last executing test programs:

2m20.027925317s ago: executing program 2 (id=37):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)={0xa4, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc52}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x10)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117400000000008510000002000000850c00002b00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c000500db"], 0x30}}, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r13 = socket(0x10, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r14}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

2m19.939334957s ago: executing program 2 (id=38):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x800, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x15, 0x0, 0x0, 0x4}, {0x8, 0xd}, {0x8, 0x1c, 0x0, 0x0, 0x485}, {0x8, 0xb, 0x0, 0x0, 0x9}, {0x8, 0x1f, 0x0, 0x0, 0xa378}]}}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x6}, {0x8, 0x11, 0x0, 0x0, 0x6}, {0x8, 0x21, 0x0, 0x0, 0x127}, {0x8, 0x19, 0x0, 0x0, 0x7}, {0x8, 0x1a, 0x0, 0x0, 0x1000}, {0x8, 0x2, 0x0, 0x0, 0x2}]}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0xbf22, 0x20044}, 0x50)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async)
sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) (async)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000010)
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000000), 0x4)

2m19.938446505s ago: executing program 2 (id=39):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000e6ffe2b603000000000000850000001b000000b70000100000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}]}, 0x28}, 0x1, 0x7}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0xfffffff8, 0x4d0e, 0xa089, 0x0, 0x1, 0x0, 0x3, 0xffff}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x8}, [@IFLA_LINK_NETNSID={0x0, 0x25, 0x1}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
r6 = socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="622037353a2a096d77f7"], 0xa)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r9, 0x40047451, 0x0)
bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x2, r5, 0x17, r6}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
r10 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r11})
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={@empty, 0x28, r11})
ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x8936, &(0x7f0000000000))
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x3c}, {0x6}]}, 0x10)
socket(0x10, 0x80002, 0x0)

2m19.80664747s ago: executing program 2 (id=43):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc0", 0x42}], 0x1}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000500), 0x0}, 0x20) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x1c4, 0x30, 0x9, 0x0, 0x0, {}, [{0x1b0, 0x1, [@m_skbmod={0x1ac, 0x1d, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x507, 0xffffffffffffffff, 0x7fff, 0x401}, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="5e6879a0a0c9"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffa, 0xc0, 0x20000000, 0x2, 0x80000000}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x101}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x0, 0x8, 0x5, 0x8}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xd0, 0x6, "8c1f0124f6f7079c1e23312ccd1bc2b993240f8d5949df773b17b2ee5088c378c4db86eaa4f5b37e2d44eaa1ca30ae94df098a3a3c7f431b7360a080634af0b87aab140bc721ae59194df3deb1b17e4479b7ab41e67aee9faa697ef89b13404aa45194905452ba8ee2eed0f80100002cd17574329337005d820031f42ca9b2dfbdcbac8b3efb327634f6efa501b3d7923c456101e1dfdda3fbc8fa1a3c694b08d04d2b262d13968e418b88374115cfe2060433a9af7de6eba31362d2a3178f2e315aa38472aab1a99f835582"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1c4}}, 0x0)

2m19.805609971s ago: executing program 2 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1a, 0x4, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8e}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1a, 0x4, 0x9) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8e}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)

2m19.719427033s ago: executing program 2 (id=46):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="0000000048a490e0b29b0cc26a45de88a9cc6eeaa61f27a8b0580d587a0366769b988b1f4a749fb7c350a54a270445ceb2acb6fdcbdc5857163439445202ba2276261403fc3b4b97b980d244c36ab4eee7e02de4ce69609dda9bc80e5f7cf6d8aeb8b6d1638c9e63fe3a294b50b0f7d172aacb5e721ba7eae66279e160a632ae49498e694f8d1791c92c2d068f9a910e03aba40528c76c18517eaf2715461aac80118c66f57b2fe5f5436b3da0e34296e34c72b3a6ce4912440ff4e02b0b83fe3adfe37acc655fe0e089aad34aad7cfd789ca71828061e479947098633d976b165c295cbf99c", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf, 0x8417, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x40, 0x7, 0xa6}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf, 0x8417, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x40, 0x7, 0xa6}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}, {&(0x7f0000002680)="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", 0x1000}], 0x2}, 0x40480c1)
connect$can_j1939(r7, &(0x7f0000000000)={0x1d, r8, 0x0, {0x2, 0xff, 0x4}, 0x1}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
r9 = socket(0x2a, 0x2, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r10, &(0x7f0000000940), 0x10)
close(0x3)
listen(r10, 0x0) (async)
listen(r10, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async)
writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getsockname$packet(r9, 0x0, &(0x7f0000001480))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

2m4.744089674s ago: executing program 32 (id=46):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="0000000048a490e0b29b0cc26a45de88a9cc6eeaa61f27a8b0580d587a0366769b988b1f4a749fb7c350a54a270445ceb2acb6fdcbdc5857163439445202ba2276261403fc3b4b97b980d244c36ab4eee7e02de4ce69609dda9bc80e5f7cf6d8aeb8b6d1638c9e63fe3a294b50b0f7d172aacb5e721ba7eae66279e160a632ae49498e694f8d1791c92c2d068f9a910e03aba40528c76c18517eaf2715461aac80118c66f57b2fe5f5436b3da0e34296e34c72b3a6ce4912440ff4e02b0b83fe3adfe37acc655fe0e089aad34aad7cfd789ca71828061e479947098633d976b165c295cbf99c", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf, 0x8417, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x40, 0x7, 0xa6}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf, 0x8417, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x40, 0x7, 0xa6}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}, {&(0x7f0000002680)="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", 0x1000}], 0x2}, 0x40480c1)
connect$can_j1939(r7, &(0x7f0000000000)={0x1d, r8, 0x0, {0x2, 0xff, 0x4}, 0x1}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r8, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
r9 = socket(0x2a, 0x2, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r10, &(0x7f0000000940), 0x10)
close(0x3)
listen(r10, 0x0) (async)
listen(r10, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async)
writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getsockname$packet(r9, 0x0, &(0x7f0000001480))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)

687.667666ms ago: executing program 0 (id=2252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0xfff5, 0x0, 0x4000850}, 0x40)

636.719805ms ago: executing program 0 (id=2254):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
r0 = socket(0x8, 0x3, 0x0)
shutdown(r0, 0x1) (async)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r1=>0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) (async)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r1, 0x0, 0x0, 0x81, 0x4, {{0x26, 0x4, 0x2, 0x2c, 0x98, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@end, @end, @generic={0x88, 0x8, "19b9b480ebf5"}, @lsrr={0x83, 0x1f, 0xb0, [@private=0xa010101, @broadcast, @broadcast, @multicast2, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}]}, @cipso={0x86, 0x5a, 0x0, [{0x5, 0xb, "35a129f5ab5a0c9adb"}, {0x6, 0x6, "df1a8f8e"}, {0x0, 0x9, "144a06c658465a"}, {0x5, 0x8, "7da9358af36d"}, {0x5, 0x11, "7a636db2c185805e270c5bc34ae1c4"}, {0x5, 0x6, "8c0a3427"}, {0x7, 0x8, "9f57be6b7d66"}, {0x1, 0x11, "1ee0448f1cd85d6b0a00abc898fe82"}, {0x5, 0x2}]}, @noop]}}}}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) (async)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x8844)

385.994196ms ago: executing program 1 (id=2261):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 64)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x691a, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async, rerun: 32)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0)
close(0xffffffffffffffff) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}}}, 0x24}}, 0x0) (async)
recvmmsg(r6, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000003c00)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}], 0x4, 0x0, 0x0) (async, rerun: 32)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async, rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
getsockname(r9, &(0x7f0000000280)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0xb0)
sendmsg$nl_route_sched(r8, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000003b00)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0)
unshare(0x22020600) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7, 0x0, 0x3}, 0x18) (async, rerun: 64)
read(r0, &(0x7f0000000100)=""/113, 0x71) (async, rerun: 64)
write$ppp(r0, &(0x7f0000000200)="bc72", 0x2)

385.250608ms ago: executing program 3 (id=2262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b4"], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, r2}, 0xc)
ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000000)=0xfffffffe)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4)
close(r4)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x8002, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x6, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0)

375.857918ms ago: executing program 3 (id=2263):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050300000000000000000700000008000300", @ANYRES64=r1], 0x1c}}, 0x2000004c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, r6, 0x10, 0x20}, 0x20)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r11=>0x0})
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r8)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0xef, 0x8, 0x8008, 0x7, 0x9, 0x7}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40)

317.728885ms ago: executing program 1 (id=2264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000000c0)={'wg1\x00', 0xa})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100), 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
listen(r6, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0xfffff7c1}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x88ac44caf459c366}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

317.063483ms ago: executing program 0 (id=2265):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000111401000002c908f90000000800010000000000080003000000000108004a000100000008004b0013"], 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

315.941298ms ago: executing program 1 (id=2266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

269.236005ms ago: executing program 0 (id=2267):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, 0x0, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getchain={0x2c, 0x66, 0x300, 0x70b82d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x6, 0xffff}, {0x1, 0xd}, {0x2, 0x4}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040000)

266.378331ms ago: executing program 1 (id=2268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xffffff4a}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x100, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4010)
setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x40) (async)
r4 = socket(0x2, 0x5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x2e)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5, 0xc}, 0xc) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x4, 0x0, 0x2, 0xc0}, &(0x7f0000000100)=0x18) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000002c0))

256.420171ms ago: executing program 3 (id=2269):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)}}], 0x1, 0x4000) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x300) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800)
shutdown(r2, 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000000)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000100)={r7, r7, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000001c0)) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x1}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x10, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x2, 0x0, 0x1}, {}, {0x5}, {}, {}, {0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

255.539314ms ago: executing program 0 (id=2270):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f00000000c0))
r3 = socket(0x400000000010, 0x2, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r6 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r6, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r8, &(0x7f0000000340)=ANY=[@ANYRES8=r7], 0xa)
bind(0xffffffffffffffff, &(0x7f0000000440)=@in={0x2, 0x4e23, @broadcast}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xa, 0x2, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x20, 0x7800, 0x4, 0x5}})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x200)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x11, 0x7, "76ec617613e9a74dcba4d16825e915b1"}, @TCA_CT_ACTION={0x6, 0x3, 0x2a}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x10000080)

251.324373ms ago: executing program 1 (id=2271):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x80800)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r2=>0x0, 0x80, 0xffff}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x3, 0x2}, 0x8)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000540)={0x0, 0xfffffffffffffe89, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8040)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
unshare(0x6a040000)
r9 = socket(0x400000000010, 0x1, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)
setsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000000140), 0x4)
r12 = socket(0x8, 0x3, 0x0)
setsockopt$sock_int(r12, 0x1, 0x20, &(0x7f0000000240)=0x41004, 0x4)

177.370461ms ago: executing program 3 (id=2272):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x3, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xaa67}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xdc}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x2040014)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000240)={0x9, 0xb, 0x101}, 0xc)

174.285322ms ago: executing program 3 (id=2273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @local, 0x8000}, 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x20040080, &(0x7f0000000040)={0xa, 0x4e20, 0x40cd, @mcast2, 0x8000006}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x29, 0x1, 0x9)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000280)=""/68, 0x44})
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000007063c438c76552e6ab7e38ca8fd84af9c3081ed7c7f072fa6e25422e4952e0a2a6a09a", @ANYRES16=r11, @ANYBLOB="010027bd7000fedbdf2530000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
r12 = socket(0x1, 0x2, 0x0)
bind$unix(r12, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip_vti0\x00', <r13=>r7, 0x1, 0x10, 0x101, 0x5, {{0x16, 0x4, 0x3, 0x4, 0x58, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote, {[@ssrr={0x89, 0xf, 0x68, [@remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x82, 0xa, "04ca4383d6355bc8"}, @timestamp_addr={0x44, 0xc, 0xf5, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x6}]}, @ssrr={0x89, 0x1f, 0x7f, [@local, @remote, @remote, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$nl_route(r12, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_newroute={0x3c, 0x18, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x8, 0x3, 0x0, 0x1, 0x6, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x2, 0xf5, r13}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0x80, 0x2, 0xff, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004005}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r14=>0x0})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x6c, r16, 0x0, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @from_mac, {0x0, 0x6}}, 0x800, 0x66, @random=0x8001, @void, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x4]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9a40}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="00022abd7000fcdbdf256200000008000800", @ANYRES32=r14, @ANYBLOB="0600b400661000000600b300030000000600b300000000000600b4006e0f00000600b30003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4002}, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)

