last executing test programs:

1.926626926s ago: executing program 1 (id=8399):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

1.237390747s ago: executing program 2 (id=8418):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="0c002b800800010025"], 0x28}, 0x1, 0x0, 0x0, 0x40000081}, 0x8000)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x80001)

1.170315728s ago: executing program 0 (id=8421):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0), 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

1.165290454s ago: executing program 0 (id=8422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000033c000000010000000000000200", @ANYRES32=0x0, @ANYBLOB="000102000000000014003500776c616e3000000000000000000000000a000100ef05b9b215d00000"], 0x40}}, 0x40880)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r1, 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x54800, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="180084000000010000005b4d6cf5b41699655da671d989dd0d4000800000000000118610b6ae103893c122a21ef75c30569577c2c8c18a398fccdaf47b0a11ff93ef2984ca4a7be2a681cb5bc63700bae2320000000000000000000000003a79e87a9fba0401c31f253de682bc1d79ab8ee1d3389b4f3454e63f704addcb9b22cc6b84eaf49bd4cc59847c856ba72912df9d8f2c2046485577ae6f5000c23e4400ac3a587e8ab7fcd779a29a48273993f5c71d99cbc5667a56787611c700fd93d4ef46fb8196a52033"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0xfffffffffffffe7e, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f0000000000)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f0000000340)=""/234, 0xea}], 0x6}, 0x80000002}], 0x4, 0x0, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0x40103d02, &(0x7f0000000240)={0xffffffff, 0x100000001})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0)

1.163723976s ago: executing program 2 (id=8423):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xb9, "cc38cdbd1ef6b5c35dfe72697961b27f08d68a3c8bfd8820a39b84732ce03abfd36e22b110d586ed17a35776b685b04581838e0a2c3270e451a48cc9dbc58e330d90039eab9757862296dddc925b7e7557c231f751f94d8687e75df6f182c54c354faf55e2e9c25564d62e890c681e1293e2f946e2238078dd3a17ff425454732fb0dc1672da8eb1fce404946c5c6ad29672eae75baaeaf08a84631a509a00b055678a4406d8d6c666af21af257e4dd94b9a26ec603c61ea27"}, &(0x7f0000000200)=0xc1)
setsockopt(r1, 0x9, 0x4, &(0x7f0000000240)="86097ae49845f0bd29e4acb5f21516eb079ec3da8216daf34003321f06f612a77b8641ccfff6b0e2b40086bf52a4358121d0b0de3a466ca91663cefaf13e15c713fe8b9194f8f1c9fee0acceae26430b8e63ca", 0x53)
recvmsg(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/82, 0x52}], 0x4}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f00000005c0)=0x2, 0x4)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000640)={[{0x2d, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'hugetlb'}, {0x2b, 'cpu'}, {0x2d, 'net_cls'}, {0x2b, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'pids'}]}, 0x38)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000680)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000006c0)=0x28)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r6, &(0x7f0000000840)={0x2, 0x4e22, @multicast2}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000880)={<r7=>r1})
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f00000008c0), 0x4)
r8 = openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0)
r9 = openat$cgroup_procs(r5, &(0x7f0000000940)='cgroup.procs\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000980)={{r8}, "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"})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000001980)={0x1, 'wg0\x00', {}, 0x5b87})
ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000019c0)=r5)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000001a00)={'raw\x00', 0x93, "1ae6f40afd0a1d284c9fc6a2b095632ef6987a77d9b230a1007fdb4f4bed528ffb1432e1f017a96dbc1a25611aeced9cd1fc437de694d5459f1551cedc522bd0c40fb78c45015f46ebb4e0daa8796a7ac1f2288b8591dc212243e65e4682f94d9af7d07046bd73dd2b9443fd7a73e89f9a501317e165c7f9781ef6e5559f14717259e7d28198b16013e383cbac10b406e310fd"}, &(0x7f0000001ac0)=0xb7)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r5, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0], 0x0, 0xd7, &(0x7f0000001bc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1, '\x00', r10, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000001e80)={'filter\x00', 0x0, [0x0, 0xffffe047, 0x9]}, &(0x7f0000001f00)=0x44)
ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0)

1.057086407s ago: executing program 2 (id=8424):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r11=>0x0)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=<r13=>0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r16=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r9, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000081)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x34}}, 0x0)

1.056508449s ago: executing program 1 (id=8425):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x3}]}]}, 0xfc}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010020000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

969.912753ms ago: executing program 1 (id=8426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a093400000000000000000200fffe0900020073797a32000000000900010073797a30000000003800048024000180090001006d65746100000000140002800800014000000001080002400000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14005900", @ANYRES16=r2, @ANYBLOB="ad43f8fffffffbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

280.660774ms ago: executing program 0 (id=8427):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7d, &(0x7f0000000140)='cg\x01\x00\x00\x00\x00\xad\xd82b\xd8I\x05\'W\xafi\xd2\x98\xd8\xd5/}\x19\xd8\xed\xbcb\xfc\xcd\x9c\x93\xcc\xd1\x14\xdeX\xe7\xae\xc4O\xc1\xfe\xb3{G\xd42\xfe\xab^f:T?\xee\x06\xf0-\xa5f\xfc\x9e\r\xe16\xf2yz\x13\xd7\x9e\xfaFP\x1b\x06\xce\xbb\x9b9\"\x92\xc2\x06&\x82\x981\xbc\x8a\xeb\xdd{8\xa7v\xb0\b`7?\xe2\xc8\x88};\xef\xed\x82\x99\xab\r\xdf\x04\xb4B\xf4\x9b\x12m\xa9\xdd\xea'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-7G'], 0x9) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (rerun: 32)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="3c09f3ff0200"}) (async)
r3 = socket$packet(0x11, 0x2, 0x300) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r4, 0x0) (async, rerun: 32)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000847)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x8001}, 0x18) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
shutdown(r5, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async, rerun: 64)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
socket(0x11, 0x800000003, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)

160.595094ms ago: executing program 0 (id=8428):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async, rerun: 32)
recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe68}, 0x10000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)=""/175, 0xbe}, {&(0x7f00000007c0)=""/273, 0x111}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4098, 0x1002}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/220, 0xda}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x54000, 0x0) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000008100010008004525fff50067000009069078a91e8100ac141444"], 0x26) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1e}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000454c3f00000000000000009f5e1af7c4088e1785cce16b4239af9673380988208d6e7123bdda4869bb4934df8a4c3ca047dccc3c888af120e6712d0525778432a5ad4cac67d71df9496795619775793c77990b", @ANYRES16=r5, @ANYBLOB="ad43f8fffffffbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

160.390391ms ago: executing program 1 (id=8429):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r3, 0x3)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14080100", @ANYRES16=r1, @ANYBLOB="ad43f8fffffffbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
listen(r3, 0x3) (async)
accept4(r3, 0x0, 0x0, 0x0) (async)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14080100", @ANYRES16=r1, @ANYBLOB="ad43f8fffffffbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) (async)

159.224924ms ago: executing program 2 (id=8430):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) (async)
sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x240484d0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000083)

77.700995ms ago: executing program 0 (id=8431):
r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000000)=0x80, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}}}, &(0x7f0000000280)=0xe8)
sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x1ec, 0x1, 0x6, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x2}, [@typed={0x8, 0x15, 0x0, 0x0, @u32=0x6}, @generic="3902d775a68d0c8a2b2d1c560c397316a2047030676f826e5632eeb6409db3b5d161ac50e40955b4bc466166fbd7b69f568b7fee52d585f0cb971cec633acb0391c8228be0b036e5aebc0b4416f15dd226298698ba28b2c727314772bae701b01bcc210d3e1da52542cfa8b5fc9148a84e4145d96737b2f586d557ec056d423d6ffb", @typed={0x5, 0x122, 0x0, 0x0, @str='\x00'}, @generic="7f372bb1722bc039b65422c4328aee7dd3f3c433f199e753e82a6ccff945461a7175b15dfeea23d7c3ab176f02f88bd693cd797122f7e2efd4cda04756baf45f9005276ef99d6402", @nested={0x18, 0x13e, 0x0, 0x1, [@nested={0x4, 0xbb}, @nested={0x4, 0x64}, @typed={0x8, 0xea, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x69}]}, @generic="f41a74dad8cfba460d172f348820976220b298742adbd231f541ca9cdbcb0f85539a9a7ebb53878fac4848854566bb8ed362277d34a5c0f69049bbe4df9fdf9f6fe8dcf42ecfc2223452bb824a66586ff94778c429e4eff09632bc08fa3263dca18ace5cb1da9c59746906c1e496b2705c0236971d3170b810fc717f7705a72a4f1495588b8d22f6bf1c66536c067c504d3f7bbeff804fa42751cf673e2a8579c6bf2ed65def4b335fe50fb894298c5275243137fb14d0f14d86efd330f65186ff101dfd70f2067bcafbb7f44805a89dbbabedf7ac21256eca04d16551c562d3a4f4a825"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

76.683132ms ago: executing program 2 (id=8432):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd26, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000000}, 0x4040090) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) (async)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

72.49196ms ago: executing program 0 (id=8433):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'bridge_slave_0\x00', {0x6}, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400050000", @ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000040), 0x4)
recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r2=>r0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000005d0000005d000000020000009e45d13617ee707f00000000000000000100000007001c000204000004000000020000000000000005000000020000000000001205000000060000000200000f010000000200000037dd00000200000001"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001640)=@deltclass={0x24, 0x29, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0xc, 0xffe0}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
recvmsg$can_raw(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x12}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
unshare(0x600)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

62.148546ms ago: executing program 1 (id=8434):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

154.386µs ago: executing program 2 (id=8435):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4044)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xffff8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xb226}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc973d07bab89bacd}, 0x40001)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}}, 0x4004080)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5594}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ea8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9aa0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4720}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3eeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x747d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a72e3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa11a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x20008000) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5594}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ea8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9aa0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4720}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3eeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x747d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a72e3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa11a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x44}, 0x20008000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000680)=[@window={0x3, 0x6, 0xd}, @window={0x3, 0x82cb, 0x9c}], 0x2) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000680)=[@window={0x3, 0x6, 0xd}, @window={0x3, 0x82cb, 0x9c}], 0x2)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000900)={&(0x7f00000006c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x148, r7, 0x400, 0xff, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe4b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x11}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x2000c000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/ipc\x00')
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000009c0)='ns/time\x00')
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xd0, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040850}, 0x51) (async)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xd0, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040850}, 0x51)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x40000) (async)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x40000)
r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c80)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r11, &(0x7f0000000cc0), 0x2, 0x0)
openat$cgroup_procs(r11, &(0x7f0000000d00)='tasks\x00', 0x2, 0x0) (async)
r12 = openat$cgroup_procs(r11, &(0x7f0000000d00)='tasks\x00', 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000d40)={<r13=>0x0}, &(0x7f0000000d80)=0xc)
write$cgroup_pid(r12, &(0x7f0000000dc0)=r13, 0x12) (async)
write$cgroup_pid(r12, &(0x7f0000000dc0)=r13, 0x12)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan1\x00', <r15=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r16=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r14, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x200}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000091)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

0s ago: executing program 1 (id=8436):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x307)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

kernel console output (not intermixed with test programs):

8] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'.
[  182.138761][T14260] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3589'.
[  182.433657][T14279] validate_nla: 1 callbacks suppressed
[  182.433671][T14279] netlink: 'syz.0.3597': attribute type 7 has an invalid length.
[  182.441238][T14279] netlink: 'syz.0.3597': attribute type 8 has an invalid length.
[  182.455889][T14279] netlink: 'syz.0.3597': attribute type 4 has an invalid length.
[  182.459077][T14279] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3597'.
[  182.592726][T14284] bond0: entered promiscuous mode
[  182.596671][T14284] bond_slave_0: entered promiscuous mode
[  182.599387][T14284] bond_slave_1: entered promiscuous mode
[  182.603295][T14284] bond0: left promiscuous mode
[  182.606217][T14284] bond_slave_0: left promiscuous mode
[  182.608275][T14284] bond_slave_1: left promiscuous mode
[  183.433770][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'.
[  183.437747][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3625'.
[  183.597832][T14355] syzkaller1: entered promiscuous mode
[  183.599976][T14355] syzkaller1: entered allmulticast mode
[  184.157175][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3632'.
[  184.172910][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3634'.
[  184.275338][T14379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3636'.
[  184.290651][T14382] netlink: 'syz.1.3641': attribute type 13 has an invalid length.
[  184.555060][T14405] netlink: 'syz.2.3649': attribute type 9 has an invalid length.
[  184.947684][T14420] syzkaller0: entered promiscuous mode
[  184.953491][T14420] syzkaller0: entered allmulticast mode
[  185.349790][T14431] netlink: 'syz.1.3662': attribute type 4 has an invalid length.
[  185.404786][T14432] netlink: 'syz.1.3662': attribute type 4 has an invalid length.
[  186.251963][T14428] __nla_validate_parse: 3 callbacks suppressed
[  186.251983][T14428] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3661'.
[  186.338931][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3665'.
[  186.438280][T14453] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3671'.
[  186.518903][T14463] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3676'.
[  186.590202][T14471] netlink: 'syz.1.3680': attribute type 1 has an invalid length.
[  186.593426][T14471] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3680'.
[  186.983754][T14508] syzkaller0: entered promiscuous mode
[  186.990867][T14508] syzkaller0: entered allmulticast mode
[  188.023674][T14519] syzkaller1: entered promiscuous mode
[  188.026977][T14519] syzkaller1: entered allmulticast mode
[  188.308577][T14530] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  188.468515][T14550] netlink: 'syz.2.3715': attribute type 3 has an invalid length.
[  188.471038][T14550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3715'.
[  188.632987][T14569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3723'.
[  188.648515][T14569] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3723'.
[  188.657331][T14569] geneve3: entered promiscuous mode
[  188.661614][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.669691][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.681974][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.685502][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.821553][T14589] netlink: 'syz.2.3734': attribute type 3 has an invalid length.
[  189.158179][T14612] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3744'.
[  189.356115][T14621] gretap0: entered promiscuous mode
[  189.363466][T14621] vlan3: entered promiscuous mode
[  189.438614][ T5841] Bluetooth: hci2: link tx timeout
[  189.440593][ T5841] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  189.682688][T14634] openvswitch: netlink: Key 25 has unexpected len 2 expected 16
[  189.802368][T14645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.869540][T14648] 8021q: adding VLAN 0 to HW filter on device bond6
[  189.882851][T14648] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  189.889963][T14648] bond6: (slave macvlan4): Enslaving as a backup interface with an up link
[  189.899941][T14648] bond0: (slave bond_slave_0): Releasing backup interface
[  189.909555][T14648] bond0: (slave bond_slave_1): Releasing backup interface
[  189.913929][T14648] team_slave_0: left promiscuous mode
[  189.918332][T14648] team0: Port device team_slave_0 removed
[  189.921060][T14648] team_slave_1: left promiscuous mode
[  189.924095][T14648] team0: Port device team_slave_1 removed
[  189.927390][T14648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.930288][T14648] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.936405][T14648] bond6: (slave macvlan4): Releasing backup interface
[  190.084713][   T55] Bluetooth: hci2: link tx timeout
[  190.086923][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.119454][T14675] netlink: 'syz.2.3773': attribute type 17 has an invalid length.
[  190.132720][T14675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.505703][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  191.658800][T14756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3811'.
[  191.662908][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'.
[  191.711002][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3813'.
[  191.900463][T14774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3820'.
[  192.282965][T14810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3838'.
[  192.716505][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'.
[  192.826708][T14863] netlink: 'syz.1.3862': attribute type 2 has an invalid length.
[  193.071373][T14879] dvmrp1: tun_chr_ioctl cmd 1074025677
[  193.074312][T14879] dvmrp1: linktype set to 773
[  193.900463][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3892'.
[  193.904119][T14933] bridge_slave_1: left allmulticast mode
[  193.913488][T14933] bridge_slave_1: left promiscuous mode
[  193.918429][T14933] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.927298][T14933] bridge_slave_0: left allmulticast mode
[  193.930830][T14933] bridge_slave_0: left promiscuous mode
[  193.934348][T14933] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.066828][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.447470][T14956] ip6gretap0: entered promiscuous mode
[  194.458503][T14956] macsec2: entered promiscuous mode
[  194.468676][T14956] macsec2: entered allmulticast mode
[  194.471108][T14956] ip6gretap0: entered allmulticast mode
[  194.588521][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'.
[  194.636855][T14964] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3907'.
[  195.049403][T14984] veth5: entered promiscuous mode
[  195.736780][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'.
[  196.383773][T15073] netlink: 'syz.0.3957': attribute type 1 has an invalid length.
[  196.437901][T15077] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  196.629300][T15093] .70: renamed from hsr0 (while UP)
[  196.635864][T15093] .70: entered allmulticast mode
[  196.638112][T15093] hsr_slave_0: entered allmulticast mode
[  196.640820][T15093] hsr_slave_1: entered allmulticast mode
[  196.643874][T15093] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  196.986927][T15120] __nla_validate_parse: 3 callbacks suppressed
[  196.986943][T15120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3979'.
[  197.276495][T15136] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  197.279468][T15136] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  197.762803][T15179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.206496][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.492938][T15217] syzkaller0: entered promiscuous mode
[  198.495570][T15217] syzkaller0: entered allmulticast mode
[  199.477207][T15241] macvlan0: left promiscuous mode
[  200.710173][T15326] netlink: 'syz.2.4073': attribute type 1 has an invalid length.
[  200.712869][T15326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4073'.
[  201.656935][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'.
[  202.197701][T15407] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4110'.
[  202.347129][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  202.371390][T15419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.441687][T15419] syzkaller0: entered promiscuous mode
[  202.444082][T15419] syzkaller0: entered allmulticast mode
[  202.446992][T15419] tipc: Resetting bearer <eth:syzkaller0>
[  202.476910][T15418] tipc: Resetting bearer <eth:syzkaller0>
[  202.553585][T15434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.607537][T15418] tipc: Disabling bearer <eth:syzkaller0>
[  204.149709][T15497] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  205.177389][   T33] audit: type=1107 audit(1756954758.187:7): pid=15562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  205.467716][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4189'.
[  205.729465][T15597] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4194'.
[  206.606633][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'.
[  207.504942][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.683482][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4238'.
[  208.078902][T15739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4255'.
[  208.148132][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  208.607240][T15796] netlink: 'syz.2.4277': attribute type 10 has an invalid length.
[  208.650507][T15796] team0: Port device dummy0 added
[  208.836243][T15791] infiniband syz!: set active
[  208.838998][T15791] infiniband syz!: added team_slave_0
[  208.877473][T15791] RDS/IB: syz!: added
[  208.881600][T15791] smc: adding ib device syz! with port count 1
[  208.889527][T15791] smc:    ib device syz! port 1 has pnetid 
[  209.456871][T15835] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4297'.
[  209.459939][T15835] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4297'.
[  209.462876][T15835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4297'.
[  210.513097][T15901] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4317'.
[  210.941458][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'.
[  210.958608][T15934] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  211.041874][T15942] Unsupported ieee802154 address type: 0
[  211.056664][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4337'.
[  211.062645][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4337'.
[  211.713157][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4356'.
[  212.113228][T16016] netlink: 'syz.0.4370': attribute type 11 has an invalid length.
[  212.454420][T16047] netlink: 'syz.2.4381': attribute type 13 has an invalid length.
[  212.458038][T16047] netlink: 'syz.2.4381': attribute type 17 has an invalid length.
[  212.527670][T16047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  213.221096][T16070] netlink: 'syz.1.4388': attribute type 1 has an invalid length.
[  213.223718][T16070] __nla_validate_parse: 5 callbacks suppressed
[  213.223725][T16070] netlink: 15 bytes leftover after parsing attributes in process `syz.1.4388'.
[  213.411818][T16089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4396'.
[  213.527512][T16087] netlink: 'syz.0.4395': attribute type 1 has an invalid length.
[  213.530087][T16087] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4395'.
[  213.533024][T16087] netlink: 'syz.0.4395': attribute type 2 has an invalid length.
[  213.538255][T16087] netlink: 'syz.0.4395': attribute type 1 has an invalid length.
[  213.662069][T16110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4406'.
[  214.684008][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4414'.
[  214.688470][T16129] openvswitch: netlink: Missing key (keys=40, expected=80)
[  214.908606][T16143] netlink: 'syz.0.4419': attribute type 3 has an invalid length.
[  214.954354][T16143] lo: entered allmulticast mode
[  214.981102][T16145] tap0: tun_chr_ioctl cmd 1074025677
[  214.989461][T16145] tap0: linktype set to 776
[  215.002584][T16143] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  215.026491][T16143] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  215.064561][T16146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.075253][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  215.152300][T16142] lo: left allmulticast mode
[  215.222611][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4422'.
[  215.284970][T16152] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4423'.
[  215.522973][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4431'.
[  215.737741][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'.
[  215.741527][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4442'.
[  215.751937][T16192] netlink: 'syz.1.4442': attribute type 19 has an invalid length.
[  216.965412][T16264] v: renamed from ip6_vti0 (while UP)
[  217.180593][T16287] netlink: 'syz.2.4482': attribute type 1 has an invalid length.
[  217.183823][T16287] netlink: 'syz.2.4482': attribute type 1 has an invalid length.
[  217.188780][T16287] netlink: 'syz.2.4482': attribute type 1 has an invalid length.
[  218.324193][T16361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.215933][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.282230][T16370] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  219.674715][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  219.862851][T16472] __nla_validate_parse: 5 callbacks suppressed
[  219.862864][T16472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'.
[  219.883117][T16475] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4566'.
[  220.091108][T16490] pimreg: entered allmulticast mode
[  220.234780][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4578'.
[  220.238688][T16500] netlink: 'syz.1.4578': attribute type 30 has an invalid length.
[  220.252268][ T5865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.252320][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4578'.
[  220.259601][ T5865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.259676][T16500] netlink: 'syz.1.4578': attribute type 30 has an invalid length.
[  220.264783][ T5865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.275084][ T5865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.739765][T16558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4606'.
[  220.742731][T16558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4606'.
[  221.863246][T16630] netlink: 'syz.2.4637': attribute type 12 has an invalid length.
[  222.182111][T16642] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.193909][T16642] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.266698][T16642] ip6gretap0: left allmulticast mode
[  222.276970][ T5886] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.282287][ T5886] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.286278][ T5886] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.291240][ T5886] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.295133][ T5886] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.299156][ T5886] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.302888][ T5886] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.307812][ T5886] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.489203][T16646] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.688836][T16654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.008648][T16680] block nbd5: Unsupported socket: shutdown callout must be supported.
[  223.519972][T16708] netlink: 'syz.2.4664': attribute type 1 has an invalid length.
[  224.014384][T16766] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4688'.
[  224.018667][T16766] .71: renamed from .70 (while UP)
[  224.022085][T16766] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[  224.098452][T16774] vlan1: entered allmulticast mode
[  224.100573][T16774] veth0_vlan: entered allmulticast mode
[  224.102760][T16774] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  224.172259][T16783] dvmrp8: entered allmulticast mode
[  224.495082][T16802] dvmrp0: entered allmulticast mode
[  224.939274][T16836] netlink: 'syz.0.4718': attribute type 9 has an invalid length.
[  224.941934][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4718'.
[  225.093894][T16849] 8021q: adding VLAN 0 to HW filter on device bond5
[  225.124550][T16849] team0: Port device dummy0 removed
[  225.138801][T16849] bond3: (slave bond4): Releasing backup interface
[  225.156716][ T5900] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  225.265569][T16855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.585661][ T5900] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  226.251918][T16912] netlink: 'syz.1.4748': attribute type 1 has an invalid length.
[  227.035866][T16977] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.4775'.
[  227.127440][T16988] rdma_op ffff88803a5e39f0 conn xmit_rdma 0000000000000000
[  227.222239][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'.
[  227.343472][T17010] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  227.457501][T17018] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4786'.
[  228.050766][T17082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.089087][T17085] syzkaller1: entered promiscuous mode
[  228.091473][T17085] syzkaller1: entered allmulticast mode
[  228.106756][T17082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.171729][T17082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.258875][T17082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.379950][ T5847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.417979][ T5847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.447009][T17105] netlink: 'syz.1.4813': attribute type 10 has an invalid length.
[  228.451490][ T5847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.460445][ T5847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.468647][T17105] netlink: 'syz.1.4813': attribute type 10 has an invalid length.
[  228.471407][T17105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4813'.
[  228.476328][T17105] batadv0: entered promiscuous mode
[  228.478295][T17105] batadv0: entered allmulticast mode
[  228.480406][T17105] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  228.629231][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'.
[  228.632230][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4819'.
[  228.635936][T17116] netlink: 'syz.0.4819': attribute type 1 has an invalid length.
[  228.638686][T17116] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4819'.
[  228.675322][T17116] nbd: socks must be embedded in a SOCK_ITEM attr
[  228.683442][T17116] block nbd5: shutting down sockets
[  229.576400][T17160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.583866][T17160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.768128][T17170] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  230.494176][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'.
[  230.598795][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4855'.
[  230.614571][T17200] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4855'.
[  230.707745][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4855'.
[  231.006552][T17221] netlink: zone id is out of range
[  231.008924][T17221] netlink: zone id is out of range
[  231.011182][T17221] netlink: set zone limit has 4 unknown bytes
