last executing test programs:

32.211195148s ago: executing program 2 (id=315):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff})
shutdown(r1, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001163000000001d00000000000000950000000e250000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x5, 0x50, 0x6, 0x7, 0x5]}, &(0x7f00000000c0)=0x54)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30, 0x20000080}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9, 0xe4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xb41d, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

26.279660921s ago: executing program 2 (id=315):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff})
shutdown(r1, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001163000000001d00000000000000950000000e250000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x5, 0x50, 0x6, 0x7, 0x5]}, &(0x7f00000000c0)=0x54)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30, 0x20000080}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9, 0xe4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xb41d, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

19.220628831s ago: executing program 2 (id=315):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff})
shutdown(r1, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001163000000001d00000000000000950000000e250000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x5, 0x50, 0x6, 0x7, 0x5]}, &(0x7f00000000c0)=0x54)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30, 0x20000080}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9, 0xe4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xb41d, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

13.254880032s ago: executing program 2 (id=315):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff})
shutdown(r1, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001163000000001d00000000000000950000000e250000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x5, 0x50, 0x6, 0x7, 0x5]}, &(0x7f00000000c0)=0x54)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30, 0x20000080}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9, 0xe4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xb41d, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

7.436289032s ago: executing program 2 (id=315):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff})
shutdown(r1, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001163000000001d00000000000000950000000e250000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x5, 0x50, 0x6, 0x7, 0x5]}, &(0x7f00000000c0)=0x54)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30, 0x20000080}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9, 0xe4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xb41d, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

1.246126707s ago: executing program 0 (id=710):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000008000000000004000000000000000000"], 0x18}}], 0x1, 0x4000084)

1.243539999s ago: executing program 0 (id=712):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x280}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.185214886s ago: executing program 1 (id=713):
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2e, 0xd, 0x6, {0x1, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/226, 0xe2, 0x0, &(0x7f0000000480)=""/243, 0xf3}, &(0x7f0000000340)=0x14) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/226, 0xe2, 0x0, &(0x7f0000000480)=""/243, 0xf3}, &(0x7f0000000340)=0x14)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f7e4e8f45c636bc4000001000000380001800600010002e2ffff070005"], 0x4c}}, 0x0)
socket$kcm(0x2d, 0x2, 0x0) (async)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x73) (async)
r5 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000000000000118"], 0x28}, 0x20008000) (async)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000000000000118"], 0x28}, 0x20008000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007037ef21cd08ba66e68fea804b2ac35647ce7ebd623eb83c78be424ad31b90ff35750a8c92dbcafe4aea1e500f8a908f3c767788e4f7c412f217", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000200)={0x1a, 0x200, 0xf9, 0x8, 0x0, 0x0, @local}, 0x10) (async)
connect$llc(r7, &(0x7f0000000200)={0x1a, 0x200, 0xf9, 0x8, 0x0, 0x0, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c40)={0x40, r9, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, 0x0, 0x0) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, 0x0, 0x0)
recvfrom$llc(r7, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0)
listen(r7, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18)

1.18481577s ago: executing program 0 (id=714):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x20, &(0x7f0000000f00)={&(0x7f0000000ec0)=""/32, 0x20, <r1=>0x0, &(0x7f00000010c0)=""/173, 0xad}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0xcc, &(0x7f0000000d80)=""/204, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0xd, 0xffffffff}, 0x10, r1}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x3c, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x20, &(0x7f0000000f00)={&(0x7f0000000ec0)=""/32, 0x20, 0x0, &(0x7f00000010c0)=""/173, 0xad}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0xcc, &(0x7f0000000d80)=""/204, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0xd, 0xffffffff}, 0x10, r1}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x3c, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

1.135669082s ago: executing program 0 (id=715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x452921, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x8, 0x5}]}]}, {0x0, [0x0, 0xe, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x1}, 0x28)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x29, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40)
bind$inet(r2, 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1)
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)

1.135225828s ago: executing program 1 (id=716):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000104c0)={&(0x7f0000010500)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x6274a5ca71beadfb}, 0x4000000)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x7, 0xffff}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000786cd9c811ed53de1163c32672c99b46315695d4739db1ddc043cf55b419b7efbc5310906ddb6d692a5de8e88cac6ca1d194dc1fb1a73449dad20317aae5d5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x8, 0x1c, &(0x7f0000001340)=ANY=[@ANYBLOB="1808000004000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000002800007b2a000000000000d609080000000000c39af4ffa0000000bf9600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000018500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x68}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

1.134299376s ago: executing program 0 (id=717):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x300000, 0x0, 0x1, 0x68, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00'})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0xa, 0x40000000002, 0x0)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x8, 0x9, 0x3, 0x37f7, 0x4b3]}, &(0x7f0000000480)=0x72)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r9=>0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, 0x0, 0x8, 0x40, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x64}}, 0x40000)

1.025608884s ago: executing program 1 (id=718):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1a, 0x2, 0x7, &(0x7f0000000000))
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000017c0)=""/4075, 0xfeb}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000200)=""/62, 0x3e}], 0x5}, 0x40000100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2b20dd9dc19d7fac80841b6234ead9f6aea35be46a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000000)

933.047288ms ago: executing program 1 (id=719):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, '\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_newneigh={0x38, 0x1c, 0x1, 0x70bd2b, 0x7ff, {0x2, 0x0, 0x0, 0x0, 0x40, 0x12, 0x6}, [@NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4000050)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800)

874.724504ms ago: executing program 1 (id=720):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c, 0x0}}], 0x1, 0xff00)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c00020000003c000e000200000008000f003e0b000005001b000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="acf0f0a930a1359d428cebd9aa5e7eb1dde540b8405ce5e480bd09876e88c1a24491a8b88af40bbb015d0d22c331d06f8f621a2a786350468409d32f33274fff01ec0000000000"], 0x7c}}, 0x0)

850.149391ms ago: executing program 2 (id=315):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{}, 0xd, 0x9, 0x7fff})
shutdown(r1, 0x0)
r4 = socket(0x2c, 0x3, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18001163000000001d00000000000000950000000e250000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x5, 0x50, 0x6, 0x7, 0x5]}, &(0x7f00000000c0)=0x54)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30, 0x20000080}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9, 0xe4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xb41d, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))

838.171µs ago: executing program 0 (id=721):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)

