last executing test programs:

16.515773873s ago: executing program 1 (id=1539):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000005300)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x42}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000140)=ANY=[], 0x24e2)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast1, 0x7daa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0xffffffffffffff04}], 0x1)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r10=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000380)={r10, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r8, 0x0, 0x47, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18)

16.509609026s ago: executing program 2 (id=1541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x4}, {0x1, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x54}}, 0x200400d4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000150a05002100000000000000050000098f1b0b93ca31e8b992790d3df9632282e302873cea9d3205122c154772b7323ec747d168a07fd7f2a41b741b918992a1a16a7f8d680935dde23df916377a145984423f6944f9fc64f9bee05e0d317a9b5c402d0285eb328082c42a7f605dfa18187d3e62ba5089ab790081ba85bdf17bfabf59e2befe14ba5467bccf6d8cbd64350be82a88af4a5057f0f0e1eca827e180098c6fe87408e6829f690170a3113e641786007bc90887"], 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x880)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, 0x0, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180), 0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001640)={'ip6gre0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x5, 0x3, 0x2, 0x53, @empty, @empty, 0x40, 0x80, 0xb, 0x872a}})
getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000300)=0x8)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r9, 0x6, 0x8, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18100400000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r10], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xffe3, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x6e95, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r12, 0x1, 0x3d, &(0x7f0000000080)={0x10000000}, 0x8)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRES16=r13, @ANYRES32=r13, @ANYBLOB="59bd483d59a29a264a83260f18a43c7ac22cfec98b3357aef1a4606e9e2f26ac97a6459f9df1a44a422d11b87c1566f682ecd40c221e4ca9f2dac30ada467e02d8050b5ef1e73860d109a4744948dacdb65cc2a5a734f58d8701c9bbcc243e7e789e96f6f4e055292e686e4b2f262238286a6882d04e708ab16cf9f8c49a48e44a8ca26a8f0b309f50401e170078e84c62440683fe19c4d424343a0e23472863d13ae632bc4b03ffcad32cc7ecf747604cf498212af921e751e6c25e38e7b6af9ea8769e65267df8562989d9527a3f0df17a3a1afe3454dd73cc41beb59654b5b96ca9a730c5fa810d6dd97547630c", @ANYRESHEX=r8, @ANYRES16=r13, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES8=r9, @ANYRES16=r11], 0x15c}}, 0x0)

16.440783042s ago: executing program 0 (id=1542):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
close(0xffffffffffffffff) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8) (async)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000004a0000082bbd70e9be00fcdbdf250a00", @ANYRES32=0x0, @ANYBLOB="0400000014000100000000000000000000000000000000016eff0100fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

16.388381192s ago: executing program 1 (id=1543):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000000000002a0000000e0001006e65746465767369e377f16d13b066edf6d037d788a80f0002006e017464652f5ad8d0477673"], 0x34}}, 0x0)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r10=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000380)={r10, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r8, 0x0, 0x47, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16.387820932s ago: executing program 0 (id=1544):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000440)='illinois\x00', 0x9) (async)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
shutdown(r4, 0x1) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004a0000012bbd7000fcdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="040099eb"], 0x1c}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

16.387199417s ago: executing program 2 (id=1545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000001000a14000780080008000000008908000640000001250500010006000000050005000200000005000400000000000900020073797a3100000000120002fb686173683a6e65742c706f7274000000"], 0x60}}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000e010000070000009b000000000000003800000000000000180100004607000082c09af49161dbead10e5bffb49db0104197a3887c539a8ebf373c8bae7e0bffa373c9000000000028000000000000001001000002"], 0x340}, 0x24048000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180001000b1401610e2cbd7000fcdbdf250800010000000000a9bed3ee"], 0x18}, 0x1, 0x0, 0x0, 0x40840}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0xf, 0x7}}}, 0x24}}, 0x14000000)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a3200, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x400, 0x470b923, 0x82000, {0x0, 0x0, 0x0, r13, {}, {0x5, 0x833bb009b94bda49}, {0xd, 0x3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

16.319575188s ago: executing program 0 (id=1546):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000"], 0xfdef)
socket(0x10, 0x803, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x800000, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in6=@private1}}]}, 0x50}}, 0x0)

16.250326894s ago: executing program 1 (id=1547):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r2}, 0xffffffffffffff3e) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='kfree\x00', r2}, 0xffffffffffffff3e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000600000000000000f5df000085100000fbffffff18120000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000c55b06000800000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000035420801fcffffff95005d201bddf8000000000000"], &(0x7f0000000940)='GPL\x00', 0xfa, 0x35, &(0x7f0000000a00)=""/53, 0x41100, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x0, 0xc, 0x9, 0x3000000}, 0x10, 0x0, r0, 0x3, &(0x7f0000000bc0)=[r1], &(0x7f0000000c00)=[{0x0, 0x1, 0x6, 0x4}, {0x5, 0x2, 0xa, 0x3}, {0x5, 0x2, 0xf, 0x1}], 0x10, 0x9}, 0x94)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r5 = socket$kcm(0x10, 0x4810de97ed362940, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="0b63d25a09000000940121", 0xb}, {&(0x7f0000000800)="e28b0017998c6a841e6ed5076e1938a9c0c45c5af71ccb9c29d9eb9c9320a93d1daea8b934398ff14258f5a8ed647df46618500840acf3b617506f328dd55b4b13319aaa64698a7ef0c18b663a6494d3a57235d18198b569a38dff47eaa0d00380d4b9ed2d82a28308497659d81d869639d598d596d3b2a0246330ad82986cbbf069b0e240ff91268c90fb98fcffeda0aeda3fce1122989a90cdca5d8adeffb3c54391", 0xa3}], 0x2}, 0x20040050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x38, 0x4a, 0x800, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

16.249156739s ago: executing program 0 (id=1548):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x18}, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000180)="6f13661edac43bfca824f1f9cc3559f670156a2477931c16c3d03c216d05a7949f0e08fd7734d136c7a0fc40173060e745790f10e4725576bcd2e0834735c54757d600f0b37e086f17ed1d9118e9538fcc6b25e81b9dd53c9ba8d28cffe67eceac5f10cff4a49f99b6364d2f5bcdafbd7576ed38904176818253a6caea72fa48933a83570fda6057732328efe434fc23e815035f76266866098fc669c80cc998407d1d5c", &(0x7f0000000240)=""/188, &(0x7f0000000380)="c24336dd7fdf894c7bd19d06796c3d5fcb1ec5e0be55bbbf5611caa2aa69548e956bc8d02d545456840ad09ff300892e975b18c5f96b46251d7bebab649180a2f68f92b3e4df505d630028ec6d346067db6c8516b420edc80efd3ea6d76799d0244cb1936893542965da02da60c4be26a770e796599b3f692d21afcbec3187d3a165b0b960c9ca77e3dacbb8066ce1aaa1e97eec71d0379d1f75ceb07fcceae53edcc5c7f11655b5842df9a1df1ade6c0e9bdbc1734e32199c66a01ce6d5fc98693b372a3a62a91b", &(0x7f0000000480)="1bf871f3ca53e5bca81456b2254db33b7fd9943a5157c18e5562021b8d180b3ff50f484f5b9537da6a8b612f64ac508b535cd0ed0acbda6deabfd0ab2f247cf89cbd1311da62fa9cc64528e732f3836c84b6a4fd4254cca1368edf896768fc827f109d63bfab6ace7b1389c83486696f2a889090fcb5a4d0e0ddef204394f49c6bf7c39c000e111dea96c7f0e229da0c803be81faf78403c754a934b3745e1728cbda9cb7842ba09bb42", 0x4, r1, 0x4}, 0x38)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x3, @random="1c306f2500"}]}, 0x44}}, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async)
sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)='\a', 0x1}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080))

16.178163951s ago: executing program 0 (id=1549):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=<r4=>r3], 0x1c}}, 0x0) (async)
write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x1, {0x1, 0x4, 0x4, 0x3}}, 0x7) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000180)={r9, 0x2, 0x1, "17"}, 0x9) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={0x6a}) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = gettid()
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000001e130221e55559346d32b36e47860d145e2fba2c8c0fd184a8ad0d8b4bea1f35e579b6099a7311c0761363a00755640e00000000000033e0426ef4dbbd", @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRESDEC=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

16.175600906s ago: executing program 2 (id=1550):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FIOCLEX(r0, 0x5451)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r3, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) (async)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x511}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (rerun: 64)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, 0x0, 0x4040004) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="3183000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5)
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r9, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x46}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044840)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x1ac, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @remote, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe2, 0x3, "52bcfb862bd0a2dc9ce9a40c4da68c801465e7248f9eead16f210a306da00b51b9b5c9e4f6e4a354ddde2b70b7d0afbde1e386664e5c5e43bd736c1b5c309f196099584e9510a545b1e80790e82337336dd57b917503a6dee6115b02c63de81525806e4b64d75e17b48cb451439e25521b17be2f85d07a31d159a94516e18fab3e4273dd93c8df4c0aee6724a03de8de7bb64e6fd634151e18880b158b775f9700ed7e51686258d03519a758cfa285e8ad95c3cc943dc8742b4bb8924b84dad02a56a7b76f0e2b30459466c743e710addab447d08f897438313be911d58d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x48c4}, 0x20000080)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6)

16.173489776s ago: executing program 1 (id=1551):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000840)={0x2b, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x2d, 0xfffffffa, 0x4}, 0x2c)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000004a0000082bbd7000fcdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="0400000014000100000000000000000000000000000000016eff0100fe8000000000000000000000000000bbc9e31a5ea40eabd8918c3aec4c60abe5130472c56d4bba44ad1d4ee543b6a7c141c33896031d30a09d8ac90d55d7d7e645aa181d1612202a7548444f539bbe9f2a93180a1abb7dd3d42ac19790ebb56582028ef6dfc92ec4090d854688f2c255d011f451309f41ce1c6a61cd39d41f4d8caaa4822e1e6c86b7b739c83ad8c92c480e7a3f6f9e0b74acf9aaaf266648b9698e4bfdad30c2a17fc1351369ad198d3eeb15954a23ab218de0956188c338eaba80b7f6124a1d914568f54e5250"], 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

16.116557916s ago: executing program 2 (id=1552):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x1, 0x2)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000980)={0x1}, 0x8) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000004)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8000, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}]}]}}]}, 0xa4}}, 0x0)

16.112996145s ago: executing program 0 (id=1553):
r0 = socket$inet(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000000)={0x9, {{0x2, 0x4e24, @loopback}}}, 0x88)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff03000005002100"], 0x1c0}, 0x1, 0xba01}, 0x20048050)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)={0x84, 0xb, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x6, 0x6, [0x9, 0x2, 0xffffffff00000001, 0x1, 0xe1, 0x5]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @local}]}, 0x68)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r8=>0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000000000000000000000000000000000000000fffc000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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"], 0xfc}}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x3a)
r10 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000200)={0x1, 'erspan0\x00'})
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000060500000000000000000005000007", @ANYRESOCT=r4, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100000000000003e7a0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x35)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)

16.000819162s ago: executing program 2 (id=1554):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) (rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) (async)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async, rerun: 32)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r7=>0x0}) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000000000000800000008000300", @ANYRES64=r8], 0x24}}, 0x0) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYRES32=r7, @ANYBLOB="0a00f7ff080211000001000004002a0008009e00"], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x70, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "d9953461d57d445ee43b3136637f1d5c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="eb1f66475a43"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "0fdb729b48ae039dede8577b007ee327"}]}, 0x70}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x92, @dev={0xfe, 0x80, '\x00', 0x11}, 0xffff}, 0x1c) (async)
connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, 0x1c)

16.000144356s ago: executing program 1 (id=1555):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async)
r4 = socket(0x10, 0x803, 0x0)
getpeername$unix(r4, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@gettaction={0xbc, 0x32, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb6}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xbc}}, 0x24048844)
recvmmsg$unix(r6, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}], 0x4}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000012a00)=[{0x0}, {&(0x7f000000f780)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000011940)=""/4096, 0x1000}], 0x5, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x2, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r7) (async)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r10 = socket(0x1, 0x803, 0xffffffff)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3.644454ms ago: executing program 2 (id=1556):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fbff"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r8, 0x0, 0x4004)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

1.796546ms ago: executing program 1 (id=1557):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x4004)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

320.992µs ago: executing program 32 (id=1553):
r0 = socket$inet(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000000)={0x9, {{0x2, 0x4e24, @loopback}}}, 0x88)
connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff03000005002100"], 0x1c0}, 0x1, 0xba01}, 0x20048050)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000000c0)={0x84, 0xb, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x6, 0x6, [0x9, 0x2, 0xffffffff00000001, 0x1, 0xe1, 0x5]}}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @local}]}, 0x68)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r8=>0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000000000000000000000000000000000000000fffc000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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"], 0xfc}}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x3a)
r10 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000200)={0x1, 'erspan0\x00'})
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000060500000000000000000005000007", @ANYRESOCT=r4, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0500000000000000bc100000000000003e7a0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x35)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)