91.05338ms ago: executing program 0 (id=2274):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r9, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/mnt\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r11, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4)
listen(0xffffffffffffffff, 0x80)
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4fb}], 0x1, 0x12020, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

463.071µs ago: executing program 3 (id=2275):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x15, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000040)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="6c01000017000100fdffffff0000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000e0d904ea7256a4c1f55332610000010000000000000000c4100d3568d646ca8934119aa0da0000000000c4c06c4000000a0020593ddb0d009e45eb635ba96ceaf5903d5b49ea6fc2f7a2d05bbb2f2028e058c7142b9cf810615a5247037f7cf0e03b88a15eaf5e38962d5b9fb27cb4bf9fca23027a419f60dd4da9a632657153d7e6a3568e08752ac993aa8c7095a122a5a2e7bc"], 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000000)=0x7, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c854}, 0x40)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 1 (id=2276):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3aef)
r1 = socket(0x2a, 0x2, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="a364c3769fc72fcff3facb6c17ec9783ee0c59ff41ecd68abd564d951fba688bd95a7857da03d5ae31b7e6ebb5bca4736f7fb00c88633685ebcda185da432b6fdc91fd8846ebf6b17dad85eeba2c050c09fb016af747478157958ba7fd1be930e504cf8710d2531a155efc546dd3aa32548c61f35a7dbb33440d90fb", 0x7c}, {&(0x7f0000000240)="b6e8b3d972972f3835c5fbdbdedb55f26368057081b2d0a45dbb1ba50c24a2cd440e21c1fb499d8b885f59", 0x2b}, {&(0x7f0000000500)="04d5206c7628f687a9006c688709a23e803fdcffa7db53821db5e3d3f2a9ee96f5881da751068d31b377cc1adaf7ee77b242c3694a28d09993f6a03ae799f91991ba6f82a360412a9df4c6", 0x4b}], 0x4, 0x10000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11759' (ED25519) to the list of known hosts.
syzkaller login: [   41.454639][ T5771] cgroup: Unknown subsys name 'net'
[   41.541190][ T5771] cgroup: Unknown subsys name 'cpuset'
[   41.545338][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.203498][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   48.156785][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   48.160071][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   48.163369][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   48.167221][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   48.171509][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   48.196410][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   48.199984][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   48.203412][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   48.209103][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   48.212876][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   48.262232][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   48.268345][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   48.271400][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   48.274612][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   48.279340][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   48.520493][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   48.546085][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   48.623037][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   48.656673][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.660616][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.663696][ T5848] bridge_slave_0: entered allmulticast mode
[   48.666497][ T5848] bridge_slave_0: entered promiscuous mode
[   48.699616][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.702339][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.704599][ T5848] bridge_slave_1: entered allmulticast mode
[   48.707372][ T5848] bridge_slave_1: entered promiscuous mode
[   48.716936][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.719544][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.721878][ T5843] bridge_slave_0: entered allmulticast mode
[   48.724494][ T5843] bridge_slave_0: entered promiscuous mode
[   48.728095][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.730375][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.732621][ T5843] bridge_slave_1: entered allmulticast mode
[   48.735263][ T5843] bridge_slave_1: entered promiscuous mode
[   48.760348][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.774092][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.778987][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.787246][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.840498][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.843490][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.846422][ T5850] bridge_slave_0: entered allmulticast mode
[   48.851544][ T5850] bridge_slave_0: entered promiscuous mode
[   48.857327][ T5843] team0: Port device team_slave_0 added
[   48.870488][ T5843] team0: Port device team_slave_1 added
[   48.882822][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.885319][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.888732][ T5850] bridge_slave_1: entered allmulticast mode
[   48.892458][ T5850] bridge_slave_1: entered promiscuous mode
[   48.897208][ T5848] team0: Port device team_slave_0 added
[   48.928767][ T5848] team0: Port device team_slave_1 added
[   48.931510][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.934430][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.945223][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.966457][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.969999][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.972931][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.984011][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.990552][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.000113][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.002580][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.011126][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.029985][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.032518][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.041445][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.050131][ T5850] team0: Port device team_slave_0 added
[   49.053704][ T5850] team0: Port device team_slave_1 added
[   49.099572][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   49.102465][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.113542][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   49.119549][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   49.122424][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.132795][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.156396][ T5843] hsr_slave_0: entered promiscuous mode
[   49.161369][ T5843] hsr_slave_1: entered promiscuous mode
[   49.189107][ T5848] hsr_slave_0: entered promiscuous mode
[   49.192087][ T5848] hsr_slave_1: entered promiscuous mode
[   49.194936][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   49.197333][ T5848] Cannot create hsr debugfs directory
[   49.277147][ T5850] hsr_slave_0: entered promiscuous mode
[   49.280628][ T5850] hsr_slave_1: entered promiscuous mode
[   49.283449][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   49.285786][ T5850] Cannot create hsr debugfs directory
[   49.512300][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   49.518727][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   49.524656][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   49.535088][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   49.566524][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.582409][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.589457][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.594606][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.647295][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   49.653275][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   49.664363][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   49.670483][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.723790][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.755316][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   49.762481][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.769324][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.772350][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.789610][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.792660][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.826938][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   49.848742][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.851734][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.871485][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.876288][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.878727][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.907081][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   49.923894][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.926092][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.936715][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.939420][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.062035][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.091080][ T5848] veth0_vlan: entered promiscuous mode
[   50.096046][ T5848] veth1_vlan: entered promiscuous mode
[   50.117207][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.144658][ T5848] veth0_macvtap: entered promiscuous mode
[   50.153122][ T5848] veth1_macvtap: entered promiscuous mode
[   50.176821][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.185259][ T5850] veth0_vlan: entered promiscuous mode
[   50.189424][   T54] Bluetooth: hci0: command tx timeout
[   50.201232][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.216754][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.223648][ T5850] veth1_vlan: entered promiscuous mode
[   50.241494][ T5870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.251635][ T5870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.255223][ T5870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.275519][ T5870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.279280][   T54] Bluetooth: hci1: command tx timeout
[   50.286835][ T5850] veth0_macvtap: entered promiscuous mode
[   50.308708][ T5850] veth1_macvtap: entered promiscuous mode
[   50.323346][ T5843] veth0_vlan: entered promiscuous mode
[   50.335067][ T5843] veth1_vlan: entered promiscuous mode
[   50.349809][   T54] Bluetooth: hci2: command tx timeout
[   50.357141][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.364114][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.367104][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.373798][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.397389][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.400955][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.403958][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.407016][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.410746][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.414911][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.444433][ T5843] veth0_macvtap: entered promiscuous mode
[   50.457026][ T5843] veth1_macvtap: entered promiscuous mode
[   50.462547][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.482415][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.524775][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.547281][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.550210][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.554310][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.567450][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.571472][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.591850][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.603696][ T5909] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.611467][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.613954][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.677771][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.680863][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.709130][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.713095][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.806061][ T5920] tc_dump_action: action bad kind
[   50.837873][ T5920] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6'.
[   50.876363][ T5925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7'.
[   50.890292][ T5925] netlink: 211680 bytes leftover after parsing attributes in process `syz.1.7'.
[   50.901471][ T5928] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   50.954445][ T5932] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.10'.
[   51.078559][ T5940] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   51.083245][ T5940] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   51.086236][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'.
[   51.097250][ T5940] block nbd0: shutting down sockets
[   51.120579][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'.
[   51.197371][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'.
[   51.330994][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15'.
[   51.339127][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'.
[   51.598589][ T5980] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET)
[   51.712384][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'.
[   52.277924][   T54] Bluetooth: hci0: command tx timeout
[   52.347879][   T54] Bluetooth: hci1: command tx timeout
[   52.444649][   T54] Bluetooth: hci2: command tx timeout
[   52.722676][ T6020] syzkaller1: entered promiscuous mode
[   52.724916][ T6020] syzkaller1: entered allmulticast mode
[   53.385844][ T5989] Set syz1 is full, maxelem 65536 reached
[   53.409556][ T6035] Zero length message leads to an empty skb
[   53.453677][ T6037] netlink: 'syz.2.37': attribute type 5 has an invalid length.
[   53.689060][ T6061] netlink: 'syz.2.45': attribute type 3 has an invalid length.
[   53.693143][ T6062] netlink: 'syz.2.45': attribute type 3 has an invalid length.
[   54.036302][ T6099] bond0: Unable to set down delay as MII monitoring is disabled
[   54.046974][ T6099] netlink: 'syz.0.55': attribute type 21 has an invalid length.
[   54.049638][ T6099] netlink: 'syz.0.55': attribute type 4 has an invalid length.
[   54.052080][ T6099] netlink: 'syz.0.55': attribute type 5 has an invalid length.
[   54.222026][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.224617][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.273224][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.279066][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.343218][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.348538][   T54] Bluetooth: hci0: command tx timeout
[   54.350740][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.353582][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.356391][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.428525][   T54] Bluetooth: hci1: command tx timeout
[   54.490620][ T6135] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003
[   54.507967][   T54] Bluetooth: hci2: command tx timeout
[   54.523327][ T6132] vlan0: entered allmulticast mode
[   54.525971][ T6132] bridge0: entered allmulticast mode
[   54.528005][ T6132] bridge0: port 1(vlan0) entered blocking state
[   54.530065][ T6132] bridge0: port 1(vlan0) entered disabled state
[   54.789661][ T6153] netlink: 'syz.0.70': attribute type 21 has an invalid length.
[   54.822653][ T6153] ip6gretap0: entered promiscuous mode
[   54.825067][ T6153] erspan0: entered promiscuous mode
[   54.832221][ T6153] ip6gretap0: left promiscuous mode
[   54.838096][ T6153] erspan0: left promiscuous mode
[   55.484118][ T6196] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.491516][ T6196] ieee802154 phy0 wpan0: encryption failed: -22
[   56.060717][ T6226] __nla_validate_parse: 33 callbacks suppressed
[   56.060727][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'.
[   56.148152][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'.
[   56.176897][ T6233] validate_nla: 4 callbacks suppressed
[   56.176906][ T6233] netlink: 'syz.0.94': attribute type 10 has an invalid length.
[   56.184496][ T6233] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   56.427759][   T54] Bluetooth: hci0: command tx timeout
[   56.507846][   T54] Bluetooth: hci1: command tx timeout
[   56.589988][   T54] Bluetooth: hci2: command tx timeout
[   57.013020][ T6257] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   57.224826][ T6266] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   57.227259][    T9] IPVS: starting estimator thread 0...