0s ago: executing program 1 (id=722):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x0, 0x1, 0x2})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0)
sendto$packet(r2, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @local}, 0x14)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x6, '\x00', r1, r6, 0x1, 0x5}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1, 0x2}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) (async)
sendto$packet(r2, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x6, '\x00', r1, r6, 0x1, 0x5}, 0x50) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41012' (ED25519) to the list of known hosts.
syzkaller login: [   49.213410][ T5754] cgroup: Unknown subsys name 'net'
[   49.316023][ T5754] cgroup: Unknown subsys name 'cpuset'
[   49.321627][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.812697][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.198041][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.199234][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.202028][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.205984][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.206216][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.210925][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.211534][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.216653][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.216676][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.227070][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.276152][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.279515][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.283259][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.292990][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.296513][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.500542][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   57.596221][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   57.672070][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.675152][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.677822][ T5823] bridge_slave_0: entered allmulticast mode
[   57.680850][ T5823] bridge_slave_0: entered promiscuous mode
[   57.685178][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.693916][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.696248][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.699408][ T5823] bridge_slave_1: entered allmulticast mode
[   57.704010][ T5823] bridge_slave_1: entered promiscuous mode
[   57.786515][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.809342][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.812553][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.815037][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.817746][ T5822] bridge_slave_0: entered allmulticast mode
[   57.821154][ T5822] bridge_slave_0: entered promiscuous mode
[   57.826266][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.829030][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.831957][ T5822] bridge_slave_1: entered allmulticast mode
[   57.835267][ T5822] bridge_slave_1: entered promiscuous mode
[   57.913521][ T5823] team0: Port device team_slave_0 added
[   57.918116][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.923708][ T5823] team0: Port device team_slave_1 added
[   57.925914][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.928755][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.931066][ T5831] bridge_slave_0: entered allmulticast mode
[   57.935276][ T5831] bridge_slave_0: entered promiscuous mode
[   57.950289][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.954389][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.956594][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.958732][ T5831] bridge_slave_1: entered allmulticast mode
[   57.961419][ T5831] bridge_slave_1: entered promiscuous mode
[   57.998596][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.001440][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.011597][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.027644][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.031191][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.034442][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.043873][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.050115][ T5822] team0: Port device team_slave_0 added
[   58.054329][ T5822] team0: Port device team_slave_1 added
[   58.066620][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.108406][ T5831] team0: Port device team_slave_0 added
[   58.110832][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.113341][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.121177][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.126967][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.129135][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.137235][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.143526][ T5831] team0: Port device team_slave_1 added
[   58.179508][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.183260][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.192797][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.209137][ T5823] hsr_slave_0: entered promiscuous mode
[   58.211567][ T5823] hsr_slave_1: entered promiscuous mode
[   58.215534][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.218353][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.230554][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.269208][ T5822] hsr_slave_0: entered promiscuous mode
[   58.273562][ T5822] hsr_slave_1: entered promiscuous mode
[   58.276417][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.279602][ T5822] Cannot create hsr debugfs directory
[   58.390681][ T5831] hsr_slave_0: entered promiscuous mode
[   58.393705][ T5831] hsr_slave_1: entered promiscuous mode
[   58.396184][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.399135][ T5831] Cannot create hsr debugfs directory
[   58.657563][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.690780][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.721037][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.735964][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.763457][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.779147][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.788177][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.809469][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.887378][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.894506][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.906662][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.913733][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.984824][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.005660][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   59.024027][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.027007][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.041529][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.047440][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.049723][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.079132][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   59.109340][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.111984][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.135457][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.138322][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.175308][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.219638][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   59.233224][ T5830] Bluetooth: hci1: command tx timeout
[   59.242775][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.245636][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.257770][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.260007][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.269836][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.311974][ T5830] Bluetooth: hci2: command tx timeout
[   59.322356][ T5830] Bluetooth: hci0: command tx timeout
[   59.350314][ T5822] veth0_vlan: entered promiscuous mode
[   59.369335][ T5822] veth1_vlan: entered promiscuous mode
[   59.386377][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.405118][ T5822] veth0_macvtap: entered promiscuous mode
[   59.412787][ T5822] veth1_macvtap: entered promiscuous mode
[   59.437368][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.450499][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.469290][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.476299][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.479456][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.482484][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.489295][ T5823] veth0_vlan: entered promiscuous mode
[   59.526916][ T5823] veth1_vlan: entered promiscuous mode
[   59.550885][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.577837][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.578024][ T5823] veth0_macvtap: entered promiscuous mode
[   59.580909][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.604996][ T5823] veth1_macvtap: entered promiscuous mode
[   59.635222][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.638416][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.647640][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.660486][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.675266][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.679141][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.686153][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.689260][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.701231][ T5831] veth0_vlan: entered promiscuous mode
[   59.708045][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.724719][ T5831] veth1_vlan: entered promiscuous mode
[   59.780028][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.785468][ T5831] veth0_macvtap: entered promiscuous mode
[   59.793517][ T5831] veth1_macvtap: entered promiscuous mode
[   59.795402][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.797687][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.853346][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.858029][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.868425][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.871392][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.885718][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.888385][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.891020][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.894878][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.937139][ T5895] syz.0.4 uses obsolete (PF_INET,SOCK_PACKET)
[   60.044999][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.047387][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.094100][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.102850][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.129692][ T5899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.137205][ T5899] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.141085][ T5899] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.161075][ T5901] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   60.236601][ T5904] _Z`Ԁ@: entered promiscuous mode
[   60.250728][ T5901] syz.0.6 (5901) used greatest stack depth: 20728 bytes left
[   60.281310][ T5908] Zero length message leads to an empty skb
[   60.343915][ T5912] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   60.360405][ T5915] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.650466][ T5937] IPv6: sit1: Disabled Multicast RS
[   61.298100][ T5955] netlink: 'syz.1.24': attribute type 58 has an invalid length.
[   61.303880][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'.
[   61.307402][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'.
[   61.312387][ T5830] Bluetooth: hci1: command tx timeout
[   61.402292][ T5830] Bluetooth: hci0: command tx timeout
[   61.404038][ T5830] Bluetooth: hci2: command tx timeout
[   61.606287][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'.
[   61.609929][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29'.
[   61.660657][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'.
[   61.679128][ T5977] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.859641][ T5985] tipc: Enabling of bearer <eth:syzkaller04> rejected, failed to enable media
[   61.878741][ T5985] syzkaller0: entered promiscuous mode
[   61.881205][ T5985] syzkaller0: entered allmulticast mode
[   61.999350][ T5987] geneve0: entered promiscuous mode
[   62.226329][ T5991] netlink: 'syz.0.39': attribute type 8 has an invalid length.
[   62.238923][ T5991] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   62.241682][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'.
