last executing test programs:

1.060796541s ago: executing program 0 (id=1201):
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000180012800e00010069703667726574617000000000000000060001"], 0x44}}, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/224, 0x8000, 0x800, 0x1}, 0x20)

1.058725938s ago: executing program 0 (id=1204):
socketpair(0x1a, 0x4, 0xffffffff, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r2 = socket$phonet(0x23, 0x2, 0x1)
recvfrom$phonet(r2, &(0x7f00000000c0)=""/120, 0x78, 0x10122, &(0x7f0000000140)={0x23, 0x8, 0x1, 0x10}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='ib_mad_recv_done_handler\x00', r3, 0x0, 0x79a}, 0x18) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9ee0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0xc0, &(0x7f0000000380)=""/192, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xb, 0x0, 0x8000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[{0x4, 0x4, 0x10}, {0x3, 0x2, 0xb, 0x9}, {0x3, 0x2, 0xf, 0x8}], 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='page_pool_state_release\x00', r4, 0x0, 0x8907}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='prq_report\x00', r3, 0x0, 0xc}, 0x18)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000680)=0x1, 0x4) (async)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000006c0), 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x83}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000811}, 0x18) (async)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x101000, 0x0)
ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000980)=0x1090214) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000009c0)={0x10000, 0x5, 0x1, 0x9}, 0x10) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000a00)) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000a40)=0x6, 0x4)
ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000000ac0)={'batadv0\x00', @ifru_data=&(0x7f0000000a80)="627e8be6a7387ce0fcfae9a6bd8ad938b162f79ece9fee87061a3105b7e92797"}) (async)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000b00)=0x1, 0x4) (async)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000b40)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1)
sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0f2c5230037d"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x380}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x40810)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d80)={'wpan0\x00', <r11=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r10, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc045}, 0x4008014)

1.00059558s ago: executing program 1 (id=1205):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
clock_gettime(0xa, 0x0) (async)
listen(r2, 0xfffffffc) (async)
recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000004040)=""/230, 0xe6}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000680)=""/245, 0xf5}, {0x0}], 0x5, &(0x7f0000000800)=""/161, 0xa1}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/233, 0xe9}, 0x3}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001c80)=""/28, 0x1c}], 0x1, &(0x7f0000002f40)=""/4096, 0x1000}, 0xb}], 0x3, 0x100, 0x0) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r6, 0x29, 0x10, 0x0, &(0x7f0000000340)) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0xfffffffffffffee3, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES16=r7, @ANYRES32=r7, @ANYBLOB="58120000000000002c0012800b00010062726964676500001c00028008001c000200000008001a000000008008001b00f8ffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, {0xa, 0x4e24, 0x1000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x739}, 0xffffffffffffffff, {[0x4, 0x5, 0x9, 0x5, 0x7, 0xfffffff8, 0x3, 0xcd]}}, 0x5c)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc81, 0x100, 0x1, 0x2}) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

1.000263897s ago: executing program 0 (id=1206):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4624, 0x0, @local, 0x3}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000000))
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004011}, 0x24008000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4)
recvfrom$inet6(r7, 0x0, 0x0, 0x40000041, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r5}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0xfc, r5}, 0xc)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

999.98596ms ago: executing program 1 (id=1207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, 0x80, 0x0}, 0x20000804)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x0, 0x2e0, 0x1c0, 0x0, 0x1c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'netdevsim0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'vlan0\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@multicast2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3)

994.743042ms ago: executing program 0 (id=1208):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet(0x2b, 0x801, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)

840.418312ms ago: executing program 2 (id=1210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x10})
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b)

770.438239ms ago: executing program 2 (id=1211):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}]}]}, 0x30}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @loopback, 0x8}, 0x1c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x70bd20, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0)

768.770918ms ago: executing program 2 (id=1212):
r0 = socket$isdn(0x22, 0x2, 0x11)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c70800034000000081080002"], 0x168}}, 0x0)

768.492449ms ago: executing program 2 (id=1213):
r0 = socket(0x10, 0x3, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
socket(0x1000000000000010, 0x80802, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
socket$inet6(0xa, 0x3, 0x5) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async, rerun: 32)
socket$inet6(0xa, 0x2, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
socket(0x2, 0x80805, 0x0)
socket(0x2a, 0x80000, 0x9)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000c80)={'gre0\x00', <r1=>0x0, 0x40, 0x8, 0x800, 0x0, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x67, 0x0, 0x8, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa042c00}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB=' \t\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3001028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001a00000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6402028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400d40013f18900438d7a30657b5a657bc6eb2f4727c67ec490b640244f6d768c33f14b69c3015f7ff9106eadd9ebb0bd568727fb66ae9a00000000", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f00102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000104000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004008000089708000000050001faa50c0000040007070100000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES32=r2, @ANYBLOB="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"], 0x920}}, 0x4000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

766.824397ms ago: executing program 0 (id=1214):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000100), &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)

697.719437ms ago: executing program 2 (id=1215):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x14, r1, 0x2, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)

695.922186ms ago: executing program 0 (id=1216):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @private}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000004000000000000000000007e0000002c000000850000002a00000095", @ANYRES16=r1], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000016c0)={<r4=>0x0, "754e7195040000f90600000ac802778f"})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000740)={<r5=>r4, 0x800000000000, 0x4, 0x1})
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, r2, 0x25, 0x0, @void}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10)
getsockname(0xffffffffffffffff, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000000)=0x80)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
unshare(0x40000000)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r9, 0x0, 0xf, 0x0, 0x0)
listen(r8, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0x2710, @hyper}, 0x4)
r10 = accept(r8, 0x0, 0x0)
recvfrom$l2tp6(r10, &(0x7f00000000c0)=""/230, 0xe6, 0x10020, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10)
sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r5, @ANYRES16=r12, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="1400238005001e000100000008001c0009000000e07ed15b9ab3c541eb0f3319c8450abb863bba5c2a1cd31fef2ab9ee45f87895329f272ecca3bcba72faad8a75da649197e1b136e96be978b4e3187f06ed931b1adf4a452662c25a92050659"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40)
shutdown(r10, 0x0)

693.902589ms ago: executing program 2 (id=1217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2000)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
connect(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @local}, 0x2, 0x0, 0x1, 0x1}}, 0x80)
ioctl$TUNSETNOCSUM(r3, 0xff01, 0x110c2300fe)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
recvmsg$unix(r7, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0)
sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r5}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8)
setsockopt$inet_tcp_int(r12, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r13=>0x0})
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0)
r15 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'sit0\x00'})

120.222322ms ago: executing program 1 (id=1218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x2b)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x1, r1}, 0x38)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3ff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x4084)

119.657569ms ago: executing program 1 (id=1219):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r2, 0x6) (async)
r3 = socket$inet6(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async, rerun: 32)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async, rerun: 32)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r5, 0xc08ba000) (async)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20048004) (async)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64)
setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64)
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) (async, rerun: 64)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x43, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async, rerun: 32)
setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000080)=0x2000000, 0x4) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)

116.143836ms ago: executing program 1 (id=1220):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="10a35fb93c70000000ffdbdf2500007bc8000000", @ANYRES32=0x0, @ANYBLOB="83200000c60105003c001280090001007866726d000000002c000280080002000200000008000100010000000800010002000000080001000100000008000100000000001400030067656e65766531000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x5d}], 0x1, 0x10022, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000040), 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000340)=0x6, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESOCT=r3, @ANYRES8=r3, @ANYRES8=r4, @ANYRES64=r1, @ANYRESDEC, @ANYRES32=r2, @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRES16=r6], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRES16=r6], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5d9}}], 0x18}}], 0x1, 0x0) (async)
sendmmsg$sock(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5d9}}], 0x18}}], 0x1, 0x0)
shutdown(r4, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000140)={0x7, 'veth0_to_hsr\x00', {}, 0x2})
getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r9, &(0x7f0000000000)={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