189.685µs ago: executing program 33 (id=1557):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x4004)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

0s ago: executing program 34 (id=1556):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fbff"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r8, 0x0, 0x4004)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

kernel console output (not intermixed with test programs):

ngth: 249 > 4
[   55.674064][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.682388][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.689370][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.693476][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.985797][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.031081][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.038683][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   56.175692][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.178732][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.181612][ T5845] bridge_slave_0: entered allmulticast mode
[   56.186367][ T5845] bridge_slave_0: entered promiscuous mode
[   56.214218][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.217259][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.220290][ T5845] bridge_slave_1: entered allmulticast mode
[   56.226573][ T5845] bridge_slave_1: entered promiscuous mode
[   56.284163][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.286913][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.289723][ T5846] bridge_slave_0: entered allmulticast mode
[   56.293376][ T5846] bridge_slave_0: entered promiscuous mode
[   56.299338][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.304730][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.307929][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.310642][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.314257][ T5854] bridge_slave_0: entered allmulticast mode
[   56.317010][ T5854] bridge_slave_0: entered promiscuous mode
[   56.320460][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.324655][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.327359][ T5846] bridge_slave_1: entered allmulticast mode
[   56.330351][ T5846] bridge_slave_1: entered promiscuous mode
[   56.349193][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.351540][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.354612][ T5854] bridge_slave_1: entered allmulticast mode
[   56.357319][ T5854] bridge_slave_1: entered promiscuous mode
[   56.388782][ T5845] team0: Port device team_slave_0 added
[   56.424246][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.429598][ T5845] team0: Port device team_slave_1 added
[   56.434906][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.440688][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.463668][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.517923][ T5854] team0: Port device team_slave_0 added
[   56.534594][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.537519][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.548030][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.555555][ T5854] team0: Port device team_slave_1 added
[   56.559698][ T5846] team0: Port device team_slave_0 added
[   56.576353][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.579194][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.590185][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.596722][ T5846] team0: Port device team_slave_1 added
[   56.645760][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.648704][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.659435][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.677746][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.680156][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.689521][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.694154][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.696358][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.705222][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.709887][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.713327][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.723939][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.755926][ T5845] hsr_slave_0: entered promiscuous mode
[   56.759220][ T5845] hsr_slave_1: entered promiscuous mode
[   56.803340][ T5846] hsr_slave_0: entered promiscuous mode
[   56.806432][ T5846] hsr_slave_1: entered promiscuous mode
[   56.808727][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   56.810837][ T5846] Cannot create hsr debugfs directory
[   56.823972][ T5854] hsr_slave_0: entered promiscuous mode
[   56.827107][ T5854] hsr_slave_1: entered promiscuous mode
[   56.829581][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.831552][ T5854] Cannot create hsr debugfs directory
[   57.163976][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.189347][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.194226][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.209352][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.243953][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.252838][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.263187][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.275070][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.348944][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.356121][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.363070][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.369018][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.468505][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.481062][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.509328][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.516250][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.521460][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   57.532131][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.534771][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.547812][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.550595][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.560731][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.563327][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.573734][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.577621][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.580326][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.592518][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.595503][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.608437][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.610973][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.699966][ T5238] Bluetooth: hci1: command tx timeout
[   57.702757][ T5238] Bluetooth: hci0: command tx timeout
[   57.771989][ T5853] Bluetooth: hci2: command tx timeout
[   57.842989][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.914645][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.919378][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.936821][ T5845] veth0_vlan: entered promiscuous mode
[   57.954000][ T5845] veth1_vlan: entered promiscuous mode
[   57.988983][ T5846] veth0_vlan: entered promiscuous mode
[   58.006176][ T5846] veth1_vlan: entered promiscuous mode
[   58.016203][ T5854] veth0_vlan: entered promiscuous mode
[   58.022253][ T5845] veth0_macvtap: entered promiscuous mode
[   58.027480][ T5845] veth1_macvtap: entered promiscuous mode
[   58.046748][ T5846] veth0_macvtap: entered promiscuous mode
[   58.050180][ T5854] veth1_vlan: entered promiscuous mode
[   58.060474][ T5846] veth1_macvtap: entered promiscuous mode
[   58.066457][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.080686][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.099702][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.109945][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.116439][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.120625][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.130982][ T5854] veth0_macvtap: entered promiscuous mode
[   58.134310][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.139903][ T5854] veth1_macvtap: entered promiscuous mode
[   58.146780][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.170085][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.174171][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.176914][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.179723][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.191577][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.207195][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.238531][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.258630][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.287687][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.293256][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.296653][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.305781][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.339460][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.344799][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.369514][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.373328][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.409803][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.417164][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.423985][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.427214][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.455693][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.472917][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.480181][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.568777][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.615708][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.649013][ T5921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.722948][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.740015][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.741093][ T5928] netlink: 'syz.2.3': attribute type 5 has an invalid length.
[   58.753853][ T5928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.765651][ T5932] xfrm1: entered promiscuous mode
[   58.767354][ T5932] xfrm1: entered allmulticast mode
[   58.778712][ T5928] geneve2: entered promiscuous mode
[   58.780638][ T5928] geneve2: entered allmulticast mode
[   58.785228][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.792151][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   58.795242][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   58.801315][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   58.887431][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'.
[   58.904525][ T5934] IPv6: sit1: Disabled Multicast RS
[   59.017594][ T5939] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.067507][ T5940] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.771038][ T5921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.772591][ T5853] Bluetooth: hci0: command tx timeout
[   59.776121][ T5921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   59.777833][ T5238] Bluetooth: hci1: command tx timeout
[   59.852235][ T5853] Bluetooth: hci2: command tx timeout
[   60.167162][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'.
[   60.246060][ T5991] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   60.290144][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.330407][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.526403][ T6000] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.529695][ T6000] bond0: (slave bond1): Enslaving as an active interface with an up link
[   60.643218][ T6021] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   60.653256][ T6021] 8021q: adding VLAN 0 to HW filter on device team0
[   60.656914][ T6021] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.660727][ T6023] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   60.663858][ T6021] netlink: 'syz.0.21': attribute type 10 has an invalid length.
[   60.676913][ T6021] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   60.702525][ T6021] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.720691][ T6026] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.723190][ T6021] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   60.729372][ T6021] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   60.874287][ T5921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.878527][ T5921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   61.081495][ T6053] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   61.150081][ T5921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.164616][ T5921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   61.184859][ T6049] openvswitch: netlink: Key type 29 is not supported
[   61.270197][ T5892] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   61.274745][ T5892] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   61.290676][ T5892] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   61.295863][ T5892] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   61.327093][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   61.330491][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   61.335812][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   61.339013][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   61.354040][ T6075] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET)
[   61.365831][ T6075] veth1_to_bond: entered allmulticast mode
[   61.483177][ T6074] veth1_to_bond: left allmulticast mode
[   61.702465][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.709650][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.715887][ T6094] bond0 (unregistering): (slave bond1): Releasing backup interface
[   61.724780][ T6094] bond0 (unregistering): (slave team0): Releasing backup interface
[   61.740800][ T6094] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[   61.747441][ T6094] bond0 (unregistering): Released all slaves
[   61.836244][ T6108] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   61.852832][ T5853] Bluetooth: hci0: command tx timeout
[   61.852896][ T5238] Bluetooth: hci1: command tx timeout
[   61.932232][ T5238] Bluetooth: hci2: command tx timeout
[   61.994630][ T6132] netlink: 'syz.0.51': attribute type 29 has an invalid length.
[   62.028229][ T6136] pimreg: entered allmulticast mode
[   62.077175][ T6141] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[   62.468265][ T6167] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   62.750184][ T6186] netlink: 'syz.1.66': attribute type 5 has an invalid length.
[   62.753707][ T6186] netlink: 'syz.1.66': attribute type 6 has an invalid length.
[   63.537725][ T6209] Zero length message leads to an empty skb
[   63.561597][ T6212] netlink: 'syz.1.75': attribute type 21 has an invalid length.
[   63.577768][ T6212] netlink: 'syz.1.75': attribute type 6 has an invalid length.
[   63.580821][ T6212] __nla_validate_parse: 12 callbacks suppressed
[   63.580833][ T6212] netlink: 64 bytes leftover after parsing attributes in process `syz.1.75'.
[   63.935096][ T5238] Bluetooth: hci1: command tx timeout
[   63.937415][ T5238] Bluetooth: hci0: command tx timeout
[   63.997195][ T6237] netlink: 'syz.1.80': attribute type 14 has an invalid length.
[   64.000543][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'.
[   64.012680][ T5238] Bluetooth: hci2: command tx timeout
[   64.076049][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.080670][ T6241] netlink: 'syz.1.82': attribute type 30 has an invalid length.
[   64.108021][ T5892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.108198][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.111035][ T5892] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.118692][ T6241] netlink: 'syz.1.82': attribute type 30 has an invalid length.
[   64.133633][ T5892] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.138336][ T5892] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.187758][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'.
[   64.326489][ T6257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.89'.
[   64.588874][ T6265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'.
[   64.594688][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'.
[   64.599144][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   64.604617][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   64.721592][ T6280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.967638][ T6299] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.974614][ T6299] bond1: (slave bond2): Enslaving as an active interface with an up link