[   62.248267][ T5991] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   62.253452][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.516803][ T6002] pim6reg: entered allmulticast mode
[   63.393038][   T54] Bluetooth: hci1: command tx timeout
[   63.473810][   T54] Bluetooth: hci2: command tx timeout
[   63.475986][   T54] Bluetooth: hci0: command tx timeout
[   63.667693][ T6036] netlink: 'syz.2.53': attribute type 1 has an invalid length.
[   63.837011][ T6045] openvswitch: netlink: IP tunnel TTL not specified.
[   63.840820][ T6052] openvswitch: netlink: IP tunnel TTL not specified.
[   63.930075][ T6054] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   64.061450][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.064950][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.076827][ T6056] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   64.737436][ T6104] netlink: 'syz.2.70': attribute type 1 has an invalid length.
[   64.747536][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.750200][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.821244][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.835302][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.910258][ T6102] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[   64.915688][ T6102] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.919226][ T6102] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.922933][ T6102] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.034952][ T6107] netlink: 'syz.0.72': attribute type 3 has an invalid length.
[   65.368887][ T6133] netlink: 'syz.1.80': attribute type 21 has an invalid length.
[   65.371442][ T6133] __nla_validate_parse: 7 callbacks suppressed
[   65.371449][ T6133] netlink: 156 bytes leftover after parsing attributes in process `syz.1.80'.
[   65.473261][ T5830] Bluetooth: hci1: command tx timeout
[   65.556209][   T54] Bluetooth: hci2: command tx timeout
[   65.558322][ T5830] Bluetooth: hci0: command tx timeout
[   65.597315][ T6151] netlink: 256 bytes leftover after parsing attributes in process `syz.2.86'.
[   65.681693][ T6154] bridge0: port 3(syz_tun) entered blocking state
[   65.690901][ T6154] bridge0: port 3(syz_tun) entered disabled state
[   65.693791][ T6154] syz_tun: entered allmulticast mode
[   65.697720][ T6154] syz_tun: entered promiscuous mode
[   65.701377][ T6154] bridge0: port 3(syz_tun) entered blocking state
[   65.704705][ T6154] bridge0: port 3(syz_tun) entered forwarding state
[   65.711466][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'.
[   65.978789][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'.
[   65.982763][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'.
[   66.643968][ T6215] syz.1.106 (6215) used greatest stack depth: 20504 bytes left
[   67.014202][ T6241] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20001
[   67.024337][ T6241] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20001
[   67.033080][ T6241] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20001
[   67.383578][ T6257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.115'.
[   67.616533][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'.
[   67.620497][ T6267] netlink: 'syz.0.121': attribute type 39 has an invalid length.
[   67.835740][ T6281] ipvlan2: entered promiscuous mode
[   67.844984][ T6281] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   67.866359][ T6286] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   67.928708][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'.
[   68.167589][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.188391][ T6311] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   68.264807][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'.
[   68.396806][ T6322] tipc: Invalid UDP bearer configuration
[   68.396837][ T6322] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   68.403488][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   68.768471][ T6347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.776043][ T6347] tipc: Started in network mode
[   68.778227][ T6347] tipc: Node identity , cluster identity 4711
[   68.780629][ T6347] tipc: Failed to obtain node identity
[   68.799994][ T6347] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.859101][ T6347] syzkaller0: entered promiscuous mode
[   68.861519][ T6347] syzkaller0: entered allmulticast mode
[   69.020071][ T6361] netlink: 'syz.2.148': attribute type 5 has an invalid length.
[   69.978895][ T6375] unknown channel width for channel at 909000KHz?
[   70.005796][ T6374] xt_CT: No such helper "syz0"
[   70.181692][ T6393] openvswitch: netlink: Missing key (keys=40, expected=100)
[   70.184583][ T6390] ip6gretap0: entered promiscuous mode
[   70.184662][ T6390] macsec1: entered promiscuous mode
[   70.188311][ T6390] macsec1: entered allmulticast mode
[   70.190077][ T6390] ip6gretap0: entered allmulticast mode
[   70.310379][ T6398] ip6tnl1: entered promiscuous mode
[   70.314681][ T6398] ip6tnl1: entered allmulticast mode
[   70.317869][ T6398] team0: Device ip6tnl1 is of different type
[   70.557324][ T6419] __nla_validate_parse: 6 callbacks suppressed
[   70.557335][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'.
[   70.757212][ T6428] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   70.912115][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   71.221318][ T6448] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   71.275624][ T6453] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.184'.
[   71.402525][ T6460] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   71.408098][ T6460] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   71.445131][ T6462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'.
[   71.509189][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'.
[   71.548730][ T6467] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   71.695747][ T6481] netlink: 308 bytes leftover after parsing attributes in process `syz.2.191'.
[   71.720824][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'.
[   71.731389][ T6482] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000
[   71.815687][ T6485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.192'.
[   71.825286][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.192'.
[   71.828659][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.192'.
[   71.842040][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.192'.
[   72.334730][ T6517] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   72.585927][ T6531] bridge0: port 3(ipvlan2) entered blocking state
[   72.593297][ T6531] bridge0: port 3(ipvlan2) entered disabled state
[   72.602136][ T6531] ipvlan2: entered allmulticast mode
[   72.604767][ T6531] bridge0: entered allmulticast mode
[   72.608917][ T6531] ipvlan2: left allmulticast mode
[   72.610937][ T6531] bridge0: left allmulticast mode
[   72.650253][ T5852] IPVS: starting estimator thread 0...
[   72.707007][ T6539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.750428][ T6558] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   72.753518][ T6547] IPVS: using max 62 ests per chain, 148800 per kthread
[   72.901131][ T6571] netlink: 'syz.0.202': attribute type 9 has an invalid length.
[   72.916972][ T6571] macvlan2: entered promiscuous mode
[   72.919970][ T6571] hsr0: entered promiscuous mode
[   72.922502][ T6571] macvlan2: entered allmulticast mode
[   72.924853][ T6571] hsr0: entered allmulticast mode
[   72.927159][ T6571] hsr_slave_0: entered allmulticast mode
[   72.929567][ T6571] hsr_slave_1: entered allmulticast mode
[   73.595472][ T6620] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   73.609856][ T6620] tipc: Started in network mode
[   73.614149][ T6620] tipc: Node identity b23f1200b4bf, cluster identity 4711
[   73.620093][ T6620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.626335][ T6620] syzkaller0: entered promiscuous mode
[   73.629172][ T6620] syzkaller0: entered allmulticast mode
[   73.641267][ T6620] tipc: Resetting bearer <eth:syzkaller0>
[   73.648917][ T6619] tipc: Resetting bearer <eth:syzkaller0>
[   73.656160][ T6619] tipc: Disabling bearer <eth:syzkaller0>
[   73.758211][ T6630] vlan2: entered promiscuous mode
[   73.760303][ T6630] vlan2: entered allmulticast mode
[   74.090067][ T6644] syzkaller1: entered promiscuous mode
[   74.092647][ T6644] syzkaller1: entered allmulticast mode
[   75.056827][ T6706] netlink: 'syz.1.242': attribute type 12 has an invalid length.
[   75.060071][ T6706] netlink: 'syz.1.242': attribute type 11 has an invalid length.
[   75.068956][ T6708] xt_HMARK: spi-set and port-set can't be combined
[   75.380163][ T6735] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   75.657091][   T33] audit: type=1800 audit(1752269099.175:2): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.261" name="blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=536 res=0 errno=0
[   75.669204][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.674959][ T6752] batadv_slave_0: entered promiscuous mode
[   75.690245][ T6752] __nla_validate_parse: 12 callbacks suppressed
[   75.690260][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'.
[   75.700809][ T6752] netlink: 428 bytes leftover after parsing attributes in process `syz.2.259'.
[   75.705666][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.259'.
[   75.847137][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'.
[   75.851069][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'.
[   75.910571][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'.
[   75.915435][ T6772] tipc: Started in network mode
[   75.917393][ T6772] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   75.943217][ T6772] tipc: Enabled bearer <udp:syz1>, priority 10
[   76.052168][ T6782] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   76.661248][ T6834] netlink: 'syz.0.287': attribute type 2 has an invalid length.
[   76.675578][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'.
[   76.679519][ T6834] : entered promiscuous mode
[   76.686207][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'.
[   76.766985][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'.
[   76.771030][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'.
[   77.043059][  T791] tipc: Node number set to 1
[   77.066033][ T6867] ip6gre1: entered promiscuous mode
[   77.076451][ T6869] Bluetooth: MGMT ver 1.23
[   77.139214][ T6871] wg1 speed is unknown, defaulting to 1000
[   77.141242][ T6871] wg1 speed is unknown, defaulting to 1000
[   77.145906][ T6871] wg1 speed is unknown, defaulting to 1000
[   77.154991][ T6871] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.165712][ T6871] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   77.214177][ T6871] wg1 speed is unknown, defaulting to 1000
[   77.273033][ T6871] wg1 speed is unknown, defaulting to 1000
[   77.282324][ T6871] wg1 speed is unknown, defaulting to 1000
[   77.402382][ T6892] openvswitch: netlink: IPv4 tunnel dst address is zero
[   77.452886][ T6894] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1
[   77.516667][ T6896] wg1 speed is unknown, defaulting to 1000
[   77.552740][ T6900] netlink: 'syz.0.309': attribute type 13 has an invalid length.
[   77.555466][ T6900] netlink: 'syz.0.309': attribute type 17 has an invalid length.
[   77.572072][ T6900] gretap0: refused to change device tx_queue_len
[   77.575212][ T6900] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   77.588078][ T5831] bridge0: port 3(syz_tun) entered disabled state
[   77.605615][ T5831] syz_tun (unregistering): left allmulticast mode
[   77.608101][ T5831] syz_tun (unregistering): left promiscuous mode
[   77.610951][ T5831] bridge0: port 3(syz_tun) entered disabled state
[   77.798880][ T6915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.914413][ T5854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.924387][ T6918] netlink: 'syz.0.317': attribute type 13 has an invalid length.
[   77.995004][ T5854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.038829][ T6923] C: renamed from team_slave_0
[   78.052233][ T6923] netlink: 'syz.0.319': attribute type 2 has an invalid length.
[   78.055714][ T6923] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   78.078659][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.082836][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.085482][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.088772][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.091307][ T5854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.091534][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.129852][ T6926] wg1 speed is unknown, defaulting to 1000
[   78.169273][ T5854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.309417][ T6926] chnl_net:caif_netlink_parms(): no params data found
[   78.405016][ T6945] netlink: 'syz.0.323': attribute type 21 has an invalid length.
[   78.429481][ T5854] bridge_slave_1: left allmulticast mode