0s ago: executing program 1 (id=1221):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x5da, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2567000000080001006b00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='<t \x00\b@\x00\x00'], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r6, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448)
r10 = socket(0x2, 0x3, 0xfc)
setsockopt$inet_int(r10, 0x0, 0x14, &(0x7f0000000240)=0x13, 0x4)
sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
r11 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r11, 0x29, 0xd0, 0x0, 0x0)
recvfrom$inet(r10, 0x0, 0x0, 0x122, 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0xac7f4000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a)
sendfile(0xffffffffffffffff, r12, 0x0, 0xffffffff000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5916' (ED25519) to the list of known hosts.
syzkaller login: [   40.578790][ T5827] cgroup: Unknown subsys name 'net'
[   40.722382][ T5827] cgroup: Unknown subsys name 'cpuset'
[   40.726803][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.868483][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.463262][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.465964][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.468590][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.472078][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.480166][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.486396][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.494014][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.496975][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.500659][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.503711][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.518237][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.527339][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.529828][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.533579][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.536781][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.612447][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   44.648517][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   44.662193][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   44.678294][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.681925][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.684821][ T5841] bridge_slave_0: entered allmulticast mode
[   44.687855][ T5841] bridge_slave_0: entered promiscuous mode
[   44.693489][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.696357][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.699248][ T5841] bridge_slave_1: entered allmulticast mode
[   44.702471][ T5841] bridge_slave_1: entered promiscuous mode
[   44.726350][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.730428][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.732792][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.735181][ T5845] bridge_slave_0: entered allmulticast mode
[   44.737496][ T5845] bridge_slave_0: entered promiscuous mode
[   44.740506][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.742831][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.745184][ T5845] bridge_slave_1: entered allmulticast mode
[   44.747526][ T5845] bridge_slave_1: entered promiscuous mode
[   44.752585][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.769430][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.784891][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.787960][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.790588][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.793168][ T5850] bridge_slave_0: entered allmulticast mode
[   44.795684][ T5850] bridge_slave_0: entered promiscuous mode
[   44.799374][ T5841] team0: Port device team_slave_0 added
[   44.809102][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.812653][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.815543][ T5850] bridge_slave_1: entered allmulticast mode
[   44.818365][ T5850] bridge_slave_1: entered promiscuous mode
[   44.826266][ T5841] team0: Port device team_slave_1 added
[   44.833635][ T5845] team0: Port device team_slave_0 added
[   44.843791][ T5845] team0: Port device team_slave_1 added
[   44.847513][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.851619][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.854416][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.864878][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.877312][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.880978][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.883899][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.893604][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.897407][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.900763][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.911662][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.922770][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.925141][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.933898][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.942438][ T5850] team0: Port device team_slave_0 added
[   44.950941][ T5850] team0: Port device team_slave_1 added
[   44.966663][ T5841] hsr_slave_0: entered promiscuous mode
[   44.969562][ T5841] hsr_slave_1: entered promiscuous mode
[   44.981385][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.984197][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.994552][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.999756][ T5845] hsr_slave_0: entered promiscuous mode
[   45.002165][ T5845] hsr_slave_1: entered promiscuous mode
[   45.004580][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   45.006920][ T5845] Cannot create hsr debugfs directory
[   45.009287][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.012856][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.023641][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.067643][ T5850] hsr_slave_0: entered promiscuous mode
[   45.069905][ T5850] hsr_slave_1: entered promiscuous mode
[   45.072677][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   45.074997][ T5850] Cannot create hsr debugfs directory
[   45.165472][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.169581][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.174799][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.181299][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.199518][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.210709][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.214368][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.216845][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.219311][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.221745][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.225834][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.229236][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.235523][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.243473][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.249853][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.253869][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.259872][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.262436][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.264970][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.267400][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.289065][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.291481][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.293893][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.296330][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.313266][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.327458][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.331834][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.335541][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.338976][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.344148][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.347470][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.358825][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   45.365066][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.369645][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.372263][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.377836][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.380288][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.385087][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.394646][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   45.402349][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   45.407597][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.410024][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.418067][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.420569][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.424694][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.427055][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.438988][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.441650][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.537950][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.544674][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.558925][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.578214][ T5850] veth0_vlan: entered promiscuous mode
[   45.588228][ T5841] veth0_vlan: entered promiscuous mode
[   45.593231][ T5850] veth1_vlan: entered promiscuous mode
[   45.598268][ T5841] veth1_vlan: entered promiscuous mode
[   45.602557][ T5845] veth0_vlan: entered promiscuous mode
[   45.611016][ T5845] veth1_vlan: entered promiscuous mode
[   45.623943][ T5841] veth0_macvtap: entered promiscuous mode
[   45.629149][ T5850] veth0_macvtap: entered promiscuous mode
[   45.635572][ T5841] veth1_macvtap: entered promiscuous mode
[   45.639228][ T5850] veth1_macvtap: entered promiscuous mode
[   45.643624][ T5845] veth0_macvtap: entered promiscuous mode
[   45.649881][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.654248][ T5845] veth1_macvtap: entered promiscuous mode
[   45.658507][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.662057][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.667035][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.672308][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.676180][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.681884][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.692520][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.699244][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.703426][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.708383][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.713909][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.717787][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.735800][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.740252][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.744089][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.749850][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.753470][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.756324][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.764960][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.780199][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.782773][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.798196][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.804527][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.806914][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.815662][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.815841][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.833902][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.844987][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.845290][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.855335][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.886148][ T5910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   45.914318][ T5913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   45.984103][ T5923] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   46.046727][ T5916] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.051077][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.125164][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.130128][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.132696][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.135332][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.137901][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.142804][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.146576][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.149044][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.154223][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.156791][ T5942] netlink: 248 bytes leftover after parsing attributes in process `syz.2.11'.