[  231.954411][T17237] netlink: 'syz.0.4871': attribute type 1 has an invalid length.
[  231.992334][T17237] 8021q: adding VLAN 0 to HW filter on device bond7
[  232.008668][T17237] bond7: (slave ip6gretap3): making interface the new active one
[  232.012830][T17237] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link
[  232.034953][T17237] veth3: entered promiscuous mode
[  232.039338][T17237] bond7: (slave veth3): Enslaving as an active interface with a down link
[  232.043884][T17237] erspan0: entered allmulticast mode
[  232.050237][T17237] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  232.138943][T17247] macvlan3: entered allmulticast mode
[  232.141448][T17247] veth1_vlan: entered allmulticast mode
[  232.151037][T17247] veth1_vlan: left allmulticast mode
[  232.445347][T17264] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4882'.
[  232.953188][T17298] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4898'.
[  232.969118][T17298] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4898'.
[  233.203718][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4909'.
[  234.137418][T17395] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  234.540455][T17431] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4957'.
[  234.551273][T17429] batadv0: entered promiscuous mode
[  234.553842][T17429] macsec0: entered promiscuous mode
[  234.558466][T17429] macsec0: entered allmulticast mode
[  234.560669][T17429] batadv0: entered allmulticast mode
[  234.566763][T17429] batadv0: left allmulticast mode
[  234.569209][T17429] batadv0: left promiscuous mode
[  234.721821][T17450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.851863][T17461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.910539][T17468] netlink: 'syz.0.4973': attribute type 1 has an invalid length.
[  234.913870][T17468] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4973'.
[  234.918288][T17468] NCSI netlink: No device for ifindex 813332851
[  235.132151][T17493] batadv1: entered promiscuous mode
[  235.134410][T17493] batadv1: entered allmulticast mode
[  235.597204][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'.
[  235.821277][T17550] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5008'.
[  235.830085][T17550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.101098][T17568] netlink: 'syz.1.5017': attribute type 1 has an invalid length.
[  236.104268][T17568] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5017'.
[  236.108778][T17568] netlink: 'syz.1.5017': attribute type 1 has an invalid length.
[  236.373064][T17592] netlink: 'syz.0.5028': attribute type 1 has an invalid length.
[  236.438686][T17599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5031'.
[  236.488760][T17601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.492333][T17601] syzkaller0: entered promiscuous mode
[  236.496252][T17601] syzkaller0: entered allmulticast mode
[  236.514144][T17601] tipc: Resetting bearer <eth:syzkaller0>
[  236.520477][T17600] tipc: Resetting bearer <eth:syzkaller0>
[  236.539530][T17600] tipc: Disabling bearer <eth:syzkaller0>
[  238.582655][T17706] sctp: [Deprecated]: syz.0.5083 (pid 17706) Use of int in maxseg socket option.
[  238.582655][T17706] Use struct sctp_assoc_value instead
[  238.659856][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5088'.
[  238.682143][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5090'.
[  238.688237][T17720] netlink: 'syz.0.5090': attribute type 1 has an invalid length.
[  238.692339][T17720] netlink: 'syz.0.5090': attribute type 2 has an invalid length.
[  238.698455][T17718] netlink: 'syz.2.5089': attribute type 10 has an invalid length.
[  238.743949][T17718] dummy0: entered promiscuous mode
[  238.750614][T17718] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  239.003243][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5102'.
[  239.056058][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'.
[  239.076286][T17749] geneve4: entered promiscuous mode
[  239.169349][T17754] netlink: 'syz.2.5104': attribute type 1 has an invalid length.
[  239.172833][T17754] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5104'.
[  239.405567][T17766] : entered promiscuous mode
[  239.714219][T17792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'.
[  239.737820][T17792] openvswitch: netlink: Flow key attr not present in new flow.
[  239.803247][T17802] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[  240.195651][T17848] bridge0: entered allmulticast mode
[  240.203477][T17848] pim6reg: entered allmulticast mode
[  240.993355][T17873] team0: Port device 0! removed
[  240.998989][T17873] team0: Port device team_slave_0 removed
[  241.002457][T17873] team0: Port device team_slave_1 removed
[  241.005416][T17873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.008667][T17873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.012616][T17873] team0: Port device geneve0 removed
[  241.137059][T17879] __nla_validate_parse: 2 callbacks suppressed
[  241.137074][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5150'.
[  242.111564][T17964] pim6reg1: entered promiscuous mode
[  242.113967][T17964] pim6reg1: entered allmulticast mode
[  242.540614][T17996] 8021q: adding VLAN 0 to HW filter on device bond8
[  242.608662][T18002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5199'.
[  242.749711][T18017] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5206'.
[  242.998265][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5218'.
[  243.221336][T18067] tipc: Resetting bearer <eth:syzkaller0>
[  243.457079][T18090] netlink: 'syz.2.5235': attribute type 1 has an invalid length.
[  244.109605][T18146] netlink: 'syz.1.5255': attribute type 5 has an invalid length.
[  244.178051][T18155] netlink: 'syz.1.5258': attribute type 6 has an invalid length.
[  244.200450][T18155] netlink: 'syz.1.5258': attribute type 12 has an invalid length.
[  244.202998][T18155] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5258'.
[  244.274701][T18163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5262'.
[  244.279812][T18163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5262'.
[  244.345248][T18170] netlink: 'syz.0.5266': attribute type 2 has an invalid length.
[  244.617388][T18194] gretap1: entered allmulticast mode
[  244.926883][T18223] netlink: 'syz.0.5292': attribute type 1 has an invalid length.
[  244.930327][T18223] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5292'.
[  246.105301][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5303'.
[  246.713072][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5316'.
[  246.815461][T18280] vlan1: entered promiscuous mode
[  246.817687][T18280] macvtap0: entered promiscuous mode
[  246.859223][T18280] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5317'.
[  246.953738][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5323'.
[  247.301818][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5334'.
[  247.324744][T18319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5334'.
[  247.328579][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5334'.
[  247.355388][T18319] bond7: (slave erspan0): Releasing active interface
[  247.358365][T18319] ip6gretap3: entered promiscuous mode
[  247.383659][T18319] bond7: (slave ip6gretap3): Releasing active interface
[  247.394715][T18319] bond7: (slave ip6gretap3): the permanent HWaddr of slave - 06:4d:46:e2:fd:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  247.401210][T18319] ip6gretap3: left promiscuous mode
[  247.415820][ T2349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  247.427602][T18319] bond7: (slave veth3): Releasing active interface
[  247.508448][T18331] netlink: 'syz.2.5337': attribute type 10 has an invalid length.
[  247.516219][T18331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5337'.
[  247.529708][T18331] bond0: (slave dummy0): Releasing backup interface
[  247.538439][T18331] dummy0: left promiscuous mode
[  247.550603][T18331] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  247.757995][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5341'.
[  247.819808][T18350] netlink: 'syz.2.5341': attribute type 10 has an invalid length.
[  247.822889][T18350] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  247.826207][T18350] bond0: (slave wlan1): refused to change device type
[  248.628666][T18360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.638311][T18361] GUP no longer grows the stack in syz.2.5345 (18361): 200000006000-20000000a000 (200000005000)
[  248.645275][T18361] CPU: 0 UID: 0 PID: 18361 Comm: syz.2.5345 Not tainted syzkaller #0 PREEMPT(full) 
[  248.645293][T18361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  248.645300][T18361] Call Trace:
[  248.645304][T18361]  <TASK>
[  248.645311][T18361]  dump_stack_lvl+0x189/0x250
[  248.645333][T18361]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.645346][T18361]  ? __pfx__printk+0x10/0x10
[  248.645362][T18361]  ? find_vma+0xe7/0x160
[  248.645414][T18361]  __get_user_pages+0x24d0/0x2ce0
[  248.645429][T18361]  ? __lock_acquire+0xab9/0xd20
[  248.645464][T18361]  ? __gup_longterm_locked+0xc68/0x1660
[  248.645510][T18361]  __gup_longterm_locked+0xde9/0x1660
[  248.645531][T18361]  ? try_grab_folio_fast+0x1be/0x4f0
[  248.645560][T18361]  ? gup_fast_fallback+0x195f/0x2010
[  248.645578][T18361]  gup_fast_fallback+0x1e6a/0x2010
[  248.645619][T18361]  ? __pfx_gup_fast_fallback+0x10/0x10
[  248.645631][T18361]  ? __mutex_lock+0x335/0x1350
[  248.645647][T18361]  ? futex_unqueue+0x22/0x240
[  248.645662][T18361]  ? futex_unqueue+0x22/0x240
[  248.645674][T18361]  ? futex_unqueue+0x22/0x240
[  248.645687][T18361]  ? is_valid_gup_args+0x11f/0x200
[  248.645704][T18361]  ? get_user_pages_fast+0x4d/0xb0
[  248.645721][T18361]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  248.645742][T18361]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  248.645760][T18361]  ? wait_for_space+0x24d/0x2d0
[  248.645777][T18361]  iov_iter_get_pages2+0x5e/0xa0
[  248.645793][T18361]  __se_sys_vmsplice+0x548/0x10d0
[  248.645822][T18361]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  248.645836][T18361]  ? __pfx_futex_wait+0x10/0x10
[  248.645858][T18361]  ? __lock_acquire+0xab9/0xd20
[  248.645900][T18361]  ? do_pipe2+0xf7/0x170
[  248.645926][T18361]  ? do_syscall_64+0xbe/0x3b0
[  248.645941][T18361]  do_syscall_64+0xfa/0x3b0
[  248.645952][T18361]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.645962][T18361]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.645973][T18361]  ? exc_page_fault+0x9f/0xf0
[  248.645986][T18361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.645997][T18361] RIP: 0033:0x7fcac3b8ebe9
[  248.646010][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.646020][T18361] RSP: 002b:00007fcac4aeb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  248.646035][T18361] RAX: ffffffffffffffda RBX: 00007fcac3dc5fa0 RCX: 00007fcac3b8ebe9
[  248.646044][T18361] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  248.646052][T18361] RBP: 00007fcac3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  248.646060][T18361] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  248.646067][T18361] R13: 00007fcac3dc6038 R14: 00007fcac3dc5fa0 R15: 00007fff9d651578
[  248.646089][T18361]  </TASK>
[  248.805814][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'.
[  248.827843][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'.
[  249.103117][T18386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.111505][T18386] netlink: 'syz.0.5356': attribute type 1 has an invalid length.
[  249.219137][ T5865] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  249.297335][T18394] 8021q: adding VLAN 0 to HW filter on device bond9
[  249.300833][T18394] bridge0: port 1(bond9) entered blocking state
[  249.303770][T18394] bridge0: port 1(bond9) entered disabled state
[  249.306697][T18394] bond9: entered allmulticast mode
[  249.310496][T18394] bond9: entered promiscuous mode
[  249.315809][T18394] bridge0: port 1(bond9) entered blocking state
[  249.318611][T18394] bridge0: port 1(bond9) entered forwarding state
[  249.329004][ T6785] bridge0: port 1(bond9) entered disabled state
[  251.556563][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  252.146928][T18389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  252.189008][T18412] __nla_validate_parse: 1 callbacks suppressed
[  252.189018][T18412] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5360'.
[  252.200543][T18412] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5360'.
[  252.204372][T18412] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5360'.
[  252.212912][T18412] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5360'.
[  252.220929][T18412] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5360'.
[  252.236313][T18412] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5360'.
[  252.248920][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5362'.
[  252.327649][T18428] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5366'.
[  252.330785][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5366'.
[  252.336878][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5366'.
[  253.064190][T18466] netlink: 'syz.1.5378': attribute type 13 has an invalid length.
[  253.067792][T18466] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  253.108428][T18474] pim6reg: entered allmulticast mode
[  253.110566][T18474] pim6reg: left allmulticast mode
[  253.510126][T18504] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  253.550297][T18504] ip6tnl2: entered promiscuous mode
[  253.649704][T18510] syzkaller0: entered promiscuous mode
[  253.651638][T18510] syzkaller0: entered allmulticast mode
[  254.766949][T18513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.809419][T18528] netlink: 'syz.0.5393': attribute type 13 has an invalid length.
[  254.874310][T18533] netlink: 'syz.2.5396': attribute type 1 has an invalid length.
[  254.882537][T18533] netlink: 'syz.2.5396': attribute type 1 has an invalid length.
[  255.363102][T18585] netpci0: tun_chr_ioctl cmd 2147767507
[  255.487797][T18600] 8021q: VLANs not supported on caif0
[  255.510750][T18598] syzkaller1: entered allmulticast mode
[  255.517474][T18598] syzkaller1: left allmulticast mode
[  255.643224][T18611] openvswitch: netlink: Flow actions attr not present in new flow.
[  255.697141][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.711382][T18620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.725433][T18611] netlink: 'syz.0.5416': attribute type 12 has an invalid length.
[  256.412773][T18669] veth0_to_bridge: entered promiscuous mode
[  256.417615][T18669] veth0_to_bridge: left promiscuous mode
[  257.210067][T18742] openvswitch: netlink: Duplicate or invalid key (type 0).
[  257.212932][T18742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.320285][T18751] __nla_validate_parse: 15 callbacks suppressed
[  257.320298][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5456'.
[  257.824692][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  257.858633][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5472'.
[  258.211404][T18823] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  258.286610][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5479'.
[  258.368555][T18835] netlink: 'syz.0.5487': attribute type 3 has an invalid length.
[  258.392898][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5486'.
[  258.441210][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'.
[  258.469602][T18852] netlink: 'syz.0.5491': attribute type 21 has an invalid length.
[  258.472302][T18852] netlink: 'syz.0.5491': attribute type 6 has an invalid length.
[  258.475348][T18852] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5491'.
[  258.530589][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5492'.
[  258.534631][T18855] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5492'.
[  258.538190][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5492'.
[  258.752584][T18872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5496'.
[  258.970967][T18893] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.441780][T18939] netlink: 'syz.2.5521': attribute type 29 has an invalid length.
[  259.667209][T18968] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  259.743544][T18978] : renamed from veth0_to_bond
[  259.757957][T18978] netlink: 'syz.1.5535': attribute type 3 has an invalid length.
[  259.829226][T18983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.832804][T18983] syzkaller0: entered promiscuous mode
[  259.837326][T18983] syzkaller0: entered allmulticast mode
[  259.844925][T18983] tipc: Resetting bearer <eth:syzkaller0>
[  259.847506][T18986] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.047162][T19007] netlink: 'syz.1.5542': attribute type 11 has an invalid length.
[  260.050464][T19007] netlink: 'syz.1.5542': attribute type 4 has an invalid length.
[  260.603680][T19053] IPVS: stopping master sync thread 7622 ...
[  260.673263][T19055] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  260.686158][T19055] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  260.970739][T19071] openvswitch: netlink: Unknown key attributes 2
[  261.353014][T19104] netlink: 'syz.1.5571': attribute type 83 has an invalid length.
[  262.466952][T19138] __nla_validate_parse: 78 callbacks suppressed
[  262.466962][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5583'.
[  262.472499][T19138] openvswitch: netlink: Unknown nsh attribute 0
[  262.476224][T19138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.512875][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5585'.
[  262.787362][T19170] netlink: 'syz.1.5591': attribute type 4 has an invalid length.
[  262.845904][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5593'.
[  263.265084][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  263.579241][T19222] netlink: 'syz.1.5606': attribute type 13 has an invalid length.
[  263.585173][T19226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5603'.
[  263.590142][   T33] audit: type=1107 audit(1756954816.607:8): pid=19225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  263.600280][T19224] netlink: 'syz.1.5606': attribute type 13 has an invalid length.
[  263.603750][T19224] netlink: 'syz.1.5606': attribute type 17 has an invalid length.
[  263.607701][T19222] netlink: 'syz.1.5606': attribute type 17 has an invalid length.
[  263.672217][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5608'.
[  264.640571][T19258] sctp: [Deprecated]: syz.0.5615 (pid 19258) Use of struct sctp_assoc_value in delayed_ack socket option.
[  264.640571][T19258] Use struct sctp_sack_info instead
[  264.680978][T19261] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  265.380686][T19290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5626'.
[  265.591646][T19305] netlink: 'syz.1.5633': attribute type 1 has an invalid length.
[  265.596016][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5633'.
[  265.699022][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5639'.
[  265.744904][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  265.826853][T19330] netlink: 'syz.0.5642': attribute type 1 has an invalid length.
[  265.830144][T19330] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5642'.
[  265.915589][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5645'.