[   57.282299][ T6270] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.323705][ T6268] IPVS: using max 81 ests per chain, 194400 per kthread
[   57.351401][ T6280] netlink: 'syz.0.111': attribute type 1 has an invalid length.
[   57.353875][ T6279] netlink: 'syz.0.111': attribute type 1 has an invalid length.
[   57.726927][ T6300] netem: incorrect ge model size
[   57.730583][ T6300] netem: change failed
[   57.866141][ T6308] netlink: 444 bytes leftover after parsing attributes in process `syz.1.119'.
[   57.880262][ T6308] netlink: 444 bytes leftover after parsing attributes in process `syz.1.119'.
[   57.883928][ T6308] netlink: 14 bytes leftover after parsing attributes in process `syz.1.119'.
[   58.510814][ T6329] nbd1: detected capacity change from 0 to 63
[   58.514199][ T6340] block nbd1: NBD_DISCONNECT
[   58.517375][ T6340] block nbd1: Disconnected due to user request.
[   58.521218][ T6340] block nbd1: shutting down sockets
[   58.530291][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.533814][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[   58.536375][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.539715][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[   58.542646][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.546220][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[   58.549152][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.552041][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[   58.554706][ T6031] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.558022][ T6031] Buffer I/O error on dev nbd1, logical block 0, async page read
[   58.561526][ T6031] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.564515][ T6031] Buffer I/O error on dev nbd1, logical block 1, async page read
[   58.567268][ T6031] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.571961][ T6031] Buffer I/O error on dev nbd1, logical block 2, async page read
[   58.575274][ T6031] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.579237][ T6031] Buffer I/O error on dev nbd1, logical block 3, async page read
[   58.583859][ T6031] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.586950][ T6031] Buffer I/O error on dev nbd1, logical block 0, async page read
[   58.592340][ T6031] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.595391][ T6031] Buffer I/O error on dev nbd1, logical block 1, async page read
[   58.601174][ T6031] ldm_validate_partition_table(): Disk read failed.
[   58.604231][ T6031] Dev nbd1: unable to read RDB block 0
[   58.607938][ T6031]  nbd1: unable to read partition table
[   58.612841][ T6031] ldm_validate_partition_table(): Disk read failed.
[   58.615865][ T6031] Dev nbd1: unable to read RDB block 0
[   58.621025][ T6031]  nbd1: unable to read partition table
[   58.824201][ T6351] netlink: 208128 bytes leftover after parsing attributes in process `syz.0.133'.
[   58.829912][ T6351] openvswitch: netlink: Message has 4 unknown bytes.
[   58.833615][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'.
[   58.874711][ T6353] netlink: 176 bytes leftover after parsing attributes in process `syz.0.134'.
[   59.678719][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.142'.
[   59.695450][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.142'.
[   60.584981][ T6456] netlink: 'syz.0.155': attribute type 10 has an invalid length.
[   60.592336][ T6456] 8021q: adding VLAN 0 to HW filter on device team0
[   60.596869][ T6456] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.604379][ T6456] netlink: 'syz.0.155': attribute type 10 has an invalid length.
[   60.610632][ T6456] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   60.639391][ T6459] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   60.650313][ T6459] IPv6: sit1: Disabled Multicast RS
[   60.655745][ T6459] sit1: entered allmulticast mode
[   60.810290][ T6482] 8021q: VLANs not supported on tunl0
[   60.916723][ T6493] warning: `syz.0.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.087149][ T6499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.096392][ T6499] netlink: 'syz.0.168': attribute type 21 has an invalid length.
[   61.099583][ T6499] __nla_validate_parse: 6 callbacks suppressed
[   61.099591][ T6499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.168'.
[   61.682347][ T6526] Bluetooth: MGMT ver 1.23
[   62.646156][ T6567] netlink: 14 bytes leftover after parsing attributes in process `syz.1.189'.
[   62.705892][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.712796][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.718814][ T6567] bond0 (unregistering): Released all slaves
[   63.244877][ T6598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.193'.
[   63.248588][ T6598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.193'.
[   63.349197][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'.
[   63.402179][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[   63.405487][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.412529][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.481855][ T6616] netlink: 56 bytes leftover after parsing attributes in process `syz.1.199'.
[   63.614055][ T6621] netlink: 64 bytes leftover after parsing attributes in process `syz.0.201'.
[   63.617136][ T6621] netlink: 64 bytes leftover after parsing attributes in process `syz.0.201'.
[   63.755144][ T6629] dvmrp0: entered allmulticast mode
[   63.833594][ T6640] netlink: 'syz.1.209': attribute type 4 has an invalid length.
[   64.195796][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'.
[   64.201791][ T6648] bridge_slave_1: left allmulticast mode
[   64.204454][ T6648] bridge_slave_1: left promiscuous mode
[   64.208228][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.214883][ T6648] bridge_slave_0: left allmulticast mode
[   64.217299][ T6648] bridge_slave_0: left promiscuous mode
[   64.221716][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.469230][ T6651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.477357][ T6651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.550800][ T6651] sit1: left allmulticast mode
[   64.552847][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.558270][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.561613][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.564647][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.731172][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.709056][ T6671] tipc: Failed to remove unknown binding: 66,1,1/0:482472149/482472151
[   65.721348][ T6671] tipc: Failed to remove unknown binding: 66,1,1/0:482472149/482472151
[   65.724928][ T6671] tipc: Failed to remove unknown binding: 66,1,1/0:482472149/482472151
[   67.064369][ T6726] __nla_validate_parse: 2 callbacks suppressed
[   67.064378][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'.
[   68.010424][ T6747] team0: Device gtp0 is of different type
[   68.161066][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.240'.
[   68.165622][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.240'.
[   68.584986][ T6767] netlink: 'syz.1.246': attribute type 2 has an invalid length.
[   68.724695][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.733045][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.737899][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.741630][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.745530][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.749402][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.880385][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.883411][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.886047][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.889203][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.892025][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.020246][ T6779] chnl_net:caif_netlink_parms(): no params data found
[   69.108662][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.111021][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.113302][ T6779] bridge_slave_0: entered allmulticast mode
[   69.119647][ T6779] bridge_slave_0: entered promiscuous mode
[   69.129073][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.131685][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.135073][ T6779] bridge_slave_1: entered allmulticast mode
[   69.138261][ T6779] bridge_slave_1: entered promiscuous mode
[   69.190175][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.199887][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.239616][ T6779] team0: Port device team_slave_0 added
[   69.242737][ T6779] team0: Port device team_slave_1 added
[   69.263266][ T6803] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.255'.
[   69.270295][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.272582][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.281178][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.292730][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.295025][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.305611][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.335800][ T6779] hsr_slave_0: entered promiscuous mode
[   69.338604][ T6779] hsr_slave_1: entered promiscuous mode
[   69.344565][ T6779] debugfs: 'hsr0' already exists in 'hsr'
[   69.346440][ T6779] Cannot create hsr debugfs directory
[   69.490115][ T6779] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.504120][ T6779] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.514868][ T6779] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.521818][ T6779] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.577095][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.607257][ T6779] 8021q: adding VLAN 0 to HW filter on device team0
[   69.616524][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.618882][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.628406][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.630741][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.790199][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.829296][ T6779] veth0_vlan: entered promiscuous mode
[   69.837261][ T6779] veth1_vlan: entered promiscuous mode
[   69.888559][ T6779] veth0_macvtap: entered promiscuous mode
[   69.893820][ T6779] veth1_macvtap: entered promiscuous mode
[   69.910800][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.923708][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.931468][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.935275][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.939250][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.942998][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.992467][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.995063][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.014865][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.019054][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.093787][ T6847] netlink: 'syz.3.265': attribute type 1 has an invalid length.
[   70.104345][ T6847] batadv1: entered promiscuous mode
[   70.106122][ T6847] batadv1: entered allmulticast mode
[   70.907924][   T54] Bluetooth: hci3: command tx timeout
[   70.954334][ T6909] netlink: 'syz.0.281': attribute type 5 has an invalid length.
[   70.956930][ T6908] netlink: 'syz.0.281': attribute type 5 has an invalid length.
[   70.990810][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.992955][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.043622][ T6926] sctp: [Deprecated]: syz.0.286 (pid 6926) Use of int in max_burst socket option.
[   71.043622][ T6926] Use struct sctp_assoc_value instead
[   71.325250][ T6957] tc_dump_action: action bad kind
[   71.360552][ T6963] sctp: [Deprecated]: syz.0.296 (pid 6963) Use of int in max_burst socket option.
[   71.360552][ T6963] Use struct sctp_assoc_value instead
[   71.684336][ T7001] syzkaller1: entered promiscuous mode
[   71.686534][ T7001] syzkaller1: entered allmulticast mode
[   71.710920][ T7004] netlink: 'syz.3.308': attribute type 1 has an invalid length.
[   71.713744][ T7004] netlink: 'syz.3.308': attribute type 11 has an invalid length.
[   71.782359][ T7007] tipc: Started in network mode
[   71.783956][ T7007] tipc: Node identity c68054888f59, cluster identity 4711
[   71.786723][ T7007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.791703][ T7007] syzkaller0: entered promiscuous mode
[   71.793522][ T7007] syzkaller0: entered allmulticast mode
[   71.811497][ T7007] tipc: Resetting bearer <eth:syzkaller0>
[   71.817351][ T7006] tipc: Resetting bearer <eth:syzkaller0>
[   71.824076][ T7006] tipc: Disabling bearer <eth:syzkaller0>
[   72.162636][ T7032] __nla_validate_parse: 13 callbacks suppressed
[   72.162649][ T7032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'.
[   72.177829][ T7032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'.
[   72.505453][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   72.538565][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'.
[   72.664496][ T7085] 8021q: VLANs not supported on ip_vti0
[   72.698455][ T7082] netlink: 'syz.3.330': attribute type 5 has an invalid length.
[   72.709243][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'.
[   72.817164][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'.
[   72.988102][   T54] Bluetooth: hci3: command tx timeout
[   73.005972][ T7109] netlink: 'syz.3.339': attribute type 2 has an invalid length.
[   73.011165][ T7109] netlink: 'syz.3.339': attribute type 1 has an invalid length.
[   73.014133][ T7109] netlink: 152 bytes leftover after parsing attributes in process `syz.3.339'.
[   73.172208][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'.
[   73.175104][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.346'.
[   73.179377][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'.
[   73.182340][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.346'.
[   73.232022][ T7136] netlink: 'syz.0.347': attribute type 1 has an invalid length.
[   73.239947][ T7139] netlink: 'syz.1.348': attribute type 3 has an invalid length.
[   73.422202][ T7147] trusted_key: syz.3.350 sent an empty control message without MSG_MORE.
[   73.660060][ T5892] IPVS: starting estimator thread 0...
[   73.747700][ T7162] IPVS: using max 81 ests per chain, 194400 per kthread
[   74.150556][ T7171] bond1: (slave bridge3): making interface the new active one
[   74.153501][ T7171] bond1: (slave bridge3): Enslaving as an active interface with an up link
[   74.206861][ T7177] netlink: 'syz.0.358': attribute type 11 has an invalid length.
[   75.068986][   T54] Bluetooth: hci3: command tx timeout
[   76.140968][ T7198] tipc: Started in network mode
[   76.142639][ T7198] tipc: Node identity 000000000000000007, cluster identity 4711
[   76.165581][ T7207] atomic_op ffff8880119f0998 conn xmit_atomic 0000000000000000
[   76.174917][ T7207] validate_nla: 2 callbacks suppressed
[   76.174924][ T7207] netlink: 'syz.1.368': attribute type 1 has an invalid length.
[   76.181393][ T7206] delete_channel: no stack
[   76.658939][ T7270] netlink: 'syz.3.387': attribute type 3 has an invalid length.
[   77.147726][   T54] Bluetooth: hci3: command tx timeout
[   77.172750][ T7323] __nla_validate_parse: 18 callbacks suppressed
[   77.172758][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'.
[   77.218493][ T7323] syz.3.402 (7323) used greatest stack depth: 19608 bytes left
[   78.283132][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.416'.
[   78.297398][ T7369] netlink: 'syz.0.417': attribute type 4 has an invalid length.
[   78.343113][ T7375] netlink: 176 bytes leftover after parsing attributes in process `syz.1.419'.
[   78.464986][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'.
[   78.474428][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.425'.
[   78.479817][ T7391] netlink: 34 bytes leftover after parsing attributes in process `syz.0.425'.
[   78.487249][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'.
[   78.491545][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'.
[   78.494559][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'.
[   78.799882][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.435'.
[   78.822463][ T7427] unsupported nla_type 52263
[   78.951206][ T7445] netlink: 'syz.0.442': attribute type 4 has an invalid length.
[   79.200784][ T7484] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[   79.230305][ T7484] bond2: entered promiscuous mode
[   79.232623][ T7484] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.241804][ T7484] batadv0: entered promiscuous mode
[   79.243654][ T7484] batadv0: entered allmulticast mode
[   79.246156][ T7484] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.249483][ T7484] bond2: (slave batadv0): making interface the new active one
[   79.253613][ T7484] bond2: (slave batadv0): Enslaving as an active interface with an up link