[   46.159770][ T5940] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   46.200697][ T5948] Zero length message leads to an empty skb
[   46.345282][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'.
[   46.510191][   T54] Bluetooth: hci1: command tx timeout
[   46.512295][   T54] Bluetooth: hci0: command tx timeout
[   46.600208][ T5244] Bluetooth: hci2: command tx timeout
[   47.121473][ T5998] syzkaller0: entered promiscuous mode
[   47.123983][ T5998] syzkaller0: entered allmulticast mode
[   47.127288][ T5997] tipc: Started in network mode
[   47.129377][ T5997] tipc: Node identity 2e8ba28a03d5, cluster identity 4711
[   47.134753][ T5997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.145565][ T5997] tipc: Resetting bearer <eth:syzkaller0>
[   47.151734][ T5997] tipc: Disabling bearer <eth:syzkaller0>
[   47.749631][ T6010] netlink: 220 bytes leftover after parsing attributes in process `syz.0.22'.
[   47.788959][ T6012] trusted_key: syz.0.23 sent an empty control message without MSG_MORE.
[   47.838588][ T6024] IPv6: Can't replace route, no match found
[   47.844301][ T6021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26'.
[   47.847784][ T6021] netlink: 43 bytes leftover after parsing attributes in process `syz.1.26'.
[   47.851502][ T6021] netlink: 43 bytes leftover after parsing attributes in process `syz.1.26'.
[   47.920849][ T6028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.28'.
[   48.063783][ T5871] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   48.102032][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'.
[   48.600013][ T5244] Bluetooth: hci0: command tx timeout
[   48.600123][   T54] Bluetooth: hci1: command tx timeout
[   48.670142][   T54] Bluetooth: hci2: command tx timeout
[   48.818491][ T6064] tipc: Started in network mode
[   48.820623][ T6064] tipc: Node identity ea8a7db77d62, cluster identity 4711
[   48.823299][ T6064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.826204][ T6064] syzkaller0: entered promiscuous mode
[   48.828200][ T6064] syzkaller0: entered allmulticast mode
[   48.833738][ T6064] syzkaller0: mtu less than device minimum
[   48.836586][ T6063] tipc: Resetting bearer <eth:syzkaller0>
[   48.842658][ T6063] tipc: Disabling bearer <eth:syzkaller0>
[   48.897202][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.194519][ T6087] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[   49.205139][ T6090] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[   49.261341][    T9] IPVS: starting estimator thread 0...
[   49.350019][ T6093] IPVS: using max 71 ests per chain, 170400 per kthread
[   49.464193][ T6133] bridge1: entered promiscuous mode
[   49.465971][ T6133] bridge1: entered allmulticast mode
[   49.565597][ T6139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.615411][ T6139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.656167][ T6139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.696025][ T6139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.747199][ T5905] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.755015][ T5905] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.766221][ T5905] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.769558][ T5905] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.422041][ T6185] tipc: Cannot configure node identity twice
[   50.543154][ T6191] syzkaller0: entered promiscuous mode
[   50.545303][ T6191] syzkaller0: entered allmulticast mode
[   50.674596][   T54] Bluetooth: hci1: command tx timeout
[   50.680179][   T54] Bluetooth: hci0: command tx timeout
[   50.751316][   T54] Bluetooth: hci2: command tx timeout
[   51.607076][ T6215] raw_sendmsg: syz.2.77 forgot to set AF_INET. Fix it!
[   51.678258][ T6219] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   51.849386][ T6234] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.861013][ T6234] bridge_slave_0: left allmulticast mode
[   51.863336][ T6234] bridge_slave_0: left promiscuous mode
[   51.865405][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.869911][ T6234] bridge_slave_1: left allmulticast mode
[   51.874403][ T6234] bridge_slave_1: left promiscuous mode
[   51.876872][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.884582][ T6234] bond0: (slave bond_slave_0): Releasing backup interface
[   51.888876][ T6234] bond0: (slave bond_slave_1): Releasing backup interface
[   51.895645][ T6234] team0: Port device team_slave_0 removed
[   51.900159][ T6234] team0: Port device team_slave_1 removed
[   51.903088][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.905675][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.909154][ T6235] rdma_op ffff888107b331f0 conn xmit_rdma 0000000000000000
[   51.909347][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.914960][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.760103][ T5244] Bluetooth: hci1: command tx timeout
[   52.761971][   T54] Bluetooth: hci0: command tx timeout
[   52.825698][ T6254] __nla_validate_parse: 12 callbacks suppressed
[   52.825708][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'.
[   52.830719][   T54] Bluetooth: hci2: command tx timeout
[   52.833378][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'.
[   52.863784][ T6256] netlink: 44 bytes leftover after parsing attributes in process `syz.1.92'.
[   52.866602][ T6256] team0: Mode changed to "broadcast"
[   52.868877][ T6256] vlan0: entered promiscuous mode
[   52.873599][ T6256] team0: Port device vlan0 added
[   52.878017][ T6256] tipc: Enabled bearer <eth:team0>, priority 0
[   53.322189][ T6270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.97'.
[   53.514614][ T6291] netlink: 112 bytes leftover after parsing attributes in process `syz.2.103'.
[   53.535242][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.104'.
[   53.538322][ T6293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.104'.
[   53.555337][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'.
[   53.648703][ T6302] syz.2.107: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   53.654379][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.2.107 Not tainted syzkaller #0 PREEMPT(full) 
[   53.654390][ T6302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   53.654395][ T6302] Call Trace:
[   53.654397][ T6302]  <TASK>
[   53.654400][ T6302]  dump_stack_lvl+0x189/0x250
[   53.654414][ T6302]  ? __pfx_dump_stack_lvl+0x10/0x10
[   53.654422][ T6302]  ? __pfx__printk+0x10/0x10
[   53.654430][ T6302]  ? lock_release+0x4b/0x3e0
[   53.654441][ T6302]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   53.654449][ T6302]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   53.654457][ T6302]  warn_alloc+0x214/0x310
[   53.654468][ T6302]  ? stack_depot_save_flags+0x41b/0x860
[   53.654477][ T6302]  ? __pfx_warn_alloc+0x10/0x10
[   53.654487][ T6302]  ? kasan_save_track+0x4f/0x80
[   53.654496][ T6302]  ? xskq_create+0x56/0x170
[   53.654506][ T6302]  ? xsk_init_queue+0xb0/0x110
[   53.654514][ T6302]  ? xsk_setsockopt+0x4dc/0x8d0
[   53.654523][ T6302]  ? do_sock_setsockopt+0x17c/0x1b0
[   53.654530][ T6302]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   53.654536][ T6302]  ? do_syscall_64+0xfa/0x3b0
[   53.654542][ T6302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.654549][ T6302]  __vmalloc_node_range_noprof+0x125/0x12f0
[   53.654563][ T6302]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   53.654572][ T6302]  ? xsk_setsockopt+0x462/0x8d0
[   53.654581][ T6302]  ? __kasan_kmalloc+0x93/0xb0
[   53.654590][ T6302]  vmalloc_user_noprof+0xad/0xf0
[   53.654599][ T6302]  ? xskq_create+0xbf/0x170
[   53.654608][ T6302]  xskq_create+0xbf/0x170
[   53.654617][ T6302]  xsk_init_queue+0xb0/0x110
[   53.654626][ T6302]  xsk_setsockopt+0x4dc/0x8d0
[   53.654635][ T6302]  ? __pfx_xsk_setsockopt+0x10/0x10
[   53.654643][ T6302]  ? __pfx_aa_sk_perm+0x10/0x10
[   53.654653][ T6302]  ? lock_release+0x4b/0x3e0
[   53.654662][ T6302]  ? aa_sock_opt_perm+0xff/0x1b0
[   53.654669][ T6302]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   53.654677][ T6302]  ? __pfx_xsk_setsockopt+0x10/0x10
[   53.654685][ T6302]  do_sock_setsockopt+0x17c/0x1b0
[   53.654692][ T6302]  __x64_sys_setsockopt+0x13f/0x1b0
[   53.654700][ T6302]  do_syscall_64+0xfa/0x3b0
[   53.654709][ T6302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.654715][ T6302]  ? exc_page_fault+0x9f/0xf0
[   53.654724][ T6302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.654731][ T6302] RIP: 0033:0x7f666538ebe9
[   53.654737][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.654743][ T6302] RSP: 002b:00007f66661d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   53.654752][ T6302] RAX: ffffffffffffffda RBX: 00007f66655b5fa0 RCX: 00007f666538ebe9
[   53.654757][ T6302] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[   53.654761][ T6302] RBP: 00007f6665411e19 R08: 0000000000000004 R09: 0000000000000000
[   53.654765][ T6302] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   53.654769][ T6302] R13: 00007f66655b6038 R14: 00007f66655b5fa0 R15: 00007ffdfb8a7598
[   53.654776][ T6302]  </TASK>
[   53.654779][ T6302] Mem-Info:
[   53.754858][ T6302] active_anon:5036 inactive_anon:0 isolated_anon:0
[   53.754858][ T6302]  active_file:1153 inactive_file:38207 isolated_file:0
[   53.754858][ T6302]  unevictable:1768 dirty:1469 writeback:0
[   53.754858][ T6302]  slab_reclaimable:9558 slab_unreclaimable:51321
[   53.754858][ T6302]  mapped:18223 shmem:2439 pagetables:900
[   53.754858][ T6302]  sec_pagetables:0 bounce:0
[   53.754858][ T6302]  kernel_misc_reclaimable:0
[   53.754858][ T6302]  free:304509 free_pcp:18617 free_cma:0
[   53.769272][ T6302] Node 0 active_anon:11788kB inactive_anon:0kB active_file:3076kB inactive_file:129868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32500kB dirty:3748kB writeback:0kB shmem:5072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5896kB pagetables:2024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   53.779845][ T6302] Node 1 active_anon:8356kB inactive_anon:0kB active_file:1536kB inactive_file:22960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40392kB dirty:2128kB writeback:0kB shmem:4684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5600kB pagetables:1576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   53.790209][ T6302] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   53.799241][ T6302] lowmem_reserve[]: 0 811 811 811 811
[   53.801086][ T6302] Node 0 DMA32 free:337164kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11652kB inactive_anon:0kB active_file:3076kB inactive_file:129868kB unevictable:3536kB writepending:3748kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:30448kB local_pcp:14348kB free_cma:0kB
[   53.811347][ T6302] lowmem_reserve[]: 0 0 0 0 0
[   53.814194][ T6302] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   53.824311][ T6302] lowmem_reserve[]: 0 0 854 854 854
[   53.826129][ T6302] Node 1 Normal free:406704kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8288kB inactive_anon:0kB active_file:1536kB inactive_file:22960kB unevictable:3536kB writepending:2128kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43976kB local_pcp:22116kB free_cma:0kB
[   53.836301][ T6302] lowmem_reserve[]: 0 0 0 0 0
[   53.837906][ T6302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   53.841998][ T6302] Node 0 DMA32: 265*4kB (UME) 184*8kB (UME) 112*16kB (M) 285*32kB (UM) 95*64kB (UME) 28*128kB (UM) 13*256kB (UM) 5*512kB (M) 5*1024kB (UM) 2*2048kB (ME) 73*4096kB (M) = 337220kB
[   53.847662][ T6302] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   53.853374][ T6302] Node 1 Normal: 384*4kB (UE) 394*8kB (UME) 318*16kB (UM) 4*32kB (UME) 2*64kB (ME) 1*128kB (E) 0*256kB 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 95*4096kB (M) = 406448kB
[   53.858936][ T6302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   53.862203][ T6302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   53.865422][ T6302] 41799 total pagecache pages
[   53.867125][ T6302] 0 pages in swap cache
[   53.868570][ T6302] Free swap  = 124996kB
[   53.870242][ T6302] Total swap = 124996kB
[   53.871736][ T6302] 786301 pages RAM
[   53.873173][ T6302] 0 pages HighMem/MovableOnly
[   53.874968][ T6302] 241340 pages reserved
[   53.876516][ T6302] 0 pages cma reserved
[   53.943523][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'.
[   53.947301][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'.
[   53.973667][ T6326] !: renamed from dummy0 (while UP)
[   53.993265][  T973] tipc: Node number set to 2548596151
[   54.815115][ T6365] IPv6: sit1: Disabled Multicast RS