[   78.431589][ T5854] bridge_slave_1: left promiscuous mode
[   78.436951][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.445583][ T5854] bridge_slave_0: left allmulticast mode
[   78.447855][ T5854] bridge_slave_0: left promiscuous mode
[   78.450417][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.791668][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.809355][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.816261][ T5854] bond0 (unregistering): Released all slaves
[   78.828449][ T6945] netlink: 'syz.0.323': attribute type 4 has an invalid length.
[   78.831687][ T6945] netlink: 'syz.0.323': attribute type 5 has an invalid length.
[   78.837386][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.839984][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.852106][ T6926] bridge_slave_0: entered allmulticast mode
[   78.855170][ T6926] bridge_slave_0: entered promiscuous mode
[   78.865805][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.868250][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.870668][ T6926] bridge_slave_1: entered allmulticast mode
[   78.873965][ T6926] bridge_slave_1: entered promiscuous mode
[   78.927829][ T5854] _Z`Ԁ@: left promiscuous mode
[   78.994329][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.000603][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.055363][ T6926] team0: Port device team_slave_0 added
[   79.059085][ T6926] team0: Port device team_slave_1 added
[   79.159229][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.166669][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.199157][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.217139][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.225309][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.238130][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.328071][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.506744][ T6926] hsr_slave_0: entered promiscuous mode
[   79.522688][ T6926] hsr_slave_1: entered promiscuous mode
[   79.525823][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.529946][ T6926] Cannot create hsr debugfs directory
[   79.571910][ T5854] hsr_slave_0: left promiscuous mode
[   79.576487][ T5854] hsr_slave_1: left promiscuous mode
[   79.588546][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.602901][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.609525][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.647601][ T5854] veth1_macvtap: left promiscuous mode
[   79.655718][ T5854] veth0_macvtap: left promiscuous mode
[   79.777268][ T7008] x_tables: duplicate underflow at hook 1
[   79.859624][ T7009] netlink: 'syz.1.337': attribute type 3 has an invalid length.
[   80.011529][ T5854] team0 (unregistering): Port device team_slave_1 removed
[   80.050640][ T5854] team0 (unregistering): Port device team_slave_0 removed
[   80.115235][ T5830] Bluetooth: hci2: command tx timeout
[   80.589375][ T7012] x_tables: duplicate underflow at hook 2
[   80.927063][ T7021] team0 (unregistering): Port device C removed
[   80.942650][ T7021] team0 (unregistering): Port device team_slave_1 removed
[   81.151181][ T7038] __nla_validate_parse: 12 callbacks suppressed
[   81.151195][ T7038] netlink: 272 bytes leftover after parsing attributes in process `syz.1.343'.
[   81.167675][ T7038] xt_TCPMSS: Only works on TCP SYN packets
[   81.241553][  T790] cfg80211: failed to load regulatory.db
[   81.510879][ T7054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.347'.
[   81.556695][  T790] IPVS: starting estimator thread 0...
[   81.607457][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'.
[   81.613895][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.349'.
[   81.651910][ T7057] IPVS: using max 62 ests per chain, 148800 per kthread
[   81.743051][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[   81.796716][ T6926] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.812287][ T6926] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.817955][ T6926] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.829870][ T6926] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.906550][ T7083] tipc: New replicast peer: 255.255.255.255
[   81.909470][ T7083] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.942237][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'.
[   81.984749][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'.
[   82.026588][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.049290][ T6926] 8021q: adding VLAN 0 to HW filter on device team0
[   82.054963][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.057407][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.089346][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.092090][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.192016][ T5830] Bluetooth: hci2: command tx timeout
[   82.359684][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.465978][ T6926] veth0_vlan: entered promiscuous mode
[   82.475088][ T6926] veth1_vlan: entered promiscuous mode
[   82.494039][ T6926] veth0_macvtap: entered promiscuous mode
[   82.498336][ T6926] veth1_macvtap: entered promiscuous mode
[   82.534450][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.543928][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.549959][ T6926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.554598][ T6926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.557583][ T6926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.560348][ T6926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.573694][ T7110] netlink: 'syz.0.358': attribute type 21 has an invalid length.
[   82.586078][ T7110] netlink: 128 bytes leftover after parsing attributes in process `syz.0.358'.
[   82.599124][ T7110] netlink: 'syz.0.358': attribute type 4 has an invalid length.
[   82.602795][ T7110] netlink: 'syz.0.358': attribute type 5 has an invalid length.
[   82.608727][ T7110] netlink: 3 bytes leftover after parsing attributes in process `syz.0.358'.
[   82.654295][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.657069][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.686547][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.689033][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.885443][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'.
[   82.912172][  T791] tipc: Node number set to 109056512
[   83.077805][ T7145] netlink: 'syz.0.367': attribute type 7 has an invalid length.
[   83.080826][ T7145] netlink: 'syz.0.367': attribute type 8 has an invalid length.
[   83.212908][ T7159] netlink: 'syz.0.371': attribute type 9 has an invalid length.
[   83.317508][ T7171] sctp: [Deprecated]: syz.1.376 (pid 7171) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.317508][ T7171] Use struct sctp_sack_info instead
[   83.415269][ T7180] netlink: 'syz.1.380': attribute type 3 has an invalid length.
[   83.430663][ T7180] netlink: 'syz.1.380': attribute type 3 has an invalid length.
[   83.574902][ T7190] wg1 speed is unknown, defaulting to 1000
[   83.799119][ T7203] Cannot find del_set index 2 as target
[   83.912016][ T7205] wg1 speed is unknown, defaulting to 1000
[   84.209839][ T5841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.425422][ T7222] dummy0: entered promiscuous mode
[   84.428827][ T7222] batadv0: entered promiscuous mode
[   84.440099][ T7222] dummy0: left promiscuous mode
[   84.444344][ T7222] batadv0: left promiscuous mode
[   84.567942][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.571184][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.575700][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.578654][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.581271][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.609104][ T7234] wg1 speed is unknown, defaulting to 1000
[   84.747980][ T7234] chnl_net:caif_netlink_parms(): no params data found
[   84.806252][ T7253] sctp: [Deprecated]: syz.1.397 (pid 7253) Use of int in maxseg socket option.
[   84.806252][ T7253] Use struct sctp_assoc_value instead
[   84.836950][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.839290][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.841553][ T7234] bridge_slave_0: entered allmulticast mode
[   84.847910][ T7234] bridge_slave_0: entered promiscuous mode
[   84.851157][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.853750][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.856200][ T7234] bridge_slave_1: entered allmulticast mode
[   84.859190][ T7234] bridge_slave_1: entered promiscuous mode
[   84.907686][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.915951][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.087261][ T7234] team0: Port device team_slave_0 added
[   85.099296][ T7234] team0: Port device team_slave_1 added
[   85.146922][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.149706][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.171902][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.180034][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.184192][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.199829][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.247933][ T7234] hsr_slave_0: entered promiscuous mode
[   85.250720][ T7234] hsr_slave_1: entered promiscuous mode
[   85.260432][ T7234] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.262871][ T7234] Cannot create hsr debugfs directory
[   85.444159][ T7298] wg1 speed is unknown, defaulting to 1000
[   85.578449][ T5841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.657252][ T5841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.701450][ T5841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.779612][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.875617][ T5841] bridge_slave_1: left allmulticast mode
[   85.877382][ T5841] bridge_slave_1: left promiscuous mode
[   85.879240][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.908275][ T5841] bridge_slave_0: left allmulticast mode
[   85.910428][ T5841] bridge_slave_0: left promiscuous mode
[   85.913235][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.103795][ T7345] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[   86.220134][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.226149][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.230943][ T5841] bond0 (unregistering): Released all slaves
[   86.385330][ T7355] __nla_validate_parse: 15 callbacks suppressed
[   86.385341][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'.
[   86.440865][ T7355] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   86.503291][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   86.672731][   T54] Bluetooth: hci2: command tx timeout
[   86.689267][ T5841] hsr_slave_0: left promiscuous mode
[   86.702194][ T5841] hsr_slave_1: left promiscuous mode
[   86.705739][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.708610][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.714763][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.717566][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.752842][ T5841] veth1_macvtap: left promiscuous mode
[   86.755070][ T5841] veth0_macvtap: left promiscuous mode
[   86.771976][ T5841] veth1_vlan: left promiscuous mode
[   86.778274][ T5841] veth0_vlan: left promiscuous mode
[   86.888134][ T7385] netlink: 'syz.1.419': attribute type 4 has an invalid length.
[   87.105658][ T5841] team0 (unregistering): Port device team_slave_1 removed
[   87.132067][ T5841] team0 (unregistering): Port device team_slave_0 removed
[   87.439195][ T7234] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.441001][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'.
[   87.449595][ T7234] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.484656][ T7234] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.489324][ T7234] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.631638][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.647389][ T7406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.656225][ T7406] syzkaller0: entered promiscuous mode
[   87.658371][ T7406] syzkaller0: entered allmulticast mode
[   87.666850][ T7234] 8021q: adding VLAN 0 to HW filter on device team0
[   87.672890][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.675095][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.691348][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.694104][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.704458][ T7406] tipc: Resetting bearer <eth:syzkaller0>
[   87.709765][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[   87.719942][ T7405] tipc: Disabling bearer <eth:syzkaller0>
[   87.924758][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.981826][ T7234] veth0_vlan: entered promiscuous mode
[   87.991361][ T7234] veth1_vlan: entered promiscuous mode
[   88.025248][ T7234] veth0_macvtap: entered promiscuous mode