[  267.138646][T19432] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  267.245236][T19448] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  267.256269][T19451] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  267.302932][T19460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.571193][T19490] __nla_validate_parse: 3 callbacks suppressed
[  267.571202][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5702'.
[  267.580965][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5702'.
[  267.746076][T19516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5710'.
[  267.846849][T19529] netlink: 'syz.1.5714': attribute type 11 has an invalid length.
[  268.022852][T19540] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  268.377716][T19571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5728'.
[  268.513969][T19582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5733'.
[  268.684949][T19601] policy can only be matched on NF_INET_PRE_ROUTING
[  268.684961][T19601] unable to load match
[  268.777272][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'.
[  268.784976][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5741'.
[  269.109321][T19651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5756'.
[  269.129426][T19648] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004
[  269.158980][T19656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5758'.
[  269.159107][T19657] netlink: 134 bytes leftover after parsing attributes in process `syz.1.5759'.
[  269.162396][T19656] tipc: Invalid UDP bearer configuration
[  269.168413][T19656] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  270.468908][T19718] netlink: 'syz.2.5784': attribute type 4 has an invalid length.
[  270.485891][T19718] netlink: 'syz.2.5784': attribute type 4 has an invalid length.
[  270.665463][T19737] smc: net device bond0 applied user defined pnetid SYZ0
[  270.669838][T19737] smc: net device bond0 erased user defined pnetid SYZ0
[  270.962692][T19766] netlink: 'syz.0.5803': attribute type 25 has an invalid length.
[  270.999709][T19770] netlink: 'syz.2.5805': attribute type 12 has an invalid length.
[  271.142235][T19782] netlink: 'syz.2.5811': attribute type 1 has an invalid length.
[  271.301160][T19800] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  271.461439][T19817] netlink: 'syz.1.5823': attribute type 2 has an invalid length.
[  271.466640][T19817] netem: change failed
[  272.549017][T19858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.610865][T19857] tipc: Disabling bearer <eth:syzkaller0>
[  272.942231][T19879] syzkaller0: mtu greater than device maximum
[  273.125666][T19893] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.261916][T19907] __nla_validate_parse: 7 callbacks suppressed
[  273.261932][T19907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5850'.
[  273.363182][T19915] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5852'.
[  273.473361][T19926] lo speed is unknown, defaulting to 1000
[  273.476474][T19926] lo speed is unknown, defaulting to 1000
[  273.479670][T19926] lo speed is unknown, defaulting to 1000
[  273.490198][T19926] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  273.512302][T19926] lo speed is unknown, defaulting to 1000
[  273.520632][T19926] lo speed is unknown, defaulting to 1000
[  273.526180][T19926] lo speed is unknown, defaulting to 1000
[  273.529080][T19926] lo speed is unknown, defaulting to 1000
[  273.578717][T19931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5858'.
[  273.762628][T19943] netlink: 468 bytes leftover after parsing attributes in process `syz.2.5863'.
[  273.806538][T19946] netlink: 'syz.2.5865': attribute type 25 has an invalid length.
[  273.870699][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5868'.
[  274.080551][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5878'.
[  274.085310][T19975] netlink: 'syz.1.5878': attribute type 12 has an invalid length.
[  274.088938][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5878'.
[  274.092429][T19975] netlink: 'syz.1.5878': attribute type 12 has an invalid length.
[  274.136114][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'.
[  274.329513][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5885'.
[  274.333328][T19998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.419705][T19991] lo speed is unknown, defaulting to 1000
[  274.422473][T20008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5890'.
[  275.299311][T20053] lo speed is unknown, defaulting to 1000
[  276.263679][T20109] netlink: 'syz.1.5928': attribute type 1 has an invalid length.
[  276.267671][T20109] netlink: 'syz.1.5928': attribute type 1 has an invalid length.
[  277.270478][T20149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.571903][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  278.451516][T20199] __nla_validate_parse: 5 callbacks suppressed
[  278.451526][T20199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5958'.
[  278.529850][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5961'.
[  278.812530][T20227] delete_channel: no stack
[  278.929273][T20251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.962694][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5979'.
[  279.080691][T20260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'.
[  279.163510][T20264] openvswitch: netlink: Multiple metadata blocks provided
[  279.370424][T20267] netlink: 'syz.0.5984': attribute type 64 has an invalid length.
[  279.446639][T20274] netlink: 384 bytes leftover after parsing attributes in process `syz.0.5986'.
[  279.837802][T20292] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5991'.
[  279.841293][T20292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5991'.
[  279.847145][T20292] dvmrp0: left allmulticast mode
[  279.849117][T20292] pimreg: left allmulticast mode
[  279.850945][T20292] dvmrp8: left allmulticast mode
[  279.919278][T20298] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.961640][T20300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5994'.
[  279.964900][T20300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5994'.
[  279.967983][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5994'.
[  280.327952][T20353] netlink: 'syz.2.6014': attribute type 4 has an invalid length.
[  280.690438][T20387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  280.751464][T20390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.348686][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  281.435664][T20392] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  281.556412][T20400] vlan1: entered allmulticast mode
[  281.558643][T20400] bridge0: entered allmulticast mode
[  281.603262][T20408] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[  281.610331][T20408] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  281.612882][T20408] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  281.667043][T20411] netlink: 'syz.0.6035': attribute type 4 has an invalid length.
[  281.980953][T20441] bond9: left allmulticast mode
[  281.982607][T20441] bond9: left promiscuous mode
[  281.985013][T20441] bridge0: port 1(bond9) entered disabled state
[  282.003470][T20441] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.163691][T20453] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.549307][T20480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.716934][T20500] erspan0: left allmulticast mode
[  282.762532][T20500] vlan1: left allmulticast mode
[  282.765402][T20500] veth0_vlan: left allmulticast mode
[  282.769617][T20500] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  282.772458][T20500] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  282.777344][T20500] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  282.780315][T20500] macvtap1: left promiscuous mode
[  282.785805][T20500] wireguard1: left promiscuous mode
[  282.787966][T20500] wireguard1: left allmulticast mode
[  282.791364][T20500] vlan2: left promiscuous mode
[  282.793307][T20500] dummy0: left promiscuous mode
[  282.799395][T20500] geneve3: left promiscuous mode
[  282.818730][T20500] veth3: left promiscuous mode
[  282.824144][T20500] gretap1: left allmulticast mode
[  282.829071][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.831866][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.836745][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.839690][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.719419][T20597] __nla_validate_parse: 15 callbacks suppressed
[  283.719429][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6103'.
[  284.121464][T20633] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  284.149073][T20633] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  284.476355][T20674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6133'.
[  284.483686][T20674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6133'.
[  284.510015][T20679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6133'.
[  284.550198][T20685] netlink: 'syz.0.6136': attribute type 1 has an invalid length.
[  284.563094][T20685] bond10: entered promiscuous mode
[  284.569449][T20685] 8021q: adding VLAN 0 to HW filter on device bond10
[  284.585941][T20685] 8021q: adding VLAN 0 to HW filter on device bond10
[  284.588561][T20685] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address
[  284.592433][T20685] bond10: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  284.599030][T20685] bond10: (slave wireguard2): making interface the new active one
[  284.601624][T20685] wireguard2: entered promiscuous mode
[  284.604330][T20685] bond10: (slave wireguard2): Enslaving as an active interface with an up link
[  284.647664][T20695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6139'.
[  284.867076][T20702] netlink: 'syz.0.6142': attribute type 1 has an invalid length.
[  284.870482][T20702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6142'.
[  284.884092][T20702] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  284.914420][T20704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.918575][T20704] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  284.920989][T20704] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  285.525173][T20733] IPVS: persistence engine module ip_vs_pe_ not found
[  285.653220][T20740] 8021q: adding VLAN 0 to HW filter on device bond3
[  285.827863][T20750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.830538][T20750] syzkaller0: entered promiscuous mode
[  285.832587][T20750] syzkaller0: entered allmulticast mode
[  285.849821][T20745] tipc: Resetting bearer <eth:syzkaller0>
[  285.857393][T20744] tipc: Resetting bearer <eth:syzkaller0>
[  285.869521][T20744] tipc: Disabling bearer <eth:syzkaller0>
[  288.996153][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'.
[  289.822854][T20855] tap0: tun_chr_ioctl cmd 1074025677
[  289.827440][T20855] tap0: linktype set to 825
[  289.951906][T20859] vxcan1: entered allmulticast mode
[  289.955076][T20859] vxcan1: left allmulticast mode
[  289.957365][T20859] pim6reg: left allmulticast mode
[  289.959587][T20859] bridge0: left allmulticast mode
[  290.076288][T20859] raw_sendmsg: syz.0.6196 forgot to set AF_INET. Fix it!
[  290.121056][T20875] batadv0: entered promiscuous mode
[  290.133297][T20875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.200961][T20884] syzkaller1: entered promiscuous mode
[  290.203311][T20884] syzkaller1: entered allmulticast mode
[  290.523663][T20936] netlink: 'syz.1.6220': attribute type 9 has an invalid length.
[  290.532050][T20943] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6221'.
[  290.730740][T20967] netlink: 'syz.1.6226': attribute type 13 has an invalid length.
[  290.751433][T20967] netlink: 'syz.1.6226': attribute type 17 has an invalid length.
[  290.782559][T20967] ip6gretap0: left promiscuous mode
[  290.800060][T20967] 8021q: adding VLAN 0 to HW filter on device team0
[  290.806960][T20967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.812400][ T1839] lo speed is unknown, defaulting to 1000
[  290.822528][ T1839] syz2: Port: 1 Link ACTIVE
[  290.887267][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6235'.
[  290.969688][T20994] pim6reg1: entered promiscuous mode
[  290.971508][T20994] pim6reg1: entered allmulticast mode
[  290.989500][T20978] lo speed is unknown, defaulting to 1000
[  291.130942][T21020] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  291.173061][T21034] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003
[  291.238222][T21038] bond0: (slave gretap0): Opening slave failed
[  291.388468][T21036] lo speed is unknown, defaulting to 1000
[  291.451529][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6251'.
[  291.454848][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6251'.
[  291.458188][T21045] netlink: 'syz.1.6251': attribute type 5 has an invalid length.
[  291.460923][T21045] netlink: 'syz.1.6251': attribute type 6 has an invalid length.
[  291.568809][T21048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6252'.
[  291.758983][T21066] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  291.815178][T21068] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  291.976570][T21076] netlink: 'syz.0.6260': attribute type 1 has an invalid length.
[  291.979127][T21076] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6260'.
[  291.983704][T21076] netlink: 'syz.0.6260': attribute type 1 has an invalid length.
[  292.551437][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6273'.
[  292.621453][T21125] openvswitch: netlink: IP tunnel dst address not specified
[  292.628168][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6275'.
[  292.734206][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6279'.
[  292.761762][T21142] openvswitch: netlink: IPv4 tun info is not correct
[  292.794868][T21144] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20003
[  292.940542][T21162] bond0: (slave rose0): Error: Device can not be enslaved while up
[  292.943102][T21167] bond0: (slave rose0): Error: Device can not be enslaved while up
[  293.346188][T21208] netlink: 'syz.1.6297': attribute type 1 has an invalid length.
[  293.411613][T21210] gretap2: entered promiscuous mode
[  293.429952][T21210] bond4: (slave gretap2): making interface the new active one
[  293.433935][T21210] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  294.412365][T21256] __nla_validate_parse: 1 callbacks suppressed
[  294.412375][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6309'.
[  294.549987][T21270] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[  294.579681][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6317'.
[  294.617692][T21279] netlink: 'syz.0.6318': attribute type 1 has an invalid length.
[  294.641297][T21277] netlink: 'syz.2.6316': attribute type 1 has an invalid length.
[  294.643796][T21277] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6316'.
[  294.705382][T21288] 8021q: adding VLAN 0 to HW filter on device bond13
[  294.709497][T21288] bond12: (slave bond13): making interface the new active one
[  294.712183][T21288] bond12: (slave bond13): Enslaving as an active interface with an up link
[  294.977088][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6327'.
[  295.011348][T21319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6328'.
[  295.014664][T21319] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6328'.
[  295.327387][T21352] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  295.979364][T21396] validate_nla: 5 callbacks suppressed
[  295.979374][T21396] netlink: 'syz.2.6350': attribute type 1 has an invalid length.
[  295.983979][T21396] netlink: 'syz.2.6350': attribute type 1 has an invalid length.
[  296.202699][T21416] netlink: 'syz.2.6354': attribute type 1 has an invalid length.
[  296.574237][T21437] lo speed is unknown, defaulting to 1000
[  296.582048][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6359'.
[  296.745471][T21443] lo speed is unknown, defaulting to 1000
[  296.920444][T21485] netlink: 'syz.1.6368': attribute type 1 has an invalid length.
[  296.972988][T21485] 8021q: adding VLAN 0 to HW filter on device bond5
[  297.022490][T21488] bond5: (slave veth9): Enslaving as an active interface with a down link
[  297.390609][T21519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6379'.
[  297.439247][T21524] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  297.715005][T21545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6391'.
[  298.036988][T21571] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.051621][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'.
[  299.210935][T21644] netlink: zone id is out of range
[  299.212619][T21644] netlink: zone id is out of range
[  299.214392][T21644] netlink: zone id is out of range
[  299.217825][T21644] netlink: zone id is out of range
[  299.219825][T21644] netlink: zone id is out of range
[  299.221622][T21644] netlink: zone id is out of range
[  299.223511][T21644] netlink: zone id is out of range
[  299.225813][T21644] netlink: zone id is out of range
[  299.227587][T21644] netlink: zone id is out of range
[  299.519243][T21666] __nla_validate_parse: 4 callbacks suppressed
[  299.519254][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6417'.
[  299.558738][T21666] sctp: [Deprecated]: syz.0.6417 (pid 21666) Use of struct sctp_assoc_value in delayed_ack socket option.
[  299.558738][T21666] Use struct sctp_sack_info instead
[  299.853115][T21690] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6424'.
[  300.228480][T21731] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6432'.
[  300.231875][T21730] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6432'.
[  300.926486][T21796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6449'.
[  301.073993][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6453'.
[  301.095647][T21809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6453'.
[  301.152055][T21815] nft_compat: unsupported protocol 0
[  301.154430][T21814] nft_compat: unsupported protocol 0
[  301.307551][T21830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6461'.
[  301.642146][T21844] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  301.816156][T21865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6471'.
[  301.822492][T21865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6471'.
[  302.702987][T21930] sctp: [Deprecated]: syz.0.6492 (pid 21930) Use of int in max_burst socket option.
[  302.702987][T21930] Use struct sctp_assoc_value instead
[  302.708553][T21931] sctp: [Deprecated]: syz.0.6492 (pid 21931) Use of int in max_burst socket option.
[  302.708553][T21931] Use struct sctp_assoc_value instead
[  303.264568][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  303.848801][T22019] net_ratelimit: 2 callbacks suppressed
[  303.848815][T22019] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  304.030835][T22048] netlink: 'syz.0.6528': attribute type 4 has an invalid length.
[  304.783933][T22132] __nla_validate_parse: 6 callbacks suppressed
[  304.783948][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6546'.
[  304.843633][T22135] netlink: 'syz.1.6546': attribute type 4 has an invalid length.
[  304.901033][T22130] netlink: 'syz.1.6546': attribute type 4 has an invalid length.
[  304.901101][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6548'.
[  304.911653][ T5900] lo speed is unknown, defaulting to 1000
