible circular locking dependency detected
[  138.161910][T10583] syzkaller #0 Not tainted
[  138.163858][T10583] ------------------------------------------------------
[  138.167333][T10583] syz.1.1372/10583 is trying to acquire lock:
[  138.169730][T10583] ffffffff8f68e758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  138.173209][T10583] 
[  138.173209][T10583] but task is already holding lock:
[  138.176097][T10583] ffff88802750c270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  138.179670][T10583] 
[  138.179670][T10583] which lock already depends on the new lock.
[  138.179670][T10583] 
[  138.183821][T10583] 
[  138.183821][T10583] the existing dependency chain (in reverse order) is:
[  138.187374][T10583] 
[  138.187374][T10583] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  138.190496][T10583]        lock_acquire+0x120/0x360
[  138.192499][T10583]        _raw_spin_lock_bh+0x36/0x50
[  138.194675][T10583]        nr_rt_device_down+0x12a/0x720
[  138.196816][T10583]        nr_device_event+0x137/0x150
[  138.198956][T10583]        notifier_call_chain+0x1b6/0x3e0
[  138.201270][T10583]        netif_close_many+0x29c/0x410
[  138.203527][T10583]        netif_close+0x158/0x210
[  138.205576][T10583]        dev_close+0x10a/0x220
[  138.207452][T10583]        bpq_device_event+0x377/0x6a0
[  138.209614][T10583]        notifier_call_chain+0x1b6/0x3e0
[  138.211925][T10583]        netif_close_many+0x29c/0x410
[  138.214179][T10583]        netif_close+0x158/0x210
[  138.216224][T10583]        dev_close+0x10a/0x220
[  138.218102][T10583]        bond_setup_by_slave+0x5f/0x3f0
[  138.220306][T10583]        bond_enslave+0x7a0/0x3a20
[  138.222348][T10583]        bond_do_ioctl+0x635/0x9b0
[  138.224440][T10583]        bond_siocdevprivate+0x17e/0x350
[  138.226686][T10583]        dev_ifsioc+0xb57/0xf00
[  138.228482][T10583]        dev_ioctl+0x84c/0x1150
[  138.230271][T10583]        sock_ioctl+0x719/0x790
[  138.232351][T10583]        __se_sys_ioctl+0xfc/0x170
[  138.234495][T10583]        do_syscall_64+0xfa/0x3b0
[  138.236155][T10583]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.238197][T10583] 
[  138.238197][T10583] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  138.241249][T10583]        lock_acquire+0x120/0x360
[  138.243420][T10583]        _raw_spin_lock_bh+0x36/0x50
[  138.245688][T10583]        nr_rt_device_down+0xa9/0x720
[  138.248048][T10583]        nr_device_event+0x137/0x150
[  138.250377][T10583]        notifier_call_chain+0x1b6/0x3e0
[  138.252784][T10583]        netif_close_many+0x29c/0x410
[  138.255113][T10583]        netif_close+0x158/0x210
[  138.257213][T10583]        dev_close+0x10a/0x220
[  138.259241][T10583]        bpq_device_event+0x377/0x6a0
[  138.261534][T10583]        notifier_call_chain+0x1b6/0x3e0
[  138.263684][T10583]        netif_close_many+0x29c/0x410
[  138.265998][T10583]        netif_close+0x158/0x210
[  138.268112][T10583]        dev_close+0x10a/0x220
[  138.270106][T10583]        bond_setup_by_slave+0x5f/0x3f0
[  138.272432][T10583]        bond_enslave+0x7a0/0x3a20
[  138.274583][T10583]        bond_do_ioctl+0x635/0x9b0
[  138.276772][T10583]        bond_siocdevprivate+0x17e/0x350
[  138.279118][T10583]        dev_ifsioc+0xb57/0xf00
[  138.281164][T10583]        dev_ioctl+0x84c/0x1150
[  138.283086][T10583]        sock_ioctl+0x719/0x790
[  138.284758][T10583]        __se_sys_ioctl+0xfc/0x170
[  138.286640][T10583]        do_syscall_64+0xfa/0x3b0
[  138.288581][T10583]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.291336][T10583] 
[  138.291336][T10583] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  138.293985][T10583]        validate_chain+0xb9b/0x2140
[  138.295758][T10583]        __lock_acquire+0xab9/0xd20
[  138.297468][T10583]        lock_acquire+0x120/0x360
[  138.299090][T10583]        _raw_spin_lock_bh+0x36/0x50
[  138.300812][T10583]        nr_rt_ioctl+0x390/0xd50
[  138.302715][T10583]        sock_do_ioctl+0xdc/0x300
[  138.304443][T10583]        sock_ioctl+0x576/0x790
[  138.306301][T10583]        __se_sys_ioctl+0xfc/0x170
[  138.308259][T10583]        do_syscall_64+0xfa/0x3b0
[  138.310185][T10583]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.312709][T10583] 
[  138.312709][T10583] other info that might help us debug this:
[  138.312709][T10583] 
[  138.316217][T10583] Chain exists of:
[  138.316217][T10583]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  138.316217][T10583] 
[  138.321344][T10583]  Possible unsafe locking scenario:
[  138.321344][T10583] 
[  138.323801][T10583]        CPU0                    CPU1
[  138.325842][T10583]        ----                    ----
[  138.328144][T10583]   lock(&nr_node->node_lock);
[  138.330182][T10583]                                lock(nr_node_list_lock);
[  138.333035][T10583]                                lock(&nr_node->node_lock);
[  138.335882][T10583]   lock(nr_neigh_list_lock);
[  138.337562][T10583] 
[  138.337562][T10583]  *** DEADLOCK ***
[  138.337562][T10583] 
[  138.340358][T10583] 2 locks held by syz.1.1372/10583:
[  138.342397][T10583]  #0: ffffffff8f68e7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  138.346228][T10583]  #1: ffff88802750c270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  138.350037][T10583] 
[  138.350037][T10583] stack backtrace:
[  138.352378][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.1.1372 Not tainted syzkaller #0 PREEMPT(full) 