[   64.982568][ T6295] bond1 (unregistering): (slave bond2): Releasing backup interface
[   64.987941][ T6295] bond1 (unregistering): Released all slaves
[   65.448032][ T6319] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.694818][ T6328] tipc: Started in network mode
[   65.697130][ T6328] tipc: Node identity b65ab1fc76e7, cluster identity 4711
[   65.699601][ T6328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.722148][ T6328] syzkaller0: entered promiscuous mode
[   65.723970][ T6328] syzkaller0: entered allmulticast mode
[   65.726307][ T6328] tipc: Resetting bearer <eth:syzkaller0>
[   65.733436][ T6327] tipc: Resetting bearer <eth:syzkaller0>
[   66.475150][ T6327] tipc: Disabling bearer <eth:syzkaller0>
[   66.512294][ T6344] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   66.519448][ T6344] netlink: 'syz.1.115': attribute type 21 has an invalid length.
[   66.529234][ T6344] ipvlan2: entered promiscuous mode
[   66.543101][ T6344] bridge0: port 3(ipvlan2) entered blocking state
[   66.545404][ T6344] bridge0: port 3(ipvlan2) entered disabled state
[   66.548484][ T6344] ipvlan2: entered allmulticast mode
[   66.550175][ T6344] gretap0: entered allmulticast mode
[   66.553136][ T6344] ipvlan2: left allmulticast mode
[   66.554786][ T6344] gretap0: left allmulticast mode
[   66.678059][ T6358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.757171][ T6358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.800678][ T6367] syz.1.123: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   66.809793][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.1.123 Not tainted syzkaller #0 PREEMPT(full) 
[   66.809807][ T6367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.809814][ T6367] Call Trace:
[   66.809819][ T6367]  <TASK>
[   66.809824][ T6367]  dump_stack_lvl+0x189/0x250
[   66.809844][ T6367]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.809857][ T6367]  ? __pfx__printk+0x10/0x10
[   66.809871][ T6367]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   66.809884][ T6367]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   66.809897][ T6367]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   66.809911][ T6367]  warn_alloc+0x214/0x310
[   66.809931][ T6367]  ? __pfx_warn_alloc+0x10/0x10
[   66.809947][ T6367]  ? __get_vm_area_node+0x28f/0x300
[   66.809960][ T6367]  ? xskq_create+0xbf/0x170
[   66.809978][ T6367]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   66.810012][ T6367]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   66.810029][ T6367]  ? __kasan_kmalloc+0x93/0xb0
[   66.810040][ T6367]  vmalloc_user_noprof+0xad/0xf0
[   66.810054][ T6367]  ? xskq_create+0xbf/0x170
[   66.810068][ T6367]  xskq_create+0xbf/0x170
[   66.810090][ T6367]  xsk_init_queue+0xb0/0x110
[   66.810106][ T6367]  xsk_setsockopt+0x57b/0x8d0
[   66.810119][ T6367]  ? __pfx_xsk_setsockopt+0x10/0x10
[   66.810129][ T6367]  ? __pfx_aa_sk_perm+0x10/0x10
[   66.810146][ T6367]  ? __fget_files+0x2a/0x420
[   66.810160][ T6367]  ? aa_sock_opt_perm+0xff/0x1b0
[   66.810172][ T6367]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   66.810183][ T6367]  ? __pfx_xsk_setsockopt+0x10/0x10
[   66.810197][ T6367]  do_sock_setsockopt+0x17c/0x1b0
[   66.810210][ T6367]  __x64_sys_setsockopt+0x13f/0x1b0
[   66.810221][ T6367]  do_syscall_64+0xfa/0x3b0
[   66.810230][ T6367]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.810243][ T6367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.810278][ T6367]  ? exc_page_fault+0x9f/0xf0
[   66.810296][ T6367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.810304][ T6367] RIP: 0033:0x7f0c7b78ebe9
[   66.810312][ T6367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.810320][ T6367] RSP: 002b:00007f0c7c607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   66.810332][ T6367] RAX: ffffffffffffffda RBX: 00007f0c7b9c6180 RCX: 00007f0c7b78ebe9
[   66.810339][ T6367] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[   66.810345][ T6367] RBP: 00007f0c7b811e19 R08: 0000000000000004 R09: 0000000000000000
[   66.810351][ T6367] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   66.810357][ T6367] R13: 00007f0c7b9c6218 R14: 00007f0c7b9c6180 R15: 00007ffcd02b0228
[   66.810376][ T6367]  </TASK>
[   66.810380][ T6367] Mem-Info:
[   66.816709][ T6366] pim6reg: entered allmulticast mode
[   66.823698][ T6367] active_anon:5768 inactive_anon:0 isolated_anon:0
[   66.823698][ T6367]  active_file:1323 inactive_file:38225 isolated_file:0
[   66.823698][ T6367]  unevictable:1768 dirty:1534 writeback:0
[   66.823698][ T6367]  slab_reclaimable:9696 slab_unreclaimable:52528
[   66.823698][ T6367]  mapped:18251 shmem:2439 pagetables:996
[   66.823698][ T6367]  sec_pagetables:0 bounce:0
[   66.823698][ T6367]  kernel_misc_reclaimable:0
[   66.823698][ T6367]  free:283448 free_pcp:28555 free_cma:0
[   66.926553][ T6367] Node 0 active_anon:13148kB inactive_anon:0kB active_file:4260kB inactive_file:143496kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28700kB dirty:5968kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6196kB pagetables:2088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   66.938060][ T6367] Node 1 active_anon:9912kB inactive_anon:0kB active_file:1032kB inactive_file:9404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44540kB dirty:168kB writeback:0kB shmem:4776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:1848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   66.948412][ T6367] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   66.957982][ T6367] lowmem_reserve[]: 0 811 811 811 811
[   66.959664][ T6358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.959808][ T6367] Node 0 DMA32 free:227512kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13148kB inactive_anon:0kB active_file:4260kB inactive_file:143496kB unevictable:3536kB writepending:5968kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:56124kB local_pcp:19444kB free_cma:0kB
[   66.974310][ T6367] lowmem_reserve[]: 0 0 0 0 0
[   66.976125][ T6367] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   66.988381][ T6367] lowmem_reserve[]: 0 0 854 854 854
[   66.990386][ T6367] Node 1 Normal free:432304kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9912kB inactive_anon:0kB active_file:1032kB inactive_file:9404kB unevictable:3536kB writepending:168kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:58048kB local_pcp:38344kB free_cma:0kB
[   67.002638][ T6367] lowmem_reserve[]: 0 0 0 0 0
[   67.004664][ T6367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   67.009949][ T6367] Node 0 DMA32: 610*4kB (UME) 72*8kB (UM) 29*16kB (UM) 175*32kB (UME) 14*64kB (UM) 8*128kB (UME) 1*256kB (E) 4*512kB (UME) 3*1024kB (ME) 3*2048kB (ME) 50*4096kB (M) = 227320kB
[   67.017338][ T6367] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   67.023980][ T6367] Node 1 Normal: 524*4kB (UME) 486*8kB (UME) 137*16kB (UM) 76*32kB (UME) 35*64kB (UME) 21*128kB (UM) 8*256kB (UM) 6*512kB (UME) 4*1024kB (M) 5*2048kB (M) 97*4096kB (M) = 432304kB
[   67.031199][ T6367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.035565][ T6367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.039399][ T6367] 41988 total pagecache pages
[   67.041384][ T6367] 0 pages in swap cache
[   67.043525][ T6367] Free swap  = 124996kB
[   67.045183][ T6367] Total swap = 124996kB
[   67.047694][ T6367] 786301 pages RAM
[   67.049281][ T6367] 0 pages HighMem/MovableOnly
[   67.051210][ T6367] 241337 pages reserved
[   67.053102][ T6367] 0 pages cma reserved
[   67.055830][ T6358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.115566][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.124329][ T6374] tipc: Started in network mode
[   67.126389][ T6374] tipc: Node identity ac14140f, cluster identity 4711
[   67.129470][ T6374] tipc: New replicast peer: 255.255.255.255
[   67.134192][ T6374] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.150103][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.189375][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.196347][ T6379] netlink: 'syz.1.127': attribute type 10 has an invalid length.
[   67.217325][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.380766][ T6393] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   67.398505][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.513214][ T6402] netlink: 'syz.2.137': attribute type 1 has an invalid length.
[   67.680779][ T6417] netlink: 'syz.0.143': attribute type 1 has an invalid length.
[   67.703864][ T6417] 8021q: adding VLAN 0 to HW filter on device bond3
[   67.711715][ T6417] bond3: entered promiscuous mode
[   68.097445][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.115367][ T6441] syzkaller1: entered promiscuous mode
[   68.117993][ T6441] syzkaller1: entered allmulticast mode
[   68.243295][   T24] tipc: Node number set to 2886997007
[   68.294763][ T6453] bond0: entered promiscuous mode
[   68.297686][ T6453] batadv0: entered promiscuous mode
[   68.300743][ T6453] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   68.305703][ T6453] 8021q: adding VLAN 0 to HW filter on device hsr1
[   68.335944][ T6453] tun0: tun_chr_ioctl cmd 1074025675
[   68.337699][ T6453] tun0: persist enabled
[   68.346934][ T6453] tun0: tun_chr_ioctl cmd 1074025675
[   68.348784][ T6453] tun0: persist disabled
[   68.350839][ T6453] tun0: tun_chr_ioctl cmd 5
[   68.597797][ T6477] bond0: Device is already in use.
[   68.651627][ T6479] netlink: 'syz.0.165': attribute type 10 has an invalid length.
[   68.661599][ T6479] netlink: 'syz.0.165': attribute type 10 has an invalid length.
[   68.798810][ T6493] 8021q: adding VLAN 0 to HW filter on device bond4
[   68.804918][ T6493] __nla_validate_parse: 23 callbacks suppressed
[   68.804932][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.165'.
[   69.048615][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'.
[   69.301693][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'.
[   69.348921][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   69.354410][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'.
[   69.357367][ T6515] netlink: 'syz.2.178': attribute type 15 has an invalid length.
[   69.365467][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.365537][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[   69.368241][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   69.371161][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'.
[   69.375458][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.378671][ T6513] netlink: 'syz.1.177': attribute type 20 has an invalid length.
[   69.383994][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'.
[   69.384167][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[   69.386948][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.390038][ T6513] netlink: 'syz.1.177': attribute type 20 has an invalid length.
[   69.393018][ T6515] netlink: 'syz.2.178': attribute type 15 has an invalid length.
[   69.398110][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.901331][ T6572] vcan0: tx drop: invalid sa for name 0x0000000000000002
[   70.004426][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.007519][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.022656][ T6581] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   70.038577][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.049042][ T6581] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[   70.059398][ T6581] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[   70.275626][ T6609] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[   70.278916][ T6609] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[   70.684511][ T6634] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.689090][ T6634] bond0: (slave bond1): Enslaving as an active interface with an up link
[   70.889691][ T6643] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.007218][ T6643] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.110918][ T6643] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.136456][ T6659] netlink: 'syz.1.216': attribute type 3 has an invalid length.
[   71.154313][ T6643] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.258678][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.287964][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.302624][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.305498][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.320448][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.333547][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.751146][ T6706] netlink: 'syz.0.228': attribute type 13 has an invalid length.
[   71.754153][ T6706] netlink: 'syz.0.228': attribute type 17 has an invalid length.
[   71.769088][ T6706] gretap0: refused to change device tx_queue_len
[   71.772113][ T6706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   72.572199][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.881477][ T6773] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.889808][ T6773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   72.894788][ T6773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   72.946756][ T6773] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.950516][ T6773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   72.954568][ T6773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   72.986795][ T6773] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.990331][ T6773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   72.995141][ T6773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   73.029098][ T6773] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.033430][ T6773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.037163][ T6773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   73.098706][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.101446][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   73.105467][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   73.124958][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.128435][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   73.131736][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   73.148952][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.153066][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   73.156650][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   73.175294][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.178880][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   73.183849][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   73.629460][ T6811] gretap1: entered promiscuous mode
[   73.650387][ T6818] openvswitch: netlink: Key 8 has unexpected len 2 expected 40
[   73.742863][ T6823] syzkaller0: entered allmulticast mode
[   73.759186][ T6823] syzkaller0 (unregistering): left allmulticast mode
[   73.780413][ T6826] netlink: 'syz.0.254': attribute type 7 has an invalid length.
[   73.822801][ T6830] __nla_validate_parse: 17 callbacks suppressed
[   73.822816][ T6830] netlink: 64 bytes leftover after parsing attributes in process `syz.1.256'.
[   73.830426][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[   73.836902][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[   74.116205][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'.
[   74.384143][ T6901] netlink: 248 bytes leftover after parsing attributes in process `syz.1.275'.
[   74.409756][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'.
[   74.430457][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[   74.520862][ T5901] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   74.737107][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'.
[   74.740101][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'.
[   75.328583][ T6946] validate_nla: 3 callbacks suppressed
[   75.328599][ T6946] netlink: 'syz.2.286': attribute type 1 has an invalid length.
[   75.363481][ T6946] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.385932][ T6946] bond1: (slave ip6erspan0): making interface the new active one
[   75.390920][ T6946] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   75.405576][ T6950] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   75.477763][ T6953] netlink: 76 bytes leftover after parsing attributes in process `syz.2.289'.
[   76.107942][ T6996] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.207643][ T7005] netlink: 'syz.0.305': attribute type 4 has an invalid length.
[   76.227954][ T7005] netlink: 'syz.0.305': attribute type 4 has an invalid length.
[   76.289771][ T7016] netlink: 'syz.2.309': attribute type 6 has an invalid length.