[   88.035855][ T7234] veth1_macvtap: entered promiscuous mode
[   88.064624][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.071069][ T7432] netlink: 'syz.1.433': attribute type 2 has an invalid length.
[   88.076269][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.096254][ T7234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.099117][ T7234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.101687][ T7234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.105651][ T7234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.151545][ T7435] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   88.190776][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.435'.
[   88.196009][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.198657][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.219954][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.223298][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.310121][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.381678][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'.
[   88.458590][ T7461] netlink: 'syz.0.442': attribute type 12 has an invalid length.
[   88.461535][ T7461] netlink: 'syz.0.442': attribute type 29 has an invalid length.
[   88.465205][ T7461] netlink: 148 bytes leftover after parsing attributes in process `syz.0.442'.
[   88.468586][ T7461] netlink: 'syz.0.442': attribute type 2 has an invalid length.
[   88.474503][ T7461] netlink: 43 bytes leftover after parsing attributes in process `syz.0.442'.
[   88.600440][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'.
[   88.703278][ T7473] bridge1: entered promiscuous mode
[   88.705372][ T7473] bridge1: entered allmulticast mode
[   89.451951][ T7478] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   89.455554][ T7478] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.448'.
[   89.614612][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.453'.
[   89.800993][ T7511] netlink: 'syz.0.461': attribute type 2 has an invalid length.
[   89.856275][ T7511] xt_recent: Unsupported userspace flags (00000048)
[   90.089562][ T5834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.209175][ T7527] IPv6: NLM_F_CREATE should be specified when creating new route
[   90.388549][ T7540] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   90.443948][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.447952][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.452586][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.456954][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.461473][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.493825][ T7541] wg1 speed is unknown, defaulting to 1000
[   90.561362][ T7554] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   90.634501][ T7541] chnl_net:caif_netlink_parms(): no params data found
[   90.703089][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.706223][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.708789][ T7541] bridge_slave_0: entered allmulticast mode
[   90.712289][ T7541] bridge_slave_0: entered promiscuous mode
[   90.715801][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.718006][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.720168][ T7541] bridge_slave_1: entered allmulticast mode
[   90.723732][ T7541] bridge_slave_1: entered promiscuous mode
[   90.747888][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.752656][ T7541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.779688][ T7541] team0: Port device team_slave_0 added
[   90.784603][ T7541] team0: Port device team_slave_1 added
[   90.806037][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.808533][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.818389][ T7541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.824854][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.827438][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.837797][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.875801][ T7541] hsr_slave_0: entered promiscuous mode
[   90.878708][ T7541] hsr_slave_1: entered promiscuous mode
[   90.882801][ T7541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.885642][ T7541] Cannot create hsr debugfs directory
[   90.946931][ T7571] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[   91.570667][ T7599] __nla_validate_parse: 16 callbacks suppressed
[   91.570682][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   91.579831][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[   91.650437][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[   91.776933][ T7613] batman_adv: batadv0: Adding interface: macvlan3
[   91.779372][ T7613] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.788079][ T7613] batman_adv: batadv0: Interface activated: macvlan3
[   92.058107][ T5834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.116663][ T5834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.140152][ T7624] netlink: 538 bytes leftover after parsing attributes in process `syz.1.500'.
[   92.180037][ T5834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.337912][ T5834] bridge_slave_1: left allmulticast mode
[   92.340711][ T5834] bridge_slave_1: left promiscuous mode
[   92.344025][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.350035][ T5834] bridge_slave_0: left allmulticast mode
[   92.357764][ T5834] bridge_slave_0: left promiscuous mode
[   92.360475][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.513965][   T54] Bluetooth: hci2: command tx timeout
[   92.654001][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.659611][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.665079][ T5834] bond0 (unregistering): Released all slaves
[   92.679699][ T7634] netlink: 76 bytes leftover after parsing attributes in process `syz.1.503'.
[   92.867315][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'.
[   92.938063][ T7650] wg1 speed is unknown, defaulting to 1000
[   93.038605][ T5834] hsr_slave_0: left promiscuous mode
[   93.041657][ T5834] hsr_slave_1: left promiscuous mode
[   93.047325][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.049709][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.054214][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.056630][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.070025][ T5834] veth1_macvtap: left promiscuous mode
[   93.072814][ T5834] veth0_macvtap: left promiscuous mode
[   93.075141][ T5834] veth1_vlan: left promiscuous mode
[   93.076951][ T5834] veth0_vlan: left promiscuous mode
[   93.414670][ T5834] team0 (unregistering): Port device team_slave_1 removed
[   93.438572][ T5834] team0 (unregistering): Port device team_slave_0 removed
[   93.803324][ T7541] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.815708][ T7541] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.834006][ T7541] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.855559][ T7541] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.959043][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.969561][ T7541] 8021q: adding VLAN 0 to HW filter on device team0
[   93.985676][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.988342][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.006343][ T7541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.009519][ T7541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.021142][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.023555][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.154520][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.186984][ T7696] netlink: 'syz.1.518': attribute type 1 has an invalid length.
[   94.189806][ T7696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.518'.
[   94.592060][   T54] Bluetooth: hci2: command tx timeout
[   95.017179][ T7700] syz.1.518: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.023417][ T7700] CPU: 0 UID: 0 PID: 7700 Comm: syz.1.518 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   95.023429][ T7700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.023434][ T7700] Call Trace:
[   95.023440][ T7700]  <TASK>
[   95.023445][ T7700]  dump_stack_lvl+0x189/0x250
[   95.023462][ T7700]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.023471][ T7700]  ? __pfx__printk+0x10/0x10
[   95.023484][ T7700]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.023496][ T7700]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.023507][ T7700]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   95.023518][ T7700]  warn_alloc+0x214/0x310
[   95.023534][ T7700]  ? __pfx_warn_alloc+0x10/0x10
[   95.023549][ T7700]  ? __get_vm_area_node+0x28f/0x300
[   95.023561][ T7700]  ? veth_dev_init+0x363/0x570
[   95.023576][ T7700]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   95.023599][ T7700]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   95.023609][ T7700]  ? __kasan_kmalloc_large+0x1c/0xa0
[   95.023621][ T7700]  ? rcu_is_watching+0x15/0xb0
[   95.023633][ T7700]  ? veth_dev_init+0x363/0x570
[   95.023643][ T7700]  ? veth_dev_init+0x363/0x570
[   95.023652][ T7700]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   95.023665][ T7700]  ? veth_dev_init+0x363/0x570
[   95.023679][ T7700]  veth_dev_init+0x363/0x570
[   95.023693][ T7700]  register_netdevice+0x6bf/0x1ae0
[   95.023711][ T7700]  ? snprintf+0xda/0x120
[   95.023724][ T7700]  ? __pfx_register_netdevice+0x10/0x10
[   95.023734][ T7700]  ? __pfx_snprintf+0x10/0x10
[   95.023744][ T7700]  ? __asan_memset+0x22/0x50
[   95.023753][ T7700]  ? dev_addr_mod+0x2ce/0x3d0
[   95.023768][ T7700]  veth_newlink+0x5cc/0xa50
[   95.023780][ T7700]  ? __pfx_veth_newlink+0x10/0x10
[   95.023793][ T7700]  ? __pfx_css_rstat_updated+0x10/0x10
[   95.023831][ T7700]  ? validate_linkmsg+0x765/0x950
[   95.023848][ T7700]  ? __pfx_veth_newlink+0x10/0x10
[   95.023860][ T7700]  rtnl_newlink_create+0x310/0xb00
[   95.023872][ T7700]  ? __pfx_aa_get_newest_label+0x10/0x10
[   95.023888][ T7700]  ? __pfx_rtnl_newlink_create+0x10/0x10
[   95.023897][ T7700]  ? rtnl_newlink+0x8db/0x1c70
[   95.023906][ T7700]  ? __pfx___mutex_lock+0x10/0x10
[   95.023920][ T7700]  ? ns_capable+0x8a/0xf0
[   95.023932][ T7700]  rtnl_newlink+0x16d6/0x1c70
[   95.023941][ T7700]  ? netlink_sendmsg+0x805/0xb30
[   95.023958][ T7700]  ? __pfx_rtnl_newlink+0x10/0x10
[   95.024002][ T7700]  ? __lock_acquire+0xab9/0xd20
[   95.024024][ T7700]  ? __pfx_rtnl_newlink+0x10/0x10
[   95.024032][ T7700]  rtnetlink_rcv_msg+0x7cf/0xb70
[   95.024042][ T7700]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   95.024050][ T7700]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   95.024057][ T7700]  ? ref_tracker_free+0x63a/0x7d0
[   95.024070][ T7700]  ? __copy_skb_header+0xa7/0x550
[   95.024082][ T7700]  ? __pfx_ref_tracker_free+0x10/0x10
[   95.024099][ T7700]  netlink_rcv_skb+0x208/0x470
[   95.024108][ T7700]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   95.024118][ T7700]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   95.024133][ T7700]  ? netlink_deliver_tap+0x2e/0x1b0
[   95.024141][ T7700]  ? netlink_deliver_tap+0x2e/0x1b0
[   95.024153][ T7700]  netlink_unicast+0x75c/0x8e0
[   95.024167][ T7700]  netlink_sendmsg+0x805/0xb30
[   95.024180][ T7700]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.024191][ T7700]  ? aa_sock_msg_perm+0x94/0x160
[   95.024204][ T7700]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   95.024216][ T7700]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.024226][ T7700]  __sock_sendmsg+0x21c/0x270
[   95.024235][ T7700]  ____sys_sendmsg+0x505/0x830
[   95.024248][ T7700]  ? __pfx_____sys_sendmsg+0x10/0x10
[   95.024262][ T7700]  ? import_iovec+0x74/0xa0
[   95.024274][ T7700]  ___sys_sendmsg+0x21f/0x2a0
[   95.024285][ T7700]  ? __pfx____sys_sendmsg+0x10/0x10
[   95.024312][ T7700]  ? __fget_files+0x2a/0x420
[   95.024323][ T7700]  ? __fget_files+0x3a0/0x420
[   95.024338][ T7700]  __x64_sys_sendmsg+0x19b/0x260
[   95.024373][ T7700]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   95.024388][ T7700]  ? rcu_is_watching+0x15/0xb0
[   95.024399][ T7700]  ? do_syscall_64+0xbe/0x3b0
[   95.024409][ T7700]  do_syscall_64+0xfa/0x3b0
[   95.024416][ T7700]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.024428][ T7700]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.024436][ T7700]  ? exc_page_fault+0x9f/0xf0
[   95.024448][ T7700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.024455][ T7700] RIP: 0033:0x7f1711d8e929
[   95.024463][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.024470][ T7700] RSP: 002b:00007f1712c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.024479][ T7700] RAX: ffffffffffffffda RBX: 00007f1711fb6080 RCX: 00007f1711d8e929
[   95.024485][ T7700] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000006
[   95.024489][ T7700] RBP: 00007f1711e10b39 R08: 0000000000000000 R09: 0000000000000000