[  304.913782][ T5872] lo speed is unknown, defaulting to 1000
[  304.954721][T22140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.031003][T22151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6554'.
[  306.152499][T22216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6576'.
[  306.159954][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6577'.
[  306.423898][T22246] netlink: 'syz.0.6587': attribute type 20 has an invalid length.
[  306.443628][T22246] netlink: 'syz.0.6587': attribute type 6 has an invalid length.
[  306.510312][T22256] blkio.reset_stats is deprecated
[  306.653950][T22278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6600'.
[  306.903661][T22312] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6610'.
[  307.011293][T22323] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  307.016879][T22323] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6615'.
[  307.236493][T22348] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  307.241217][T22348] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  307.255846][T22348] netlink: 'syz.1.6624': attribute type 5 has an invalid length.
[  307.298342][T22351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6625'.
[  307.320568][T22351] 8021q: adding VLAN 0 to HW filter on device bond6
[  307.329938][T22351] macvlan3: entered promiscuous mode
[  307.331984][T22351] macvlan3: entered allmulticast mode
[  307.335304][T22351] bond6: entered promiscuous mode
[  307.338084][T22351] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  307.343338][T22351] bond6: left promiscuous mode
[  307.462853][T22357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6627'.
[  307.466964][T22357] team0: invalid flags given to default FDB implementation
[  307.928194][T22386] netlink: 'syz.2.6637': attribute type 2 has an invalid length.
[  307.931616][T22386] netlink: 'syz.2.6637': attribute type 1 has an invalid length.
[  308.125741][T22407] bridge0: entered allmulticast mode
[  309.103597][T22478] macvtap2: entered allmulticast mode
[  309.108733][T22478] bridge0: port 1(macvtap2) entered blocking state
[  309.111462][T22478] bridge0: port 1(macvtap2) entered disabled state
[  309.320323][T22490] batadv_slave_1: entered promiscuous mode
[  309.346010][T22489] batadv_slave_1: left promiscuous mode
[  309.520967][T22454] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  310.479192][T22533] __nla_validate_parse: 11 callbacks suppressed
[  310.479206][T22533] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6684'.
[  310.634992][ T5847] nci: nci_rx_work: unknown MT 0x1
[  310.649282][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6694'.
[  311.610510][T22590] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.849012][T22620] netlink: zone id is out of range
[  311.850794][T22620] netlink: zone id is out of range
[  311.853909][T22620] netlink: zone id is out of range
[  311.855533][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6716'.
[  311.857055][T22620] netlink: zone id is out of range
[  311.860302][T22620] netlink: zone id is out of range
[  311.862147][T22620] netlink: zone id is out of range
[  311.865298][T22620] netlink: zone id is out of range
[  311.867002][T22620] netlink: zone id is out of range
[  311.868912][T22620] netlink: zone id is out of range
[  311.870733][T22620] netlink: zone id is out of range
[  312.035619][T22644] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6725'.
[  312.039341][T22647] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6726'.
[  312.081307][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6727'.
[  312.102562][T22649] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6727'.
[  312.238067][T22667] netlink: 'syz.2.6733': attribute type 13 has an invalid length.
[  312.241366][T22667] netlink: 'syz.2.6733': attribute type 17 has an invalid length.
[  312.259230][T22672] netlink: 'syz.0.6734': attribute type 1 has an invalid length.
[  312.303322][T22674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6735'.
[  312.504199][T22693] nbd: must specify at least one socket
[  312.632737][T22703] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6744'.
[  312.937835][T22734] netlink: 'syz.1.6755': attribute type 11 has an invalid length.
[  312.940903][T22734] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6755'.
[  313.226314][T22763] bridge5: port 1(veth7) entered blocking state
[  313.228480][T22763] bridge5: port 1(veth7) entered disabled state
[  313.230548][T22763] veth7: entered allmulticast mode
[  313.233427][T22763] veth7: entered promiscuous mode
[  313.242068][T22763] bridge5: port 2(veth0_to_bond) entered blocking state
[  313.245287][T22763] bridge5: port 2(veth0_to_bond) entered disabled state
[  313.247809][T22763] veth0_to_bond: entered allmulticast mode
[  313.250732][T22763] veth0_to_bond: entered promiscuous mode
[  313.257773][T22763] vlan1: entered allmulticast mode
[  313.259587][T22763] veth1: entered allmulticast mode
[  313.261487][T22763] bridge5: port 3(vlan1) entered blocking state
[  313.263583][T22763] bridge5: port 3(vlan1) entered disabled state
[  313.266913][T22763] vlan1: entered promiscuous mode
[  313.393064][T22785] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002
[  313.640506][T22817] netem: change failed
[  313.663868][T22819] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  313.838657][T22836] nbd: nbd0 already in use
[  313.917588][T22846] batman_adv: batadv0: Adding interface: dummy0
[  313.919756][T22846] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.930312][T22846] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  313.943137][T22846] batman_adv: batadv0: Adding interface: ip6gretap4
[  313.945801][T22846] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.955613][T22846] batman_adv: batadv0: Interface activated: ip6gretap4
[  315.314409][T22939] netlink: 'syz.1.6830': attribute type 1 has an invalid length.
[  315.321838][T22939] netlink: 'syz.1.6830': attribute type 2 has an invalid length.
[  315.377955][T22939] netlink: 'syz.1.6830': attribute type 10 has an invalid length.
[  315.548575][T22967] netlink: 'syz.0.6841': attribute type 5 has an invalid length.
[  315.578719][T22971] __nla_validate_parse: 38 callbacks suppressed
[  315.578729][T22971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6843'.
[  315.584137][T22971] netlink: 'syz.0.6843': attribute type 1 has an invalid length.
[  315.640560][T22978] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6843'.
[  315.646959][T22981] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.839656][   T33] audit: type=1804 audit(1756954868.857:9): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6850" name="/newroot/2286/cgroup.controllers" dev="tmpfs" ino=11558 res=1 errno=0
[  315.848111][   T33] audit: type=1800 audit(1756954868.857:10): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6850" name="cgroup.controllers" dev="tmpfs" ino=11558 res=0 errno=0
[  315.857831][   T33] audit: type=1800 audit(1756954868.877:11): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6850" name="cgroup.controllers" dev="tmpfs" ino=11558 res=0 errno=0
[  316.663758][T23032] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6861'.
[  316.668308][T23032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6861'.
[  316.672135][T23032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6861'.
[  316.770406][T23038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6863'.
[  317.274036][T23109] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  317.277445][T23109] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  317.279889][T23109] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  317.362494][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6889'.
[  317.473410][T23129] netlink: 'syz.2.6893': attribute type 3 has an invalid length.
[  317.484639][T23129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6893'.
[  317.757539][T23152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6901'.
[  317.769894][T23152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6901'.
[  317.842543][T23158] geneve2: entered promiscuous mode
[  317.846346][ T5886] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.853605][ T5886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.858232][ T5886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.864850][ T5886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.183457][T23196] batadv_slave_0: entered promiscuous mode
[  318.191481][T23196] netlink: 'syz.0.6919': attribute type 2 has an invalid length.
[  318.395212][T23214] netlink: 'syz.2.6925': attribute type 1 has an invalid length.
[  318.773938][T23233] erspan0: entered promiscuous mode
[  318.781770][T23233] erspan0: left promiscuous mode
[  318.995664][T23238] net_ratelimit: 12 callbacks suppressed
[  318.995679][T23238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  319.401953][T23285] netlink: 'syz.2.6945': attribute type 4 has an invalid length.
[  319.878975][T23244] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  320.062667][T23360] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  320.163782][T23378] netlink: 'syz.0.6975': attribute type 1 has an invalid length.
[  320.273898][T23394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.277820][T23393] tipc: Resetting bearer <eth:syzkaller0>
[  320.282363][T23391] tipc: Disabling bearer <eth:syzkaller0>
[  320.703852][T23441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  321.073673][T23491] __nla_validate_parse: 15 callbacks suppressed
[  321.073686][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7010'.
[  321.104636][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  321.109922][T23487] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.7008'.
[  321.149153][T23504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7014'.
[  321.249688][T23515] netlink: 'syz.2.7017': attribute type 10 has an invalid length.
[  321.379343][T23533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7023'.
[  321.555104][T23554] syzkaller0: left promiscuous mode
[  321.557328][T23554] syzkaller0: left allmulticast mode
[  321.562595][T23557] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  321.571135][T23554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.742916][T23581] netlink: 'syz.0.7041': attribute type 1 has an invalid length.
[  321.760300][T23581] 8021q: adding VLAN 0 to HW filter on device bond14
[  321.778563][T23589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7042'.
[  321.798260][T23581] 8021q: adding VLAN 0 to HW filter on device bond14
[  321.800704][T23581] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  321.806698][T23581] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  321.818777][T23591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7041'.
[  321.838158][T23591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7041'.
[  321.842587][T23591] 8021q: adding VLAN 0 to HW filter on device bond14
[  321.855950][T23589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7042'.
[  322.254814][T23648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7061'.
[  322.257685][T23648] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7061'.
[  322.463668][T23674] dvmrp8: entered allmulticast mode
[  322.475029][T23673] dvmrp8: left allmulticast mode
[  322.714877][T23680] netlink: 'syz.0.7070': attribute type 1 has an invalid length.
[  322.718739][T23680] nbd: error processing sock list
[  322.721614][T23680] block nbd5: shutting down sockets
[  343.076320][T23705] __nla_validate_parse: 3 callbacks suppressed
[  343.076332][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7077'.
[  343.082454][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7077'.
[  343.087472][T23699] netlink: 'syz.1.7075': attribute type 1 has an invalid length.
[  343.090161][T23699] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7075'.
[  343.099641][T23705] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  343.248424][T23731] netlink: 'syz.2.7086': attribute type 6 has an invalid length.
[  343.332605][T23745] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7091'.
[  343.391354][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7091'.
[  344.354761][T23784] vlan2: entered promiscuous mode
[  344.356587][T23784] vlan2: entered allmulticast mode
[  344.368671][T23784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7102'.
[  344.427509][T23787] syzkaller0: entered allmulticast mode
[  344.510073][T23803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7108'.
[  344.515147][T23803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.734617][T23831] syz_tun: entered promiscuous mode
[  344.737959][T23831] batadv_slave_0: entered promiscuous mode
[  344.741548][T23831] batadv_slave_0: left promiscuous mode
[  344.745443][T23831] syz_tun: left promiscuous mode
[  345.028567][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7133'.
[  345.158455][T23886] netlink: 'syz.1.7135': attribute type 1 has an invalid length.
[  345.629908][T23916] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  345.740659][T23925] netlink: 'syz.1.7147': attribute type 1 has an invalid length.
[  345.754224][T23925] 8021q: adding VLAN 0 to HW filter on device bond7
[  345.768244][T23925] bond7: (slave ip6erspan0): making interface the new active one
[  345.771666][T23925] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link
[  346.084022][T23936] netlink: 'syz.0.7151': attribute type 3 has an invalid length.
[  346.122614][T23938] netlink: 404 bytes leftover after parsing attributes in process `syz.0.7152'.
[  346.125964][T23938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7152'.
[  346.619468][T23972] sch_fq: defrate 0 ignored.
[  347.125194][T23978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.385956][T24033] netlink: 'syz.2.7185': attribute type 1 has an invalid length.
[  347.445760][T24042] xfrm1: entered allmulticast mode
[  348.006492][T24085] syz.2.7199: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  348.016856][T24085] CPU: 0 UID: 0 PID: 24085 Comm: syz.2.7199 Not tainted syzkaller #0 PREEMPT(full) 
[  348.016874][T24085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  348.016881][T24085] Call Trace:
[  348.016886][T24085]  <TASK>
[  348.016892][T24085]  dump_stack_lvl+0x189/0x250
[  348.016938][T24085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.016952][T24085]  ? __pfx__printk+0x10/0x10
[  348.016968][T24085]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  348.016983][T24085]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  348.017002][T24085]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  348.017017][T24085]  warn_alloc+0x214/0x310
[  348.017039][T24085]  ? __pfx_warn_alloc+0x10/0x10
[  348.017062][T24085]  ? __get_vm_area_node+0x28f/0x300
[  348.017079][T24085]  ? xskq_create+0xbf/0x170
[  348.017092][T24085]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  348.017151][T24085]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  348.017171][T24085]  ? __kasan_kmalloc+0x93/0xb0
[  348.017188][T24085]  vmalloc_user_noprof+0xad/0xf0
[  348.017204][T24085]  ? xskq_create+0xbf/0x170
[  348.017215][T24085]  xskq_create+0xbf/0x170
[  348.017228][T24085]  xsk_init_queue+0xb0/0x110
[  348.017247][T24085]  xsk_setsockopt+0x57b/0x8d0
[  348.017265][T24085]  ? __pfx_xsk_setsockopt+0x10/0x10
[  348.017279][T24085]  ? __pfx_aa_sk_perm+0x10/0x10
[  348.017296][T24085]  ? __fget_files+0x2a/0x420
[  348.017306][T24085]  ? aa_sock_opt_perm+0xff/0x1b0
[  348.017319][T24085]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  348.017329][T24085]  ? __pfx_xsk_setsockopt+0x10/0x10
[  348.017343][T24085]  do_sock_setsockopt+0x17c/0x1b0
[  348.017359][T24085]  __x64_sys_setsockopt+0x13f/0x1b0
[  348.017377][T24085]  do_syscall_64+0xfa/0x3b0
[  348.017387][T24085]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.017398][T24085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.017410][T24085]  ? exc_page_fault+0x9f/0xf0
[  348.017422][T24085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.017431][T24085] RIP: 0033:0x7fcac3b8ebe9
[  348.017441][T24085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.017449][T24085] RSP: 002b:00007fcac4aca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  348.017461][T24085] RAX: ffffffffffffffda RBX: 00007fcac3dc6090 RCX: 00007fcac3b8ebe9
[  348.017469][T24085] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[  348.017476][T24085] RBP: 00007fcac3c11e19 R08: 0000000000000004 R09: 0000000000000000
[  348.017484][T24085] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  348.017491][T24085] R13: 00007fcac3dc6128 R14: 00007fcac3dc6090 R15: 00007fff9d651578
[  348.017508][T24085]  </TASK>
[  348.017948][T24085] Mem-Info:
[  348.132895][T24085] active_anon:13627 inactive_anon:8 isolated_anon:0
[  348.132895][T24085]  active_file:1435 inactive_file:37236 isolated_file:0
[  348.132895][T24085]  unevictable:1768 dirty:129 writeback:0
[  348.132895][T24085]  slab_reclaimable:10780 slab_unreclaimable:93116
[  348.132895][T24085]  mapped:19229 shmem:2451 pagetables:1004
[  348.132895][T24085]  sec_pagetables:0 bounce:0
[  348.132895][T24085]  kernel_misc_reclaimable:0
[  348.132895][T24085]  free:249992 free_pcp:15986 free_cma:0
[  348.151860][T24085] Node 0 active_anon:28352kB inactive_anon:32kB active_file:4440kB inactive_file:130152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31464kB dirty:484kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3760kB pagetables:1500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  348.166028][T24085] Node 1 active_anon:26156kB inactive_anon:0kB active_file:1300kB inactive_file:18792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45452kB dirty:32kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9996kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  348.179200][T24085] Node 0 DMA free:6072kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:556kB local_pcp:344kB free_cma:0kB
[  348.191505][T24085] lowmem_reserve[]: 0 811 811 811 811
[  348.193941][T24085] Node 0 DMA32 free:224664kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28352kB inactive_anon:32kB active_file:4440kB inactive_file:130152kB unevictable:3536kB writepending:484kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:26644kB local_pcp:9480kB free_cma:0kB
[  348.211967][T24085] lowmem_reserve[]: 0 0 0 0 0
[  348.214113][T24085] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  348.227695][T24085] lowmem_reserve[]: 0 0 854 854 854
[  348.230010][T24085] Node 1 Normal free:310424kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25952kB inactive_anon:0kB active_file:1300kB inactive_file:18792kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37164kB local_pcp:14928kB free_cma:0kB
[  348.243458][T24085] lowmem_reserve[]: 0 0 0 0 0
[  348.246827][T24085] Node 0 DMA: 20*4kB (UM) 23*8kB (UM) 21*16kB (UM) 27*32kB (UM) 12*64kB (UM) 2*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 6072kB
[  348.253627][T24085] Node 0 DMA32: 680*4kB (UME) 805*8kB (UME) 297*16kB (UM) 72*32kB (UME) 51*64kB (M) 47*128kB (UME) 38*256kB (UME) 18*512kB (UME) 6*1024kB (UM) 9*2048kB (UM) 38*4096kB (U) = 224664kB
[  348.261670][T24085] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  348.268672][T24085] Node 1 Normal: 768*4kB (UME) 812*8kB (UME) 428*16kB (UM) 383*32kB (UME) 400*64kB (UME) 195*128kB (UME) 85*256kB (UM) 39*512kB (UM) 23*1024kB (UM) 15*2048kB (UME) 33*4096kB (UM) = 310400kB