[   54.842344][ T6370] veth1_macvtap: left promiscuous mode
[   54.844234][ T6370] macsec0: entered allmulticast mode
[   54.854103][ T6370] veth1_macvtap: entered promiscuous mode
[   54.856223][ T6370] veth1_macvtap: entered allmulticast mode
[   54.858614][ T6370] macsec0: left allmulticast mode
[   54.862121][ T6370] veth1_macvtap: left allmulticast mode
[   54.942529][ T6374] pim6reg1: entered promiscuous mode
[   54.945261][ T6374] pim6reg1: entered allmulticast mode
[   55.112923][ T6392] openvswitch: netlink: IPv4 tun info is not correct
[   55.182607][ T6406] openvswitch: netlink: IPv4 tunnel dst address is zero
[   55.331421][ T6426] validate_nla: 52 callbacks suppressed
[   55.331435][ T6426] netlink: 'syz.2.138': attribute type 4 has an invalid length.
[   55.374309][ T6429] bridge0: port 3(erspan0) entered blocking state
[   55.376593][ T6429] bridge0: port 3(erspan0) entered disabled state
[   55.378904][ T6429] erspan0: entered allmulticast mode
[   55.382667][ T6429] erspan0: entered promiscuous mode
[   55.384660][ T6429] bridge0: port 3(erspan0) entered blocking state
[   55.386907][ T6429] bridge0: port 3(erspan0) entered forwarding state
[   55.443751][ T6436] erspan0: left allmulticast mode
[   55.449793][ T6436] erspan0: left promiscuous mode
[   55.454091][ T6436] bridge0: port 3(erspan0) entered disabled state
[   55.492383][ T6437] netlink: 'syz.1.140': attribute type 11 has an invalid length.
[   55.587409][ T6449] geneve2: entered promiscuous mode
[   55.715369][ T6472] delete_channel: no stack
[   55.742276][ T6475] batadv_slave_1: entered promiscuous mode
[   55.777391][ T6478] netlink: 'syz.1.149': attribute type 2 has an invalid length.
[   55.780982][ T6478] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   55.787753][ T6480] netlink: 'syz.0.153': attribute type 7 has an invalid length.
[   55.791629][ T6474] batadv_slave_1: left promiscuous mode
[   55.794227][ T6480] netlink: 'syz.0.153': attribute type 8 has an invalid length.
[   55.938628][ T6504] pim6reg1: entered promiscuous mode
[   55.940729][ T6504] pim6reg1: entered allmulticast mode
[   55.962466][ T6502] Bluetooth: MGMT ver 1.23
[   55.965239][ T6502] netlink: 'syz.2.161': attribute type 8 has an invalid length.
[   56.070144][ T6506] nbd2: detected capacity change from 0 to 63
[   56.073675][ T6510] block nbd2: NBD_DISCONNECT
[   56.075578][ T6510] block nbd2: Disconnected due to user request.
[   56.078026][ T6510] block nbd2: shutting down sockets
[   56.080198][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.084036][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   56.087430][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.091040][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   56.093687][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.096750][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   56.099369][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.102504][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   56.105404][ T5844] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.108753][ T5844] Buffer I/O error on dev nbd2, logical block 0, async page read
[   56.112345][ T5844] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.112916][ T6506] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   56.115877][ T5844] Buffer I/O error on dev nbd2, logical block 1, async page read
[   56.125030][ T5844] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.130173][ T5844] Buffer I/O error on dev nbd2, logical block 2, async page read
[   56.133704][ T5844] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.138561][ T5844] Buffer I/O error on dev nbd2, logical block 3, async page read
[   56.142222][ T5844] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.146201][ T5844] Buffer I/O error on dev nbd2, logical block 0, async page read
[   56.149388][ T5844] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   56.161043][ T5844] Buffer I/O error on dev nbd2, logical block 1, async page read
[   56.166607][ T5844] ldm_validate_partition_table(): Disk read failed.
[   56.170617][ T5844] Dev nbd2: unable to read RDB block 0
[   56.173907][ T5844]  nbd2: unable to read partition table
[   56.182833][ T5844] ldm_validate_partition_table(): Disk read failed.
[   56.188629][ T5844] Dev nbd2: unable to read RDB block 0
[   56.192578][ T5844]  nbd2: unable to read partition table
[   56.429195][ T6546] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   56.439049][ T6546] : renamed from wg2 (while UP)
[   56.643439][ T6559] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[   56.646362][ T6559] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[   56.663196][ T6559] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[   56.761489][ T6563] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   56.761527][ T5905] bond0: (slave bond_slave_0): interface is now down
[   56.769727][ T5905] bond0: (slave bond_slave_1): interface is now down
[   56.777029][ T5905] bond0: now running without any active interface!
[   57.224872][ T6589] batman_adv: batadv0: Adding interface: macvlan1
[   57.227245][ T6589] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.237601][ T6589] batman_adv: batadv0: Interface activated: macvlan1
[   57.298767][ T6592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.551052][ T6610] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.700866][ T6617] sctp: [Deprecated]: syz.0.198 (pid 6617) Use of struct sctp_assoc_value in delayed_ack socket option.
[   57.700866][ T6617] Use struct sctp_sack_info instead
[   57.707930][ T6617] sctp: [Deprecated]: syz.0.198 (pid 6617) Use of struct sctp_assoc_value in delayed_ack socket option.
[   57.707930][ T6617] Use struct sctp_sack_info instead
[   57.978463][ T6635] __nla_validate_parse: 36 callbacks suppressed
[   57.978477][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.202'.
[   58.076167][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   58.102264][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'.
[   58.105855][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.206'.
[   58.109405][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'.
[   58.119286][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'.
[   58.127952][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'.
[   58.163486][ T6656] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   58.247474][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.0.209'.
[   58.282272][ T6664] tipc: Started in network mode
[   58.284270][ T6664] tipc: Node identity cacfb1714292, cluster identity 4711
[   58.287824][ T6664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.293233][ T6664] syzkaller0: entered promiscuous mode
[   58.295452][ T6664] syzkaller0: entered allmulticast mode
[   58.301108][ T6663] tipc: Resetting bearer <eth:syzkaller0>
[   58.311347][ T6663] tipc: Disabling bearer <eth:syzkaller0>
[   58.372222][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'.
[   58.460933][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'.
[   58.464956][ T6676] veth1_macvtap: left promiscuous mode
[   58.488866][ T6685] nbd: must specify at least one socket
[   58.601567][ T6699] netlink: del zone limit has 4 unknown bytes
[   58.609494][ T6701] netlink: del zone limit has 4 unknown bytes
[   58.925839][ T6734] bridge_slave_0: left allmulticast mode
[   58.930228][ T6734] bridge_slave_0: left promiscuous mode
[   58.933950][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.944201][ T6734] bridge_slave_1: left allmulticast mode
[   58.946556][ T6734] bridge_slave_1: left promiscuous mode
[   58.948642][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.959214][ T6734] bond0: (slave bond_slave_0): Releasing backup interface
[   58.971049][ T6734] bond0: (slave bond_slave_1): Releasing backup interface
[   58.976175][ T6740] rdma_op ffff88811bfa49f0 conn xmit_rdma 0000000000000000
[   58.984606][ T6734] team0: Port device team_slave_0 removed
[   58.989137][ T6734] team0: Port device team_slave_1 removed
[   58.993019][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.995535][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.998779][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.002012][ T6734] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.006419][ T6734] batman_adv: batadv0: Interface deactivated: macvlan1
[   59.008702][ T6734] batman_adv: batadv0: Removing interface: macvlan1
[   59.012951][ T6734] bond0: (slave wlan1): Releasing backup interface
[   59.022887][ T6740] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.029302][ T6739] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   59.144518][ T6749] tun0: tun_chr_ioctl cmd 2148045848
[   59.146931][ T6749] tun0: tun_chr_ioctl cmd 21731
[   59.351508][ T6768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.363612][ T6768] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.412936][ T6772] IPv6: addrconf: prefix option has invalid lifetime
[   59.727917][ T6788] tipc: Resetting bearer <eth:team0>
[   59.878738][ T5871] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.881909][ T5871] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.884778][ T5871] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.892042][ T5871] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.878444][  T973] IPVS: starting estimator thread 0...
[   60.994516][ T6835] IPVS: using max 134 ests per chain, 321600 per kthread
[   61.359579][ T6878] IPv6: addrconf: prefix option has invalid lifetime
[   61.361842][ T6878] IPv6: addrconf: prefix option has invalid lifetime
[   61.364027][ T6878] IPv6: addrconf: prefix option has invalid lifetime
[   61.639241][ T6896] validate_nla: 15 callbacks suppressed
[   61.639256][ T6896] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[   61.748089][ T6907] : entered promiscuous mode
[   61.809381][ T6919] vxcan1: entered allmulticast mode
[   61.917726][ T6935] pim6reg: entered allmulticast mode
[   61.919652][ T6935] vxcan1: left allmulticast mode
[   61.922776][ T6935] pim6reg: left allmulticast mode
[   61.932458][ T6936] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   61.969603][ T6939] pim6reg: entered allmulticast mode
[   61.974120][ T6935] pim6reg: left allmulticast mode
[   62.167008][ T6970] netlink: 'syz.0.300': attribute type 1 has an invalid length.
[   62.564854][ T7012] IPv6: syztnl1: Disabled Multicast RS
[   62.706906][ T7021] netlink: 'syz.2.312': attribute type 16 has an invalid length.
[   62.709593][ T7021] netlink: 'syz.2.312': attribute type 17 has an invalid length.
[   62.725259][ T7021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.155256][ T7026] syzkaller0: entered promiscuous mode
[   63.157642][ T7026] syzkaller0: entered allmulticast mode
[   63.171599][ T7026] Driver unsupported XDP return value 0 on prog  (id 134) dev N/A, expect packet loss!
[   63.357466][ T7028] __nla_validate_parse: 24 callbacks suppressed
[   63.357479][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'.
[   63.367607][ T7028] batman_adv: batadv0: Adding interface: ipvlan2
[   63.370327][ T7028] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.381031][ T7028] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   63.422817][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'.
[   63.548563][ T7039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.552410][ T7039] syzkaller0: entered promiscuous mode
[   63.554603][ T7039] syzkaller0: entered allmulticast mode
[   63.563523][ T7039] tipc: Resetting bearer <eth:syzkaller0>
[   63.566697][ T7039] netlink: 'syz.0.319': attribute type 2 has an invalid length.
[   63.571122][ T7038] tipc: Resetting bearer <eth:syzkaller0>
[   63.574458][ T7038] tipc: Disabling bearer <eth:syzkaller0>
[   63.629751][ T7041] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   63.632638][ T7041] netlink: 224 bytes leftover after parsing attributes in process `syz.0.320'.
[   64.631575][ T7087] ipvlan2: entered promiscuous mode
[   64.633779][ T7087] ipvlan2: entered allmulticast mode
[   64.636105][ T7087] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   64.707794][ T7095] netlink: 'syz.2.337': attribute type 13 has an invalid length.
[   64.712842][ T7095] netlink: 'syz.2.337': attribute type 17 has an invalid length.
[   64.736634][ T7095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.813099][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[   64.816219][ T7100] bridge_slave_1: left allmulticast mode
[   64.818436][ T7100] bridge_slave_1: left promiscuous mode
[   64.821118][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.824801][ T7100] bridge_slave_0: left allmulticast mode
[   64.826714][ T7100] bridge_slave_0: left promiscuous mode
[   64.828711][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.936953][ T7104] tipc: Cannot configure node identity twice