[   76.297908][ T7014] netlink: 'syz.1.308': attribute type 2 has an invalid length.
[   76.318699][ T7016] netlink: 'syz.2.309': attribute type 12 has an invalid length.
[   76.611894][ T7044] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   76.633480][ T7044] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.778513][ T7055] warning: `syz.0.322' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.823363][ T7060] Unsupported ieee802154 address type: 0
[   76.911382][ T7066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.915505][ T7066] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.009226][ T7066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.017948][ T7066] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.095344][ T7066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.098905][ T7066] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.168091][ T7092] veth3: entered promiscuous mode
[   77.187374][ T7066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.191366][ T7066] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.295795][ T5901] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.299376][ T5901] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.336638][ T5901] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.340229][ T5901] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.349953][ T5901] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.372655][ T5901] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.377871][ T5901] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.381484][ T5901] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.584021][ T7123] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.611379][ T7123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.677740][ T7120] pimreg: entered allmulticast mode
[   77.686360][ T7123] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.691350][ T7123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.729175][ T7123] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.736148][ T7123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.796184][ T7123] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.801319][ T7123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.878480][ T7143] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   78.040320][ T7153] netlink: 'syz.0.349': attribute type 1 has an invalid length.
[   78.617885][ T7192] tun0: tun_chr_ioctl cmd 2148045848
[   78.621213][ T7192] tun0: tun_chr_ioctl cmd 21731
[   78.719252][ T7199] syzkaller1: entered promiscuous mode
[   78.721561][ T7199] syzkaller1: entered allmulticast mode
[   79.164751][ T7215] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[   79.297265][ T5855] IPVS: starting estimator thread 0...
[   79.382312][ T7226] IPVS: using max 47 ests per chain, 112800 per kthread
[   79.629040][ T7241] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.634868][ T7241] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   79.649969][ T7241] syz.2.376 (7241) used greatest stack depth: 18488 bytes left
[   79.770646][ T7259] __nla_validate_parse: 12 callbacks suppressed
[   79.770661][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.383'.
[   79.957964][ T7275] netlink: 766 bytes leftover after parsing attributes in process `syz.0.389'.
[   79.974948][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[   79.986975][ T7280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[   79.995047][ T7280] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   79.999421][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'.
[   80.005023][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'.
[   80.302691][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'.
[   80.454124][ T7305] validate_nla: 4 callbacks suppressed
[   80.454134][ T7305] netlink: 'syz.2.401': attribute type 1 has an invalid length.
[   80.468517][ T7308] netlink: 92 bytes leftover after parsing attributes in process `syz.0.400'.
[   80.484741][ T7305] bond4: entered promiscuous mode
[   80.486866][ T7305] bond4: entered allmulticast mode
[   80.490055][ T7305] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.560535][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.564674][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.695988][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.708564][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.923259][ T5739] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.926245][ T5739] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   80.929860][ T5739] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   80.935958][ T5739] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.939449][ T5739] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   80.943813][ T5739] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   80.955708][ T5739] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.958529][ T5739] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   80.961395][ T5739] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   80.984103][ T5739] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.995822][ T5739] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   81.002240][ T5739] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   81.020012][ T5739] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.025163][ T5739] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.040492][ T5739] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.045651][ T5739] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.049202][ T5739] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.053602][ T5739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.062870][ T5739] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.068537][ T5739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.250886][ T7354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.413'.
[   81.260656][ T7354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.413'.
[   81.333835][ T7349] block nbd0: server does not support multiple connections per device.
[   81.338275][ T7349] block nbd0: shutting down sockets
[   81.420936][ T7362] pim6reg1: entered promiscuous mode
[   81.423543][ T7362] pim6reg1: entered allmulticast mode
[   81.440614][ T7366] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   81.446287][ T7364] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   81.446503][ T7367] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[   81.450839][ T7366] netlink: 'syz.0.415': attribute type 11 has an invalid length.
[   81.453305][ T7364] netlink: 'syz.0.415': attribute type 11 has an invalid length.
[   81.469478][ T7367] bond4: entered promiscuous mode
[   81.472600][ T7367] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.507839][ T7367] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.511442][ T7367] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[   81.516690][ T7367] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   81.529887][ T7367] bond4: (slave wireguard0): making interface the new active one
[   81.542987][ T7367] wireguard0: entered promiscuous mode
[   81.546868][   T10] cfg80211: failed to load regulatory.db
[   81.555185][ T7367] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[   81.585746][ T7367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.589155][ T7367] IPv6: NLM_F_CREATE should be set when creating new route
[   81.592271][ T7367] IPv6: NLM_F_CREATE should be set when creating new route
[   81.601105][ T7367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.612449][ T7367] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[   81.618618][ T7367] bond4: (slave wireguard1): Enslaving as a backup interface with an up link
[   81.672435][ T7380] netlink: 'syz.1.420': attribute type 9 has an invalid length.
[   81.735202][ T7389] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   81.742633][ T7390] erspan0: entered promiscuous mode
[   81.744621][ T7390] macvtap1: entered promiscuous mode
[   81.746664][ T7390] macvtap1: entered allmulticast mode
[   81.748621][ T7390] erspan0: entered allmulticast mode
[   81.770155][ T7389] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.800907][ T7389] bond5: (slave veth3): Enslaving as an active interface with a down link
[   81.816079][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv1
[   81.818686][ T7389] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   81.825297][ T7395] netlink: 'syz.1.424': attribute type 1 has an invalid length.
[   81.861683][ T7395] bond6: entered promiscuous mode
[   81.863826][ T7395] bond6: entered allmulticast mode
[   81.866921][ T7395] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.926065][ T7401] ip6erspan0: entered allmulticast mode
[   82.157308][ T7425] netlink: 'syz.0.434': attribute type 1 has an invalid length.
[   83.274253][ T7443] vxcan2: entered promiscuous mode
[   83.947104][ T7491] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   84.421617][ T7511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.804160][ T7540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.848654][ T7539] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   84.854964][ T7539] bond3: left promiscuous mode
[   85.210383][ T7578] __nla_validate_parse: 18 callbacks suppressed
[   85.210398][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'.
[   85.233802][ T7318] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.237212][ T7318] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.240545][ T7318] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.248185][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'.
[   85.254555][ T7318] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.376986][ T7592] Bluetooth: MGMT ver 1.23
[   85.742776][ T7622] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.502'.
[   85.837754][ T7634] validate_nla: 3 callbacks suppressed
[   85.837763][ T7634] netlink: 'syz.0.506': attribute type 10 has an invalid length.
[   85.865293][ T7637] netlink: 'syz.1.507': attribute type 1 has an invalid length.
[   85.877077][ T7637] veth5: entered promiscuous mode
[   85.955385][ T7649] netlink: 'syz.0.510': attribute type 1 has an invalid length.
[   85.975550][ T7649] bond6: entered promiscuous mode
[   85.977598][ T7649] 8021q: adding VLAN 0 to HW filter on device bond6
[   85.992323][ T7647] 8021q: adding VLAN 0 to HW filter on device bond6
[   85.994715][ T7647] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[   85.998678][ T7647] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   86.005154][ T7647] bond6: (slave wireguard0): making interface the new active one
[   86.007908][ T7647] wireguard0: entered promiscuous mode
[   86.010573][ T7647] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[   86.017157][ T7647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.019598][ T7647] IPv6: NLM_F_CREATE should be set when creating new route
[   86.022702][ T7647] IPv6: NLM_F_CREATE should be set when creating new route
[   86.027872][ T7647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.063169][ T7658] netlink: 'syz.0.512': attribute type 1 has an invalid length.
[   86.348529][ T7680] IPv6: Can't replace route, no match found
[   86.403115][ T7680] netlink: 'syz.1.518': attribute type 1 has an invalid length.
[   86.421280][ T7683] can: request_module (can-proto-0) failed.
[   86.805168][ T7710] netlink: 'syz.1.529': attribute type 5 has an invalid length.
[   86.808615][ T7710] netlink: 'syz.1.529': attribute type 7 has an invalid length.
[   86.833849][ T7710] : entered promiscuous mode
[   86.850444][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'.
[   87.287877][ T7738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'.
[   87.452161][ T5238] Bluetooth: hci0: command tx timeout
[   87.507302][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.541'.
[   87.603898][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'.
[   87.764241][ T7766] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.546'.
[   88.059194][ T7785] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   88.079455][ T7785] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.084298][ T7785] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.166750][ T7785] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.170155][ T7785] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.206492][ T7785] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.210288][ T7785] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.248085][ T7785] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.251722][ T7785] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.322280][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.326089][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.336567][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.340429][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.348203][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.352191][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.367204][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.372581][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.511246][ T5915] IPVS: starting estimator thread 0...
[   88.540882][ T7792] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.544464][ T7792] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.602593][ T7793] IPVS: using max 47 ests per chain, 112800 per kthread
[   88.602900][ T7792] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.608481][ T7792] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.656099][ T7792] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.659763][ T7792] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.717738][ T7792] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.720897][ T7792] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.728444][ T7805] netlink: 7 bytes leftover after parsing attributes in process `syz.2.558'.
[   89.136170][ T7823] bond0: (slave batadv0): Releasing backup interface
[   89.139932][ T7823] bridge_slave_0: left allmulticast mode
[   89.144654][ T7823] bridge_slave_0: left promiscuous mode
[   89.147167][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.154075][ T7823] bridge_slave_1: left allmulticast mode
[   89.156712][ T7823] bridge_slave_1: left promiscuous mode
[   89.159382][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.168993][ T7823] bond0: (slave bond_slave_0): Releasing backup interface
[   89.173279][ T7823] bond0: (slave bond_slave_1): Releasing backup interface
[   89.177744][ T7823] team0: Port device team_slave_0 removed
[   89.181084][ T7823] team0: Port device team_slave_1 removed
[   89.183618][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.186731][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.190662][ T7823] bond1: (slave ip6erspan0): Releasing active interface
[   89.743966][ T7845] netlink: 'syz.0.569': attribute type 1 has an invalid length.
[   89.757963][ T7845] bond8: entered promiscuous mode
[   89.760516][ T7845] 8021q: adding VLAN 0 to HW filter on device bond8
[   89.784604][ T7845] 8021q: adding VLAN 0 to HW filter on device bond9
[   89.787759][ T7845] bond8: (slave bond9): making interface the new active one
[   89.790375][ T7845] bond9: entered promiscuous mode
[   89.793092][ T7845] bond8: (slave bond9): Enslaving as an active interface with an up link
[   89.820921][ T7849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.570'.
[   90.058495][ T7867] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[   90.146218][ T7871] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[   90.367829][ T7894] sctp: [Deprecated]: syz.0.585 (pid 7894) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.367829][ T7894] Use struct sctp_sack_info instead
[   90.403063][ T7894] sctp: [Deprecated]: syz.0.585 (pid 7894) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.403063][ T7894] Use struct sctp_sack_info instead
[   90.444669][ T7900] __nla_validate_parse: 1 callbacks suppressed
[   90.444685][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.587'.
[   90.458673][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[   90.682737][ T7924] netlink: 'syz.0.591': attribute type 3 has an invalid length.
[   91.748073][ T8017] validate_nla: 1 callbacks suppressed
[   91.748082][ T8017] netlink: 'syz.2.599': attribute type 14 has an invalid length.
[   91.833956][ T8024] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   91.842855][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[   91.886789][ T8030] bond2: option mode: unable to set because the bond device is up
[   91.939351][ T8030] bridge_slave_0: left allmulticast mode
[   91.941239][ T8030] bridge_slave_0: left promiscuous mode