[   95.024494][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.024498][ T7700] R13: 0000000000000000 R14: 00007f1711fb6080 R15: 00007ffdca3e7d98
[   95.024511][ T7700]  </TASK>
[   95.024515][ T7700] Mem-Info:
[   95.217196][ T7700] active_anon:4414 inactive_anon:0 isolated_anon:0
[   95.217196][ T7700]  active_file:1117 inactive_file:38223 isolated_file:0
[   95.217196][ T7700]  unevictable:1768 dirty:38 writeback:0
[   95.217196][ T7700]  slab_reclaimable:9229 slab_unreclaimable:56907
[   95.217196][ T7700]  mapped:18024 shmem:2451 pagetables:850
[   95.217196][ T7700]  sec_pagetables:0 bounce:0
[   95.217196][ T7700]  kernel_misc_reclaimable:0
[   95.217196][ T7700]  free:290411 free_pcp:23049 free_cma:0
[   95.234157][ T7700] Node 0 active_anon:11596kB inactive_anon:0kB active_file:3168kB inactive_file:77244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37456kB dirty:88kB writeback:0kB shmem:4676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4776kB pagetables:1900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.245246][ T7700] Node 1 active_anon:6060kB inactive_anon:0kB active_file:1300kB inactive_file:75648kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34640kB dirty:64kB writeback:0kB shmem:5128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6560kB pagetables:1500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.256147][ T7700] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   95.266402][ T7700] lowmem_reserve[]: 0 812 812 812 812
[   95.268067][ T7700] Node 0 DMA32 free:331952kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11596kB inactive_anon:0kB active_file:3168kB inactive_file:77244kB unevictable:3536kB writepending:88kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:45740kB local_pcp:19312kB free_cma:0kB
[   95.279688][ T7700] lowmem_reserve[]: 0 0 0 0 0
[   95.281187][ T7700] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   95.290899][ T7700] lowmem_reserve[]: 0 0 854 854 854
[   95.292796][ T7700] Node 1 Normal free:355808kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6060kB inactive_anon:0kB active_file:1300kB inactive_file:75648kB unevictable:3536kB writepending:64kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:46336kB local_pcp:30112kB free_cma:0kB
[   95.303596][ T7700] lowmem_reserve[]: 0 0 0 0 0
[   95.305530][ T7700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   95.310446][ T7700] Node 0 DMA32: 496*4kB (UME) 220*8kB (ME) 117*16kB (UME) 120*32kB (UM) 45*64kB (M) 25*128kB (M) 12*256kB (ME) 8*512kB (UME) 6*1024kB (ME) 4*2048kB (UME) 72*4096kB (M) = 331952kB
[   95.317703][ T7700] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   95.324773][ T7700] Node 1 Normal: 280*4kB (UME) 774*8kB (UME) 599*16kB (UME) 575*32kB (UME) 166*64kB (UME) 39*128kB (UM) 21*256kB (UE) 21*512kB (UME) 4*1024kB (UM) 3*2048kB (U) 68*4096kB (UM) = 355808kB
[   95.331686][ T7700] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   95.335458][ T7700] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   95.338960][ T7700] 41792 total pagecache pages
[   95.340744][ T7700] 0 pages in swap cache
[   95.342393][ T7700] Free swap  = 124996kB
[   95.343985][ T7700] Total swap = 124996kB
[   95.345641][ T7700] 786301 pages RAM
[   95.347176][ T7700] 0 pages HighMem/MovableOnly
[   95.348674][ T7700] 241085 pages reserved
[   95.349976][ T7700] 0 pages cma reserved
[   96.422533][ T7541] veth0_vlan: entered promiscuous mode
[   96.436144][ T7541] veth1_vlan: entered promiscuous mode
[   96.475485][ T7541] veth0_macvtap: entered promiscuous mode
[   96.480296][ T7541] veth1_macvtap: entered promiscuous mode
[   96.491607][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.500470][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.506443][ T7541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.509118][ T7541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.511678][ T7541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.514942][ T7541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.571033][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.578166][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.603002][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.605367][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.836145][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'.
[   96.880845][ T7728] netlink: 348 bytes leftover after parsing attributes in process `syz.1.529'.
[   96.886162][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'.
[   96.898098][ T7730] netlink: 348 bytes leftover after parsing attributes in process `syz.1.529'.
[   96.969577][ T5861] wg1 speed is unknown, defaulting to 1000
[   97.077121][ T7733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.086681][ T7733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.138388][ T7733] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.141222][ T7733] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.150871][ T7733] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.154158][ T7733] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.196106][ T7733] ip6gretap0: left allmulticast mode
[   97.209897][ T7736] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[   97.216091][ T6626] wg1 speed is unknown, defaulting to 1000
[   97.224045][ T6626] syz0: Port: 1 Link DOWN
[   97.293030][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.370894][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.429350][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.496013][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.877315][ T7752] netlink: 396 bytes leftover after parsing attributes in process `syz.0.535'.
[   97.881018][ T7752] netlink: 44 bytes leftover after parsing attributes in process `syz.0.535'.
[   98.012123][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   98.015912][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   98.019824][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   98.024644][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   98.027818][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   98.059683][ T7757] wg1 speed is unknown, defaulting to 1000
[   98.151038][ T7763] wg1 speed is unknown, defaulting to 1000
[   98.181627][ T7757] chnl_net:caif_netlink_parms(): no params data found
[   98.318894][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.327482][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.330501][ T7757] bridge_slave_0: entered allmulticast mode
[   98.334789][ T7757] bridge_slave_0: entered promiscuous mode
[   98.348852][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.351182][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.356977][ T7757] bridge_slave_1: entered allmulticast mode
[   98.364637][ T7757] bridge_slave_1: entered promiscuous mode
[   98.414648][ T7776] syz.0.542 (7776) used greatest stack depth: 19672 bytes left
[   98.425256][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.439087][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.475200][ T7757] team0: Port device team_slave_0 added
[   98.477440][   T13] bridge_slave_1: left allmulticast mode
[   98.479444][   T13] bridge_slave_1: left promiscuous mode
[   98.481283][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.492970][   T13] bridge_slave_0: left allmulticast mode
[   98.494722][   T13] bridge_slave_0: left promiscuous mode
[   98.496526][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.514584][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[   98.601013][ T7789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.786700][ T7801] tipc: Can't bind to reserved service type 0
[   98.857209][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.862896][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.867334][   T13] bond0 (unregistering): Released all slaves
[   98.878287][ T7757] team0: Port device team_slave_1 added
[   99.068363][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.073175][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.083390][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.088828][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.091615][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.104193][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.198449][ T7757] hsr_slave_0: entered promiscuous mode
[   99.203612][ T7757] hsr_slave_1: entered promiscuous mode
[   99.208995][ T7757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.211485][ T7757] Cannot create hsr debugfs directory
[   99.241570][ T7825] macvlan4: entered allmulticast mode
[   99.245606][ T7825] veth1_vlan: entered allmulticast mode
[   99.249039][ T7825] veth1_vlan: left allmulticast mode
[   99.302897][   T13] hsr_slave_0: left promiscuous mode
[   99.305084][   T13] hsr_slave_1: left promiscuous mode
[   99.307156][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.309550][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.315899][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.318261][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.332464][   T13] veth1_macvtap: left promiscuous mode
[   99.334581][   T13] veth0_macvtap: left promiscuous mode
[   99.336716][   T13] veth1_vlan: left promiscuous mode
[   99.338750][   T13] veth0_vlan: left promiscuous mode
[   99.344899][ T7831] netlink: 104 bytes leftover after parsing attributes in process `syz.1.561'.
[   99.678854][   T13] team0 (unregistering): Port device team_slave_1 removed
[   99.704943][   T13] team0 (unregistering): Port device team_slave_0 removed
[   99.988313][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[  100.117886][ T5830] Bluetooth: hci2: command tx timeout
[  100.126118][ T7839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.564'.
[  100.287517][ T7848] xt_hashlimit: max too large, truncated to 1048576
[  100.290750][ T7848] Cannot find add_set index 3 as target
[  100.500864][ T7861] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  100.506566][ T7861] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  100.590611][ T7757] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  100.596917][ T7864] netlink: 'syz.1.574': attribute type 1 has an invalid length.
[  100.598957][ T7757] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  100.608319][ T7757] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.626901][ T7757] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  100.657234][ T7864] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.674817][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv1
[  100.679825][ T7866] bond2: (slave batadv1): making interface the new active one
[  100.686878][ T7866] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  100.704647][ T7864] bridge2: entered allmulticast mode
[  100.788643][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.808421][ T7757] 8021q: adding VLAN 0 to HW filter on device team0
[  100.817668][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.819871][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.831232][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.833538][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.861137][ T7879] netlink: 'syz.1.576': attribute type 10 has an invalid length.
[  100.864752][ T7879] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  100.870932][ T7879] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  100.968993][ T7883] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  100.999209][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.046932][ T7757] veth0_vlan: entered promiscuous mode
[  101.055139][ T7757] veth1_vlan: entered promiscuous mode
[  101.084297][ T7757] veth0_macvtap: entered promiscuous mode
[  101.089718][ T7757] veth1_macvtap: entered promiscuous mode
[  101.103130][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.139860][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.148100][ T7757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.150787][ T7757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.153743][ T7757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.156383][ T7757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.247090][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.252650][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.286505][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.289470][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.595601][ T7905] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  101.614815][ T7905] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.655789][ T7905] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.658815][ T7905] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  101.668058][ T7905] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  101.709044][ T7910] veth3: entered promiscuous mode
[  101.712788][ T7910] bond3: (slave veth3): Enslaving as an active interface with a down link
[  101.718337][ T7913] erspan0: entered allmulticast mode