[  348.277249][T24085] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  348.281328][T24085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  348.285599][T24085] 41127 total pagecache pages
[  348.287777][T24085] 5 pages in swap cache
[  348.289698][T24085] Free swap  = 124976kB
[  348.291469][T24085] Total swap = 124996kB
[  348.303242][T24085] 786301 pages RAM
[  348.305862][T24085] 0 pages HighMem/MovableOnly
[  348.307941][T24085] 241344 pages reserved
[  348.309723][T24085] 0 pages cma reserved
[  348.468419][T24101] rdma_rxe: rxe_newlink: failed to add lo
[  348.898705][T24152] syzkaller0: entered promiscuous mode
[  348.900720][T24152] syzkaller0: entered allmulticast mode
[  349.722211][T24163] netlink: 'syz.0.7217': attribute type 10 has an invalid length.
[  349.725920][T24163] batadv0: left promiscuous mode
[  349.739590][T24163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.747118][T24163] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  349.971926][T24177] __nla_validate_parse: 14 callbacks suppressed
[  349.971941][T24177] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7223'.
[  350.216457][T24177] lo speed is unknown, defaulting to 1000
[  350.379102][T24191] lo speed is unknown, defaulting to 1000
[  350.470887][T24201] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7227'.
[  350.679584][T24212] netlink: 'syz.2.7229': attribute type 1 has an invalid length.
[  350.683061][T24212] netlink: 'syz.2.7229': attribute type 3 has an invalid length.
[  350.686884][T24212] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7229'.
[  350.857937][T24223] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7234'.
[  350.931514][T24226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.118195][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7243'.
[  351.279725][T24262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.285776][T24262] syzkaller0: entered promiscuous mode
[  351.417364][T24279] smc: net device bond0 applied user defined pnetid SYZ2
[  352.004949][T24323] sctp: [Deprecated]: syz.2.7264 (pid 24323) Use of int in max_burst socket option.
[  352.004949][T24323] Use struct sctp_assoc_value instead
[  352.074325][T24325] syzkaller1: entered promiscuous mode
[  352.076356][T24325] syzkaller1: entered allmulticast mode
[  352.259945][T24325] lo speed is unknown, defaulting to 1000
[  352.766748][T24363] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7275'.
[  353.179774][T24395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.215832][T24406] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7282'.
[  353.546751][T24437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7293'.
[  353.561729][T24437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7293'.
[  353.688516][T24447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7297'.
[  353.764615][T24456] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[  354.048429][T24496] netlink: 'syz.1.7313': attribute type 1 has an invalid length.
[  354.579271][T24554] netlink: 'syz.1.7328': attribute type 12 has an invalid length.
[  354.642129][T24561] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  355.967932][T24621] nftables ruleset with unbound set
[  355.980351][T24623] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  355.991809][T24623] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  356.029621][T24625] __nla_validate_parse: 9 callbacks suppressed
[  356.029631][T24625] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7351'.
[  356.439627][T24683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7373'.
[  356.485705][T24685] netlink: 'syz.2.7374': attribute type 1 has an invalid length.
[  356.489110][T24685] netlink: 'syz.2.7374': attribute type 4 has an invalid length.
[  356.492386][T24679] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7372'.
[  356.492434][T24685] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7374'.
[  356.528620][T24687] pimreg: left allmulticast mode
[  356.570798][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7376'.
[  356.652199][T24701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7380'.
[  356.744271][T24709] netlink: 'syz.2.7383': attribute type 11 has an invalid length.
[  356.747886][T24709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7383'.
[  356.760842][T24709] netlink: 'syz.2.7383': attribute type 1 has an invalid length.
[  356.888711][T24721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7386'.
[  358.964170][T24833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7422'.
[  359.169657][T24850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7428'.
[  359.407467][T24871] netlink: 'syz.1.7433': attribute type 1 has an invalid length.
[  359.428686][T24871] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  359.432762][T24871] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  359.950530][T24901] sctp: [Deprecated]: syz.2.7443 (pid 24901) Use of int in maxseg socket option.
[  359.950530][T24901] Use struct sctp_assoc_value instead
[  359.997366][T24905] IPVS: Unknown mcast interface: netdevsim0
[  360.028067][T24908] netlink: 'syz.2.7446': attribute type 1 has an invalid length.
[  360.057324][T24910] IPv6: NLM_F_CREATE should be specified when creating new route
[  360.121487][T24920] netlink: 'syz.2.7451': attribute type 1 has an invalid length.
[  360.174720][T24916] netlink: 'syz.1.7449': attribute type 10 has an invalid length.
[  360.177381][T24916] batadv0: left promiscuous mode
[  360.179099][T24916] batadv0: left allmulticast mode
[  360.445542][T24973] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.896140][T25009] netlink: 'syz.1.7480': attribute type 12 has an invalid length.
[  361.114813][ T5900] page_pool_release_retry() stalled pool shutdown: id 83, 640 inflight 60 sec
[  361.119374][ T5900] page_pool_release_retry() stalled pool shutdown: id 82, 512 inflight 60 sec
[  361.432009][T25035] __nla_validate_parse: 7 callbacks suppressed
[  361.432018][T25035] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7488'.
[  361.684163][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7491'.
[  361.687374][T25044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7491'.
[  362.144169][T25082] IPv6: NLM_F_REPLACE set, but no existing node found!
[  362.147285][T25082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7503'.
[  362.216268][T25088] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.7506'.
[  362.264420][T25096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7508'.
[  362.274183][T25096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7508'.
[  362.402096][T25109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  362.431993][T25115] netlink: 'syz.1.7515': attribute type 1 has an invalid length.
[  362.460002][T25115] bond10: (slave gretap3): making interface the new active one
[  362.463142][T25115] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  362.508476][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7518'.
[  362.531580][T25128] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7519'.
[  362.613769][T25137] openvswitch: netlink: IPv4 tun info is not correct
[  362.815789][T25168] netlink: 'syz.0.7533': attribute type 3 has an invalid length.
[  362.818888][T25168] netlink: 'syz.0.7533': attribute type 1 has an invalid length.
[  362.821746][T25168] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7533'.
[  363.034747][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  363.469768][T25237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  363.472180][T25237] IPv6: NLM_F_CREATE should be set when creating new route
[  363.474655][T25237] IPv6: NLM_F_CREATE should be set when creating new route
[  363.477151][T25237] IPv6: NLM_F_CREATE should be set when creating new route
[  363.634376][T25249] netlink: 'syz.1.7559': attribute type 3 has an invalid length.
[  363.796091][T25266] netlink: 'syz.0.7564': attribute type 2 has an invalid length.
[  363.988890][T25289] lo speed is unknown, defaulting to 1000
[  364.523509][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  365.244105][T25358] netlink: 'syz.0.7594': attribute type 83 has an invalid length.
[  365.344631][T25212] Bluetooth: hci2: command 0x0406 tx timeout
[  365.420781][T25368] vxcan1: entered allmulticast mode
[  365.423313][T25368] vxcan1: left allmulticast mode
[  365.778311][T25396] netlink: 'syz.0.7609': attribute type 3 has an invalid length.
[  366.655512][T25427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.847892][T25447] sctp: [Deprecated]: syz.1.7625 (pid 25447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.847892][T25447] Use struct sctp_sack_info instead
[  367.424652][T25212] Bluetooth: hci2: command 0x0406 tx timeout
[  367.672323][T25456] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.696349][T25460] netlink: 'syz.2.7631': attribute type 1 has an invalid length.
[  367.699822][T25460] netlink: 'syz.2.7631': attribute type 2 has an invalid length.
[  367.703641][T25460] __nla_validate_parse: 6 callbacks suppressed
[  367.703652][T25460] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.7631'.
[  367.733235][T25460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7631'.
[  367.741328][T25460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7631'.
[  367.882418][T25477] netlink: 'syz.0.7639': attribute type 37 has an invalid length.
[  367.963354][T25486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7642'.
[  368.161404][T25503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.165477][T25503] syzkaller0: entered promiscuous mode
[  368.167897][T25503] syzkaller0: entered allmulticast mode
[  368.182195][T25503] tipc: Resetting bearer <eth:syzkaller0>
[  368.187635][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7650'.
[  368.302099][T25502] tipc: Resetting bearer <eth:syzkaller0>
[  368.318040][T25502] tipc: Disabling bearer <eth:syzkaller0>
[  368.751873][T25528] netlink: 'syz.2.7657': attribute type 4 has an invalid length.
[  368.757557][T25528] netlink: 'syz.2.7657': attribute type 21 has an invalid length.
[  368.949981][T25539] netlink: 'syz.1.7661': attribute type 1 has an invalid length.
[  368.963474][T25539] 8021q: adding VLAN 0 to HW filter on device bond11
[  368.988017][T25539] veth13: entered promiscuous mode
[  368.992550][T25539] bond11: (slave veth13): Enslaving as an active interface with an up link
[  369.706245][   T33] audit: type=1107 audit(1756954922.717:12): pid=25552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7h[6'%1[G{uіy:95}IŔMOA/IeVcL'e%$!#=),@]6JJ|ڨыG|d7) vK	XǟG,U7J4:ʰEOV6Sm'Rj)Cvڒ;jg.ZtIt]Doc,Mdl14ylՕGVsH4o{'
[  369.745439][T25554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7665'.
[  369.751550][T25554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7665'.
[  370.130644][T25576] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.729620][T25605] 8021q: adding VLAN 0 to HW filter on device bond12
[  370.735027][T25605] bond0: (slave bond12): Enslaving as an active interface with an up link
[  371.027848][T25625] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7686'.
[  371.349483][T25655] netlink: 'syz.0.7696': attribute type 14 has an invalid length.
[  372.493978][T25705] bond4: (slave gretap2): Releasing active interface
[  372.501058][T25705] bond5: (slave veth9): Releasing active interface
[  372.507759][T25705] bond7: (slave ip6erspan0): Releasing active interface
[  372.513322][T25705] bond10: (slave gretap3): Releasing active interface
[  372.521475][T25705] bond11: (slave veth13): Releasing backup interface
[  372.529691][T25705] bond0: (slave bond12): Releasing backup interface
[  372.542401][T25705] syz.1.7712: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  372.547725][T25705] CPU: 1 UID: 0 PID: 25705 Comm: syz.1.7712 Not tainted syzkaller #0 PREEMPT(full) 
[  372.547737][T25705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  372.547742][T25705] Call Trace:
[  372.547746][T25705]  <TASK>
[  372.547749][T25705]  dump_stack_lvl+0x189/0x250
[  372.547786][T25705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.547797][T25705]  ? __pfx__printk+0x10/0x10
[  372.547807][T25705]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  372.547816][T25705]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  372.547824][T25705]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  372.547834][T25705]  warn_alloc+0x214/0x310
[  372.547845][T25705]  ? stack_depot_save_flags+0x40/0x860
[  372.547855][T25705]  ? __pfx_warn_alloc+0x10/0x10
[  372.547865][T25705]  ? kasan_save_track+0x4f/0x80
[  372.547875][T25705]  ? xskq_create+0x56/0x170
[  372.547881][T25705]  ? xsk_init_queue+0xb0/0x110
[  372.547891][T25705]  ? xsk_setsockopt+0x4dc/0x8d0
[  372.547899][T25705]  ? do_sock_setsockopt+0x17c/0x1b0
[  372.547906][T25705]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  372.547912][T25705]  ? do_syscall_64+0xfa/0x3b0
[  372.547919][T25705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.547928][T25705]  __vmalloc_node_range_noprof+0x125/0x12f0
[  372.547952][T25705]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  372.547964][T25705]  ? __kasan_kmalloc+0x93/0xb0
[  372.547974][T25705]  vmalloc_user_noprof+0xad/0xf0
[  372.547984][T25705]  ? xskq_create+0xbf/0x170
[  372.547990][T25705]  xskq_create+0xbf/0x170
[  372.547998][T25705]  xsk_init_queue+0xb0/0x110
[  372.548008][T25705]  xsk_setsockopt+0x4dc/0x8d0
[  372.548019][T25705]  ? __pfx_xsk_setsockopt+0x10/0x10
[  372.548028][T25705]  ? __pfx_aa_sk_perm+0x10/0x10
[  372.548039][T25705]  ? aa_sock_opt_perm+0xff/0x1b0
[  372.548046][T25705]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  372.548054][T25705]  ? __pfx_xsk_setsockopt+0x10/0x10
[  372.548063][T25705]  do_sock_setsockopt+0x17c/0x1b0
[  372.548073][T25705]  __x64_sys_setsockopt+0x13f/0x1b0
[  372.548082][T25705]  do_syscall_64+0xfa/0x3b0
[  372.548088][T25705]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.548095][T25705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.548101][T25705]  ? exc_page_fault+0x9f/0xf0
[  372.548108][T25705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.548114][T25705] RIP: 0033:0x7fa52e78ebe9
[  372.548121][T25705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.548127][T25705] RSP: 002b:00007fa52c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  372.548135][T25705] RAX: ffffffffffffffda RBX: 00007fa52e9c5fa0 RCX: 00007fa52e78ebe9
[  372.548140][T25705] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  372.548144][T25705] RBP: 00007fa52e811e19 R08: 0000000000000004 R09: 0000000000000000
[  372.548148][T25705] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.548152][T25705] R13: 00007fa52e9c6038 R14: 00007fa52e9c5fa0 R15: 00007fff0643a478
[  372.548164][T25705]  </TASK>
[  372.548167][T25705] Mem-Info:
[  372.623077][T25718] siw: device registration error -23
[  372.641310][T25705] active_anon:13083 inactive_anon:8 isolated_anon:0
[  372.641310][T25705]  active_file:1435 inactive_file:37244 isolated_file:0
[  372.641310][T25705]  unevictable:1770 dirty:183 writeback:0
[  372.641310][T25705]  slab_reclaimable:10818 slab_unreclaimable:93747
[  372.641310][T25705]  mapped:18153 shmem:2458 pagetables:1051
[  372.641310][T25705]  sec_pagetables:0 bounce:0
[  372.641310][T25705]  kernel_misc_reclaimable:0
[  372.641310][T25705]  free:241567 free_pcp:24171 free_cma:0
[  372.671664][T25705] Node 0 active_anon:27276kB inactive_anon:32kB active_file:4400kB inactive_file:130160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31452kB dirty:520kB writeback:0kB shmem:5052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3920kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  372.684639][T25705] Node 1 active_anon:24988kB inactive_anon:0kB active_file:1340kB inactive_file:18816kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:41160kB dirty:212kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9772kB pagetables:2088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  372.710054][T25705] Node 0 DMA free:5920kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:708kB local_pcp:368kB free_cma:0kB
[  372.725622][T25728] siw: device registration error -23
[  372.729059][T25727] siw: device registration error -23
[  372.731478][T25705] lowmem_reserve[]: 0 811 811 811 811
[  372.736849][T25705] Node 0 DMA32 free:194364kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27220kB inactive_anon:32kB active_file:4400kB inactive_file:130160kB unevictable:3536kB writepending:520kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:44740kB local_pcp:26428kB free_cma:0kB
[  372.751789][T25705] lowmem_reserve[]: 0 0 0 0 0
[  372.753702][T25705] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  372.776440][T25705] lowmem_reserve[]: 0 0 854 854 854
[  372.778626][T25705] Node 1 Normal free:306696kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25184kB inactive_anon:0kB active_file:1340kB inactive_file:18816kB unevictable:3536kB writepending:212kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:51080kB local_pcp:28992kB free_cma:0kB
[  372.801714][T25705] lowmem_reserve[]: 0 0 0 0 0
[  372.811885][T25705] Node 0 DMA: 18*4kB (UM) 21*8kB (UM) 21*16kB (UM) 29*32kB (UM) 9*64kB (UM) 2*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 5920kB
[  372.819483][T25705] Node 0 DMA32: 1*4kB (E) 21*8kB (E) 13*16kB (E) 114*32kB (UME) 132*64kB (UME) 57*128kB (UME) 38*256kB (UME) 18*512kB (UME) 8*1024kB (UM) 10*2048kB (UM) 31*4096kB (U) = 194364kB
[  372.829298][T25705] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  372.836082][T25705] Node 1 Normal: 1246*4kB (UME) 1190*8kB (UE) 598*16kB (UE) 477*32kB (UME) 382*64kB (U) 190*128kB (UME) 103*256kB (UM) 33*512kB (UM) 15*1024kB (UM) 20*2048kB (UME) 29*4096kB (UM) = 306472kB
[  372.842433][T25705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  372.846074][T25705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  372.849166][T25705] 41144 total pagecache pages
[  372.853575][T25705] 5 pages in swap cache
[  372.855625][T25705] Free swap  = 124976kB
[  372.857114][T25705] Total swap = 124996kB
[  372.858841][T25705] 786301 pages RAM
[  372.860191][T25705] 0 pages HighMem/MovableOnly
[  372.861899][T25705] 241344 pages reserved
[  372.863711][T25705] 0 pages cma reserved
[  374.471747][T25836] netlink: 'syz.1.7747': attribute type 3 has an invalid length.
[  374.530689][T25842] bridge0: entered allmulticast mode
[  375.203506][T25820] bridge0: left allmulticast mode
[  375.278623][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7755'.
[  376.369444][T25872] sctp: [Deprecated]: syz.1.7763 (pid 25872) Use of struct sctp_assoc_value in delayed_ack socket option.
[  376.369444][T25872] Use struct sctp_sack_info instead
[  376.882103][T25935] netlink: 'syz.1.7782': attribute type 1 has an invalid length.
[  376.886585][T25935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7782'.
[  377.633426][T25960] _Z`Ԁ@: entered promiscuous mode
[  378.040106][T25993] syzkaller1: entered promiscuous mode
[  378.042535][T25993] syzkaller1: entered allmulticast mode
[  378.061689][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7799'.
[  378.065759][T25998] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  378.068341][T25998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.359517][T26038] netlink: 'syz.0.7814': attribute type 3 has an invalid length.