[   79.270689][ T7493] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[   79.322767][ T7500] netlink: 'syz.3.455': attribute type 1 has an invalid length.
[   79.325275][ T7500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.231290][  T972] cfg80211: failed to load regulatory.db
[   99.011581][ T7516] __nla_validate_parse: 10 callbacks suppressed
[   99.011596][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[   99.018074][ T7516] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   99.021620][ T7516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.029236][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'.
[   99.040087][ T7516] nbd: must specify a size in bytes for the device
[   99.049201][ T7516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'.
[   99.099453][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'.
[   99.101712][ T7530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.461'.
[   99.102886][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'.
[   99.113615][ T7530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.461'.
[   99.117308][ T7530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.461'.
[   99.134347][ T7533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'.
[   99.140058][ T7533] ip6gretap2: entered promiscuous mode
[   99.194605][ T7543] netlink: 108 bytes leftover after parsing attributes in process `syz.1.466'.
[   99.245043][ T7551] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[   99.318999][ T7557] netlink: 'syz.1.470': attribute type 4 has an invalid length.
[   99.428362][ T7567] netlink: 'syz.1.475': attribute type 4 has an invalid length.
[   99.779412][ T7587] gretap1: entered promiscuous mode
[   99.781321][ T7587] gretap1: entered allmulticast mode
[  100.193572][ T7638] syzkaller1: entered promiscuous mode
[  100.196011][ T7638] syzkaller1: entered allmulticast mode
[  100.453097][ T7664] netlink: 'syz.3.506': attribute type 11 has an invalid length.
[  101.091058][ T7685] ip6gretap2: left promiscuous mode
[  101.095044][ T7685] gretap1: left promiscuous mode
[  101.096778][ T7685] gretap1: left allmulticast mode
[  101.433001][ T7704] Bluetooth: MGMT ver 1.23
[  101.856352][ T7730] tun0: tun_chr_ioctl cmd 2147767520
[  102.200415][ T7752] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  102.203405][ T7752] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  102.315509][ T7756] sctp: [Deprecated]: syz.0.526 (pid 7756) Use of int in max_burst socket option.
[  102.315509][ T7756] Use struct sctp_assoc_value instead
[  102.780196][ T7696] Set syz1 is full, maxelem 65536 reached
[  102.894571][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.897127][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.943998][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.950321][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.048912][ T5875] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.053689][ T5875] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.057247][ T5875] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.063723][ T5875] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.177167][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  103.181656][ T7783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.185722][ T7782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.311289][ T7813] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  103.383308][ T7821] bridge_slave_0: left allmulticast mode
[  103.385665][ T7821] bridge_slave_0: left promiscuous mode
[  103.388192][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.392125][ T7821] bridge_slave_1: left allmulticast mode
[  103.393915][ T7821] bridge_slave_1: left promiscuous mode
[  103.396201][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.403859][ T7821] bond0: (slave bond_slave_0): Releasing backup interface
[  103.407881][ T7821] bond0: (slave bond_slave_1): Releasing backup interface
[  103.411920][ T7821] team0: Port device team_slave_0 removed
[  103.414885][ T7821] team0: Port device team_slave_1 removed
[  103.417019][ T7821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.420032][ T7821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.428851][ T7821] syz.3.545: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  103.433659][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.3.545 Not tainted syzkaller #0 PREEMPT(full) 
[  103.433669][ T7821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.433673][ T7821] Call Trace:
[  103.433676][ T7821]  <TASK>
[  103.433680][ T7821]  dump_stack_lvl+0x189/0x250
[  103.433693][ T7821]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.433702][ T7821]  ? __pfx__printk+0x10/0x10
[  103.433712][ T7821]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.433720][ T7821]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.433728][ T7821]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  103.433736][ T7821]  warn_alloc+0x214/0x310
[  103.433748][ T7821]  ? stack_depot_save_flags+0x40/0x860
[  103.433758][ T7821]  ? __pfx_warn_alloc+0x10/0x10
[  103.433768][ T7821]  ? kasan_save_track+0x4f/0x80
[  103.433776][ T7821]  ? xskq_create+0x56/0x170
[  103.433782][ T7821]  ? xsk_init_queue+0xb0/0x110
[  103.433791][ T7821]  ? xsk_setsockopt+0x4dc/0x8d0
[  103.433799][ T7821]  ? do_sock_setsockopt+0x17c/0x1b0
[  103.433806][ T7821]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  103.433812][ T7821]  ? do_syscall_64+0xfa/0x3b0
[  103.433819][ T7821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.433828][ T7821]  __vmalloc_node_range_noprof+0x125/0x12f0
[  103.433848][ T7821]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  103.433859][ T7821]  ? __kasan_kmalloc+0x93/0xb0
[  103.433868][ T7821]  vmalloc_user_noprof+0xad/0xf0
[  103.433878][ T7821]  ? xskq_create+0xbf/0x170
[  103.433884][ T7821]  xskq_create+0xbf/0x170
[  103.433891][ T7821]  xsk_init_queue+0xb0/0x110
[  103.433901][ T7821]  xsk_setsockopt+0x4dc/0x8d0
[  103.433911][ T7821]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.433920][ T7821]  ? __pfx_aa_sk_perm+0x10/0x10
[  103.433931][ T7821]  ? aa_sock_opt_perm+0xff/0x1b0
[  103.433938][ T7821]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  103.433945][ T7821]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.433955][ T7821]  do_sock_setsockopt+0x17c/0x1b0
[  103.433963][ T7821]  __x64_sys_setsockopt+0x13f/0x1b0
[  103.433972][ T7821]  do_syscall_64+0xfa/0x3b0
[  103.433978][ T7821]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.433985][ T7821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.433990][ T7821]  ? exc_page_fault+0x9f/0xf0
[  103.433997][ T7821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.434021][ T7821] RIP: 0033:0x7fdc49d8ebe9
[  103.434028][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.434033][ T7821] RSP: 002b:00007fdc4abff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.434041][ T7821] RAX: ffffffffffffffda RBX: 00007fdc49fc5fa0 RCX: 00007fdc49d8ebe9
[  103.434045][ T7821] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  103.434050][ T7821] RBP: 00007fdc49e11e19 R08: 0000000000000004 R09: 0000000000000000
[  103.434053][ T7821] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.434057][ T7821] R13: 00007fdc49fc6038 R14: 00007fdc49fc5fa0 R15: 00007ffc90307228
[  103.434069][ T7821]  </TASK>
[  103.434233][ T7821] Mem-Info:
[  103.534804][ T7821] active_anon:5713 inactive_anon:0 isolated_anon:0
[  103.534804][ T7821]  active_file:1400 inactive_file:38242 isolated_file:0
[  103.534804][ T7821]  unevictable:1768 dirty:81 writeback:0
[  103.534804][ T7821]  slab_reclaimable:9946 slab_unreclaimable:62598
[  103.534804][ T7821]  mapped:23339 shmem:2443 pagetables:961
[  103.534804][ T7821]  sec_pagetables:0 bounce:0
[  103.534804][ T7821]  kernel_misc_reclaimable:0
[  103.534804][ T7821]  free:274162 free_pcp:16950 free_cma:0
[  103.548729][ T7821] Node 0 active_anon:15088kB inactive_anon:0kB active_file:3884kB inactive_file:13664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51220kB dirty:88kB writeback:0kB shmem:6532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5996kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.559083][ T7821] Node 1 active_anon:9328kB inactive_anon:0kB active_file:1716kB inactive_file:139304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43700kB dirty:236kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6032kB pagetables:1456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.568854][ T7821] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.577916][ T7821] lowmem_reserve[]: 0 811 811 811 811
[  103.579680][ T7821] Node 0 DMA32 free:374668kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18420kB inactive_anon:0kB active_file:3884kB inactive_file:13664kB unevictable:3536kB writepending:88kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:28744kB local_pcp:17496kB free_cma:0kB
[  103.589649][ T7821] lowmem_reserve[]: 0 0 0 0 0
[  103.591178][ T7821] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  103.600710][ T7821] lowmem_reserve[]: 0 0 854 854 854
[  103.602419][ T7821] Node 1 Normal free:244320kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9328kB inactive_anon:0kB active_file:1716kB inactive_file:139304kB unevictable:3536kB writepending:236kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37784kB local_pcp:14968kB free_cma:0kB
[  103.612465][ T7821] lowmem_reserve[]: 0 0 0 0 0
[  103.613975][ T7821] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.617962][ T7821] Node 0 DMA32: 674*4kB (UE) 8*8kB (UE) 8*16kB (ME) 318*32kB (UME) 162*64kB (UE) 50*128kB (UM) 7*256kB (U) 10*512kB (UME) 4*1024kB (UM) 2*2048kB (UM) 80*4096kB (UM) = 372616kB
[  103.623505][ T7821] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  103.645047][ T7821] Node 1 Normal: 102*4kB (UE) 66*8kB (UE) 71*16kB (UME) 129*32kB (UME) 13*64kB (UE) 7*128kB (UME) 11*256kB (UME) 14*512kB (UM) 9*1024kB (UM) 6*2048kB (ME) 52*4096kB (UM) = 252408kB
[  103.657662][ T7821] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.660682][ T7821] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.663580][ T7821] 44941 total pagecache pages
[  103.665139][ T7821] 0 pages in swap cache
[  103.666509][ T7821] Free swap  = 124996kB
[  103.687640][ T7821] Total swap = 124996kB
[  103.689020][ T7821] 786301 pages RAM
[  103.690244][ T7821] 0 pages HighMem/MovableOnly
[  103.691805][ T7821] 241344 pages reserved
[  103.693169][ T7821] 0 pages cma reserved
[  103.785092][ T7830] netlink: 'syz.3.547': attribute type 7 has an invalid length.
[  103.792749][ T7830] : entered promiscuous mode
[  104.823808][ T7860] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  105.061862][ T7884] __nla_validate_parse: 27 callbacks suppressed
[  105.061876][ T7884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.557'.
[  105.072918][ T7884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.557'.
[  106.126880][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'.
[  106.129890][ T7901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.379606][ T7923] netlink: 'syz.3.569': attribute type 1 has an invalid length.
[  106.382590][ T7923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.569'.
[  106.397147][ T7923] syzkaller1: entered promiscuous mode
[  106.400106][ T7923] syzkaller1: entered allmulticast mode
[  106.492062][ T7876] Set syz1 is full, maxelem 65536 reached
[  106.512013][ T7928] netlink: 'syz.1.570': attribute type 3 has an invalid length.
[  106.655405][ T7950] blkio.reset_stats is deprecated
[  106.856468][ T7967] netlink: 'syz.3.582': attribute type 9 has an invalid length.
[  106.861115][ T7967] netlink: 224 bytes leftover after parsing attributes in process `syz.3.582'.
[  106.883270][ T7972] netlink: 'syz.0.583': attribute type 5 has an invalid length.
[  106.888277][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'.
[  106.938702][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'.
[  107.109422][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'.
[  107.165985][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'.
[  107.185919][ T7987] netlink: 156 bytes leftover after parsing attributes in process `syz.0.589'.
[  107.419286][ T8026] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  107.733036][ T8041] sctp: [Deprecated]: syz.3.608 (pid 8041) Use of int in max_burst socket option deprecated.
[  107.733036][ T8041] Use struct sctp_assoc_value instead
[  107.840796][ T8052] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[  107.843640][ T8052] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[  107.848153][ T8052] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[  107.851411][ T8052] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[  107.867706][ T8054] netlink: 'syz.1.611': attribute type 7 has an invalid length.
[  108.015344][ T8067] netlink: 'syz.1.617': attribute type 11 has an invalid length.
[  108.036254][ T8065] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[  109.109536][ T8106] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  109.112845][ T8106] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  109.705279][ T8138] dvmrp0: entered allmulticast mode
[  109.955818][ T8141] sctp: [Deprecated]: syz.1.640 (pid 8141) Use of int in max_burst socket option.
[  109.955818][ T8141] Use struct sctp_assoc_value instead
[  110.101565][ T8152] __nla_validate_parse: 18 callbacks suppressed
[  110.101578][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'.
[  110.106978][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'.
[  110.146979][ T8155] vlan2: entered allmulticast mode
[  110.149018][ T8155] veth1: entered allmulticast mode
[  110.151763][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'.
[  110.151788][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'.
[  110.250696][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'.
[  110.698894][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'.
[  110.702420][ T8166] openvswitch: netlink: Unknown nsh attribute 0
[  110.705075][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.845670][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.650'.
[  110.913456][ T8177] tun1: tun_chr_ioctl cmd 2147767520
[  111.138989][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.658'.
[  111.143674][ T8194] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  111.147296][ T8194] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  111.188127][ T8197] netlink: 44 bytes leftover after parsing attributes in process `syz.3.657'.
[  111.193548][ T8194] netlink: 72 bytes leftover after parsing attributes in process `syz.1.658'.
[  111.271071][ T8202] only policy match revision 0 supported
[  111.271082][ T8202] unable to load match
[  111.675833][ T8228] "syz.1.669" (8228) uses obsolete ecb(arc4) skcipher
[  114.122112][ T8331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.159357][ T8331] syzkaller0: entered promiscuous mode
[  114.163699][ T8331] syzkaller0: entered allmulticast mode
[  114.410462][ T8318] delete_channel: no stack
[  115.081194][ T8332] tipc: Resetting bearer <eth:syzkaller0>
[  115.101894][ T8332] tipc: Disabling bearer <eth:syzkaller0>
[  115.133626][ T8352] __nla_validate_parse: 17 callbacks suppressed
[  115.133637][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.140304][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.144582][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.151932][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.154836][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.161827][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.164656][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.171030][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.174216][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.177383][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'.
[  115.369529][ T8379] bridge_slave_0: left allmulticast mode
[  115.372072][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.379903][ T8379] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  115.701698][ T8417] macvlan2: entered allmulticast mode
[  115.716653][ T8417] veth1_vlan: entered allmulticast mode
[  115.722950][ T8417] veth1_vlan: left allmulticast mode
[  115.820823][ T8440] validate_nla: 4 callbacks suppressed
[  115.820833][ T8440] netlink: 'syz.3.733': attribute type 12 has an invalid length.
[  116.109452][ T8462] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[  116.153186][ T8462] bond3: entered promiscuous mode
[  116.158454][ T8462] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.177414][ T8467] batadv1: entered promiscuous mode
[  116.181894][ T8467] batadv1: entered allmulticast mode
[  116.185834][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv1
[  116.194019][ T8467] bond3: (slave batadv1): making interface the new active one
[  116.197410][ T8467] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  117.117417][ T8508] openvswitch: netlink: Flow key attr not present in new flow.