[  138.352391][T10583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.352398][T10583] Call Trace:
[  138.352404][T10583]  <TASK>
[  138.352409][T10583]  dump_stack_lvl+0x189/0x250
[  138.352428][T10583]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.352443][T10583]  ? __pfx__printk+0x10/0x10
[  138.352456][T10583]  ? stack_trace_save+0x9c/0xe0
[  138.352473][T10583]  print_circular_bug+0x2ee/0x310
[  138.352484][T10583]  check_noncircular+0x134/0x160
[  138.352494][T10583]  validate_chain+0xb9b/0x2140
[  138.352511][T10583]  __lock_acquire+0xab9/0xd20
[  138.352527][T10583]  ? nr_rt_ioctl+0x390/0xd50
[  138.352543][T10583]  lock_acquire+0x120/0x360
[  138.352558][T10583]  ? nr_rt_ioctl+0x390/0xd50
[  138.352572][T10583]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  138.352586][T10583]  ? nr_rt_ioctl+0x390/0xd50
[  138.352594][T10583]  _raw_spin_lock_bh+0x36/0x50
[  138.352609][T10583]  ? nr_rt_ioctl+0x390/0xd50
[  138.352622][T10583]  nr_rt_ioctl+0x390/0xd50
[  138.352638][T10583]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  138.352655][T10583]  ? apparmor_capable+0x137/0x1b0
[  138.352670][T10583]  ? capable+0x89/0xe0
[  138.352681][T10583]  ? nr_ioctl+0x1b1/0x3b0
[  138.352692][T10583]  sock_do_ioctl+0xdc/0x300
[  138.352704][T10583]  ? __pfx_sock_do_ioctl+0x10/0x10
[  138.352716][T10583]  ? __lock_acquire+0xab9/0xd20
[  138.352734][T10583]  sock_ioctl+0x576/0x790
[  138.352748][T10583]  ? __pfx_sock_ioctl+0x10/0x10
[  138.352760][T10583]  ? __fget_files+0x2a/0x420
[  138.352770][T10583]  ? __fget_files+0x3a0/0x420
[  138.352778][T10583]  ? __fget_files+0x2a/0x420
[  138.352787][T10583]  ? bpf_lsm_file_ioctl+0x9/0x20
[  138.352801][T10583]  ? __pfx_sock_ioctl+0x10/0x10
[  138.352814][T10583]  __se_sys_ioctl+0xfc/0x170
[  138.352826][T10583]  do_syscall_64+0xfa/0x3b0
[  138.352837][T10583]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.352846][T10583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.352857][T10583]  ? exc_page_fault+0x9f/0xf0
[  138.352867][T10583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.352877][T10583] RIP: 0033:0x7f9d2578ebe9
[  138.352888][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.352896][T10583] RSP: 002b:00007f9d2662f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.352908][T10583] RAX: ffffffffffffffda RBX: 00007f9d259c5fa0 RCX: 00007f9d2578ebe9
[  138.352915][T10583] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000e
[  138.352922][T10583] RBP: 00007f9d25811e19 R08: 0000000000000000 R09: 0000000000000000
[  138.352928][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.352961][T10583] R13: 00007f9d259c6038 R14: 00007f9d259c5fa0 R15: 00007ffdb73b8928
[  138.352975][T10583]  </TASK>
[  140.350382][ T5746] net_ratelimit: 35 callbacks suppressed
[  140.350436][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  140.470353][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  140.580215][ T5909] bond7: (slave macvlan5): failed to get link speed/duplex
[  140.700423][ T5909] bond7: (slave macvlan5): failed to get link speed/duplex
[  140.810295][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  140.920387][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  141.030317][ T5909] bond7: (slave macvlan5): failed to get link speed/duplex
[  141.140249][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  141.250309][ T5746] bond7: (slave macvlan5): failed to get link speed/duplex
[  141.360323][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  145.390366][ T9324] net_ratelimit: 35 callbacks suppressed
[  145.390386][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  145.510264][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  145.620288][   T13] bond7: (slave macvlan5): failed to get link speed/duplex
[  145.730463][   T13] bond7: (slave macvlan5): failed to get link speed/duplex
[  145.840226][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  145.950219][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  146.070384][ T5909] bond7: (slave macvlan5): failed to get link speed/duplex
[  146.180237][ T5909] bond7: (slave macvlan5): failed to get link speed/duplex
[  146.292165][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex
[  146.400231][ T9324] bond7: (slave macvlan5): failed to get link speed/duplex

VM DIAGNOSIS:
11:06:26  Registers:
info registers vcpu 0

CPU#0
RAX=9911d596cea06700 RBX=ffffffff819683c8 RCX=9911d596cea06700 RDX=0000000000000001
RSI=ffffffff8be337e0 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000012c0 CR3=0000000028a5a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001331 RDI=0000000000001332 RBP=00000000000003f8 RSP=ffffc9000316f150
R8 =ffff888107838237 R9 =1ffff11020f07046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018d3 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9d2662f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d2662efc8 CR3=00000001184d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9d25997498 00007f9d25997470 XMM03=00007f9d259974a8 00007f9d259974a0
XMM04=00007f9d264fd100 00007f9d25997460 XMM05=00007f9d25997478 00007f9d259974c0
XMM06=00007f9d259974b8 00007f9d259974b0 XMM07=00007f9d259974a8 00007f9d259974a0
XMM08=0000000000000000 00007f9d25812ee7 XMM09=0000000000000000 00007f9d25812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