[   65.028683][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'.
[   65.177358][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'.
[   65.404148][ T7152] pim6reg1: entered promiscuous mode
[   65.406273][ T7152] pim6reg1: entered allmulticast mode
[   65.416448][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.350'.
[   65.419608][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.350'.
[   65.428571][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.350'.
[   65.431962][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.350'.
[   65.453666][ T7156] syzkaller1: entered promiscuous mode
[   65.455631][ T7156] syzkaller1: entered allmulticast mode
[   65.638739][ T7179] netlink: 'syz.0.357': attribute type 2 has an invalid length.
[   65.644070][ T7179] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[   65.829494][ T7200] pim6reg1: entered promiscuous mode
[   65.832053][ T7200] pim6reg1: entered allmulticast mode
[   65.946135][ T7209] tipc: Enabled bearer <udp:syz2>, priority 10
[   66.956012][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.967776][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.017154][ T7269] geneve2: left promiscuous mode
[   67.023211][ T7269] ipvlan2: left promiscuous mode
[   67.025349][ T7269] ipvlan2: left allmulticast mode
[   67.027486][ T7269] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   67.034733][ T5871] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.041055][ T5871] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.045124][ T7281] pim6reg1: entered promiscuous mode
[   67.046984][ T7281] pim6reg1: entered allmulticast mode
[   67.050003][ T5871] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.054669][ T5871] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.060719][   T47] tipc: Node number set to 2287841649
[   67.156139][ T7286] validate_nla: 1 callbacks suppressed
[   67.156153][ T7286] netlink: 'syz.2.392': attribute type 303 has an invalid length.
[   67.196805][ T7295] ip6gre2: entered allmulticast mode
[   67.255967][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.260772][ T7300] bond0: (slave rose0): Enslaving as an active interface with an up link
[   67.317821][ T7307] netlink: 'syz.1.397': attribute type 3 has an invalid length.
[   67.942828][ T1271] cfg80211: failed to load regulatory.db
[   68.149626][ T7322] pim6reg1: entered promiscuous mode
[   68.151591][ T7322] pim6reg1: entered allmulticast mode
[   68.198015][ T7331] pim6reg1: entered promiscuous mode
[   68.199807][ T7331] pim6reg1: entered allmulticast mode
[   68.273844][ T7337] vxlan0: entered promiscuous mode
[   68.275969][ T7337] vxlan0: entered allmulticast mode
[   68.278193][ T5871] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.282426][ T5871] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.285946][ T5871] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.288622][ T5871] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.522121][ T7356] __nla_validate_parse: 24 callbacks suppressed
[   68.522131][ T7356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.410'.
[   68.527145][ T7356] netlink: 43 bytes leftover after parsing attributes in process `syz.2.410'.
[   68.530048][ T7356] netlink: 'syz.2.410': attribute type 5 has an invalid length.
[   68.532761][ T7356] netlink: 43 bytes leftover after parsing attributes in process `syz.2.410'.
[   68.628332][ T7363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.634160][ T7362] tipc: Disabling bearer <eth:syzkaller0>
[   68.782076][ T7369] netlink: 'syz.2.413': attribute type 10 has an invalid length.
[   68.785658][ T7369] team0: Port device dummy0 added
[   68.801233][ T7369] netlink: 'syz.2.413': attribute type 10 has an invalid length.
[   68.810491][ T7369] team0: Port device dummy0 removed
[   68.814326][ T7369] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   68.977142][ T7332] syz.0.399 (7332) used greatest stack depth: 19944 bytes left
[   68.991402][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[   69.000573][ T7373] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   69.217363][ T7376] pim6reg1: entered promiscuous mode
[   69.219131][ T7376] pim6reg1: entered allmulticast mode
[   69.233843][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.415'.
[   69.236680][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'.
[   69.251809][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.415'.
[   69.255083][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.415'.
[   69.474305][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.420'.
[   69.581178][ T7406] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004
[   69.632748][ T7413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.635310][ T7413] syzkaller0: entered promiscuous mode
[   69.637200][ T7413] syzkaller0: entered allmulticast mode
[   69.649826][ T7413] tipc: Resetting bearer <eth:syzkaller0>
[   69.659224][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[   69.674174][ T7420] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   69.818463][ T7448] sctp: [Deprecated]: syz.0.432 (pid 7448) Use of int in max_burst socket option deprecated.
[   69.818463][ T7448] Use struct sctp_assoc_value instead
[   69.865992][ T7458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.868452][ T7458] syzkaller0: entered promiscuous mode
[   69.871187][ T7458] syzkaller0: entered allmulticast mode
[   69.877020][ T7457] tipc: Resetting bearer <eth:syzkaller0>
[   69.884567][ T7457] tipc: Disabling bearer <eth:syzkaller0>
[   69.982551][ T7471] tun0: tun_chr_ioctl cmd 1074025675
[   69.984900][ T7471] tun0: persist enabled
[   69.986831][ T7471] tun0: tun_chr_ioctl cmd 1074025675
[   69.989120][ T7471] tun0: persist enabled
[   70.028478][ T7482] netlink: 'syz.0.437': attribute type 1 has an invalid length.
[   70.036721][ T7482] 8021q: adding VLAN 0 to HW filter on device bond7
[   70.390388][ T7534] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.399662][ T7534] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   70.438743][ T7403] tipc: Resetting bearer <eth:syzkaller0>
[   70.443970][ T7403] tipc: Disabling bearer <eth:syzkaller0>
[   70.603669][ T7559] netlink: 'syz.1.449': attribute type 1 has an invalid length.
[   70.607684][ T7560] syzkaller0: entered promiscuous mode
[   70.611150][ T7560] syzkaller0: entered allmulticast mode
[   70.841694][ T7584] netlink: 'syz.1.455': attribute type 11 has an invalid length.
[   70.876929][ T7591] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   70.882618][ T7591] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   70.885518][ T7591] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   70.911885][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.941018][ T7592] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   70.977282][ T7598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.989897][ T7598] syzkaller0: entered promiscuous mode
[   70.994133][ T7598] syzkaller0: entered allmulticast mode
[   71.001884][ T7598] tipc: Resetting bearer <eth:syzkaller0>
[   71.007212][ T7600] Bluetooth: MGMT ver 1.23
[   71.011246][ T7598] tipc: Resetting bearer <eth:syzkaller0>
[   71.054695][ T7598] tipc: Disabling bearer <eth:syzkaller0>
[   71.243193][ T7626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.246583][ T7626] syzkaller0: entered promiscuous mode
[   71.249564][ T7626] syzkaller0: entered allmulticast mode
[   71.273567][ T7629] tipc: Resetting bearer <eth:syzkaller0>
[   71.284171][ T7629] tipc: Disabling bearer <eth:syzkaller0>
[   71.373769][ T7648] batman_adv: batadv0: Adding interface: ip6gretap1
[   71.376043][ T7648] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.388960][ T7648] batman_adv: batadv0: Interface activated: ip6gretap1
[   71.479794][ T7671] netlink: 'syz.0.481': attribute type 10 has an invalid length.
[   71.486901][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.492021][ T7671] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   71.707003][ T7697] pim6reg1: entered promiscuous mode
[   71.709030][ T7697] pim6reg1: entered allmulticast mode
[   72.060365][ T7732] team0: Port device vlan0 removed
[   72.062884][ T7732] bond0: (slave wlan1): Releasing backup interface
[   72.065731][ T7732] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   72.068512][ T7732] batman_adv: batadv0: Removing interface: ip6gretap1
[   72.112221][ T7732] ieee802154 phy0 wpan0: encryption failed: -22
[   72.368598][ T7756] pim6reg1: entered promiscuous mode
[   72.371723][ T7756] pim6reg1: entered allmulticast mode
[   72.555652][ T7766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   72.801489][ T7782] ipvlan3: entered promiscuous mode
[   72.803715][ T7782] ipvlan3: entered allmulticast mode
[   72.944057][ T7805] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   72.947647][ T7805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.996306][ T7810] pim6reg1: entered promiscuous mode
[   72.998452][ T7810] pim6reg1: entered allmulticast mode
[   73.422739][ T7822] validate_nla: 1 callbacks suppressed
[   73.422754][ T7822] netlink: 'syz.1.534': attribute type 58 has an invalid length.
[   73.810389][ T7840] tc_dump_action: action bad kind
[   73.812534][ T7834] __nla_validate_parse: 26 callbacks suppressed
[   73.812546][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   73.883957][ T7842] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   74.030209][ T7855] veth1_to_bond: entered allmulticast mode
[   74.033708][ T7856] bond_slave_1: entered promiscuous mode
[   74.043059][ T7854] bond_slave_1: left promiscuous mode
[   74.045496][ T7854] veth1_to_bond: left allmulticast mode
[   74.095261][ T7861] netlink: 'syz.2.548': attribute type 2 has an invalid length.
[   74.111223][ T7861] k*]: entered promiscuous mode
[   74.131007][ T5905] bond0: (slave dummy0): interface is now down
[   74.131393][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.137854][ T7861] 8021q: adding VLAN 0 to HW filter on device team0
[   74.142407][ T7861] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   74.150514][ T5860] bond0: (slave dummy0): interface is now down
[   74.153306][ T5860] bond0: now running without any active interface!
[   74.158772][ T7861] veth0_to_team: entered promiscuous mode
[   74.161938][ T7861] veth0_to_team: entered allmulticast mode
[   74.165932][ T7864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   74.171457][ T7864] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   74.190566][ T7864] netlink: 'syz.0.549': attribute type 11 has an invalid length.
[   74.193932][ T7864] netlink: 36 bytes leftover after parsing attributes in process `syz.0.549'.
[   74.286709][ T7875] pimreg: entered allmulticast mode
[   74.297480][ T7875] pimreg: left allmulticast mode
[   74.311752][ T7877] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[   74.327961][ T7877] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.335759][ T7877] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   74.381270][ T7881] gretap1: entered promiscuous mode
[   74.385108][ T7881] bond2: (slave gretap1): making interface the new active one
[   74.392059][ T7881] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   74.468472][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'.
[   74.706186][ T7916] syzkaller0: entered promiscuous mode
[   74.708356][ T7916] syzkaller0: entered allmulticast mode
[   75.167139][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[   75.368389][ T7956] pim6reg1: entered promiscuous mode
[   75.375729][ T7956] pim6reg1: entered allmulticast mode
[   75.382756][ T7956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'.
[   75.385833][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'.
[   75.388876][ T7956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'.
[   75.393291][ T7956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.579'.
[   75.445173][ T7964] netlink: 187192 bytes leftover after parsing attributes in process `syz.0.583'.
[   75.496708][ T7967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.513851][ T7967] syzkaller0: entered promiscuous mode
[   75.516171][ T7967] syzkaller0: entered allmulticast mode
[   75.518294][ T7967] tipc: Resetting bearer <eth:syzkaller0>
[   75.521946][ T7974] IPv6: sit1: Disabled Multicast RS
[   75.525635][ T7966] tipc: Resetting bearer <eth:syzkaller0>
[   75.553978][ T7966] tipc: Disabling bearer <eth:syzkaller0>
[   75.640629][ T7984] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[   75.643395][ T7984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.656291][ T7986] netlink: 'syz.2.590': attribute type 8 has an invalid length.
[   75.686570][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'.