[  118.160708][ T8602] IPv6: Can't replace route, no match found
[  118.474521][ T8640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.658053][ T8658] netlink: 'syz.1.801': attribute type 5 has an invalid length.
[  119.189921][ T8702] netlink: 'syz.3.814': attribute type 13 has an invalid length.
[  119.362200][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  119.680128][ T5875] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  119.759342][ T8758] netlink: 'syz.0.827': attribute type 4 has an invalid length.
[  119.914668][ T8771] vlan2: left allmulticast mode
[  119.916357][ T8771] veth1: left allmulticast mode
[  119.971128][ T8775] bridge: RTM_NEWNEIGH with invalid ether address
[  120.175163][ T8806] syzkaller1: entered promiscuous mode
[  120.176901][ T8806] syzkaller1: entered allmulticast mode
[  120.306076][ T8812] __nla_validate_parse: 50 callbacks suppressed
[  120.306090][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'.
[  120.328812][ T8815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.347154][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  120.351684][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  120.355961][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  120.359258][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  120.362458][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  120.365229][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  120.396097][ T8820] netlink: 'syz.0.847': attribute type 3 has an invalid length.
[  121.311688][ T8838] netlink: 'syz.1.852': attribute type 3 has an invalid length.
[  121.314931][ T8839] netlink: 'syz.1.852': attribute type 3 has an invalid length.
[  122.170162][ T8853] delete_channel: no stack
[  122.573661][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.771115][ T8897] netlink: 64 bytes leftover after parsing attributes in process `syz.3.870'.
[  123.174777][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'.
[  123.177947][ T8917] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  123.512274][ T8958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.879'.
[  125.014539][ T5875] tipc: Subscription rejected, illegal request
[  125.131305][   T51] IPVS: starting estimator thread 0...
[  125.133578][ T9063] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  125.200743][ T9075] tipc: Started in network mode
[  125.209627][ T9075] tipc: Node identity 92dfdc2f1538, cluster identity 4711
[  125.212871][ T9075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.227778][ T9068] IPVS: using max 82 ests per chain, 196800 per kthread
[  125.387956][ T5235] Bluetooth: hci3: command 0x0405 tx timeout
[  125.435128][ T9093] netlink: 'syz.1.903': attribute type 10 has an invalid length.
[  125.499911][ T9095] __nla_validate_parse: 8 callbacks suppressed
[  125.499926][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'.
[  125.543463][ T5875] IPVS: stop unused estimator thread 0...
[  125.567549][ T9101] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  125.866291][ T9123] netlink: 'syz.3.912': attribute type 2 has an invalid length.
[  125.872334][ T9123] netlink: 244 bytes leftover after parsing attributes in process `syz.3.912'.
[  126.025004][ T9135] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  126.031863][ T9138] bridge_slave_0: left promiscuous mode
[  126.044105][ T9138] bond2: left promiscuous mode
[  126.049672][ T9138] batadv0: left promiscuous mode
[  126.051507][ T9138] batadv0: left allmulticast mode
[  126.065239][ T9138] bond3: left promiscuous mode
[  126.068693][ T9138] batadv1: left promiscuous mode
[  126.070861][ T9138] batadv1: left allmulticast mode
[  126.076487][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[  126.139070][ T9148] netlink: 72 bytes leftover after parsing attributes in process `syz.3.919'.
[  126.300718][ T9160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.922'.
[  126.304644][ T9159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.922'.
[  126.312098][ T9160] netlink: 108 bytes leftover after parsing attributes in process `syz.0.922'.
[  126.316266][ T9160] netlink: 108 bytes leftover after parsing attributes in process `syz.0.922'.
[  126.328708][   T51] tipc: Node number set to 2280119343
[  126.480726][ T9173] netlink: 'syz.0.925': attribute type 13 has an invalid length.
[  126.663150][ T9189] netlink: 'syz.0.929': attribute type 4 has an invalid length.
[  126.930126][ T9204] tc_dump_action: action bad kind
[  127.462479][ T9251] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.947'.
[  127.502475][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'.
[  127.647424][ T5870] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  128.394202][ T9275] netlink: 'syz.1.952': attribute type 1 has an invalid length.
[  128.430074][ T9282] @: renamed from veth0_vlan
[  128.485749][ T9293] syz_tun: entered allmulticast mode
[  128.493546][ T9293] dvmrp8: entered allmulticast mode
[  128.550484][ T9293] netlink: 'syz.1.957': attribute type 23 has an invalid length.
[  128.558857][ T9292] syz_tun: left allmulticast mode
[  128.562444][ T9292] dvmrp8: left allmulticast mode
[  128.789962][ T9325] netlink: 'syz.3.969': attribute type 1 has an invalid length.
[  128.792611][ T9325] netlink: 'syz.3.969': attribute type 2 has an invalid length.
[  128.846003][ T9332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.858689][ T9333] syzkaller0: entered promiscuous mode
[  128.861478][ T9333] syzkaller0: entered allmulticast mode
[  128.877051][ T9331] tipc: Resetting bearer <eth:syzkaller0>
[  128.887316][ T9331] tipc: Disabling bearer <eth:syzkaller0>
[  129.044401][ T9350] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  129.048657][ T9351] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  130.084714][ T9401] tc_dump_action: action bad kind
[  130.638075][ T9440] __nla_validate_parse: 83 callbacks suppressed
[  130.638085][ T9440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1006'.
[  130.714296][ T9446] ieee802154 phy0 wpan0: encryption failed: -22
[  130.785865][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  130.790864][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  130.863550][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1011'.
[  131.007773][   T54] Bluetooth: hci3: link tx timeout
[  131.010039][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.013101][ T5235] Bluetooth: hci3: link tx timeout
[  131.014888][ T5235] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.346106][ T9488] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  131.591897][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'.
[  131.595544][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'.
[  131.616520][ T9498] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1026'.
[  131.621730][ T9498] netlink: 'syz.0.1026': attribute type 4 has an invalid length.
[  131.708713][ T9510] bond0: (slave syz_tun): Releasing backup interface
[  131.711984][ T9510] bond0: (slave team0): Releasing backup interface
[  131.715541][ T9510] bridge_slave_1: left allmulticast mode
[  131.717534][ T9510] bridge_slave_1: left promiscuous mode
[  131.721337][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.731847][ T9510] bond0: (slave bond_slave_0): Releasing backup interface
[  131.763953][ T9510] bond0: (slave bond_slave_1): Releasing backup interface
[  131.769107][ T9510] team0: Port device team_slave_0 removed
[  131.772956][ T9510] team0: Port device team_slave_1 removed
[  131.776596][ T9510] bond0: (slave netdevsim0): Releasing backup interface
[  131.782288][ T9510] bond1: (slave bridge3): Releasing active interface
[  131.788855][ T9510] bond2: (slave batadv0): Releasing active interface
[  131.795588][ T9510] bond3: (slave batadv1): Releasing active interface
[  131.805461][ T9512] team0: Mode changed to "loadbalance"
[  131.849513][ T9517] tipc: New replicast peer: 255.255.255.255
[  131.852515][ T9517] tipc: Enabled bearer <udp:syz2>, priority 10
[  132.357677][   T51] tipc: Node number set to 117440512
[  132.430181][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.799462][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'.
[  132.854221][ T9565] bond_slave_0: entered promiscuous mode
[  132.857460][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'.
[  132.873988][ T9565] bond_slave_0 (unregistering): left promiscuous mode
[  132.904403][ T9568] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1051'.
[  133.067758][ T5235] Bluetooth: hci3: command 0x0405 tx timeout
[  133.362584][ T9616] netlink: 'syz.1.1067': attribute type 1 has an invalid length.
[  133.383624][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.405039][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.407548][ T9616] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  133.414056][ T9616] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  133.452434][ T9626] veth3: entered promiscuous mode
[  133.455627][ T9626] bond0: (slave veth3): Enslaving as an active interface with a down link
[  133.475524][ T9625] netlink: 'syz.0.1069': attribute type 12 has an invalid length.
[  133.868223][ T9687] tc_dump_action: action bad kind
[  134.271433][ T9712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.899716][ T9740] netlink: 'syz.3.1112': attribute type 2 has an invalid length.
[  134.902592][ T9740] netlink: 'syz.3.1112': attribute type 1 has an invalid length.
[  135.737941][ T9776] netlink: 'syz.0.1127': attribute type 10 has an invalid length.
[  135.740614][ T9781] netlink: 'syz.1.1130': attribute type 3 has an invalid length.
[  135.743355][ T9776] __nla_validate_parse: 19 callbacks suppressed
[  135.743365][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  135.749333][ T9776] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'.
[  135.752166][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'.
[  135.755369][ T9776] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'.
[  135.833570][ T9790] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20003
[  135.863513][ T9793] netlink: 'syz.0.1134': attribute type 7 has an invalid length.
[  135.863517][ T9794] netlink: 'syz.0.1134': attribute type 7 has an invalid length.
[  135.870603][ T9793] : entered promiscuous mode
[  136.312793][ T9816] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.370180][ T9816] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  136.670648][ T9849] netlink: 'syz.1.1151': attribute type 12 has an invalid length.
[  136.704529][ T9852] netlink: 'syz.0.1152': attribute type 1 has an invalid length.
[  136.740902][ T9861] pim6reg1: entered promiscuous mode
[  136.742710][ T9861] pim6reg1: entered allmulticast mode
[  136.761664][ T9867] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  136.841440][ T9877] Illegal XDP return value 65535 on prog  (id 474) dev N/A, expect packet loss!
[  136.976850][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1162'.
[  136.980005][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1162'.
[  136.986030][ T9884] geneve0: entered promiscuous mode
[  136.999214][ T9884] geneve0: entered allmulticast mode
[  137.155192][ T9910] tc_dump_action: action bad kind
[  137.311018][ T9924] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1176'.
[  137.341233][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'.
[  137.503290][ T9935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1180'.
[  137.787977][ T9950] team0: Device gtp0 is up. Set it down before adding it as a team port
[  137.926864][ T9968] netlink: 'syz.0.1190': attribute type 1 has an invalid length.
[  137.931969][ T9968] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1190'.
[  138.057031][ T9986] netlink: 'syz.3.1193': attribute type 5 has an invalid length.
[  138.085132][ T9986] geneve2: entered promiscuous mode
[  138.090381][ T9986] geneve2: entered allmulticast mode
[  138.096308][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  138.118487][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  138.121376][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  138.127491][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  138.146880][ T9995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.573446][T10028] pim6reg1: entered promiscuous mode
[  138.575339][T10028] pim6reg1: entered allmulticast mode
[  138.742637][T10033] tc_dump_action: action bad kind
[  138.844703][T10041] netlink: 'syz.0.1211': attribute type 1 has an invalid length.
[  138.912880][T10045] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  139.052797][T10057] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  139.450407][T10091] netlink: 'syz.1.1229': attribute type 3 has an invalid length.
[  139.569601][T10108] netlink: 'syz.3.1234': attribute type 1 has an invalid length.
[  139.596881][T10108] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.611397][T10108] bond1: (slave geneve3): making interface the new active one
[  139.614996][T10108] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  139.627550][ T5870] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  139.633675][ T5870] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  139.649883][ T5870] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  139.653620][ T5870] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  139.660334][T10117] netlink: 'syz.1.1235': attribute type 1 has an invalid length.
[  139.663126][T10117] netlink: 'syz.1.1235': attribute type 1 has an invalid length.
[  140.463040][T10167] IPVS: Error connecting to the multicast addr
[  140.699934][T10175] pim6reg: entered allmulticast mode
[  140.760907][T10179] __nla_validate_parse: 13 callbacks suppressed
[  140.760916][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1258'.
[  140.806275][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'.
[  140.862380][T10186] tc_dump_action: action bad kind
[  141.080999][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1266'.
[  141.241733][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'.
[  141.263322][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  141.266204][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  141.266294][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  141.273000][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  141.614933][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'.
[  141.679478][T10238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.682810][T10238] syzkaller0: entered promiscuous mode
[  141.685036][T10238] syzkaller0: entered allmulticast mode
[  141.700999][T10240] geneve2: left promiscuous mode
[  141.702686][T10240] geneve2: left allmulticast mode
[  141.714557][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  141.718508][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.722873][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  141.731523][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.734651][T10237] tipc: Resetting bearer <eth:syzkaller0>
[  141.750880][T10237] tipc: Disabling bearer <eth:syzkaller0>
[  141.757027][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  141.767641][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.770436][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  141.773133][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  141.987064][T10256] only policy match revision 0 supported
[  141.987075][T10256] unable to load match
[  142.066432][T10267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1288'.
[  142.296454][T10298] validate_nla: 2 callbacks suppressed
[  142.296463][T10298] netlink: 'syz.1.1299': attribute type 4 has an invalid length.
[  142.433906][T10317] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  142.539697][T10333] syz.0.1311: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  142.545096][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.0.1311 Not tainted syzkaller #0 PREEMPT(full) 
[  142.545105][T10333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.545110][T10333] Call Trace:
[  142.545113][T10333]  <TASK>
[  142.545116][T10333]  dump_stack_lvl+0x189/0x250
[  142.545129][T10333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.545137][T10333]  ? __pfx__printk+0x10/0x10
[  142.545146][T10333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.545155][T10333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.545163][T10333]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  142.545171][T10333]  warn_alloc+0x214/0x310
[  142.545184][T10333]  ? __pfx_warn_alloc+0x10/0x10
[  142.545197][T10333]  ? __get_vm_area_node+0x28f/0x300
[  142.545226][T10333]  ? xskq_create+0xbf/0x170
[  142.545235][T10333]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  142.545255][T10333]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  142.545266][T10333]  ? __kasan_kmalloc+0x93/0xb0
[  142.545276][T10333]  vmalloc_user_noprof+0xad/0xf0
[  142.545285][T10333]  ? xskq_create+0xbf/0x170
[  142.545292][T10333]  xskq_create+0xbf/0x170