[  101.864815][ T7927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.867844][ T7927] syzkaller0: entered promiscuous mode
[  101.869996][ T7927] syzkaller0: entered allmulticast mode
[  101.877817][ T7927] tipc: Resetting bearer <eth:syzkaller0>
[  101.884668][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[  101.895427][ T7929] xt_nfacct: accounting object `syz1' does not exists
[  101.904930][ T7925] tipc: Disabling bearer <eth:syzkaller0>
[  101.908322][ T7929] __nla_validate_parse: 6 callbacks suppressed
[  101.908336][ T7929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.591'.
[  101.955435][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'.
[  101.959692][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'.
[  101.965674][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'.
[  102.338766][ T7950] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[  102.341713][ T7950] netlink: 204 bytes leftover after parsing attributes in process `syz.1.598'.
[  102.347157][ T7950] netlink: 'syz.1.598': attribute type 1 has an invalid length.
[  102.410741][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'.
[  102.881811][ T7977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.177440][ T5854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.205737][ T7984] bond0: (slave netdevsim0): Releasing backup interface
[  103.949169][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.954954][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.958508][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.961312][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.965563][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.990291][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'.
[  103.994174][ T8000] wg1 speed is unknown, defaulting to 1000
[  104.099494][ T8000] chnl_net:caif_netlink_parms(): no params data found
[  104.160563][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.164903][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.167364][ T8000] bridge_slave_0: entered allmulticast mode
[  104.170671][ T8000] bridge_slave_0: entered promiscuous mode
[  104.174490][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.176911][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.179099][ T8000] bridge_slave_1: entered allmulticast mode
[  104.185087][ T8000] bridge_slave_1: entered promiscuous mode
[  104.208458][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.213609][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.243147][ T8000] team0: Port device team_slave_0 added
[  104.247681][ T8000] team0: Port device team_slave_1 added
[  104.270473][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.273449][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.282487][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.287142][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.289538][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.297975][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.329017][ T8000] hsr_slave_0: entered promiscuous mode
[  104.332685][ T8000] hsr_slave_1: entered promiscuous mode
[  104.335426][ T8000] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.337905][ T8000] Cannot create hsr debugfs directory
[  104.692898][ T5854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.715111][ T8010] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.750509][ T8017] netlink: 'syz.0.611': attribute type 1 has an invalid length.
[  104.783672][ T5854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.832106][ T8020] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  104.838023][ T7803] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  104.848658][ T8017] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.887168][ T5854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.903755][ T8017] veth5: entered promiscuous mode
[  104.907392][ T8017] bond4: (slave veth5): Enslaving as a backup interface with a down link
[  104.953216][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  104.987948][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'.
[  105.054750][ T5854] bridge_slave_1: left allmulticast mode
[  105.057023][ T5854] bridge_slave_1: left promiscuous mode
[  105.060251][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.075109][ T5854] bridge_slave_0: left allmulticast mode
[  105.082108][ T5854] bridge_slave_0: left promiscuous mode
[  105.084486][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.435171][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.441054][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.445813][ T5854] bond0 (unregistering): Released all slaves
[  105.474078][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.477161][ T8031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.786524][ T5854] hsr_slave_0: left promiscuous mode
[  105.788962][ T5854] hsr_slave_1: left promiscuous mode
[  105.791192][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.795318][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.798493][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.800919][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.817044][ T5854] veth1_macvtap: left promiscuous mode
[  105.818985][ T5854] veth0_macvtap: left promiscuous mode
[  105.820924][ T5854] veth1_vlan: left promiscuous mode
[  105.823254][ T5854] veth0_vlan: left promiscuous mode
[  106.042127][   T54] Bluetooth: hci2: command tx timeout
[  106.186440][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  106.215036][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  106.492948][ T8043] netlink: 'syz.1.618': attribute type 14 has an invalid length.
[  106.584421][ T8000] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.597901][ T8000] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.629672][ T8000] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.636102][ T8000] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.707670][ T8065] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.766149][ T8067] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.625'.
[  106.785172][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.801667][ T8000] 8021q: adding VLAN 0 to HW filter on device team0
[  106.816052][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.818421][ T1589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.845386][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.848372][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.961044][ T8081] netlink: 'syz.1.628': attribute type 12 has an invalid length.
[  106.963701][ T8081] netlink: 'syz.1.628': attribute type 29 has an invalid length.
[  106.966022][ T8081] netlink: 148 bytes leftover after parsing attributes in process `syz.1.628'.
[  106.968750][ T8081] netlink: 51 bytes leftover after parsing attributes in process `syz.1.628'.
[  107.064790][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.105662][ T8000] veth0_vlan: entered promiscuous mode
[  107.117458][ T8000] veth1_vlan: entered promiscuous mode
[  107.155220][ T8000] veth0_macvtap: entered promiscuous mode
[  107.160146][ T8000] veth1_macvtap: entered promiscuous mode
[  107.190806][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.213464][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.229053][ T8000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.233509][ T8000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.242196][ T8000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.246138][ T8000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.352748][ T1589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.355972][ T1589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.362708][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[  107.373870][ T8106] wg1 speed is unknown, defaulting to 1000
[  107.384946][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'.
[  107.387930][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'.
[  107.392458][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.394863][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.630774][ T8124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.636024][ T8124] syzkaller0: entered promiscuous mode
[  107.637936][ T8124] syzkaller0: entered allmulticast mode
[  107.655163][ T8124] tipc: Resetting bearer <eth:syzkaller0>
[  107.672548][ T8123] tipc: Resetting bearer <eth:syzkaller0>
[  107.687164][ T8123] tipc: Disabling bearer <eth:syzkaller0>
[  107.887169][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'.
[  107.890889][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'.
[  108.109266][ T8144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.643'.
[  108.271340][ T8149] netlink: 'syz.1.645': attribute type 5 has an invalid length.
[  108.330573][ T8153] x_tables: duplicate underflow at hook 1
[  108.340638][ T8153] netlink: 'syz.1.646': attribute type 83 has an invalid length.
[  108.762273][ T8172] wg1 speed is unknown, defaulting to 1000
[  108.847650][ T8176] netlink: 292 bytes leftover after parsing attributes in process `syz.0.652'.
[  108.855039][ T8172] netlink: zone id is out of range
[  108.857036][ T8172] netlink: zone id is out of range
[  108.860431][ T8172] netlink: zone id is out of range
[  108.896220][ T8172] netlink: zone id is out of range
[  108.898294][ T8172] netlink: zone id is out of range
[  108.900278][ T8172] netlink: zone id is out of range
[  108.911346][ T8172] netlink: zone id is out of range
[  109.020999][ T5854] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.866302][ T8193] netlink: 136 bytes leftover after parsing attributes in process `syz.0.654'.
[  109.869789][ T8193] net_ratelimit: 17 callbacks suppressed
[  109.869821][ T8193] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  109.959732][ T8196] Driver unsupported XDP return value 0 on prog  (id 380) dev N/A, expect packet loss!
[  109.968926][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.973936][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.978019][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.981059][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.985417][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.019430][ T8199] wg1 speed is unknown, defaulting to 1000
[  110.138830][ T5854] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.207423][ T8199] chnl_net:caif_netlink_parms(): no params data found
[  110.328792][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.331111][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.334527][ T8199] bridge_slave_0: entered allmulticast mode
[  110.338747][ T8199] bridge_slave_0: entered promiscuous mode
[  110.346026][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.349043][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.354731][ T8199] bridge_slave_1: entered allmulticast mode
[  110.358750][ T8199] bridge_slave_1: entered promiscuous mode
[  110.468310][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.475927][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.533475][ T8199] team0: Port device team_slave_0 added
[  110.541449][ T8227] netlink: 'syz.1.666': attribute type 10 has an invalid length.
[  110.550322][ T5854] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.573598][ T8199] team0: Port device team_slave_1 added
[  110.589396][ T8227] bridge_slave_1: left allmulticast mode
[  110.591613][ T8227] bridge_slave_1: left promiscuous mode
[  110.595681][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.601301][ T8227] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  110.646614][ T5854] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.660940][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.682759][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.698489][ T8199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.726943][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.729741][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.746071][ T8199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.829691][ T8199] hsr_slave_0: entered promiscuous mode
[  110.833932][ T8199] hsr_slave_1: entered promiscuous mode
[  110.836233][ T8199] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.838671][ T8199] Cannot create hsr debugfs directory
[  110.879487][ T5854] bridge_slave_1: left allmulticast mode
[  110.882085][ T5854] bridge_slave_1: left promiscuous mode
[  110.884671][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.891140][ T5854] bridge_slave_0: left allmulticast mode
[  110.894683][ T5854] bridge_slave_0: left promiscuous mode
[  110.896626][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.243594][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.250243][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.256020][ T5854] bond0 (unregistering): Released all slaves
[  111.346686][ T8252] wg1 speed is unknown, defaulting to 1000