[   91.943674][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.950287][ T8030] bridge_slave_1: left allmulticast mode
[   91.954319][ T8030] bridge_slave_1: left promiscuous mode
[   91.956841][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.970813][ T8030] team0: Port device team_slave_0 removed
[   91.979077][ T8030] team0: Port device team_slave_1 removed
[   91.982227][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.985334][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.993370][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.996753][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.010111][ T8030] bond5: (slave veth3): Releasing active interface
[   92.018688][ T8030] bond6: (slave wireguard0): Releasing backup interface
[   92.021700][ T8030] wireguard0: left promiscuous mode
[   92.030890][ T8030] bond8: (slave bond9): Releasing backup interface
[   92.040284][ T8030] bond9: left promiscuous mode
[   92.303604][ T8056] netlink: 'syz.0.614': attribute type 1 has an invalid length.
[   92.316423][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.615'.
[   92.342946][ T8056] bond10: (slave geneve3): making interface the new active one
[   92.346802][ T8056] bond10: (slave geneve3): Enslaving as an active interface with an up link
[   92.350567][ T7318] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   92.356061][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[   92.361323][ T7318] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   92.368310][ T8056] 8021q: adding VLAN 0 to HW filter on device bond10
[   92.376160][ T7318] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   92.378870][ T7318] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   92.410887][ T8064] trusted_key: syz.0.616 sent an empty control message without MSG_MORE.
[   92.437642][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'.
[   92.464180][ T7318] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.466953][ T7318] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.469660][ T7318] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.473782][ T7318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.482875][ T7318] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.485635][ T7318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.488381][ T7318] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.491312][ T7318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.579725][ T8069] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   92.588151][ T8069] netlink: 'syz.1.618': attribute type 10 has an invalid length.
[   92.590731][ T8069] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   92.596358][ T8069] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.622469][ T8069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.618'.
[   92.894358][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.900548][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.012067][ T8071] xfrm1: left promiscuous mode
[   93.014767][ T8071] xfrm1: left allmulticast mode
[   93.036159][ T8071] bond4: left promiscuous mode
[   93.038470][ T8071] wireguard0: left promiscuous mode
[   93.046018][ T8071] erspan0: left allmulticast mode
[   93.047907][ T8071] macvtap1: left promiscuous mode
[   93.049603][ T8071] macvtap1: left allmulticast mode
[   93.055069][ T8071] bond6: left promiscuous mode
[   93.056911][ T8071] bond6: left allmulticast mode
[   93.061102][ T8071] ip6erspan0: left allmulticast mode
[   93.080461][ T8078] IPVS: Unknown mcast interface: pim6reg0
[   93.086034][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.092042][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.095366][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.102837][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.105516][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.108217][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.110906][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.129038][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.139004][ T8083] 8021q: VLANs not supported on ip_vti0
[   93.147274][ T8084] 8021q: VLANs not supported on ip_vti0
[   93.324530][ T8092] netlink: 'syz.2.626': attribute type 1 has an invalid length.
[   93.436043][ T8106] vxcan1: entered allmulticast mode
[   93.447108][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'.
[   93.518637][ T8115] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.633'.
[   93.616157][ T8130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.640'.
[   94.267458][ T8206] netlink: 'syz.2.666': attribute type 19 has an invalid length.
[   94.272212][ T8206] netlink: 'syz.2.666': attribute type 19 has an invalid length.
[   94.564451][ T8228] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   94.574429][ T8228] Bluetooth: MGMT ver 1.23
[   95.386550][ T8264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   95.399262][ T8260] 8021q: adding VLAN 0 to HW filter on device bond12
[   95.408888][ T8260] bond11: (slave bond12): Enslaving as an active interface with an up link
[   95.430105][ T8269] bond11 (unregistering): (slave bond12): Releasing backup interface
[   95.437179][ T8269] bond11 (unregistering): Released all slaves
[   95.513798][ T8271] __nla_validate_parse: 10 callbacks suppressed
[   95.513808][ T8271] netlink: 248 bytes leftover after parsing attributes in process `syz.2.683'.
[   95.547712][ T8271] netlink: 76 bytes leftover after parsing attributes in process `syz.2.683'.
[   95.866289][ T8299] netlink: 92 bytes leftover after parsing attributes in process `syz.2.690'.
[   95.893478][ T8299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.690'.
[   96.013706][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'.
[   96.145443][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'.
[   96.149618][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'.
[   96.346096][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[   96.380142][ T8351] netlink: 'syz.2.701': attribute type 2 has an invalid length.
[   96.652057][ T5853] Bluetooth: hci2: command 0x0401 tx timeout
[   96.654188][ T5238] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   96.811674][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'.
[   96.816033][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[   97.303966][ T8435] ip6gre1: entered promiscuous mode
[   97.750746][ T8458] netlink: 'syz.2.735': attribute type 13 has an invalid length.
[   97.754691][ T8458] netlink: 'syz.2.735': attribute type 17 has an invalid length.
[   97.821151][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.824973][ T8458] 8021q: adding VLAN 0 to HW filter on device team0
[   97.830206][ T8458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.989912][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.344006][ T8481] 8021q: adding VLAN 0 to HW filter on device bond11
[   98.495219][ T8493] netlink: 'syz.0.743': attribute type 9 has an invalid length.
[   99.054647][ T8535] netlink: 'syz.2.757': attribute type 1 has an invalid length.
[   99.085932][ T8535] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.091489][ T8535] bond5: (slave vxcan3): Error -95 calling set_mac_address
[   99.132750][ T8541] gretap1: entered promiscuous mode
[   99.137780][ T8541] bond5: (slave gretap1): making interface the new active one
[   99.141507][ T8541] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   99.239902][ T8548] sock: sock_timestamping_bind_phc: sock not bind to device
[   99.339716][ T8557] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   99.395269][ T8560] netlink: 'syz.2.764': attribute type 1 has an invalid length.
[   99.410620][ T8560] 8021q: adding VLAN 0 to HW filter on device bond6
[   99.426088][ T8560] bond6: (slave geneve3): making interface the new active one
[   99.430782][ T8560] bond6: (slave geneve3): Enslaving as an active interface with an up link
[   99.435508][ T5901] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.444693][ T8560] bond6: entered promiscuous mode
[   99.446831][ T8560] geneve3: entered promiscuous mode
[   99.458571][ T8563] vxlan1: entered promiscuous mode
[   99.460457][ T8563] vxlan1: entered allmulticast mode
[   99.464173][ T5901] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.467564][ T5901] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.470943][ T5901] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.744383][ T8594] netlink: 'syz.1.773': attribute type 5 has an invalid length.
[   99.749677][ T8594] geneve3: entered promiscuous mode
[   99.751669][ T8594] geneve3: entered allmulticast mode
[   99.769841][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   99.775301][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   99.790366][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   99.807757][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   99.866475][ T8605] veth0_to_bridge: entered promiscuous mode
[   99.868954][ T8605] veth0_to_bridge: left promiscuous mode
[  100.254440][ T8621] netlink: 'syz.0.782': attribute type 1 has an invalid length.
[  100.444545][ T8625] netlink: 'syz.0.783': attribute type 10 has an invalid length.
[  100.777155][ T8627] __nla_validate_parse: 5 callbacks suppressed
[  100.777165][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.784'.
[  101.006223][ T8645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.789'.
[  101.083333][ T8649] netlink: 104 bytes leftover after parsing attributes in process `syz.1.791'.
[  101.116723][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'.
[  101.120687][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'.
[  101.210233][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'.
[  101.353950][ T8685] netlink: 300 bytes leftover after parsing attributes in process `syz.1.800'.
[  101.574734][ T8707] bridge2: entered allmulticast mode
[  101.580105][ T8704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.809'.
[  101.615124][ T8711] netlink: 'syz.0.812': attribute type 1 has an invalid length.
[  101.639270][ T8711] 8021q: adding VLAN 0 to HW filter on device bond14
[  101.665957][ T8711] bond14: (slave veth9): Enslaving as an active interface with a down link
[  101.684457][ T8714] geneve4: entered promiscuous mode
[  101.686554][ T8714] geneve4: entered allmulticast mode
[  101.710973][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv2
[  101.715230][ T8711] bond14: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  101.787249][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'.
[  101.791317][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'.
[  101.969743][ T8740] sock: sock_timestamping_bind_phc: sock not bind to device
[  101.980089][ T8740] tipc: Enabling of bearer <et:g> rejected, media not registered
[  102.392991][ T8755] netlink: 'syz.1.825': attribute type 2 has an invalid length.
[  103.297471][ T8796] validate_nla: 1 callbacks suppressed
[  103.297485][ T8796] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  103.338865][ T8796] bond7: entered promiscuous mode
[  103.341542][ T8796] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.361438][ T8796] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.365157][ T8796] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  103.369597][ T8796] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  103.380853][ T8796] bond7: (slave vxcan3): making interface the new active one
[  103.384192][ T8796] vxcan3: entered promiscuous mode
[  103.387133][ T8796] bond7: (slave vxcan3): Enslaving as an active interface with an up link
[  103.519073][ T8815] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  103.602441][ T8813] geneve2: left promiscuous mode
[  103.604658][ T8813] geneve2: left allmulticast mode
[  103.608374][ T8813] veth3: left promiscuous mode
[  103.610513][ T8813] bond4: left promiscuous mode
[  103.615766][ T8813] bond4: left allmulticast mode
[  103.620436][ T8813] ip6gre1: left promiscuous mode
[  103.624972][ T8813] gretap1: left promiscuous mode
[  103.627220][ T8813] bond6: left promiscuous mode
[  103.629011][ T8813] geneve3: left promiscuous mode
[  103.635532][ T8813] bond7: left promiscuous mode
[  103.637673][ T8813] vxcan3: left promiscuous mode
[  103.648116][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.655639][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.662043][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.670215][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.769083][ T8823] syzkaller0: entered promiscuous mode
[  103.772231][ T8823] syzkaller0: entered allmulticast mode
[  104.183826][ T8841] pim6reg: entered allmulticast mode
[  105.970566][ T8888] netlink: 'syz.0.868': attribute type 6 has an invalid length.
[  106.320019][ T8894] __nla_validate_parse: 7 callbacks suppressed
[  106.320032][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.871'.
[  106.616461][ T8914] syzkaller0: entered promiscuous mode
[  106.618375][ T8914] syzkaller0: entered allmulticast mode
[  107.561101][ T8924] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  107.948619][ T8960] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.889'.
[  108.026843][ T8964] macvtap1: entered allmulticast mode
[  108.029326][ T8964] veth0_macvtap: entered allmulticast mode
[  108.558928][ T8995] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  108.569094][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'.
[  108.626106][ T9001] ip6tnl0: entered promiscuous mode
[  108.628220][ T9001] ip6tnl0: entered allmulticast mode
[  108.662855][ T9001] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.906706][ T9013] bond5: (slave gretap1): Releasing active interface
[  108.911016][ T9013] bond6: (slave geneve3): Releasing active interface
[  108.917105][ T9013] bond7: (slave vxcan3): Releasing backup interface
[  109.238161][ T9032] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  109.243103][ T9032] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  109.360157][ T9034] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  109.406278][ T9034] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  109.416294][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  109.419956][ T9035] netlink: 'syz.1.911': attribute type 5 has an invalid length.
[  109.423615][ T9035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'.
[  109.431350][ T9035] geneve4: entered promiscuous mode
[  109.434577][ T9035] geneve4: entered allmulticast mode
[  109.485248][ T9034] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  109.521378][ T9034] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  109.582067][ T7318] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  109.599531][ T7318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  109.615192][ T7318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  109.627809][ T7318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  109.675198][ T9065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.919'.
[  109.681574][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'.
[  110.146050][ T9101] 8021q: VLANs not supported on sit0
[  110.319033][ T9115] netlink: 72 bytes leftover after parsing attributes in process `syz.1.936'.
[  110.371190][ T9116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.378394][ T9116] netlink: del zone limit has 4 unknown bytes
[  110.677849][ T9133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.939'.
[  110.752930][ T9136] netlink: 'syz.0.940': attribute type 1 has an invalid length.
[  111.120716][ T9153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.944'.
[  111.153585][ T9153] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  111.156989][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.2.944 Not tainted syzkaller #0 PREEMPT(full) 
[  111.157007][ T9153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.157014][ T9153] Call Trace:
[  111.157019][ T9153]  <TASK>
[  111.157026][ T9153]  dump_stack_lvl+0x189/0x250
[  111.157047][ T9153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.157062][ T9153]  ? __pfx__printk+0x10/0x10
[  111.157084][ T9153]  ? kernfs_path_from_node+0x2f/0x290
[  111.157098][ T9153]  ? kernfs_path_from_node+0x250/0x290
[  111.157111][ T9153]  ? kernfs_path_from_node+0x2f/0x290
[  111.157128][ T9153]  sysfs_warn_dup+0x8e/0xa0
[  111.157143][ T9153]  sysfs_do_create_link_sd+0xc0/0x110
[  111.157158][ T9153]  device_add_class_symlinks+0x1cf/0x240
[  111.157175][ T9153]  device_add+0x475/0xb50
[  111.157191][ T9153]  wiphy_register+0x1ba6/0x28d0
[  111.157223][ T9153]  ? __pfx_wiphy_register+0x10/0x10