[  378.466668][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7817'.
[  378.541368][T26054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.817400][T26068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7822'.
[  378.820499][T26068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7822'.
[  379.622908][T26137] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  379.626184][T26136] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  380.483529][T26148] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  380.546973][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7847'.
[  380.665276][T26173] can: request_module (can-proto-0) failed.
[  380.804389][T26198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.824364][T26204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7867'.
[  381.035104][T26235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7876'.
[  381.038359][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7878'.
[  381.051750][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7878'.
[  381.067394][T26247] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7880'.
[  381.123046][T26251] bridge0: port 1(veth0_to_bridge) entered blocking state
[  381.125790][T26251] bridge0: port 1(veth0_to_bridge) entered disabled state
[  381.128198][T26251] veth0_to_bridge: entered allmulticast mode
[  381.131006][T26251] veth0_to_bridge: entered promiscuous mode
[  381.243225][T26267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.504226][T26314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7903'.
[  381.687493][T26338] sctp: [Deprecated]: syz.0.7909 (pid 26338) Use of int in max_burst socket option deprecated.
[  381.687493][T26338] Use struct sctp_assoc_value instead
[  381.725919][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7909'.
[  381.775078][T26333] lo speed is unknown, defaulting to 1000
[  381.781286][T26342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7911'.
[  381.947324][T26363] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7917'.
[  382.015613][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.018231][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.021198][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.024237][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.035929][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.039230][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.042534][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.045829][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.053010][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.064239][T26372] netlink: 'syz.2.7921': attribute type 1 has an invalid length.
[  382.107863][ T5900] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  382.333465][T26392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  382.431517][T26408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.451391][ T5865] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.454094][ T5865] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.458534][ T5865] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.468022][ T5865] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.635522][ T2349] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  383.061366][T26471] sctp: [Deprecated]: syz.2.7949 (pid 26471) Use of int in max_burst socket option deprecated.
[  383.061366][T26471] Use struct sctp_assoc_value instead
[  383.276974][T26485] syzkaller1: entered promiscuous mode
[  383.280185][T26485] syzkaller1: entered allmulticast mode
[  383.406088][T26501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.542021][T26511] syzkaller1: entered promiscuous mode
[  383.543873][T26511] syzkaller1: entered allmulticast mode
[  384.939809][T26630] tls_set_device_offload: netdev not found
[  385.889730][T26696] __nla_validate_parse: 125 callbacks suppressed
[  385.889740][T26696] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8020'.
[  385.892440][T26699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8022'.
[  386.014420][T26716] syzkaller1: entered promiscuous mode
[  386.017350][T26716] syzkaller1: entered allmulticast mode
[  386.253729][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'.
[  386.296014][T26756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8042'.
[  386.475325][T26782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8052'.
[  386.586997][T26786] 8021q: adding VLAN 0 to HW filter on device bond6
[  386.591753][T26786] bond6: (slave wlan0): Opening slave failed
[  386.781625][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8059'.
[  387.010355][T26818] ip6tnl0: entered promiscuous mode
[  387.014801][T26818] ip6tnl0: entered allmulticast mode
[  387.026821][T26818] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  387.051027][T26818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8064'.
[  387.055403][T26818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8064'.
[  387.103434][T26809] lo speed is unknown, defaulting to 1000
[  387.368978][T26841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8074'.
[  387.455585][T26848] validate_nla: 110 callbacks suppressed
[  387.455602][T26848] netlink: 'syz.0.8076': attribute type 16 has an invalid length.
[  387.460226][T26848] netlink: 'syz.0.8076': attribute type 17 has an invalid length.
[  387.540479][T26848] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.543321][T26848] 8021q: adding VLAN 0 to HW filter on device team0
[  387.547221][T26848] batman_adv: batadv0: Interface activated: dummy0
[  387.549421][T26848] batadv0: mtu less than device minimum
[  387.551832][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.556185][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.560133][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.564318][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.568250][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.572297][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.576280][T26848] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  387.625447][ T2349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.647587][T26861] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  387.653053][T26860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.682586][T26866] tipc: Disabling bearer <eth:syzkaller0>
[  387.737271][ T2349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  388.041862][T26913] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8099'.
[  388.115277][ T5847] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.049611][T27013] sctp: [Deprecated]: syz.1.8135 (pid 27013) Use of int in max_burst socket option deprecated.
[  389.049611][T27013] Use struct sctp_assoc_value instead
[  389.195409][ T5865] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.203759][ T5865] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.803110][T27069] netlink: 'syz.2.8155': attribute type 1 has an invalid length.
[  389.906767][ T2349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  389.940109][T27093] netlink: 'syz.2.8159': attribute type 1 has an invalid length.
[  389.943115][T27093] netlink: 'syz.2.8159': attribute type 2 has an invalid length.
[  389.995469][T27099] netlink: 'syz.1.8160': attribute type 3 has an invalid length.
[  390.015205][T27102] net_ratelimit: 13 callbacks suppressed
[  390.015214][T27102] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  390.431233][T27145] netlink: 'syz.1.8175': attribute type 62 has an invalid length.
[  391.453492][T27170] __nla_validate_parse: 10 callbacks suppressed
[  391.453503][T27170] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8183'.
[  391.463070][T27170] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8183'.
[  391.569645][T27190] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8188'.
[  391.620977][T27189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8189'.
[  391.709845][T27204] netlink: 'syz.1.8195': attribute type 28 has an invalid length.
[  391.772119][T27210] netlink: 'syz.2.8199': attribute type 8 has an invalid length.
[  391.826711][T27218] netlink: 'syz.0.8202': attribute type 3 has an invalid length.
[  392.080254][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8214'.
[  392.120322][T27256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8215'.
[  392.588760][T27272] dvmrp0: entered allmulticast mode
[  392.591150][ T5847] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.594398][ T5847] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.598476][ T5847] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.601623][ T5847] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.605056][ T5847] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.608266][ T5847] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.611197][ T5847] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.616834][ T5847] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.620459][T27287] validate_nla: 1 callbacks suppressed
[  392.620471][T27287] netlink: 'syz.0.8224': attribute type 4 has an invalid length.
[  392.727558][T27299] netlink: 'syz.2.8228': attribute type 5 has an invalid length.
[  392.731193][T27301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8229'.
[  392.734241][T27298] netlink: 'syz.2.8228': attribute type 5 has an invalid length.
[  392.740536][T27298] sctp: [Deprecated]: syz.2.8228 (pid 27298) Use of int in max_burst socket option.
[  392.740536][T27298] Use struct sctp_assoc_value instead
[  392.743345][T27301] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8229'.
[  392.851842][T27316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8234'.
[  392.959909][T27327] netlink: 'syz.2.8237': attribute type 10 has an invalid length.
[  392.965523][T27327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.970318][T27327] batadv0: entered promiscuous mode
[  392.972836][T27327] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  393.063864][T27335] xt_limit: Overflow, try lower: 271964/0
[  393.070143][T27333] netlink: 'syz.0.8240': attribute type 3 has an invalid length.
[  393.164874][T27346] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8245'.
[  393.264796][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  393.419859][T27377] netlink: 'syz.0.8259': attribute type 1 has an invalid length.
[  393.744939][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  395.116213][T27449] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  395.401562][T27467] bridge5: the hash_elasticity option has been deprecated and is always 16
[  395.404702][T27467] bridge5: entered allmulticast mode
[  395.503995][T27479] netlink: 'syz.0.8296': attribute type 1 has an invalid length.
[  395.616977][T27485] syzkaller1: entered promiscuous mode
[  395.619006][T27485] syzkaller1: entered allmulticast mode
[  395.627017][T27485] netlink: 'syz.2.8298': attribute type 6 has an invalid length.
[  395.628018][T27486] netlink: 'syz.2.8298': attribute type 6 has an invalid length.
[  395.700294][T27490] nbd: illegal input index 65508
[  395.736265][T27495] can: request_module (can-proto-0) failed.
[  395.742878][T27495] vlan2: entered promiscuous mode
[  395.745816][T27495] vlan2: entered allmulticast mode
[  395.747860][T27495] bond0: entered allmulticast mode
[  395.749830][T27495] batadv0: entered allmulticast mode
[  396.070393][T27531] syzkaller0: entered promiscuous mode
[  396.072146][T27531] syzkaller0: entered allmulticast mode
[  396.076860][T27531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  396.353421][T27554] "syz.1.8323" (27554) uses obsolete ecb(arc4) skcipher
[  396.479328][T27565] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.517783][T27565] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.529271][T27566] __nla_validate_parse: 7 callbacks suppressed
[  396.529284][T27566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8326'.
[  396.578750][T27565] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.638421][T27565] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.699648][ T5847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.710058][ T5847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.720446][ T5847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.732452][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.845838][T27582] netlink: 'syz.1.8330': attribute type 30 has an invalid length.
[  396.924029][T27595] _Z`Ԁ@: entered promiscuous mode
[  397.029003][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8336'.
[  397.036048][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8339'.
[  397.247325][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8344'.
[  397.323923][T27631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8349'.
[  398.240886][T27642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  398.551121][T27681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8365'.
[  398.623531][T27688] validate_nla: 1 callbacks suppressed
[  398.623546][T27688] netlink: 'syz.0.8367': attribute type 15 has an invalid length.
[  398.631211][T27688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8367'.
[  398.688484][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'.
[  399.037654][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8379'.
[  399.083093][T27726] netlink: 'syz.2.8380': attribute type 1 has an invalid length.
[  399.092858][T27726] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8380'.
[  399.130273][T27735] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  399.490948][T27777] unknown channel width for channel at 909000KHz?
[  399.493570][T27777] unknown channel width for channel at 909000KHz?
[  399.501965][T27777] unknown channel width for channel at 909000KHz?
[  399.547112][T27781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.550395][T27781] syzkaller0: entered promiscuous mode
[  399.552573][T27781] syzkaller0: entered allmulticast mode
[  399.568201][T27781] tipc: Resetting bearer <eth:syzkaller0>
[  399.575172][T27780] tipc: Resetting bearer <eth:syzkaller0>
[  399.583900][T27780] tipc: Disabling bearer <eth:syzkaller0>
[  399.856868][T27813] batman_adv: batadv0: Interface deactivated: dummy0
[  399.863564][T27813] batman_adv: batadv0: Removing interface: dummy0
[  399.868062][T27813] bond0: (slave batadv0): Releasing backup interface
[  399.876897][T27813] veth0_to_bridge: left allmulticast mode
[  399.878946][T27813] veth0_to_bridge: left promiscuous mode
[  399.881084][T27813] bridge0: port 1(veth0_to_bridge) entered disabled state
[  399.885133][T26989] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  399.889558][T27813] bond10: (slave wireguard2): Releasing backup interface
[  399.891860][T27813] wireguard2: left promiscuous mode
[  399.900461][T27813] bond12: (slave bond13): Releasing backup interface
[  399.905324][T27813] batman_adv: batadv0: Interface deactivated: ip6gretap4
[  399.907627][T27813] batman_adv: batadv0: Removing interface: ip6gretap4
[  399.936580][T27813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  399.963492][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  400.326278][T27854] sctp: [Deprecated]: syz.2.8423 (pid 27854) Use of int in max_burst socket option.
[  400.326278][T27854] Use struct sctp_assoc_value instead
[  400.625103][ T2349] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  401.424692][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  401.513505][T27913] netlink: 'syz.0.8433': attribute type 1 has an invalid length.
[  401.532560][T23381] 
[  401.533416][T23381] ============================================
[  401.535761][T23381] WARNING: possible recursive locking detected
[  401.537920][T23381] syzkaller #0 Not tainted
[  401.539732][T23381] --------------------------------------------
[  401.542644][T23381] kworker/u9:5/23381 is trying to acquire lock:
[  401.545241][T23381] ffffe8ffffc6c440 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80
[  401.549010][T23381] 
[  401.549010][T23381] but task is already holding lock:
[  401.551981][T23381] ffffe8ffffc6c490 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  401.555694][T23381] 
[  401.555694][T23381] other info that might help us debug this:
[  401.558863][T23381]  Possible unsafe locking scenario:
[  401.558863][T23381] 
[  401.561860][T23381]        CPU0
[  401.563231][T23381]        ----
[  401.564620][T23381]   lock(&pd_list->lock);
[  401.566396][T23381]   lock(&pd_list->lock);
[  401.568213][T23381] 
[  401.568213][T23381]  *** DEADLOCK ***
[  401.568213][T23381] 
[  401.571477][T23381]  May be due to missing lock nesting notation
[  401.571477][T23381] 
[  401.574824][T23381] 3 locks held by kworker/u9:5/23381:
[  401.577029][T23381]  #0: ffff88810670a948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  401.581772][T23381]  #1: ffffc900026bfbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  401.586472][T23381]  #2: ffffe8ffffc6c490 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  401.590367][T23381] 
[  401.590367][T23381] stack backtrace:
[  401.592774][T23381] CPU: 0 UID: 0 PID: 23381 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  401.592788][T23381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  401.592796][T23381] Workqueue: pencrypt_parallel padata_parallel_worker
[  401.592815][T23381] Call Trace:
[  401.592822][T23381]  <TASK>
[  401.592828][T23381]  dump_stack_lvl+0x189/0x250
[  401.592843][T23381]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.592854][T23381]  ? __pfx__printk+0x10/0x10
[  401.592868][T23381]  ? print_lock_name+0xde/0x100
[  401.592883][T23381]  print_deadlock_bug+0x28b/0x2a0
[  401.592895][T23381]  validate_chain+0x1a3f/0x2140
[  401.592907][T23381]  ? irqentry_exit+0x74/0x90
[  401.592919][T23381]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.592929][T23381]  ? look_up_lock_class+0x74/0x170
[  401.592939][T23381]  ? register_lock_class+0x51/0x320
[  401.592954][T23381]  __lock_acquire+0xab9/0xd20
[  401.592970][T23381]  ? padata_do_serial+0x73e/0xb80
[  401.592982][T23381]  lock_acquire+0x120/0x360
[  401.592996][T23381]  ? padata_do_serial+0x73e/0xb80
[  401.593011][T23381]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.593026][T23381]  _raw_spin_lock+0x2e/0x40
[  401.593040][T23381]  ? padata_do_serial+0x73e/0xb80
[  401.593052][T23381]  padata_do_serial+0x73e/0xb80
[  401.593067][T23381]  ? padata_parallel_worker+0x44/0x1d0
[  401.593079][T23381]  padata_parallel_worker+0x75/0x1d0
[  401.593092][T23381]  ? process_scheduled_works+0x9ef/0x17b0
[  401.593102][T23381]  process_scheduled_works+0xae1/0x17b0
[  401.593119][T23381]  ? __pfx_process_scheduled_works+0x10/0x10
[  401.593133][T23381]  worker_thread+0x8a0/0xda0
[  401.593142][T23381]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  401.593159][T23381]  ? __kthread_parkme+0x7b/0x200
[  401.593173][T23381]  kthread+0x711/0x8a0
[  401.593186][T23381]  ? __pfx_worker_thread+0x10/0x10
[  401.593196][T23381]  ? __pfx_kthread+0x10/0x10
[  401.593208][T23381]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.593222][T23381]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.593231][T23381]  ? __pfx_kthread+0x10/0x10
[  401.593244][T23381]  ret_from_fork+0x3fc/0x770
[  401.593256][T23381]  ? __pfx_ret_from_fork+0x10/0x10
[  401.593268][T23381]  ? __switch_to_asm+0x39/0x70
[  401.593282][T23381]  ? __switch_to_asm+0x33/0x70
[  401.593295][T23381]  ? __pfx_kthread+0x10/0x10
[  401.593309][T23381]  ret_from_fork_asm+0x1a/0x30
[  401.593328][T23381]  </TASK>