[   76.423945][ T8002] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.456110][ T8002] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.521181][ T8002] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.556167][ T8008] netlink: 'syz.2.597': attribute type 1 has an invalid length.
[   76.576041][ T8002] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.635508][ T5871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.638679][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.648708][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.652338][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.693962][ T8051] erspan0: entered promiscuous mode
[   77.784812][   T47] IPVS: starting estimator thread 0...
[   77.880044][ T8058] IPVS: using max 135 ests per chain, 324000 per kthread
[   78.487829][ T8067] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.542069][ T8068] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   78.558414][ T8067] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.601308][ T8067] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.656834][ T8067] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.729501][ T5905] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.735423][ T5905] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.741946][ T5905] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.749382][ T5905] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.807849][ T8076] syzkaller1: entered promiscuous mode
[   78.811329][ T8076] syzkaller1: entered allmulticast mode
[   78.836329][ T8080] netlink: 'syz.2.623': attribute type 1 has an invalid length.
[   78.839201][ T8080] __nla_validate_parse: 10 callbacks suppressed
[   78.839210][ T8080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.623'.
[   79.196670][ T8097] syzkaller1: entered promiscuous mode
[   79.199042][ T8097] syzkaller1: entered allmulticast mode
[   79.318914][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[   79.322738][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[   79.605352][ T8106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.632'.
[   79.686622][ T8116] syz_tun: entered allmulticast mode
[   79.747186][ T8117] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   80.192712][ T8119] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[   80.195818][ T8119] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[   80.199312][ T8119] netlink: 'syz.0.636': attribute type 10 has an invalid length.
[   80.507417][ T8131] syzkaller1: entered allmulticast mode
[   80.523546][ T8115] syz_tun: left allmulticast mode
[   81.159910][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'.
[   81.163669][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.641'.
[   82.266342][ T8169] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   82.272163][ T8169] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   82.277945][ T8169] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   82.525582][ T8191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.659'.
[   82.560852][ T8194] syzkaller0: entered promiscuous mode
[   82.562730][ T8194] syzkaller0: entered allmulticast mode
[   82.737692][ T8203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.742777][ T8202] tipc: Resetting bearer <eth:syzkaller0>
[   82.761848][ T8202] tipc: Disabling bearer <eth:syzkaller0>
[   82.963266][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'.
[   83.408193][ T8232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.672'.
[   83.412300][ T8232] netlink: 43 bytes leftover after parsing attributes in process `syz.2.672'.
[   83.415416][ T8232] netlink: 'syz.2.672': attribute type 5 has an invalid length.
[   83.840613][ T8247] __nla_validate_parse: 3 callbacks suppressed
[   83.840623][ T8247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.677'.
[   83.871299][ T8248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.878349][ T8253] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.882112][ T8247] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   83.885149][ T8247] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   83.891293][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[   83.895141][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[   83.908617][ T8247] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[   83.915429][ T8247] tipc: Resetting bearer <eth:syzkaller0>
[   83.955779][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'.
[   83.958692][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'.
[   83.963583][ T8261] netlink: 31 bytes leftover after parsing attributes in process `syz.0.682'.
[   83.966741][ T8261] netlink: 'syz.0.682': attribute type 3 has an invalid length.
[   83.969666][ T8261] netlink: 'syz.0.682': attribute type 2 has an invalid length.
[   83.972913][ T8261] netlink: 31 bytes leftover after parsing attributes in process `syz.0.682'.
[   83.976041][ T8261] netlink: 'syz.0.682': attribute type 2 has an invalid length.
[   84.056348][ T8270] tipc: Disabling bearer <eth:team0>
[   84.585240][ T8277] netlink: 248 bytes leftover after parsing attributes in process `syz.2.688'.
[   84.722047][ T8289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.690'.
[   84.812333][ T8298] netlink: 'syz.0.693': attribute type 1 has an invalid length.
[   84.828928][ T8296] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   84.835444][ T8296] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address
[   84.839108][ T8296] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[   84.868395][ T8301] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   84.941113][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'.
[   84.967807][ T8304] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001
[   85.368987][ T8356] vxcan1 speed is unknown, defaulting to 1000
[   85.371456][ T8356] vxcan1 speed is unknown, defaulting to 1000
[   85.374144][ T8356] vxcan1 speed is unknown, defaulting to 1000
[   85.418391][ T8361] vlan2: entered allmulticast mode
[   85.420893][ T8361] veth1: entered allmulticast mode
[   85.456771][ T8356] infiniband syz2: set down
[   85.458833][ T5906] vxcan1 speed is unknown, defaulting to 1000
[   85.461617][ T8356] infiniband syz2: added vxcan1
[   85.477056][ T8356] RDS/IB: syz2: added
[   85.478898][ T8356] smc: adding ib device syz2 with port count 1
[   85.481778][ T8356] smc:    ib device syz2 port 1 has pnetid 
[   85.484318][ T5906] vxcan1 speed is unknown, defaulting to 1000
[   85.487811][ T8356] vxcan1 speed is unknown, defaulting to 1000
[   85.515284][ T8365] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[   85.529535][ T8365] 8021q: adding VLAN 0 to HW filter on device bond9
[   85.549487][ T8365] bond9: (slave veth9): Enslaving as an active interface with a down link
[   85.558230][ T8365] gretap1: entered promiscuous mode
[   85.562973][ T8365] bond9: (slave gretap1): making interface the new active one
[   85.566758][ T8365] bond9: (slave gretap1): Enslaving as an active interface with an up link
[   85.571391][ T8356] vxcan1 speed is unknown, defaulting to 1000
[   85.576329][ T8365] macvlan2: entered promiscuous mode
[   85.578761][ T8365] macvlan2: entered allmulticast mode
[   85.581965][ T8365] bond9: entered promiscuous mode
[   85.584528][ T8365] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.587771][ T8365] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.594248][ T8365] bond9: left promiscuous mode
[   85.633247][ T8356] vxcan1 speed is unknown, defaulting to 1000
[   85.702401][ T8372] vxcan1 speed is unknown, defaulting to 1000
[   85.790816][ T8376] pim6reg: entered allmulticast mode
[   85.792774][ T8376] pim6reg: left allmulticast mode
[   86.104382][ T8420] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[   86.183140][ T8423] wg1 speed is unknown, defaulting to 1000
[   86.185777][ T8423] wg1 speed is unknown, defaulting to 1000
[   86.188827][ T8423] wg1 speed is unknown, defaulting to 1000
[   86.193083][ T8423] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   86.199032][ T8423] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   86.211661][ T8423] wg1 speed is unknown, defaulting to 1000
[   86.214895][ T8423] wg1 speed is unknown, defaulting to 1000
[   86.217933][ T8423] wg1 speed is unknown, defaulting to 1000
[   86.813927][ T8432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.822549][ T8432] tipc: Disabling bearer <eth:syzkaller0>
[   86.887089][ T8441] gretap0: entered promiscuous mode
[   86.897977][ T8441] netlink: 'syz.0.741': attribute type 83 has an invalid length.
[   86.901914][ T8441] 0{X: renamed from gretap0
[   86.905528][ T8441] 0{X: left promiscuous mode
[   86.907686][ T8441] 0{X: entered allmulticast mode
[   86.914450][ T8441] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   86.941576][ T8443] netlink: 'syz.2.742': attribute type 1 has an invalid length.
[   87.113500][ T8467] nbd: socks must be embedded in a SOCK_ITEM attr
[   87.116139][ T8467] block nbd1: shutting down sockets
[   87.315326][ T8489] bond0: (slave dummy0): Releasing backup interface
[   87.319558][ T8489] bond0: (slave bond_slave_0): Releasing backup interface
[   87.324435][ T8489] bond0: (slave bond_slave_1): Releasing backup interface
[   87.328724][ T8489] team0: Port device team_slave_0 removed
[   87.332642][ T8489] team0: Port device team_slave_1 removed
[   87.335327][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.338554][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.342527][ T8489] bond2: (slave gretap1): Releasing active interface
[   88.266822][ T8543] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   88.372304][ T8555] netlink: 'syz.1.778': attribute type 1 has an invalid length.
[   88.383717][ T8555] bond2: entered promiscuous mode
[   88.386235][ T8555] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.464087][ T8565] netlink: 'syz.1.782': attribute type 1 has an invalid length.
[   88.503411][ T8571] rdma_op ffff8880257cd1f0 conn xmit_rdma 0000000000000000
[   88.735488][ T8585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.738190][ T8585] syzkaller0: entered promiscuous mode
[   88.740728][ T8585] syzkaller0: entered allmulticast mode
[   88.747003][ T8585] tipc: Resetting bearer <eth:syzkaller0>
[   88.752888][ T8584] tipc: Resetting bearer <eth:syzkaller0>
[   88.755964][ T8584] tipc: Disabling bearer <eth:syzkaller0>
[   88.965560][ T8590] sctp: [Deprecated]: syz.0.789 (pid 8590) Use of int in max_burst socket option.
[   88.965560][ T8590] Use struct sctp_assoc_value instead
[   89.136847][ T8602] sctp: [Deprecated]: syz.0.794 (pid 8602) Use of int in max_burst socket option deprecated.
[   89.136847][ T8602] Use struct sctp_assoc_value instead
[   89.164796][ T8607] __nla_validate_parse: 30 callbacks suppressed
[   89.164809][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.795'.
[   89.214794][ T8563] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   89.247593][ T8612] pimreg: entered allmulticast mode
[   89.252629][ T8612] pimreg: left allmulticast mode
[   89.400132][ T1089] wlan0: Trigger new scan to find an IBSS to join
[   89.462723][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.465695][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.469089][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.473247][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.476891][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.480408][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.484083][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.487780][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'.
[   89.579397][ T8639] vxcan1 speed is unknown, defaulting to 1000
[   89.623993][ T8639] wg1 speed is unknown, defaulting to 1000
[   89.657058][ T8645] sctp: [Deprecated]: syz.1.806 (pid 8645) Use of int in max_burst socket option deprecated.
[   89.657058][ T8645] Use struct sctp_assoc_value instead
[   89.663014][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'.
[   89.691805][ T8645] validate_nla: 1 callbacks suppressed
[   89.691814][ T8645] netlink: 'syz.1.806': attribute type 10 has an invalid length.
[   89.698387][ T8645] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.187027][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.410472][ T8661] veth11: entered promiscuous mode
[   90.444325][ T8664] : entered promiscuous mode
[   90.625825][ T8672] syz_tun: entered allmulticast mode
[   90.631104][ T8672] netlink: 'syz.1.815': attribute type 3 has an invalid length.
[   90.654133][ T8671] syz_tun: left allmulticast mode
[   90.712881][ T8689] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   90.772499][ T8698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.774803][ T8698] IPv6: NLM_F_CREATE should be set when creating new route