[  111.157240][ T9153]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  111.157260][ T9153]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  111.157278][ T9153]  ieee80211_register_hw+0x3484/0x4100
[  111.157306][ T9153]  ? ieee80211_register_hw+0x1461/0x4100
[  111.157328][ T9153]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  111.157345][ T9153]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  111.157368][ T9153]  ? __hrtimer_setup+0x187/0x210
[  111.157379][ T9153]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  111.157399][ T9153]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  111.157439][ T9153]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  111.157453][ T9153]  ? trace_kmalloc+0x1f/0xd0
[  111.157465][ T9153]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  111.157481][ T9153]  ? kstrndup+0xbf/0x160
[  111.157503][ T9153]  hwsim_new_radio_nl+0xea4/0x1b10
[  111.157521][ T9153]  ? __pfx___nla_validate_parse+0x10/0x10
[  111.157550][ T9153]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  111.157577][ T9153]  ? __nla_parse+0x40/0x60
[  111.157598][ T9153]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  111.157621][ T9153]  genl_family_rcv_msg_doit+0x215/0x300
[  111.157670][ T9153]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  111.157697][ T9153]  ? bpf_lsm_capable+0x9/0x20
[  111.157719][ T9153]  ? security_capable+0x7e/0x2e0
[  111.157741][ T9153]  genl_rcv_msg+0x60e/0x790
[  111.157761][ T9153]  ? __pfx_genl_rcv_msg+0x10/0x10
[  111.157775][ T9153]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  111.157803][ T9153]  netlink_rcv_skb+0x208/0x470
[  111.157820][ T9153]  ? __lock_acquire+0xab9/0xd20
[  111.157838][ T9153]  ? __pfx_genl_rcv_msg+0x10/0x10
[  111.157854][ T9153]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.157888][ T9153]  ? down_read+0x1ad/0x2e0
[  111.157902][ T9153]  genl_rcv+0x28/0x40
[  111.157915][ T9153]  netlink_unicast+0x82f/0x9e0
[  111.157939][ T9153]  ? __pfx_netlink_unicast+0x10/0x10
[  111.157957][ T9153]  ? netlink_sendmsg+0x642/0xb30
[  111.157966][ T9153]  ? skb_put+0x11b/0x210
[  111.157982][ T9153]  netlink_sendmsg+0x805/0xb30
[  111.158001][ T9153]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.158015][ T9153]  ? aa_sock_msg_perm+0xf1/0x1d0
[  111.158028][ T9153]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  111.158039][ T9153]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.158051][ T9153]  __sock_sendmsg+0x21c/0x270
[  111.158070][ T9153]  ____sys_sendmsg+0x505/0x830
[  111.158089][ T9153]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.158111][ T9153]  ? import_iovec+0x74/0xa0
[  111.158128][ T9153]  ___sys_sendmsg+0x21f/0x2a0
[  111.158143][ T9153]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.158187][ T9153]  ? __fget_files+0x2a/0x420
[  111.158204][ T9153]  ? __fget_files+0x3a0/0x420
[  111.158231][ T9153]  __x64_sys_sendmsg+0x19b/0x260
[  111.158247][ T9153]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  111.158268][ T9153]  ? rcu_is_watching+0x15/0xb0
[  111.158285][ T9153]  ? do_syscall_64+0xbe/0x3b0
[  111.158300][ T9153]  do_syscall_64+0xfa/0x3b0
[  111.158309][ T9153]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.158326][ T9153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.158338][ T9153]  ? exc_page_fault+0x9f/0xf0
[  111.158357][ T9153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.158368][ T9153] RIP: 0033:0x7f5aa038ebe9
[  111.158381][ T9153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.158391][ T9153] RSP: 002b:00007f5aa11d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.158404][ T9153] RAX: ffffffffffffffda RBX: 00007f5aa05c5fa0 RCX: 00007f5aa038ebe9
[  111.158411][ T9153] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  111.158418][ T9153] RBP: 00007f5aa0411e19 R08: 0000000000000000 R09: 0000000000000000
[  111.158424][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.158430][ T9153] R13: 00007f5aa05c6038 R14: 00007f5aa05c5fa0 R15: 00007ffeeda4d708
[  111.158451][ T9153]  </TASK>
[  111.568818][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[  111.664814][ T9180] netlink: 'syz.2.953': attribute type 9 has an invalid length.
[  111.726944][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'.
[  111.784833][ T9194] Illegal XDP return value 1225373346 on prog  (id 419) dev N/A, expect packet loss!
[  111.945532][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.962'.
[  111.946343][ T9210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.962'.
[  112.045408][ T9220] netlink: 'syz.0.966': attribute type 1 has an invalid length.
[  112.059032][ T9220] 8021q: adding VLAN 0 to HW filter on device bond17
[  112.070150][ T9220] bond17: (slave gretap3): making interface the new active one
[  112.074550][ T9220] bond17: (slave gretap3): Enslaving as an active interface with an up link
[  112.125841][ T9225] bond10: (slave geneve3): Releasing active interface
[  112.136257][ T9225] bond14: (slave veth9): Releasing active interface
[  112.146831][ T9225] bond17: (slave gretap3): Releasing active interface
[  112.159125][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.163714][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.183511][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.189644][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.408706][ T9243] netlink: 'syz.1.975': attribute type 29 has an invalid length.
[  112.421302][ T9243] netlink: 'syz.1.975': attribute type 2 has an invalid length.
[  112.427567][ T9243] netlink: 119 bytes leftover after parsing attributes in process `syz.1.975'.
[  112.805286][ T9276] netlink: 'syz.2.987': attribute type 15 has an invalid length.
[  113.384686][ T9304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.992'.
[  113.713618][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'.
[  113.758304][ T9339] bridge4: port 1(veth11) entered blocking state
[  113.761202][ T9339] bridge4: port 1(veth11) entered disabled state
[  113.766137][ T9339] veth11: entered allmulticast mode
[  113.770041][ T9339] veth11: entered promiscuous mode
[  113.791148][ T9339] bridge4: port 2(veth0_to_bond) entered blocking state
[  113.795366][ T9339] bridge4: port 2(veth0_to_bond) entered disabled state
[  113.798546][ T9339] veth0_to_bond: entered allmulticast mode
[  113.802511][ T9339] veth0_to_bond: entered promiscuous mode
[  113.813933][ T9339] vlan4: entered allmulticast mode
[  113.816572][ T9339] veth1: entered allmulticast mode
[  113.819133][ T9339] bridge4: port 3(vlan4) entered blocking state
[  113.824012][ T9339] bridge4: port 3(vlan4) entered disabled state
[  113.828200][ T9339] vlan4: entered promiscuous mode
[  113.830452][ T9339] veth1: entered promiscuous mode
[  113.893504][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'.
[  113.914904][ T9355] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.926508][ T9355] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.929002][ T9355] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  113.933842][ T9355] bond9: (slave wireguard0): Error -95 calling set_mac_address
[  114.169104][ T9384] sock: sock_timestamping_bind_phc: sock not bind to device
[  114.226046][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  114.250292][ T9390] bond10: entered promiscuous mode
[  114.257115][ T9390] 8021q: adding VLAN 0 to HW filter on device bond10
[  114.270022][ T9390] 8021q: adding VLAN 0 to HW filter on device bond10
[  114.275819][ T9390] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  114.281255][ T9390] bond10: (slave vcan1): Error -95 calling set_mac_address
[  114.629251][ T9405] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1024'.
[  114.777140][ T9417] netlink: 'syz.2.1030': attribute type 8 has an invalid length.
[  114.949182][ T9437] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  114.993806][ T9437] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.059773][ T9440] sctp: [Deprecated]: syz.2.1035 (pid 9440) Use of int in maxseg socket option.
[  115.059773][ T9440] Use struct sctp_assoc_value instead
[  115.074428][ T9440] syzkaller0: entered promiscuous mode
[  115.076860][ T9440] syzkaller0: entered allmulticast mode
[  115.082723][ T9437] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.138347][ T9437] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  115.256260][ T7318] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  115.270124][ T7318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  115.274970][ T9447] netlink: 'syz.2.1037': attribute type 10 has an invalid length.
[  115.281668][ T7318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  115.286804][ T9447] 8021q: adding VLAN 0 to HW filter on device team0
[  115.291068][ T9447] bond0: (slave team0): Enslaving as an active interface with a down link
[  115.299816][ T9447] netlink: 'syz.2.1037': attribute type 10 has an invalid length.
[  115.312317][ T9447] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  115.316278][ T7318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  115.341293][ T9447] 8021q: adding VLAN 0 to HW filter on device bond11
[  115.355146][ T9447] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  115.360497][ T9447] bond11: (slave macvlan7): Enslaving as a backup interface with an up link
[  115.755408][ T9489] netlink: 'syz.2.1050': attribute type 3 has an invalid length.
[  115.758108][ T9489] netlink: 'syz.2.1050': attribute type 3 has an invalid length.
[  116.174990][ T9476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.536386][ T9535] syz.0.1067: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  116.544202][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.0.1067 Not tainted syzkaller #0 PREEMPT(full) 
[  116.544219][ T9535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.544226][ T9535] Call Trace:
[  116.544231][ T9535]  <TASK>
[  116.544236][ T9535]  dump_stack_lvl+0x189/0x250
[  116.544255][ T9535]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.544269][ T9535]  ? __pfx__printk+0x10/0x10
[  116.544283][ T9535]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  116.544297][ T9535]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  116.544309][ T9535]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  116.544323][ T9535]  warn_alloc+0x214/0x310
[  116.544343][ T9535]  ? __pfx_warn_alloc+0x10/0x10
[  116.544365][ T9535]  ? __get_vm_area_node+0x28f/0x300
[  116.544379][ T9535]  ? xskq_create+0xbf/0x170
[  116.544397][ T9535]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  116.544430][ T9535]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  116.544445][ T9535]  ? xskq_create+0x56/0x170
[  116.544461][ T9535]  ? __kasan_kmalloc+0x93/0xb0
[  116.544477][ T9535]  vmalloc_user_noprof+0xad/0xf0
[  116.544493][ T9535]  ? xskq_create+0xbf/0x170
[  116.544506][ T9535]  xskq_create+0xbf/0x170
[  116.544522][ T9535]  xsk_init_queue+0xb0/0x110
[  116.544537][ T9535]  xsk_setsockopt+0x57b/0x8d0
[  116.544578][ T9535]  ? __pfx_xsk_setsockopt+0x10/0x10
[  116.544593][ T9535]  ? __pfx_aa_sk_perm+0x10/0x10
[  116.544610][ T9535]  ? __fget_files+0x2a/0x420
[  116.544623][ T9535]  ? aa_sock_opt_perm+0xff/0x1b0
[  116.544637][ T9535]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  116.544647][ T9535]  ? __pfx_xsk_setsockopt+0x10/0x10
[  116.544662][ T9535]  do_sock_setsockopt+0x17c/0x1b0
[  116.544683][ T9535]  __x64_sys_setsockopt+0x13f/0x1b0
[  116.544698][ T9535]  do_syscall_64+0xfa/0x3b0
[  116.544708][ T9535]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.544720][ T9535]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.544732][ T9535]  ? exc_page_fault+0x9f/0xf0
[  116.544747][ T9535]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.544756][ T9535] RIP: 0033:0x7f3adb78ebe9
[  116.544768][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.544776][ T9535] RSP: 002b:00007f3adc674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  116.544787][ T9535] RAX: ffffffffffffffda RBX: 00007f3adb9c6090 RCX: 00007f3adb78ebe9
[  116.544796][ T9535] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  116.544802][ T9535] RBP: 00007f3adb811e19 R08: 0000000000000004 R09: 0000000000000000
[  116.544808][ T9535] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  116.544814][ T9535] R13: 00007f3adb9c6128 R14: 00007f3adb9c6090 R15: 00007ffc147096b8
[  116.544832][ T9535]  </TASK>
[  116.544837][ T9535] Mem-Info:
[  116.663891][ T9535] active_anon:4545 inactive_anon:0 isolated_anon:0
[  116.663891][ T9535]  active_file:1356 inactive_file:38246 isolated_file:0
[  116.663891][ T9535]  unevictable:1768 dirty:16 writeback:0
[  116.663891][ T9535]  slab_reclaimable:10699 slab_unreclaimable:72576
[  116.663891][ T9535]  mapped:18152 shmem:2410 pagetables:913
[  116.663891][ T9535]  sec_pagetables:0 bounce:0
[  116.663891][ T9535]  kernel_misc_reclaimable:0
[  116.663891][ T9535]  free:269233 free_pcp:18489 free_cma:0
[  116.681308][ T9535] Node 0 active_anon:9172kB inactive_anon:0kB active_file:4392kB inactive_file:143544kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28008kB dirty:28kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6788kB pagetables:1792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  116.694119][ T9535] Node 1 active_anon:9008kB inactive_anon:0kB active_file:1032kB inactive_file:9440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44600kB dirty:36kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5988kB pagetables:1860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  116.707377][ T9535] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.719235][ T9535] lowmem_reserve[]: 0 811 811 811 811
[  116.721595][ T9535] Node 0 DMA32 free:232164kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9104kB inactive_anon:0kB active_file:4392kB inactive_file:143544kB unevictable:3536kB writepending:28kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:42008kB local_pcp:14588kB free_cma:0kB
[  116.737444][ T9535] lowmem_reserve[]: 0 0 0 0 0
[  116.739615][ T9535] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  116.752171][ T9535] lowmem_reserve[]: 0 0 854 854 854
[  116.754475][ T9535] Node 1 Normal free:370792kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8952kB inactive_anon:0kB active_file:1032kB inactive_file:9440kB unevictable:3536kB writepending:36kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32096kB local_pcp:13308kB free_cma:0kB
[  116.767661][ T9535] lowmem_reserve[]: 0 0 0 0 0
[  116.769634][ T9535] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  116.775514][ T9535] Node 0 DMA32: 469*4kB (UME) 258*8kB (M) 136*16kB (UM) 206*32kB (UM) 54*64kB (UME) 13*128kB (M) 7*256kB (ME) 15*512kB (M) 10*1024kB (UM) 3*2048kB (ME) 46*4096kB (M) = 232100kB
[  116.786439][ T9535] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  116.809468][ T9535] Node 1 Normal: 676*4kB (UME) 385*8kB (UME) 199*16kB (UME) 133*32kB (UME) 135*64kB (UME) 96*128kB (UME) 37*256kB (UME) 3*512kB (UE) 6*1024kB (UME) 8*2048kB (UM) 74*4096kB (M) = 370792kB
[  116.853316][ T9535] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.860583][ T9535] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  116.868175][ T9535] 42015 total pagecache pages
[  116.870343][ T9535] 0 pages in swap cache
[  116.872507][ T9535] Free swap  = 124996kB
[  116.874339][ T9535] Total swap = 124996kB
[  116.876179][ T9535] 786301 pages RAM
[  116.877812][ T9535] 0 pages HighMem/MovableOnly
[  116.879776][ T9535] 241337 pages reserved
[  116.882888][ T9535] 0 pages cma reserved
[  116.985524][ T9555] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0
[  117.001608][ T9556] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  117.026037][ T9556] 8021q: adding VLAN 0 to HW filter on device bond18
[  117.043947][ T9562] netlink: 'syz.1.1075': attribute type 10 has an invalid length.
[  117.044537][ T9556] 8021q: adding VLAN 0 to HW filter on device bond18
[  117.050824][ T9556] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  117.056799][ T9556] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  117.070346][ T9562] 8021q: adding VLAN 0 to HW filter on device team0
[  117.077227][ T9562] bond0: (slave team0): Enslaving as an active interface with an up link
[  117.086233][ T9562] netlink: 'syz.1.1075': attribute type 10 has an invalid length.
[  117.089520][ T9567] bond18: (slave bridge5): Enslaving as an active interface with a down link
[  117.142468][ T9562] 8021q: adding VLAN 0 to HW filter on device bond8
[  117.154807][ T9562] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  117.161385][ T9562] bond8: (slave macvlan3): Enslaving as a backup interface with an up link
[  117.223331][ T9572] __nla_validate_parse: 6 callbacks suppressed
[  117.223341][ T9572] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1077'.