[  142.545299][T10333]  xsk_init_queue+0xb0/0x110
[  142.545309][T10333]  xsk_setsockopt+0x57b/0x8d0
[  142.545320][T10333]  ? __pfx_xsk_setsockopt+0x10/0x10
[  142.545329][T10333]  ? __pfx_aa_sk_perm+0x10/0x10
[  142.545340][T10333]  ? __fget_files+0x2a/0x420
[  142.545346][T10333]  ? aa_sock_opt_perm+0xff/0x1b0
[  142.545353][T10333]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  142.545360][T10333]  ? __pfx_xsk_setsockopt+0x10/0x10
[  142.545370][T10333]  do_sock_setsockopt+0x17c/0x1b0
[  142.545380][T10333]  __x64_sys_setsockopt+0x13f/0x1b0
[  142.545389][T10333]  do_syscall_64+0xfa/0x3b0
[  142.545396][T10333]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.545403][T10333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.545409][T10333]  ? exc_page_fault+0x9f/0xf0
[  142.545416][T10333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.545422][T10333] RIP: 0033:0x7f098238ebe9
[  142.545429][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.545436][T10333] RSP: 002b:00007f098312e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  142.545450][T10333] RAX: ffffffffffffffda RBX: 00007f09825c5fa0 RCX: 00007f098238ebe9
[  142.545455][T10333] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[  142.545459][T10333] RBP: 00007f0982411e19 R08: 0000000000000004 R09: 0000000000000000
[  142.545463][T10333] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  142.545467][T10333] R13: 00007f09825c6038 R14: 00007f09825c5fa0 R15: 00007fff50d0da98
[  142.545478][T10333]  </TASK>
[  142.545481][T10333] Mem-Info:
[  142.572500][ T5875] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  142.573873][T10333] active_anon:5674 inactive_anon:0 isolated_anon:0
[  142.573873][T10333]  active_file:1497 inactive_file:38260 isolated_file:0
[  142.573873][T10333]  unevictable:1768 dirty:65 writeback:0
[  142.573873][T10333]  slab_reclaimable:10461 slab_unreclaimable:67928
[  142.573873][T10333]  mapped:23463 shmem:2404 pagetables:1002
[  142.573873][T10333]  sec_pagetables:0 bounce:0
[  142.573873][T10333]  kernel_misc_reclaimable:0
[  142.573873][T10333]  free:263262 free_pcp:19718 free_cma:0
[  142.653711][T10333] Node 0 active_anon:13140kB inactive_anon:0kB active_file:4140kB inactive_file:13672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49428kB dirty:68kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6000kB pagetables:2376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.679543][T10333] Node 1 active_anon:9556kB inactive_anon:0kB active_file:1848kB inactive_file:139368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44288kB dirty:192kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6420kB pagetables:1836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.692744][T10333] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  142.702432][T10333] lowmem_reserve[]: 0 811 811 811 811
[  142.704300][T10333] Node 0 DMA32 free:339004kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15860kB inactive_anon:0kB active_file:4140kB inactive_file:13672kB unevictable:3536kB writepending:68kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:43392kB local_pcp:24556kB free_cma:0kB
[  142.720693][T10333] lowmem_reserve[]: 0 0 0 0 0
[  142.722215][T10333] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  142.731850][T10333] lowmem_reserve[]: 0 0 854 854 854
[  142.733526][T10333] Node 1 Normal free:238792kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9624kB inactive_anon:0kB active_file:1848kB inactive_file:139368kB unevictable:3536kB writepending:192kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33312kB local_pcp:19644kB free_cma:0kB
[  142.745069][T10333] lowmem_reserve[]: 0 0 0 0 0
[  142.746561][T10333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  142.753364][T10333] Node 0 DMA32: 131*4kB (ME) 38*8kB (UM) 241*16kB (UM) 172*32kB (UME) 82*64kB (UM) 12*128kB (UM) 2*256kB (UM) 8*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 75*4096kB (UM) = 339020kB
[  142.769095][T10333] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  142.779241][T10333] Node 1 Normal: 40*4kB (ME) 167*8kB (UME) 428*16kB (UME) 312*32kB (UM) 144*64kB (UM) 38*128kB (UME) 20*256kB (UM) 11*512kB (UM) 9*1024kB (UME) 1*2048kB (U) 45*4096kB (M) = 238744kB
[  142.790350][T10355] tc_dump_action: action bad kind
[  142.795976][T10333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.798970][T10333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.802413][T10333] 42161 total pagecache pages
[  142.804233][T10333] 0 pages in swap cache
[  142.806078][T10333] Free swap  = 124996kB
[  142.811722][T10333] Total swap = 124996kB
[  142.813123][T10333] 786301 pages RAM
[  142.814290][T10333] 0 pages HighMem/MovableOnly
[  142.815928][T10333] 241344 pages reserved
[  142.817413][T10333] 0 pages cma reserved
[  143.381959][T10416] only policy match revision 0 supported
[  143.381970][T10416] unable to load match
[  143.658979][T10430] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  143.776417][T10443] netlink: 'syz.0.1345': attribute type 1 has an invalid length.
[  144.038699][T10470] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.146768][T10484] netlink: 'syz.3.1357': attribute type 5 has an invalid length.
[  144.200824][T10492] ieee802154 phy0 wpan0: encryption failed: -22
[  144.337473][T10500] bond4: entered promiscuous mode
[  144.339437][T10500] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.391927][T10500] bond4 (unregistering): Released all slaves
[  144.605161][T10515] tc_dump_action: action bad kind
[  145.162904][T10551] netlink: 'syz.3.1378': attribute type 1 has an invalid length.
[  145.252607][T10561] IPVS: Error connecting to the multicast addr
[  145.554353][T10594] tc_dump_action: action bad kind
[  145.778959][T10628] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  145.790530][T10628] team0: Port device team_slave_0 removed
[  145.793821][T10628] team0: Port device team_slave_1 removed
[  145.795903][T10628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.800147][T10628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.804332][T10628] bond0: (slave veth3): Releasing active interface
[  145.811908][T10628] netlink: 'syz.1.1401': attribute type 10 has an invalid length.
[  145.814672][T10628] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  145.819576][T10628] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.822703][T10628] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.740055][T10651] __nla_validate_parse: 43 callbacks suppressed
[  146.740064][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1407'.
[  146.744990][T10651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1407'.
[  147.074206][T10669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1412'.
[  147.133067][T10677] netlink: 'syz.1.1415': attribute type 4 has an invalid length.
[  147.155937][T10681] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1417'.
[  147.159988][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1417'.
[  147.162785][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1417'.
[  147.165750][T10681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'.
[  147.245544][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'.
[  147.248850][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'.
[  147.362443][T10694] netlink: 'syz.1.1422': attribute type 1 has an invalid length.
[  147.365281][T10694] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1422'.
[  147.891554][T10742] netlink: 'syz.1.1434': attribute type 1 has an invalid length.
[  147.965054][T10742] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.973477][T10742] bond2: (slave bond3): making interface the new active one
[  147.976389][T10742] bond2: (slave bond3): Enslaving as an active interface with an up link
[  147.985894][T10742] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  147.992407][T10742] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  148.007968][T10743] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  148.316960][T10789] netlink: 'syz.0.1441': attribute type 12 has an invalid length.
[  148.325388][T10797] netlink: 'syz.0.1441': attribute type 12 has an invalid length.
[  148.501591][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.830369][T10862] netlink: 'syz.3.1456': attribute type 1 has an invalid length.
[  148.885404][T10873] veth3: left promiscuous mode
[  149.640105][ T5870] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  149.643269][T10962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  149.727424][T10977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.733509][T10977] syzkaller0: entered promiscuous mode
[  149.735260][T10977] syzkaller0: entered allmulticast mode
[  149.750173][T10977] tipc: Resetting bearer <eth:syzkaller0>
[  149.755486][T10976] tipc: Resetting bearer <eth:syzkaller0>
[  149.764420][T10976] tipc: Disabling bearer <eth:syzkaller0>
[  149.893265][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  149.901054][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  149.921429][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  150.234385][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.626500][T11020] bond4: entered promiscuous mode
[  150.901272][T11050] netlink: 'syz.3.1513': attribute type 10 has an invalid length.
[  150.960506][ T5870] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.968315][T11054] netlink: 'syz.1.1514': attribute type 4 has an invalid length.
[  150.972644][ T5870] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.988385][ T5870] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.992088][ T5870] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.007150][T11056] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  151.012482][T11056] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  151.341800][T11077] netlink: 'syz.1.1519': attribute type 12 has an invalid length.
[  151.991856][T11133] __nla_validate_parse: 33 callbacks suppressed
[  151.991867][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1534'.
[  152.031135][T11135] tunl0: entered promiscuous mode
[  152.033596][T11135] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  152.070893][T11137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.081960][T11137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.273897][T11149] netlink: 'syz.0.1539': attribute type 10 has an invalid length.
[  152.280199][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'.
[  152.283406][T11149] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1539'.
[  152.287008][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'.
[  152.294960][T11149] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1539'.
[  152.298188][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.360681][T11157] netlink: 'syz.1.1543': attribute type 2 has an invalid length.
[  152.378397][T11157] k*]: entered promiscuous mode
[  152.383721][T11157] IPv6: NLM_F_CREATE should be specified when creating new route
[  152.484047][T11166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1545'.
[  152.494077][T11168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1547'.
[  152.498276][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'.
[  152.835427][T11193] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1554'.
[  152.841533][T11193] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1554'.
[  153.120899][T11210] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  153.199338][T11212] dvmrp0: entered allmulticast mode
[  153.234075][T11214] tc_dump_action: action bad kind
[  153.660875][T11260] Bluetooth: MGMT ver 1.23
[  153.892742][T11285] openvswitch: netlink: IP tunnel dst address not specified
[  154.172402][T11299] netlink: 'syz.1.1585': attribute type 178 has an invalid length.
[  154.295592][T11312] IPVS: Unknown mcast interface: veth0_to_bond
[  154.434476][T11328] netlink: 'syz.1.1593': attribute type 2 has an invalid length.
[  154.441861][T11328] : entered promiscuous mode
[  154.488561][T11330] netlink: 'syz.3.1594': attribute type 5 has an invalid length.
[  154.796202][T11362] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.808456][T11362] syzkaller0: entered promiscuous mode
[  154.810877][T11362] syzkaller0: entered allmulticast mode
[  154.995810][T11382] netlink: 'syz.0.1613': attribute type 4 has an invalid length.
[  155.164909][T11398] sctp: [Deprecated]: syz.3.1619 (pid 11398) Use of int in max_burst socket option deprecated.
[  155.164909][T11398] Use struct sctp_assoc_value instead
[  156.195247][T11467] netlink: 'syz.3.1642': attribute type 4 has an invalid length.
[  156.317317][T11477] netlink: 'syz.3.1643': attribute type 12 has an invalid length.
[  156.879386][T11516] !: renamed from dummy0
[  157.624177][T11526] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  157.822451][T11523] __nla_validate_parse: 26 callbacks suppressed
[  157.822466][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'.
[  157.919885][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'.
[  157.952069][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'.
[  157.954963][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'.
[  157.959551][T11555] netlink: 'syz.3.1667': attribute type 1 has an invalid length.
[  157.981175][T11555] bond2: entered promiscuous mode
[  157.984788][T11555] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.990749][T11555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1667'.
[  158.079106][T11569] netlink: 'syz.3.1673': attribute type 6 has an invalid length.
[  158.086614][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'.
[  158.096366][T11569] netlink: 'syz.3.1673': attribute type 6 has an invalid length.
[  158.150077][T11577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1675'.
[  158.170441][T11578] netlink: 'syz.1.1676': attribute type 13 has an invalid length.
[  158.210226][T11569] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1673'.
[  158.478864][T11610] tun1: tun_chr_ioctl cmd 2147767520
[  158.484541][T11608] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1686'.
[  158.522861][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'.
[  158.657330][T11615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.750409][T11615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.812333][T11615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.871784][T11615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  158.927498][ T5875] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.945016][ T5875] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.959105][ T5875] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.968927][ T5875] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.411835][T11625] xt_l2tp: unknown flags: 51
[  159.468878][T11629] tc_dump_action: action bad kind
[  159.602407][T11647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.752796][T11657] netlink: 'syz.1.1703': attribute type 10 has an invalid length.
[  161.016876][T11730] netlink: 'syz.0.1723': attribute type 1 has an invalid length.
[  161.020497][T11730] netlink: 'syz.0.1723': attribute type 1 has an invalid length.
[  161.025660][T11724] netlink: 'syz.1.1720': attribute type 5 has an invalid length.
[  161.216939][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  161.383128][T11764] nbd: couldn't find device at index 536870912
[  161.412520][T11769] netlink: 'syz.1.1732': attribute type 4 has an invalid length.
[  161.466681][T11772] tipc: Resetting bearer <eth:syzkaller0>
[  161.472096][T11772] syzkaller0: left promiscuous mode
[  161.474151][T11772] syzkaller0: left allmulticast mode
[  161.486032][ T5875] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.489076][ T5875] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.491657][ T5875] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.494399][ T5875] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.641208][T11778] netlink: 'syz.1.1735': attribute type 4 has an invalid length.
[  162.825930][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  163.001045][T11823] __nla_validate_parse: 18 callbacks suppressed
[  163.001055][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1747'.
[  163.007687][T11823] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1747'.
[  163.010512][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'.
[  163.014229][T11815] IPv6: NLM_F_REPLACE set, but no existing node found!
[  163.032674][T11823] C: renamed from team_slave_0
[  163.036421][T11823] netlink: 'syz.1.1747': attribute type 3 has an invalid length.
[  163.039614][T11823] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1747'.
[  163.042505][T11823] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  163.126821][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  163.147968][T11830] netlink: 'syz.0.1749': attribute type 1 has an invalid length.
[  163.298740][T11839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1750'.