[   90.821947][ T5871] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.825421][ T5871] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.832346][ T5871] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.835867][ T5871] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.853031][ T8707] netlink: 'syz.0.827': attribute type 12 has an invalid length.
[   90.879236][ T8709] netlink: 'syz.0.828': attribute type 21 has an invalid length.
[   90.884178][ T8709] netlink: 'syz.0.828': attribute type 1 has an invalid length.
[   90.905280][ T8709] 8021q: adding VLAN 0 to HW filter on device bond10
[   90.914137][ T8709] bond10: (slave gretap0): making interface the new active one
[   90.917094][ T8709] bond10: (slave gretap0): Enslaving as an active interface with an up link
[   90.927559][ T8709] syz.0.828 (8709) used greatest stack depth: 19888 bytes left
[   91.390139][ T5244] Bluetooth: hci2: command 0x0405 tx timeout
[   91.531360][ T8734] vxcan1 speed is unknown, defaulting to 1000
[   91.569398][ T8734] wg1 speed is unknown, defaulting to 1000
[   91.596721][ T8740] vxcan2: entered promiscuous mode
[   91.680489][ T8746] syzkaller0: entered promiscuous mode
[   91.682499][ T8746] syzkaller0: entered allmulticast mode
[   91.699606][ T8746] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   91.758892][ T8750] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   91.763681][ T8750] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   92.130431][ T8774] 0{X: left allmulticast mode
[   92.136104][ T8774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.350911][   T40] wlan0: Trigger new scan to find an IBSS to join
[   92.812640][   T26] smc: removing ib device syz2
[   93.359667][ T8835] batman_adv: batadv0: Removing interface: ipvlan2
[   93.375018][ T8835] bond0: (slave batadv0): Releasing backup interface
[   93.382420][ T8833] netlink: 'syz.2.867': attribute type 1 has an invalid length.
[   93.569786][ T8841] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   93.617011][ T8851] netlink: 'syz.0.874': attribute type 10 has an invalid length.
[   93.668656][ T8856] netlink: 'syz.0.876': attribute type 4 has an invalid length.
[   93.935170][ T8884] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[   93.944464][ T8884] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.950140][ T8884] ipvlan2: entered allmulticast mode
[   93.952156][ T8884] bond3: entered allmulticast mode
[   94.021902][ T8897] bond0: (slave wlan1): Releasing backup interface
[   94.158005][ T8920] netlink: 'syz.0.898': attribute type 1 has an invalid length.
[   94.167869][ T8920] bond11: (slave vxcan13): The slave device specified does not support setting the MAC address
[   94.171945][ T8920] bond11: (slave vxcan13): Error -95 calling set_mac_address
[   94.198898][ T8918] __nla_validate_parse: 24 callbacks suppressed
[   94.198912][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[   94.431053][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'.
[   94.511094][ T8965] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.913'.
[   94.562377][ T8967] netlink: 224 bytes leftover after parsing attributes in process `syz.0.914'.
[   94.583079][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'.
[   94.586051][ T8975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.916'.
[   94.643415][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'.
[   95.056740][ T9012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.264731][ T9021] validate_nla: 4 callbacks suppressed
[   95.264746][ T9021] netlink: 'syz.1.929': attribute type 14 has an invalid length.
[   95.285604][ T9021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   95.400751][ T1095] wlan0: Trigger new scan to find an IBSS to join
[   95.534139][ T9033] lo speed is unknown, defaulting to 1000
[   95.536126][ T9033] lo speed is unknown, defaulting to 1000
[   95.538566][ T9033] lo speed is unknown, defaulting to 1000
[   95.545859][ T9033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   95.561466][ T9033] lo speed is unknown, defaulting to 1000
[   95.567677][ T9033] lo speed is unknown, defaulting to 1000
[   95.571693][ T9033] lo speed is unknown, defaulting to 1000
[   96.256661][ T9045] netlink: 'syz.0.937': attribute type 1 has an invalid length.
[   96.300165][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.449852][ T9056] netlink: 'syz.0.941': attribute type 10 has an invalid length.
[   96.495440][ T9066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.945'.
[   96.566891][ T9075] wg1 speed is unknown, defaulting to 1000
[   96.569586][ T9075] lo speed is unknown, defaulting to 1000
[   96.756718][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'.
[   96.778510][ T9085] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   96.782202][ T9085] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   96.792001][ T9087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.952'.
[   96.804775][ T9087] netlink: 'syz.1.952': attribute type 1 has an invalid length.
[   97.631340][ T9115] netlink: 'syz.2.959': attribute type 7 has an invalid length.
[   97.825163][ T9126] bridge0: port 1(erspan0) entered blocking state
[   97.827529][ T9126] bridge0: port 1(erspan0) entered disabled state
[   97.830728][ T9126] erspan0: entered allmulticast mode
[   97.833344][ T9126] erspan0: entered promiscuous mode
[   97.835922][ T9126] erspan0: left allmulticast mode
[   97.837715][ T9126] erspan0: left promiscuous mode
[   97.839567][ T9126] bridge0: port 1(erspan0) entered disabled state
[   97.924506][ T9135] wg1 speed is unknown, defaulting to 1000
[   97.927126][ T9135] lo speed is unknown, defaulting to 1000
[   98.220760][ T9172] wg1 speed is unknown, defaulting to 1000
[   98.224225][ T9172] lo speed is unknown, defaulting to 1000
[   98.840922][ T9195] openvswitch: netlink: Multiple metadata blocks provided
[   98.876816][ T9195] geneve3: entered promiscuous mode
[   98.930899][ T9200] batman_adv: batadv0: Adding interface: dummy0
[   98.933131][ T9200] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.942865][ T9200] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   98.950988][ T9200] batman_adv: batadv0: Adding interface: ip6gretap1
[   98.953193][ T9200] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.961832][ T9200] batman_adv: batadv0: Interface activated: ip6gretap1
[   98.985784][ T9206] netlink: 'syz.1.987': attribute type 2 has an invalid length.
[   98.992395][ T9206] k*]: entered promiscuous mode
[   99.012453][ T9206] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.016453][ T9206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.021944][ T1271] lo speed is unknown, defaulting to 1000
[   99.041625][ T9206] veth0_to_team: entered promiscuous mode
[   99.043592][ T9206] veth0_to_team: entered allmulticast mode
[   99.106954][ T9217] syzkaller0: entered promiscuous mode
[   99.109128][ T9217] syzkaller0: entered allmulticast mode
[   99.187574][ T9227] netlink: 'syz.0.994': attribute type 13 has an invalid length.
[   99.191117][ T9227] netlink: 'syz.0.994': attribute type 17 has an invalid length.
[   99.220813][ T9227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.238944][ T9225] wg1 speed is unknown, defaulting to 1000
[   99.242259][ T9225] lo speed is unknown, defaulting to 1000
[   99.657721][ T9244] __nla_validate_parse: 9 callbacks suppressed
[   99.657731][ T9244] netlink: 44 bytes leftover after parsing attributes in process `syz.1.999'.
[   99.904197][ T9252] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1002'.
[   99.909883][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'.
[   99.997119][ T9270] openvswitch: netlink: Actions may not be safe on all matching packets
[  100.039654][ T9277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.042129][ T9277] IPv6: NLM_F_CREATE should be set when creating new route
[  100.044508][ T9277] IPv6: NLM_F_CREATE should be set when creating new route
[  100.254431][ T9272] syz_tun: entered promiscuous mode
[  100.257512][ T9272] batadv_slave_0: entered promiscuous mode
[  100.279662][ T9291] veth0_to_team: left promiscuous mode
[  100.282569][ T9291] veth0_to_team: left allmulticast mode
[  100.286506][ T9291] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  100.289379][ T9291] gretap1: left promiscuous mode
[  100.300630][ T9291] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  100.323915][ T9295] batadv_slave_0: entered promiscuous mode
[  100.325882][ T9295] batadv_slave_0: entered allmulticast mode
[  100.327912][ T9295] netlink: 'syz.2.1017': attribute type 8 has an invalid length.
[  100.356917][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'.
[  100.359862][ T9299] nbd: must specify a size in bytes for the device
[  100.363055][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'.
[  100.366185][ T9300] nbd: must specify a size in bytes for the device
[  100.404132][ T9303] wg1 speed is unknown, defaulting to 1000
[  100.406658][ T9303] lo speed is unknown, defaulting to 1000
[  100.477045][ T9312] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.489155][ T9308] bond0: (slave wlan1): Releasing backup interface
[  100.524119][ T9320] netlink: 728 bytes leftover after parsing attributes in process `syz.1.1026'.
[  100.551575][ T9323] tipc: Failed to remove unknown binding: 66,1,1/2548596151:2563104468/2563104470
[  100.555698][ T9323] tipc: Failed to remove unknown binding: 66,1,1/2548596151:2563104468/2563104470
[  100.559753][ T9323] tipc: Failed to remove unknown binding: 66,1,1/2548596151:2563104468/2563104470
[  100.857074][ T9337] netlink: 'syz.0.1032': attribute type 1 has an invalid length.
[  100.861120][ T9337] batadv_slave_1: entered promiscuous mode
[  100.873550][ T9337] batadv_slave_1: left promiscuous mode
[  101.002679][ T9349] bridge1: left promiscuous mode
[  101.004368][ T9349] bridge1: left allmulticast mode
[  101.008006][ T9349] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  101.011163][ T9349] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  101.016653][ T9349] gretap1: left promiscuous mode
[  101.018872][ T9349] veth11: left promiscuous mode
[  101.023289][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.026660][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.029719][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.033842][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.041041][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.046013][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.051907][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.056023][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.139059][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'.
[  101.146079][ T9352] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1037'.
[  101.212602][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'.
[  101.335586][ T9370] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  101.338934][ T9370] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  101.346554][ T9370] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  101.392220][ T9377] netlink: 'syz.0.1044': attribute type 11 has an invalid length.
[  101.461844][ T9380] netlink: 'syz.0.1045': attribute type 10 has an invalid length.
[  101.465531][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'.
[  101.491873][ T9382] IPv4: Oversized IP packet from 127.202.26.0
[  101.549052][ T9393] netlink: 'syz.0.1050': attribute type 1 has an invalid length.
[  101.602206][ T9405] netlink: 'syz.0.1054': attribute type 142 has an invalid length.
[  101.607133][ T9403] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  101.629706][ T9410] wg1 speed is unknown, defaulting to 1000
[  101.634229][ T9410] lo speed is unknown, defaulting to 1000
[  101.717302][   T33] audit: type=1800 audit(1756216652.057:2): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1057" name=CB dev="tmpfs" ino=1756 res=0 errno=0
[  102.051112][ T9454] syzkaller1: entered promiscuous mode
[  102.053108][ T9454] syzkaller1: entered allmulticast mode
[  102.428109][ T9461] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  102.438597][   T47] wg1 speed is unknown, defaulting to 1000
[  102.440772][   T47] syz0: Port: 1 Link ACTIVE
[  102.478485][ T9476] bridge4: port 1(veth3) entered blocking state
[  102.481254][ T9476] bridge4: port 1(veth3) entered disabled state
[  102.483476][ T9476] veth3: entered allmulticast mode
[  102.485795][ T9476] veth3: entered promiscuous mode
[  102.505325][ T9475] bridge4: port 2(veth5) entered blocking state
[  102.507990][ T9475] bridge4: port 2(veth5) entered disabled state
[  102.512455][ T9475] veth5: entered allmulticast mode
[  102.515076][ T9475] veth5: entered promiscuous mode
[  102.517778][ T9476] bridge4: port 3(veth0_to_bond) entered blocking state
[  102.522188][ T9476] bridge4: port 3(veth0_to_bond) entered disabled state
[  102.524575][ T9476] veth0_to_bond: entered allmulticast mode