[  117.231025][ T9572] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  117.252159][ T7318] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  117.264347][ T9572] 8021q: adding VLAN 0 to HW filter on device bond19
[  117.287035][ T9572] bond19: entered promiscuous mode
[  117.339453][ T9581] openvswitch: netlink: IPv6 tunnel dst address is zero
[  117.360765][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1080'.
[  117.367017][ T5901] bond8: (slave macvlan3): link status up again after 0 ms
[  117.369873][ T5901] bond8: (slave macvlan3): failed to get link speed/duplex
[  117.374679][ T5901] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  117.419207][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1081'.
[  117.483583][ T5892] bond8: (slave macvlan3): failed to get link speed/duplex
[  117.575365][ T9603] sctp: [Deprecated]: syz.0.1088 (pid 9603) Use of int in max_burst socket option.
[  117.575365][ T9603] Use struct sctp_assoc_value instead
[  117.602521][ T5892] bond8: (slave macvlan3): failed to get link speed/duplex
[  117.655859][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1089'.
[  117.666209][ T9611] netlink: 'syz.1.1091': attribute type 1 has an invalid length.
[  117.695019][ T9611] vlan1: entered allmulticast mode
[  117.697190][ T9611] veth0_vlan: entered allmulticast mode
[  117.732489][ T5892] bond8: (slave macvlan3): failed to get link speed/duplex
[  117.842664][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  117.937757][ T9624] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1095'.
[  117.952272][ T9619] bond8: (slave macvlan3): failed to get link speed/duplex
[  117.991603][ T9626] gre2: entered allmulticast mode
[  118.115749][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  118.120327][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  118.187392][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  118.220805][ T9647] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1102'.
[  118.252267][ T9642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1098'.
[  118.273798][ T9642] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^̛ c'A
[  118.598386][ T9672] ip6gre1: entered allmulticast mode
[  118.765804][ T9688] ieee802154 phy0 wpan0: encryption failed: -126
[  118.925864][ T9698] bond0: (slave bond1): Error -95 calling ndo_bpf
[  118.930975][ T9698] bond0: (slave bond1): Error -95 calling ndo_bpf
[  119.097301][ T9704] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  119.138215][ T9704] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  119.195297][ T9704] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  119.246826][ T9704] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  119.305222][ T9619] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  119.319377][ T9619] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  119.334903][ T9619] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  119.346736][ T9619] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  119.359466][ T9716] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  119.366410][ T9716] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  119.404843][ T9715] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  119.410314][ T9715] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  119.498373][ T5238] Bluetooth: hci2: link tx timeout
[  119.501442][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.505693][ T5238] Bluetooth: hci2: link tx timeout
[  119.508091][ T5238] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.428323][ T9801] netlink: 'syz.2.1143': attribute type 11 has an invalid length.
[  120.979411][ T9843] syzkaller0: entered promiscuous mode
[  120.982118][ T9843] syzkaller0: entered allmulticast mode
[  121.189084][ T9857] validate_nla: 7 callbacks suppressed
[  121.189093][ T9857] netlink: 'syz.1.1160': attribute type 63 has an invalid length.
[  121.320426][ T9864] tap0: tun_chr_ioctl cmd 1074025673
[  121.323688][ T9864] tap0: tun_chr_ioctl cmd 1074025673
[  121.326133][ T9864] tap0: tun_chr_ioctl cmd 1074025673
[  121.328516][ T9864] tap0: tun_chr_ioctl cmd 1074025673
[  121.330708][ T9864] tap0: tun_chr_ioctl cmd 1074025673
[  121.334727][ T9864] tap0: tun_chr_ioctl cmd 1074025673
[  121.419175][ T9876] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  121.536361][ T5238] Bluetooth: hci2: command 0x0401 tx timeout
[  121.725708][ T9885] 8021q: adding VLAN 0 to HW filter on device bond11
[  121.739574][ T9885] bond10: (slave bond11): making interface the new active one
[  121.745503][ T9885] bond10: (slave bond11): Enslaving as an active interface with an up link
[  122.262549][ T7318] net_ratelimit: 34 callbacks suppressed
[  122.262564][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  122.372388][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  122.482150][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  122.592235][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  122.703339][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  122.813068][ T5892] bond8: (slave macvlan3): failed to get link speed/duplex
[  122.934733][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  123.042020][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  123.067161][ T9957] __nla_validate_parse: 19 callbacks suppressed
[  123.067170][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1186'.
[  123.124652][ T9965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1184'.
[  123.135207][ T9962] bond11: option mode: unable to set because the bond device has slaves
[  123.153286][ T9619] bond8: (slave macvlan3): failed to get link speed/duplex
[  123.166645][ T9962] bond11: (slave macvlan8): Error -98 calling set_mac_address
[  123.203254][ T9968] bond0: (slave syz_tun): Releasing backup interface
[  123.211046][ T9968] bond0: (slave team0): Releasing backup interface
[  123.220533][ T9968] bond11: (slave macvlan7): Removing an active aggregator
[  123.225650][ T9968] bond11: (slave macvlan7): Releasing backup interface
[  123.262812][ T5892] bond8: (slave macvlan3): failed to get link speed/duplex
[  123.340048][ T9977] netlink: 'syz.1.1192': attribute type 1 has an invalid length.
[  123.387433][ T9977] 8021q: adding VLAN 0 to HW filter on device bond12
[  123.415404][ T9985] bond12: (slave geneve5): making interface the new active one
[  123.430348][ T9985] bond12: (slave geneve5): Enslaving as an active interface with an up link
[  123.435665][ T9619] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  123.439026][ T9619] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  123.443637][ T9619] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  123.453962][ T5892] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  123.658585][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'.
[  123.736727][T10018] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.739988][T10018] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.781683][T10028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1208'.
[  123.782364][T10018] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.788117][T10018] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.841163][T10018] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.849118][T10018] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.887698][T10018] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.891919][T10018] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.979251][T10055] sock: sock_timestamping_bind_phc: sock not bind to device
[  123.985023][ T9619] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.987884][ T9619] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  123.998677][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'.
[  124.005669][ T9619] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.008506][ T9619] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  124.011695][ T9619] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.016029][ T9619] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  124.026139][ T9619] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.029040][ T9619] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  124.056397][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'.
[  124.073307][T10064] 8021q: adding VLAN 0 to HW filter on device bond13
[  124.082562][T10063] 8021q: adding VLAN 0 to HW filter on device bond13
[  124.085517][T10063] bond13: (slave wireguard2): The slave device specified does not support setting the MAC address
[  124.089488][T10063] bond13: (slave wireguard2): Error -95 calling set_mac_address
[  124.517860][T10109] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  124.539040][T10109] macsec1: entered promiscuous mode
[  124.541467][T10109] team0: entered promiscuous mode
[  125.452621][T10115] vlan2: entered promiscuous mode
[  125.454460][T10115] bond0: entered promiscuous mode
[  125.574419][T10127] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1242'.
[  125.577767][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1242'.
[  125.654950][T10133] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.658779][T10133] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  125.685612][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1246'.
[  125.689789][T10135] netlink: 'syz.2.1246': attribute type 3 has an invalid length.
[  125.699766][T10135] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1246'.
[  125.708521][T10133] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.712376][T10133] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  125.756352][T10133] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.760464][T10133] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  125.797620][T10133] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.801541][T10133] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  125.868226][ T9619] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.871285][ T9619] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  125.880940][T10150] ip6gre2: entered allmulticast mode
[  125.888740][ T7318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.892265][ T7318] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  125.900576][ T7318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.909540][ T7318] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  125.928143][ T7318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.936523][ T7318] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  126.016828][T10161] netlink: 'syz.0.1254': attribute type 1 has an invalid length.
[  126.019741][T10161] netlink: 'syz.0.1254': attribute type 11 has an invalid length.
[  126.030088][T10161] syzkaller1: entered promiscuous mode
[  126.034184][T10161] syzkaller1: entered allmulticast mode
[  126.212638][T10178] geneve6: entered promiscuous mode
[  126.214555][T10178] geneve6: entered allmulticast mode
[  126.230066][ T5739] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 45604 - 0
[  126.234120][ T5739] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 40326 - 0
[  126.236978][ T5892] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 45604 - 0
[  126.240487][ T5892] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 40326 - 0
[  126.247052][ T5892] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 45604 - 0
[  126.250220][ T5892] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 40326 - 0
[  126.255440][ T5892] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 45604 - 0
[  126.258276][ T5892] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 40326 - 0
[  126.268856][T10183] batadv2: entered allmulticast mode
[  126.272614][T10183] 8021q: adding VLAN 0 to HW filter on device batadv2
[  126.365575][T10194] netlink: 'syz.0.1262': attribute type 3 has an invalid length.
[  126.368920][T10194] netlink: 'syz.0.1262': attribute type 1 has an invalid length.
[  126.509368][T10205] netlink: 'syz.1.1265': attribute type 1 has an invalid length.
[  126.518239][T10205] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  127.324844][ T9619] net_ratelimit: 26 callbacks suppressed
[  127.324860][ T9619] bond8: (slave macvlan3): failed to get link speed/duplex
[  127.455831][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  127.572516][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  127.636125][T10279] netlink: 'syz.2.1289': attribute type 6 has an invalid length.
[  127.639074][T10279] netlink: 'syz.2.1289': attribute type 4 has an invalid length.
[  127.682736][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  127.822386][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  127.937473][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  128.142530][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  128.232857][T10315] __nla_validate_parse: 16 callbacks suppressed
[  128.232866][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'.
[  128.272185][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  128.278591][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'.
[  128.386129][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  128.469447][T10332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.493880][ T5739] bond8: (slave macvlan3): failed to get link speed/duplex
[  128.690213][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1314'.
[  128.700544][T10346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1314'.
[  129.595738][T10375] netlink: 'syz.2.1322': attribute type 13 has an invalid length.
[  129.677436][T10357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  129.745037][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'.
[  129.842327][T10388] netlink: 'syz.0.1327': attribute type 1 has an invalid length.
[  129.855611][T10388] bond22: entered promiscuous mode
[  129.857526][T10388] 8021q: adding VLAN 0 to HW filter on device bond22
[  129.860407][T10389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1328'.
[  129.870976][T10388] 8021q: adding VLAN 0 to HW filter on device bond22
[  129.881295][T10388] bond22: (slave wireguard1): The slave device specified does not support setting the MAC address
[  129.885220][T10388] bond22: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  129.892465][T10388] bond22: (slave wireguard1): making interface the new active one
[  129.895720][T10388] wireguard1: entered promiscuous mode
[  129.898678][T10388] bond22: (slave wireguard1): Enslaving as an active interface with an up link
[  129.904107][T10388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  129.906673][T10388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  129.926512][T10394] netlink: 'syz.1.1329': attribute type 11 has an invalid length.
[  129.940499][T10388] bond22: (slave wireguard2): The slave device specified does not support setting the MAC address
[  129.949572][T10388] bond22: (slave wireguard2): Enslaving as a backup interface with an up link
[  130.230169][T10415] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1337'.
[  130.234111][T10415] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1337'.
[  130.288327][T10430] netlink: 'syz.1.1340': attribute type 58 has an invalid length.
[  130.294441][T10421] netlink: 'syz.0.1339': attribute type 1 has an invalid length.
[  130.313146][T10421] 8021q: adding VLAN 0 to HW filter on device bond23
[  130.323193][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'.
[  130.445569][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'.
[  130.449326][T10449] netlink: 'syz.1.1347': attribute type 15 has an invalid length.
[  130.601260][T10458] delete_channel: no stack
[  131.649206][T10488] tipc: Started in network mode
[  131.651448][T10488] tipc: Node identity ac1414aa, cluster identity 4711
[  131.656237][T10488] tipc: Enabled bearer <udp:s>, priority 10
[  132.362534][   T13] net_ratelimit: 32 callbacks suppressed
[  132.362545][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  132.473688][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  132.506755][T10550] 8021q: adding VLAN 0 to HW filter on device bond24
[  132.582008][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  132.641160][T10569] syzkaller1: entered promiscuous mode
[  132.643816][T10569] syzkaller1: entered allmulticast mode
[  132.693243][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  132.751212][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.773008][ T5914] tipc: Node number set to 2886997162
[  132.813769][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  132.923028][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  133.062636][ T9619] bond8: (slave macvlan3): failed to get link speed/duplex
[  133.081589][T10617] validate_nla: 2 callbacks suppressed