[  163.305857][T11839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1750'.
[  163.512543][T11870] netlink: 'syz.0.1758': attribute type 29 has an invalid length.
[  163.515035][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'.
[  163.622312][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'.
[  163.625384][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'.
[  164.386358][T11930] netlink: 'syz.3.1773': attribute type 4 has an invalid length.
[  164.498460][T11936] syzkaller1: entered promiscuous mode
[  164.500277][T11936] syzkaller1: entered allmulticast mode
[  165.490285][T12026] nbd: must specify an index to disconnect
[  165.493009][T12025] nbd: must specify an index to disconnect
[  165.526637][T12025] block nbd0: not configured, cannot reconfigure
[  165.530367][T12026] block nbd0: not configured, cannot reconfigure
[  165.655737][T12055] netlink: 'syz.0.1809': attribute type 83 has an invalid length.
[  165.894623][T12071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.976537][T12077] tc_dump_action: action bad kind
[  166.263200][T12091] netlink: 'syz.1.1821': attribute type 5 has an invalid length.
[  166.293846][T12096] syzkaller0: entered promiscuous mode
[  166.295738][T12096] syzkaller0: entered allmulticast mode
[  166.484841][T12055] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  166.524656][T12106] netlink: 'syz.0.1826': attribute type 23 has an invalid length.
[  166.689431][T12116] netlink: 'syz.3.1830': attribute type 101 has an invalid length.
[  166.692290][T12116] netlink: 'syz.3.1830': attribute type 7 has an invalid length.
[  166.806662][T12124] syzkaller1: entered promiscuous mode
[  166.808902][T12124] syzkaller1: entered allmulticast mode
[  166.923409][T12130] netlink: 'syz.3.1836': attribute type 4 has an invalid length.
[  166.983656][T12140] netlink: 'syz.0.1838': attribute type 12 has an invalid length.
[  167.283036][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  167.653095][T12193] tc_dump_action: action bad kind
[  168.135607][T12223] netlink: 'syz.1.1858': attribute type 12 has an invalid length.
[  169.073703][T12246] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  169.073710][T12247] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  169.073765][T12247] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  169.086359][T12246] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  169.454860][T12276] netlink: 'syz.3.1872': attribute type 12 has an invalid length.
[  169.467834][T12281] __nla_validate_parse: 27 callbacks suppressed
[  169.467843][T12281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'.
[  169.502420][T12281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'.
[  169.905719][T12318] netlink: 'syz.3.1884': attribute type 1 has an invalid length.
[  169.909518][T12318] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1884'.
[  170.119239][T12341] bond3: entered promiscuous mode
[  170.121362][T12341] 8021q: adding VLAN 0 to HW filter on device bond3
[  170.125848][T12341] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1888'.
[  170.134046][T12341] batadv1: entered promiscuous mode
[  170.135884][T12341] batadv1: entered allmulticast mode
[  170.138733][T12341] 8021q: adding VLAN 0 to HW filter on device batadv1
[  170.141777][T12341] bond3: (slave batadv1): making interface the new active one
[  170.144620][T12341] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  170.226756][T12341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1888'.
[  170.348083][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  170.519156][ T9585] Bluetooth: hci3: command 0x0405 tx timeout
[  170.942477][T12384] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1900'.
[  171.090883][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  171.354250][T12397] validate_nla: 2 callbacks suppressed
[  171.354259][T12397] netlink: 'syz.3.1902': attribute type 1 has an invalid length.
[  171.361421][T12397] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1902'.
[  171.492851][   T24] IPVS: starting estimator thread 0...
[  171.495853][T12407] nbd: must specify at least one socket
[  171.584160][T12411] IPVS: using max 73 ests per chain, 175200 per kthread
[  171.601345][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'.
[  171.604839][T12419] netlink: 'syz.1.1906': attribute type 13 has an invalid length.
[  171.689733][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  171.821497][T12428] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1908'.
[  172.369312][T12440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.372666][T12440] syzkaller0: entered promiscuous mode
[  172.374932][T12440] syzkaller0: entered allmulticast mode
[  172.384465][T12440] sch_tbf: burst 126 is lower than device syzkaller0 mtu (1514) !
[  172.394798][T12440] tipc: Resetting bearer <eth:syzkaller0>
[  172.403806][T12439] tipc: Resetting bearer <eth:syzkaller0>
[  172.413158][T12439] tipc: Disabling bearer <eth:syzkaller0>
[  172.580764][T12451] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20002
[  172.695745][T12459] netlink: 'syz.1.1916': attribute type 13 has an invalid length.
[  172.759092][T12464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.165330][T12487] netlink: 'syz.0.1923': attribute type 5 has an invalid length.
[  173.469404][T12492] netlink: 'syz.3.1925': attribute type 12 has an invalid length.
[  173.724212][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  174.125972][T12529] bond2: left promiscuous mode
[  174.135805][T12529] bond3: left promiscuous mode
[  174.143701][T12529] batadv1: left promiscuous mode
[  174.146019][T12529] batadv1: left allmulticast mode
[  174.162056][T12529] tc_dump_action: action bad kind
[  174.700505][T12561] __nla_validate_parse: 2 callbacks suppressed
[  174.700514][T12561] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1941'.
[  175.175446][T12579] syzkaller0: entered promiscuous mode
[  175.177368][T12579] syzkaller0: entered allmulticast mode
[  176.363030][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'.
[  176.369786][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1955'.
[  176.400765][T12611] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1957'.
[  176.416254][T12611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1957'.
[  176.416776][T12613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1958'.
[  176.434699][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'.
[  176.440078][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'.
[  176.589692][T12634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1964'.
[  176.593199][T12634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1964'.
[  176.836491][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  177.254577][T12670] netlink: 'syz.1.1969': attribute type 4 has an invalid length.
[  177.896770][T12715] openvswitch: netlink: Flow actions attr not present in new flow.
[  178.257551][T12745] netlink: 'syz.3.1991': attribute type 1 has an invalid length.
[  178.384154][T12749] netlink: 'syz.0.1992': attribute type 13 has an invalid length.
[  178.439792][T12751] netlink: 'syz.3.1993': attribute type 3 has an invalid length.
[  178.445569][T12754] netlink: 'syz.3.1993': attribute type 3 has an invalid length.
[  178.575366][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  178.583316][T12762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  178.651010][T12770] netlink: 'syz.0.1998': attribute type 4 has an invalid length.
[  178.862468][T12787] netlink: 'syz.0.2003': attribute type 12 has an invalid length.
[  179.152799][T12819] netlink: 'syz.1.2013': attribute type 1 has an invalid length.
[  180.045394][T12858] __nla_validate_parse: 23 callbacks suppressed
[  180.045405][T12858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2024'.
[  180.069112][T12854] delete_channel: no stack
[  180.073411][T12853] tc_dump_action: action bad kind
[  180.224047][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2027'.
[  180.341654][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2030'.
[  180.412022][T12886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2031'.
[  180.518801][T12897] netlink: 'syz.3.2034': attribute type 12 has an invalid length.
[  180.618584][T12907] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2039'.
[  180.623269][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'.
[  180.626686][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'.
[  180.877977][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  180.900094][T12925] netlink: 'syz.3.2046': attribute type 178 has an invalid length.
[  181.055396][T12958] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2052'.
[  181.074987][T12958] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2052'.
[  181.086477][T12958] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2052'.
[  181.791632][T13017] tc_dump_action: action bad kind
[  181.794691][T13019] tc_dump_action: action bad kind
[  182.276551][T13040] validate_nla: 4 callbacks suppressed
[  182.276564][T13040] netlink: 'syz.3.2071': attribute type 5 has an invalid length.
[  182.462469][T13051] syzkaller0: entered promiscuous mode
[  182.464650][T13051] syzkaller0: entered allmulticast mode
[  183.398614][T13061] netlink: 'syz.1.2076': attribute type 4 has an invalid length.
[  183.563899][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  184.085630][T13094] _Z`Ԁ@S!: entered promiscuous mode
[  184.505383][T13131] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  184.509879][T13131] netlink: 'syz.1.2093': attribute type 3 has an invalid length.
[  184.516158][T13131] netlink: 'syz.1.2093': attribute type 3 has an invalid length.
[  184.626837][T13142] netlink: 'syz.3.2099': attribute type 4 has an invalid length.
[  184.836693][T13158] tipc: Resetting bearer <eth:syzkaller0>
[  185.104614][T13187] __nla_validate_parse: 14 callbacks suppressed
[  185.104627][T13187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2114'.
[  185.113509][T13187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2114'.
[  185.281399][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2115'.
[  185.285311][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'.
[  185.289667][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2115'.
[  185.294210][T13194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2115'.
[  185.715550][T13230] netlink: 'syz.1.2125': attribute type 2 has an invalid length.
[  185.718528][ T9585] Bluetooth: hci2: command 0x0406 tx timeout
[  185.847348][T13238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'.
[  186.290734][T13250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2131'.
[  186.294448][T13250] netlink: 'syz.3.2131': attribute type 1 has an invalid length.
[  186.383800][T13255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'.
[  186.620925][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'.
[  186.657040][T13274] Unsupported ieee802154 address type: 0
[  187.670864][T13310] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_tx_wq": -EINTR
[  188.017373][T13358] openvswitch: netlink: Flow key attr not present in new flow.
[  188.057498][T13360] lo speed is unknown, defaulting to 1000
[  188.062712][T13360] lo speed is unknown, defaulting to 1000
[  188.065728][T13360] lo speed is unknown, defaulting to 1000
[  188.080958][T13360] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  188.096264][T13360] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  188.128568][T13365] netlink: 'syz.3.2156': attribute type 4 has an invalid length.
[  188.133984][T13360] lo speed is unknown, defaulting to 1000
[  188.140794][T13360] lo speed is unknown, defaulting to 1000
[  188.143803][T13360] lo speed is unknown, defaulting to 1000
[  188.149156][T13360] lo speed is unknown, defaulting to 1000
[  188.153136][T13360] lo speed is unknown, defaulting to 1000
[  188.197914][T13361] netlink: 'syz.1.2154': attribute type 1 has an invalid length.
[  188.473455][T13381] lo speed is unknown, defaulting to 1000
[  188.860849][T13410] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  188.934425][ T5870] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  189.785636][T13450] bridge6: entered promiscuous mode
[  189.944058][T13454] lo speed is unknown, defaulting to 1000
[  190.033817][T13454] sctp: [Deprecated]: syz.3.2177 (pid 13454) Use of int in max_burst socket option.
[  190.033817][T13454] Use struct sctp_assoc_value instead
[  190.143772][T13474] __nla_validate_parse: 76 callbacks suppressed
[  190.143782][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'.
[  190.235779][T13484] tc_dump_action: action bad kind
[  190.354135][T13487] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2189'.
[  190.358213][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'.
[  190.360989][T13487] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2189'.
[  190.368092][T13487] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2189'.
[  190.386124][T13496] bond5: entered promiscuous mode
[  190.388027][T13496] bond5: entered allmulticast mode
[  190.389869][T13496] 8021q: adding VLAN 0 to HW filter on device bond5
[  190.467160][T13505] lo speed is unknown, defaulting to 1000
[  190.494494][T13509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'.
[  190.539331][T13505] macvtap1: entered allmulticast mode
[  190.541569][T13505] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  190.549138][T13505] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  190.609021][T13520] : renamed from wg2
[  191.063859][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2209'.
[  191.337002][T13577] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  191.400341][T13585] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  191.404188][T13586] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2215'.
[  191.436864][T13590] netlink: 'syz.1.2218': attribute type 10 has an invalid length.
[  191.444210][T13592] netlink: 'syz.0.2217': attribute type 3 has an invalid length.
[  191.447141][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2217'.
[  191.490754][T13597] sctp: [Deprecated]: syz.0.2220 (pid 13597) Use of int in max_burst socket option.
[  191.490754][T13597] Use struct sctp_assoc_value instead
[  191.550635][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'.
[  191.631749][T13610] netlink: 'syz.0.2225': attribute type 4 has an invalid length.
[  191.765012][T13626] lo speed is unknown, defaulting to 1000
[  191.827015][T13630] lo speed is unknown, defaulting to 1000
[  191.881174][T13641] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  191.939193][T13626] lo speed is unknown, defaulting to 1000
[  192.050520][T13649] netlink: 'syz.0.2233': attribute type 3 has an invalid length.
[  192.085813][T13655] netlink: 'syz.0.2235': attribute type 10 has an invalid length.
[  192.091787][T13655] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  192.221263][T13666] macvlan2: entered promiscuous mode
[  192.224242][T13666] vlan0: entered promiscuous mode
[  192.330024][T13677] can: request_module (can-proto-5) failed.
[  192.361145][T13672] lo speed is unknown, defaulting to 1000
[  192.422405][T13684] netlink: 'syz.0.2244': attribute type 4 has an invalid length.
[  192.492196][T13689] sock: sock_set_timeout: `syz.0.2244' (pid 13689) tries to set negative timeout
[  192.586574][T13694] lo speed is unknown, defaulting to 1000
[  192.846059][T13716] lo speed is unknown, defaulting to 1000
[  192.863101][T13717] lo speed is unknown, defaulting to 1000
[  193.021133][T13739] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  193.256344][T13774] validate_nla: 1 callbacks suppressed
[  193.256353][T13774] netlink: 'syz.3.2272': attribute type 4 has an invalid length.
[  193.347883][T13769] lo speed is unknown, defaulting to 1000
[  193.439881][ T5875] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
Connection to localhost closed by remote host.
[  193.857719][ T6066] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
[  194.258542][ T5870] dvmrp0 (unregistering): left allmulticast mode
[  194.281303][ T5870] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  194.886983][ T5870] bond0 (unregistering): Released all slaves
[  194.894207][ T5870] bond1 (unregistering): Released all slaves
[  194.951984][ T5870] bond2 (unregistering): Released all slaves
[  195.004371][ T5870] bond3 (unregistering): Released all slaves
[  195.013558][ T5870] bond4 (unregistering): Released all slaves
[  195.083493][ T5870] : left promiscuous mode
[  195.144258][ T5870] tipc: Disabling bearer <eth:macvtap0>
[  195.150942][ T5870] tipc: Left network mode
[  195.401585][ T5870] hsr_slave_0: left promiscuous mode
[  195.404486][ T5870] hsr_slave_1: left promiscuous mode
[  195.445334][ T5870] pim6reg (unregistering): left allmulticast mode
[  196.309095][ T5870] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
13:40:00  Registers:
info registers vcpu 0