VM DIAGNOSIS:
03:02:34  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900026bf0d0
R8 =ffff888020658237 R9 =1ffff110040cb046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8ce R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f54623d0440 CR3=00000001081ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8889797498 00007f8889797470 XMM03=00007f88897974a8 00007f88897974a0
XMM04=00007f888a2fd100 00007f8889797460 XMM05=00007f8889797478 00007f88897974c0
XMM06=00007f88897974b8 00007f88897974b0 XMM07=00007f88897974a8 00007f88897974a0
XMM08=0000000000000000 00007f8889612ee7 XMM09=0000000000000000 00007f8889612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffe8ffffc6c478 RCX=ffffffff8b7cddbc RDX=0000000000000000
RSI=0000000000000004 RDI=ffffe8ffffc6c478 RBP=ffffc900099c78d8 RSP=ffffc900099c77e0
R8 =ffffe8ffffc6c47b R9 =1ffffd1ffff8d88f R10=dffffc0000000000 R11=fffff91ffff8d890
R12=1ffff92001338f04 R13=0000000000000001 R14=ffffc900099c7840 R15=1ffffd1ffff8d88f
RIP=ffffffff8b7cddaf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34ed7d CR3=0000000118f48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fa52f4fd100 00007fa52e997460 XMM05=00007fa52e997478 00007fa52e9974c0
XMM06=00007fa52e9974b8 00007fa52e9974b0 XMM07=00007fa52e9974a8 00007fa52e9974a0
XMM08=0000000000000000 00007fa52e812ee7 XMM09=0000000000000000 00007fa52e812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