[  102.527108][ T9476] veth0_to_bond: entered promiscuous mode
[  102.555122][ T9485] netlink: 'syz.2.1078': attribute type 1 has an invalid length.
[  102.558415][ T9485] netlink: 'syz.2.1078': attribute type 2 has an invalid length.
[  102.573443][ T9490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.575963][ T9490] syzkaller0: entered promiscuous mode
[  102.578156][ T9490] syzkaller0: entered allmulticast mode
[  102.593001][ T9490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.602014][ T9489] tipc: Resetting bearer <eth:syzkaller0>
[  102.606393][ T9489] tipc: Disabling bearer <eth:syzkaller0>
[  102.691922][ T9498] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  102.740034][ T9495] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.742868][ T9495] bond0: (slave bond5): Enslaving as an active interface with an up link
[  102.824034][ T9513] netlink: 'syz.2.1087': attribute type 8 has an invalid length.
[  102.846073][ T9516] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  102.848640][ T9516] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  103.305734][ T9548] netlink: 'syz.2.1096': attribute type 3 has an invalid length.
[  103.534667][ T9571] netlink: 'syz.2.1099': attribute type 2 has an invalid length.
[  103.553128][ T9573] IPv6: syztnl0: Disabled Multicast RS
[  103.697436][ T9584] tipc: Enabled bearer <eth:bond_slave_0>, priority 11
[  103.743466][ T9592] 8021q: adding VLAN 0 to HW filter on device bond14
[  103.746697][ T9592] bridge0: port 1(bond14) entered blocking state
[  103.749470][ T9592] bridge0: port 1(bond14) entered disabled state
[  103.752525][ T9592] bond14: entered allmulticast mode
[  103.755801][ T9592] bond14: entered promiscuous mode
[  103.817446][ T9601] ip6gre1: entered allmulticast mode
[  103.980833][ T9627] tipc: New replicast peer: 0.0.0.0
[  103.983389][ T9627] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.991538][ T9627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.017745][ T9627] syzkaller0: entered promiscuous mode
[  104.020379][ T9627] syzkaller0: entered allmulticast mode
[  104.023178][ T9627] tipc: Resetting bearer <eth:syzkaller0>
[  104.030309][ T9629] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  104.036138][ T9626] tipc: Resetting bearer <eth:syzkaller0>
[  104.052365][ T9626] tipc: Disabling bearer <eth:syzkaller0>
[  104.680345][ T9678] wg1 speed is unknown, defaulting to 1000
[  104.682956][ T9678] lo speed is unknown, defaulting to 1000
[  104.720994][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.723869][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.727226][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.730271][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.733614][ T9682] __nla_validate_parse: 27 callbacks suppressed
[  104.733621][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'.
[  104.750029][ T5244] Bluetooth: hci0: command tx timeout
[  104.875666][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'.
[  104.880105][ T9700] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  104.888339][ T9701] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  104.899444][ T9700] tap0: tun_chr_ioctl cmd 1074025678
[  104.902994][ T9700] tap0: group set to 0
[  104.951148][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'.
[  105.052443][ T9730] bond4: option mode: unable to set because the bond device is up
[  105.076507][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1147'.
[  105.101587][ T6804] tipc: Node number set to 761176714
[  105.132954][ T9745] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.1151'.
[  105.243638][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'.
[  105.310700][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'.
[  105.320229][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'.
[  105.364388][ T9783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.373735][ T9782] tipc: Disabling bearer <eth:syzkaller0>
[  105.413922][ T9789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.416928][ T9789] syzkaller0: entered promiscuous mode
[  105.419309][ T9789] syzkaller0: entered allmulticast mode
[  105.423648][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[  105.428770][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'.
[  105.433664][ T9789] tipc: Resetting bearer <eth:syzkaller0>
[  105.440399][ T9788] tipc: Resetting bearer <eth:syzkaller0>
[  105.443988][ T9788] tipc: Disabling bearer <eth:syzkaller0>
[  105.473535][ T9794] validate_nla: 139 callbacks suppressed
[  105.473551][ T9794] netlink: 'syz.1.1167': attribute type 1 has an invalid length.
[  105.656154][ T9822] netlink: 'syz.2.1175': attribute type 2 has an invalid length.
[  105.663032][ T9823] netlink: 'syz.2.1175': attribute type 2 has an invalid length.
[  105.723035][ T9827] netlink: 'syz.2.1177': attribute type 1 has an invalid length.
[  105.808770][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.814030][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.876379][ T9852] syzkaller0: entered promiscuous mode
[  105.878333][ T9852] syzkaller0: entered allmulticast mode
[  107.011326][ T9892] IPVS: Scheduler module ip_vs_sip not found
[  107.134949][ T9912] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  107.137837][ T9922] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  107.171572][ T9912] 8021q: adding VLAN 0 to HW filter on device bond5
[  107.174640][ T9912] bond4: (slave bond5): making interface the new active one
[  107.177403][ T9912] bond4: (slave bond5): Enslaving as an active interface with an up link
[  107.180624][ T9929] bridge0: entered allmulticast mode
[  107.191220][ T9912] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  107.196315][ T9912] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  107.283039][ T9937] netlink: 'syz.0.1208': attribute type 10 has an invalid length.
[  107.285980][ T9936] netlink: 'syz.0.1208': attribute type 10 has an invalid length.
[  107.395683][ T9961] delete_channel: no stack
[  107.524265][ T9977] wg1 speed is unknown, defaulting to 1000
[  107.527945][ T9977] lo speed is unknown, defaulting to 1000
[  108.295634][ T9974] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  108.297592][ T9974] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  108.315537][ T9974] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  108.318050][ T9974] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  108.325676][ T9974] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  108.329572][ T9974] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  108.333126][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.0.1216 Not tainted syzkaller #0 PREEMPT(full) 
[  108.336330][ T9974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.339647][ T9974] RIP: 0010:klist_remove+0x14a/0x340
[  108.341381][ T9974] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 fe b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a fe b2 f6 49 8b 44 24 58 48 89 44 24 08
[  108.347687][ T9974] RSP: 0018:ffffc90007ff7820 EFLAGS: 00010202
[  108.349717][ T9974] RAX: 000000000000000b RBX: ffff88803d463980 RCX: 0000000000000000
[  108.352321][ T9974] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  108.354924][ T9974] RBP: ffffc90007ff7908 R08: ffffffff8f8a0043 R09: 1ffffffff1f14008
[  108.357567][ T9974] R10: dffffc0000000000 R11: fffffbfff1f14009 R12: 0000000000000000
[  108.360113][ T9974] R13: 1ffff11004dddc0c R14: ffff888026eee060 R15: dffffc0000000000
[  108.362684][ T9974] FS:  00007fca693966c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  108.365515][ T9974] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.367620][ T9974] CR2: 000000110c2a2cae CR3: 000000010ad00000 CR4: 00000000000006f0
[  108.370314][ T9974] Call Trace:
[  108.371499][ T9974]  <TASK>
[  108.372516][ T9974]  ? __pfx_klist_remove+0x10/0x10
[  108.374309][ T9974]  ? __pfx_kobject_move+0x10/0x10
[  108.375955][ T9974]  ? get_device_parent+0x366/0x3a0
[  108.378009][ T9974]  device_move+0x193/0x700
[  108.379450][ T9974]  hci_conn_del_sysfs+0xb8/0x170
[  108.380997][ T9974]  hci_conn_del+0x9b7/0xd60
[  108.382633][ T9974]  hci_conn_hash_flush+0x191/0x230
[  108.384714][ T9974]  hci_dev_close_sync+0xaef/0x1330
[  108.386761][ T9974]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  108.388897][ T9974]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  108.391135][ T9974]  hci_dev_do_close+0x2f/0x90
[  108.393026][ T9974]  hci_rfkill_set_block+0x21d/0x2e0
[  108.395081][ T9974]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  108.397244][ T9974]  rfkill_set_block+0x1d2/0x440
[  108.399054][ T9974]  rfkill_fop_write+0x44b/0x570
[  108.400722][ T9974]  ? __pfx_rfkill_fop_write+0x10/0x10
[  108.402569][ T9974]  ? __pfx_security_file_permission+0x10/0x10
[  108.404632][ T9974]  ? rw_verify_area+0x255/0x4d0
[  108.406395][ T9974]  ? __pfx_rfkill_fop_write+0x10/0x10
[  108.408401][ T9974]  vfs_write+0x27e/0xb30
[  108.410056][ T9974]  ? __pfx_vfs_write+0x10/0x10
[  108.411769][ T9974]  ? lock_release+0x4b/0x3e0
[  108.413313][ T9974]  ? __fget_files+0x2a/0x420
[  108.414870][ T9974]  ? __fget_files+0x3a0/0x420
[  108.416476][ T9974]  ? __fget_files+0x2a/0x420
[  108.418237][ T9974]  ksys_write+0x145/0x250
[  108.419828][ T9974]  ? __pfx_ksys_write+0x10/0x10
[  108.421565][ T9974]  ? rcu_is_watching+0x15/0xb0
[  108.423194][ T9974]  ? rcu_is_watching+0x15/0xb0
[  108.424724][ T9974]  do_syscall_64+0xfa/0x3b0
[  108.426264][ T9974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.428623][ T9974]  ? exc_page_fault+0x9f/0xf0
[  108.430398][ T9974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.432792][ T9974] RIP: 0033:0x7fca6858ebe9
[  108.434605][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.441577][ T9974] RSP: 002b:00007fca69396038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  108.444413][ T9974] RAX: ffffffffffffffda RBX: 00007fca687b5fa0 RCX: 00007fca6858ebe9
[  108.446932][ T9974] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  108.449522][ T9974] RBP: 00007fca68611e19 R08: 0000000000000000 R09: 0000000000000000
[  108.452131][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.454728][ T9974] R13: 00007fca687b6038 R14: 00007fca687b5fa0 R15: 00007ffdcad9bc28
[  108.457569][ T9974]  </TASK>
[  108.458592][ T9974] Modules linked in:
[  108.460497][ T9974] ---[ end trace 0000000000000000 ]---
[  108.466133][ T9974] RIP: 0010:klist_remove+0x14a/0x340
[  108.468127][ T9974] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 fe b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a fe b2 f6 49 8b 44 24 58 48 89 44 24 08
[  108.476668][ T9974] RSP: 0018:ffffc90007ff7820 EFLAGS: 00010202
[  108.478824][ T9974] RAX: 000000000000000b RBX: ffff88803d463980 RCX: 0000000000000000
[  108.483226][ T9974] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  108.486388][ T9974] RBP: ffffc90007ff7908 R08: ffffffff8f8a0043 R09: 1ffffffff1f14008
[  108.489244][ T9974] R10: dffffc0000000000 R11: fffffbfff1f14009 R12: 0000000000000000
[  108.492110][ T9974] R13: 1ffff11004dddc0c R14: ffff888026eee060 R15: dffffc0000000000
[  108.494953][ T9974] FS:  00007fca693966c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  108.498141][ T9974] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.500723][ T9974] CR2: 000000110c28cb8c CR3: 000000010ad00000 CR4: 00000000000006f0
[  108.503754][ T9974] Kernel panic - not syncing: Fatal exception
[  108.506636][ T9974] Kernel Offset: disabled
[  108.508094][ T9974] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:57:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=0f75781ef7308a00 RDX=0000000000000001
RSI=ffffffff8b983be0 RDI=ffffffff8be33680 RBP=dffffc0000000000 RSP=ffffc90007f576c8
R8 =ffffea0000cf2947 R9 =1ffffd400019e528 R10=dffffc0000000000 R11=fffff9400019e529
R12=dffffc0000000000 R13=1ffff92000feaeec R14=ffff88801b6f0d00 R15=0000000000000000
RIP=ffffffff8b7a1190 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb15c1886c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000d44000 CR3=00000001105a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6665412e53
XMM06=0000000000000000 00007f6665412e4d XMM07=0000000000000000 00007f6665412e61
XMM08=0000000000000000 00007f6665412ee7 XMM09=0000000000000000 00007f6665412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000d5a5 RDI=000000000000d5a6 RBP=00000000000003f8 RSP=ffffc90007ff7050
R8 =ffff8881085d0237 R9 =1ffff110210ba046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd91d R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fca693966c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a2cae CR3=000000010ad00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=0000000000000131 0000000000000030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=6c6c696b66722f31 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