CPU#0
RAX=474762d16f84e800 RBX=ffffffff819683c8 RCX=474762d16f84e800 RDX=0000000000000001
RSI=ffffffff8d9b95c1 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000028506000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0030656764697262
XMM02=00007fdc49f97498 00007fdc49f97470 XMM03=00007fdc49f974a8 00007fdc49f974a0
XMM04=00007fdc4aafd100 00007fdc49f97460 XMM05=00007fdc49f97478 00007fdc49f974c0
XMM06=00007fdc49f974b8 00007fdc49f974b0 XMM07=00007fdc49f974a8 00007fdc49f974a0
XMM08=0000000000000000 00007fdc49e12ee7 XMM09=0000000000000000 00007fdc49e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fd716302ca61db00 RBX=ffffffff819683c8 RCX=fd716302ca61db00 RDX=0000000000000001
RSI=ffffffff8d9b95c1 RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39330 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdc4abfedc0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0069636e5f6c6175 747269762f766564
XMM02=00007f0982597498 00007f0982597470 XMM03=00007f09825974a8 00007f09825974a0
XMM04=00007f09830fd100 00007f0982597460 XMM05=00007f0982597478 00007f09825974c0
XMM06=00007f09825974b8 00007f09825974b0 XMM07=00007f09825974a8 00007f09825974a0
XMM08=0000000000000000 00007f0982412ee7 XMM09=0000000000000000 00007f0982412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