[  133.081602][T10617] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  133.172002][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  133.211144][T10631] netlink: 'syz.2.1402': attribute type 83 has an invalid length.
[  133.283231][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  133.301475][T10638] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  133.306163][T10638] __nla_validate_parse: 13 callbacks suppressed
[  133.306175][T10638] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1406'.
[  133.320787][T10641] netlink: 'syz.0.1406': attribute type 1 has an invalid length.
[  133.325052][T10641] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1406'.
[  133.384195][T10643] 8021q: adding VLAN 0 to HW filter on device bond13
[  133.388638][T10645] bond0: (slave gretap0): Opening slave failed
[  133.442426][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  133.515935][T10659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.518221][T10656] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.521355][T10656] syzkaller0: entered promiscuous mode
[  133.524563][T10656] syzkaller0: entered allmulticast mode
[  133.530444][T10663] tipc: Resetting bearer <eth:syzkaller0>
[  133.544495][T10654] tipc: Resetting bearer <eth:syzkaller0>
[  133.552039][T10654] tipc: Disabling bearer <eth:syzkaller0>
[  133.762768][T10674] netlink: 'syz.1.1417': attribute type 1 has an invalid length.
[  133.784603][T10676] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1416'.
[  133.858581][T10683] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  133.934238][T10683] bond25: entered promiscuous mode
[  133.936619][T10683] bond25: entered allmulticast mode
[  133.949272][T10683] 8021q: adding VLAN 0 to HW filter on device bond25
[  133.959149][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'.
[  134.180179][T10700] syzkaller1: entered promiscuous mode
[  134.183168][T10700] syzkaller1: entered allmulticast mode
[  134.289025][T10703] IPv6: sit1: Disabled Multicast RS
[  134.292876][T10703] sit1: entered allmulticast mode
[  134.311491][T10702] IPv6: sit1: Disabled Multicast RS
[  134.315866][T10702] sit1: entered allmulticast mode
[  134.497509][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'.
[  134.525100][T10711] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1429'.
[  135.389153][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  136.228901][T10777] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  136.235686][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'.
[  136.239389][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'.
[  136.390176][T10799] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  136.394450][T10799] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1459'.
[  136.840875][T10830] vlan6: entered promiscuous mode
[  136.850976][T10830] macvtap0: entered promiscuous mode
[  136.905320][T10836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1470'.
[  137.046379][T10847] netlink: 'syz.2.1475': attribute type 1 has an invalid length.
[  137.049033][T10847] netlink: 'syz.2.1475': attribute type 3 has an invalid length.
[  137.149872][T10866] netlink: 'syz.0.1479': attribute type 1 has an invalid length.
[  137.217313][T10866] bond26: entered promiscuous mode
[  137.219365][T10866] 8021q: adding VLAN 0 to HW filter on device bond26
[  137.372375][ T7318] net_ratelimit: 30 callbacks suppressed
[  137.372386][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  137.513687][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  137.622586][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  137.742298][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  137.852391][   T12] bond8: (slave macvlan3): failed to get link speed/duplex
[  137.982329][ T7318] bond8: (slave macvlan3): failed to get link speed/duplex
[  138.046335][T10937] batadv_slave_0: entered promiscuous mode
[  138.095284][   T13] bond8: (slave macvlan3): failed to get link speed/duplex
[  138.215968][   T12] bond8: (slave macvlan3): failed to get link speed/duplex
[  138.221610][T10972] netlink: 'syz.2.1510': attribute type 30 has an invalid length.
[  138.234874][T10974] netlink: 'syz.0.1511': attribute type 1 has an invalid length.
[  138.297955][T10974] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address
[  138.304289][T10974] bond27: (slave vxcan3): Error -95 calling set_mac_address
[  138.356947][T10975] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address
[  138.366563][T10975] bond27: (slave vxcan3): Error -95 calling set_mac_address
[  138.466709][T10984] gretap4: entered promiscuous mode
[  138.483271][ T5892] bond8: (slave macvlan3): failed to get link speed/duplex
[  138.592149][   T12] bond8: (slave macvlan3): failed to get link speed/duplex
[  138.713933][T11011] __nla_validate_parse: 9 callbacks suppressed
[  138.713948][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1522'.
[  138.898055][T11034] bond11: option mode: unable to set because the bond device is up
[  138.932730][T11034] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  138.939978][T11034] bond11: (slave macvlan8): Enslaving as a backup interface with a down link
[  138.953546][T11034] bond11: (slave macvlan8): Releasing backup interface
[  139.107707][T11046] vlan6: entered promiscuous mode
[  139.136796][T11054] netlink: 'syz.1.1534': attribute type 1 has an invalid length.
[  139.172551][T11054] 8021q: adding VLAN 0 to HW filter on device bond15
[  139.190949][T11056] bond15: (slave veth7): Enslaving as an active interface with a down link
[  139.255735][T11060] netlink: 'syz.0.1535': attribute type 1 has an invalid length.
[  139.263223][T11060] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  139.290506][T11068] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  139.612504][ T5238] Bluetooth: hci2: command 0x0401 tx timeout
[  139.674479][T11099] syzkaller0: entered promiscuous mode
[  139.676839][T11099] syzkaller0: entered allmulticast mode
[  139.697984][T11099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  139.876154][T11125] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1553'.
[  139.879296][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'.
[  139.979361][T11138] netlink: 'syz.1.1555': attribute type 1 has an invalid length.
[  140.028111][T11138] 8021q: adding VLAN 0 to HW filter on device bond16
[  140.077214][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1557'.
[  140.179049][T11181] netlink: 'syz.2.1556': attribute type 1 has an invalid length.
[  155.528444][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.537887][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.541386][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.545222][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.549164][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.556080][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.560507][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.564409][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.568340][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.571539][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.575331][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.582270][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.586502][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.598662][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  155.602380][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  157.612661][   T54] Bluetooth: hci3: command tx timeout
[  157.692756][ T5238] Bluetooth: hci4: command tx timeout
[  157.695774][   T54] Bluetooth: hci5: command tx timeout
[  159.692601][   T54] Bluetooth: hci3: command tx timeout
[  159.772135][ T5238] Bluetooth: hci4: command tx timeout
[  159.774127][   T54] Bluetooth: hci5: command tx timeout
[  161.772765][   T54] Bluetooth: hci3: command tx timeout
[  161.852316][ T5238] Bluetooth: hci4: command tx timeout
[  161.854625][   T54] Bluetooth: hci5: command tx timeout
[  163.853660][   T54] Bluetooth: hci3: command tx timeout
[  163.932122][ T5238] Bluetooth: hci4: command tx timeout
[  163.934508][   T54] Bluetooth: hci5: command tx timeout
[  180.894106][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  216.620255][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  216.632425][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  216.637238][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  216.641117][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  216.645798][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  216.680474][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  216.685543][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  216.689091][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  216.695484][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  216.698836][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  216.712313][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.718447][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.721867][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.725504][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.728815][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  245.061782][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  245.064077][    C0] rcu: 	0-...!: (10501 ticks this GP) idle=7b14/1/0x4000000000000000 softirq=39855/39855 fqs=0
[  245.069438][    C0] rcu: 	(t=10501 jiffies g=27773 q=1444 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  245.072210][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g27773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  245.076548][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=7731
[  245.079157][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g27773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  245.082988][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  245.086392][    C0] rcu: RCU grace-period kthread stack dump:
[  245.088524][    C0] task:rcu_preempt     state:I stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  245.093378][    C0] Call Trace:
[  245.094714][    C0]  <TASK>
[  245.096009][    C0]  __schedule+0x1798/0x4cc0
[  245.097902][    C0]  ? __lock_acquire+0xab9/0xd20
[  245.099770][    C0]  ? __pfx___schedule+0x10/0x10
[  245.101781][    C0]  ? schedule+0x91/0x360
[  245.103587][    C0]  schedule+0x165/0x360
[  245.105382][    C0]  schedule_timeout+0x12b/0x270
[  245.107366][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  245.109408][    C0]  ? __pfx_process_timeout+0x10/0x10
[  245.111539][    C0]  ? prepare_to_swait_event+0x341/0x380
[  245.113817][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  245.115922][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  245.117719][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.119918][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  245.122269][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  245.124471][    C0]  ? finish_swait+0xcd/0x1f0
[  245.126396][    C0]  rcu_gp_kthread+0x99/0x390
[  245.128393][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  245.130618][    C0]  ? __kthread_parkme+0x7b/0x200
[  245.132795][    C0]  ? __kthread_parkme+0x1a1/0x200
[  245.134970][    C0]  kthread+0x711/0x8a0
[  245.136430][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  245.138170][    C0]  ? __pfx_kthread+0x10/0x10
[  245.139925][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.142017][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.144181][    C0]  ? __pfx_kthread+0x10/0x10
[  245.146175][    C0]  ret_from_fork+0x3fc/0x770
[  245.148073][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  245.150161][    C0]  ? __switch_to_asm+0x39/0x70
[  245.152201][    C0]  ? __switch_to_asm+0x33/0x70
[  245.154256][    C0]  ? __pfx_kthread+0x10/0x10
[  245.156275][    C0]  ret_from_fork_asm+0x1a/0x30
[  245.158333][    C0]  </TASK>
[  245.159674][    C0] CPU: 0 UID: 0 PID: 11125 Comm: syz.0.1553 Not tainted syzkaller #0 PREEMPT(full) 
[  245.159690][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.159697][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70
[  245.159713][    C0] Code: 5b e9 43 9d 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 80 a0 92 <65> 8b 15 88 d4 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[  245.159723][    C0] RSP: 0018:ffffc9000305f478 EFLAGS: 00000293
[  245.159760][    C0] RAX: ffffffff8a209464 RBX: ffff88803ba6d680 RCX: ffff88803e379cc0
[  245.159769][    C0] RDX: ffffc90003381000 RSI: 000000000007ffff RDI: 0000000000080000
[  245.159777][    C0] RBP: ffffc9000305f578 R08: ffff88803e379cc0 R09: 0000000000000002
[  245.159784][    C0] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  245.159791][    C0] R13: 0000000000000002 R14: 0000000007000000 R15: 00000000d3040000
[  245.159798][    C0] FS:  00007f3adc6956c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  245.159807][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  245.159814][    C0] CR2: 00007f0c7c4f56c0 CR3: 000000001193e000 CR4: 00000000000006f0
[  245.159848][    C0] Call Trace:
[  245.159855][    C0]  <TASK>
[  245.159860][    C0]  __xfrm_state_lookup+0x674/0x8d0
[  245.159887][    C0]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  245.159906][    C0]  xfrm_state_add+0x27d/0xc40
[  245.159927][    C0]  pfkey_add+0x1edd/0x2e00
[  245.159950][    C0]  ? __pfx_pfkey_add+0x10/0x10
[  245.159957][    C0]  ? kmem_cache_free+0x18f/0x400
[  245.159978][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  245.159998][    C0]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  245.160024][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  245.160036][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  245.160048][    C0]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  245.160058][    C0]  __sock_sendmsg+0x21c/0x270
[  245.160075][    C0]  ____sys_sendmsg+0x505/0x830
[  245.160090][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.160107][    C0]  ? import_iovec+0x74/0xa0
[  245.160121][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  245.160133][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  245.160167][    C0]  ? __fget_files+0x2a/0x420
[  245.160183][    C0]  ? __fget_files+0x3a0/0x420
[  245.160205][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  245.160219][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  245.160238][    C0]  ? rcu_is_watching+0x15/0xb0
[  245.160254][    C0]  ? do_syscall_64+0xbe/0x3b0
[  245.160267][    C0]  do_syscall_64+0xfa/0x3b0
[  245.160276][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.160291][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.160302][    C0]  ? exc_page_fault+0x9f/0xf0
[  245.160318][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.160329][    C0] RIP: 0033:0x7f3adb78ebe9
[  245.160341][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.160349][    C0] RSP: 002b:00007f3adc695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.160360][    C0] RAX: ffffffffffffffda RBX: 00007f3adb9c5fa0 RCX: 00007f3adb78ebe9
[  245.160368][    C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  245.160375][    C0] RBP: 00007f3adb811e19 R08: 0000000000000000 R09: 0000000000000000
[  245.160382][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.160388][    C0] R13: 00007f3adb9c6038 R14: 00007f3adb9c5fa0 R15: 00007ffc147096b8
[  245.160407][    C0]  </TASK>

VM DIAGNOSIS:
17:43:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888106250237 R9 =1ffff11020c4a046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8ff R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3adc6956c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c7c4f56c0 CR3=000000001193e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f3adb812e53
XMM06=0000000000000000 00007f3adb812e4d XMM07=0000000000000000 00007f3adb812e61
XMM08=0000000000000000 00007f3adb812ee7 XMM09=0000000000000000 00007f3adb812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822e40c7 RBX=0000000000000000 RCX=ffff888023d33980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90002edf0c0
R8 =0000000000000000 R9 =ffffffff822e3f8a R10=dffffc0000000000 R11=ffffed1021246556
R12=ffff88801c23c2b0 R13=0000000000000000 R14=0000000000037270 R15=ffffea0000dc9bf0
RIP=ffffffff81bfae01 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1db6af7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f1db5f976c3 00007f1db5f976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0100000008060a01 6b90600800000007 XMM07=1000098000000000 00080606015ac000
XMM08=080009e003001000 09d0030000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