[  111.401203][ T8261] vxcan1: MTU too low for tipc bearer
[  111.403312][ T8261] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  111.640382][ T5854] hsr_slave_0: left promiscuous mode
[  111.643874][ T5854] hsr_slave_1: left promiscuous mode
[  111.647656][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.650536][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.667009][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.670095][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.691103][ T5854] veth1_macvtap: left promiscuous mode
[  111.695186][ T5854] veth0_macvtap: left promiscuous mode
[  111.698721][ T5854] veth1_vlan: left promiscuous mode
[  111.700566][ T5854] veth0_vlan: left promiscuous mode
[  111.777739][ T8277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.036167][ T5830] Bluetooth: hci2: command tx timeout
[  112.095271][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  112.123421][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  112.697871][ T8292] netlink: 'syz.1.686': attribute type 2 has an invalid length.
[  112.713554][ T8292] netlink: 'syz.1.686': attribute type 8 has an invalid length.
[  112.716585][ T8292] __nla_validate_parse: 15 callbacks suppressed
[  112.716592][ T8292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.686'.
[  112.749316][ T8296] wg1 speed is unknown, defaulting to 1000
[  112.873901][ T8199] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.888423][ T8199] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.920164][ T8199] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  112.929223][ T8199] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.086732][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'.
[  113.104991][ T8296] netlink: 312 bytes leftover after parsing attributes in process `syz.0.687'.
[  113.200552][ T8199] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.240995][ T8199] 8021q: adding VLAN 0 to HW filter on device team0
[  113.251528][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.254763][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.272928][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.275507][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.422378][  T791] syzkaller1: tun_net_xmit 90
[  113.460908][ T8341] syzkaller1: tun_chr_ioctl cmd 1074025677
[  113.465670][ T8341] syzkaller1: Linktype set failed because interface is up
[  113.487962][ T8199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.516255][ T8199] veth0_vlan: entered promiscuous mode
[  113.535176][ T8199] veth1_vlan: entered promiscuous mode
[  113.558678][ T8199] veth0_macvtap: entered promiscuous mode
[  113.562987][ T8199] veth1_macvtap: entered promiscuous mode
[  113.572302][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.586976][ T8199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.593676][ T8199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.596602][ T8199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.599270][ T8199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.602171][ T8199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.608650][ T7803] syzkaller1: tun_net_xmit 86
[  114.086874][ T8345] pim6reg1: entered promiscuous mode
[  114.089270][ T8345] pim6reg1: entered allmulticast mode
[  114.116516][ T5830] Bluetooth: hci2: command tx timeout
[  114.192247][   T10] syzkaller1: tun_net_xmit 90
[  114.259770][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.265725][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.321622][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.325026][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.438625][ T8353] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[  114.595017][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'.
[  114.670918][ T8365] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  114.678957][ T8365] Cannot find set identified by id 0 to match
[  114.780579][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.703'.
[  114.872601][ T8378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.705'.
[  114.999471][ T8384] netlink: 176 bytes leftover after parsing attributes in process `syz.0.708'.
[  115.133690][ T8397] netlink: 'syz.1.713': attribute type 5 has an invalid length.
[  115.325134][ T8411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.718'.
[  115.328476][ T8410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.718'.
[  115.353782][ T8408] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  115.390228][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[  115.395947][ T8413] netlink: 'syz.1.719': attribute type 19 has an invalid length.
[  115.437879][ T8416] bond6: entered promiscuous mode
[  115.440189][ T8416] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.559377][ T8416] bond6 (unregistering): Released all slaves
[  115.606418][ T7803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.373047][ T8422] 
[  116.374030][ T8422] ============================================
[  116.376258][ T8422] WARNING: possible recursive locking detected
[  116.378611][ T8422] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  116.382545][ T8422] --------------------------------------------
[  116.384794][ T8422] syz.1.722/8422 is trying to acquire lock:
[  116.387014][ T8422] ffff888027830158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  116.390594][ T8422] 
[  116.390594][ T8422] but task is already holding lock:
[  116.393282][ T8422] ffff888119889558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: __dev_queue_xmit+0x15bd/0x3a70
[  116.397127][ T8422] 
[  116.397127][ T8422] other info that might help us debug this:
[  116.400078][ T8422]  Possible unsafe locking scenario:
[  116.400078][ T8422] 
[  116.402874][ T8422]        CPU0
[  116.404190][ T8422]        ----
[  116.405488][ T8422]   lock(&qdisc_xmit_lock_key#4);
[  116.407425][ T8422]   lock(&qdisc_xmit_lock_key#4);
[  116.409377][ T8422] 
[  116.409377][ T8422]  *** DEADLOCK ***
[  116.409377][ T8422] 
[  116.412412][ T8422]  May be due to missing lock nesting notation
[  116.412412][ T8422] 
[  116.415484][ T8422] 5 locks held by syz.1.722/8422:
[  116.417423][ T8422]  #0: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  116.421152][ T8422]  #1: ffff888119889558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: __dev_queue_xmit+0x15bd/0x3a70
[  116.425043][ T8422]  #2: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  116.428548][ T8422]  #3: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  116.432192][ T8422]  #4: ffff888034aa1258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  116.436848][ T8422] 
[  116.436848][ T8422] stack backtrace:
[  116.439031][ T8422] CPU: 1 UID: 0 PID: 8422 Comm: syz.1.722 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  116.439047][ T8422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.439056][ T8422] Call Trace:
[  116.439063][ T8422]  <TASK>
[  116.439069][ T8422]  dump_stack_lvl+0x189/0x250
[  116.439089][ T8422]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.439106][ T8422]  ? __pfx__printk+0x10/0x10
[  116.439121][ T8422]  ? print_lock_name+0xde/0x100
[  116.439135][ T8422]  print_deadlock_bug+0x28b/0x2a0
[  116.439150][ T8422]  validate_chain+0x1a3f/0x2140
[  116.439162][ T8422]  ? validate_xmit_xfrm+0xbf/0x1130
[  116.439181][ T8422]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  116.439196][ T8422]  ? is_bpf_text_address+0x292/0x2b0
[  116.439212][ T8422]  __lock_acquire+0xab9/0xd20
[  116.439224][ T8422]  ? sch_direct_xmit+0x153/0x4b0
[  116.439236][ T8422]  lock_acquire+0x120/0x360
[  116.439247][ T8422]  ? sch_direct_xmit+0x153/0x4b0
[  116.439261][ T8422]  _raw_spin_lock+0x2e/0x40
[  116.439277][ T8422]  ? sch_direct_xmit+0x153/0x4b0
[  116.439286][ T8422]  sch_direct_xmit+0x153/0x4b0
[  116.439298][ T8422]  ? __pfx_sch_direct_xmit+0x10/0x10
[  116.439311][ T8422]  __dev_queue_xmit+0x17b6/0x3a70
[  116.439331][ T8422]  ? __dev_queue_xmit+0x27e/0x3a70
[  116.439346][ T8422]  ? neigh_resolve_output+0x438/0x750
[  116.439357][ T8422]  ? __pfx___dev_queue_xmit+0x10/0x10
[  116.439371][ T8422]  ? read_seqbegin+0x122/0x250
[  116.439381][ T8422]  ? neigh_resolve_output+0x438/0x750
[  116.439390][ T8422]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.439409][ T8422]  ? read_seqbegin+0x1ac/0x250
[  116.439419][ T8422]  ? __pfx_read_seqbegin+0x10/0x10
[  116.439429][ T8422]  ? __local_bh_enable_ip+0x12d/0x1c0
[  116.439441][ T8422]  ? eth_header+0x11b/0x200
[  116.439456][ T8422]  ? __asan_memcpy+0x40/0x70
[  116.439472][ T8422]  ip_finish_output2+0xd40/0x1160
[  116.439483][ T8422]  ? ip_skb_dst_mtu+0x147/0xc50
[  116.439500][ T8422]  ? ip_finish_output2+0x452/0x1160
[  116.439510][ T8422]  ? __pfx_ip_finish_output2+0x10/0x10
[  116.439520][ T8422]  ? ip_skb_dst_mtu+0x147/0xc50
[  116.439534][ T8422]  ? ip_skb_dst_mtu+0x147/0xc50
[  116.439548][ T8422]  ? ip_skb_dst_mtu+0x970/0xc50
[  116.439563][ T8422]  ? __ip_finish_output+0x336/0x3f0
[  116.439573][ T8422]  iptunnel_xmit+0x571/0xa00
[  116.439589][ T8422]  ip_tunnel_xmit+0x1c3c/0x2380
[  116.439605][ T8422]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  116.439614][ T8422]  ? gre_build_header+0x3fd/0xa40
[  116.439631][ T8422]  ? __pfx_gre_build_header+0x10/0x10
[  116.439645][ T8422]  ? iptunnel_handle_offloads+0x2fd/0x630
[  116.439659][ T8422]  ipgre_xmit+0x89e/0xc50
[  116.439676][ T8422]  ? __pfx_ipgre_xmit+0x10/0x10
[  116.439692][ T8422]  dev_hard_start_xmit+0x2d7/0x830
[  116.439710][ T8422]  __dev_queue_xmit+0x1adf/0x3a70
[  116.439727][ T8422]  ? __dev_queue_xmit+0x27e/0x3a70
[  116.439744][ T8422]  ? __pfx___dev_queue_xmit+0x10/0x10
[  116.439757][ T8422]  ? _copy_from_iter+0x24c/0x16f0
[  116.439770][ T8422]  ? sock_alloc_send_pskb+0x875/0x990
[  116.439787][ T8422]  ? packet_parse_headers+0x7ff/0xb60
[  116.439798][ T8422]  ? packet_parse_headers+0x8b8/0xb60
[  116.439810][ T8422]  ? skb_copy_datagram_from_iter+0x60c/0x720
[  116.439827][ T8422]  ? packet_xmit+0x68/0x330
[  116.439836][ T8422]  packet_sendmsg+0x41b7/0x53f0
[  116.439854][ T8422]  ? futex_unqueue+0x22/0x240
[  116.439869][ T8422]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  116.439887][ T8422]  ? __pfx___might_resched+0x10/0x10
[  116.439901][ T8422]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  116.439919][ T8422]  ? __pfx_packet_sendmsg+0x10/0x10
[  116.439932][ T8422]  ? aa_sk_perm+0x81e/0x950
[  116.439979][ T8422]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  116.439993][ T8422]  ? aa_sock_msg_perm+0x94/0x160
[  116.440010][ T8422]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  116.440026][ T8422]  ? __pfx_packet_sendmsg+0x10/0x10
[  116.440039][ T8422]  __sock_sendmsg+0x21c/0x270
[  116.440050][ T8422]  __sys_sendto+0x3bd/0x520
[  116.440064][ T8422]  ? __pfx___sys_sendto+0x10/0x10
[  116.440074][ T8422]  ? do_futex+0x333/0x420
[  116.440093][ T8422]  ? __pfx___se_sys_futex+0x10/0x10
[  116.440112][ T8422]  ? rcu_is_watching+0x15/0xb0
[  116.440126][ T8422]  __x64_sys_sendto+0xde/0x100
[  116.440138][ T8422]  do_syscall_64+0xfa/0x3b0
[  116.440148][ T8422]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.440163][ T8422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.440175][ T8422]  ? exc_page_fault+0x9f/0xf0
[  116.440191][ T8422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.440201][ T8422] RIP: 0033:0x7f1711d8e929
[  116.440213][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.440223][ T8422] RSP: 002b:00007f1712cc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  116.440236][ T8422] RAX: ffffffffffffffda RBX: 00007f1711fb5fa0 RCX: 00007f1711d8e929
[  116.440243][ T8422] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  116.440250][ T8422] RBP: 00007f1711e10b39 R08: 0000200000000200 R09: 0000000000000014
[  116.440257][ T8422] R10: 0000000000040081 R11: 0000000000000246 R12: 0000000000000000
[  116.440264][ T8422] R13: 0000000000000000 R14: 00007f1711fb5fa0 R15: 00007ffdca3e7d98
[  116.440275][ T8422]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  117.032758][ T7803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.065654][ T7803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.126344][ T7803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.176118][ T7803] bridge_slave_1: left allmulticast mode
[  117.178017][ T7803] bridge_slave_1: left promiscuous mode
[  117.179855][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.183219][ T7803] bridge_slave_0: left allmulticast mode
[  117.184927][ T7803] bridge_slave_0: left promiscuous mode
[  117.186635][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.259740][ T7803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.264919][ T7803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.268203][ T7803] bond0 (unregistering): Released all slaves
[  117.479702][ T7803] hsr_slave_0: left promiscuous mode
[  117.481908][ T7803] hsr_slave_1: left promiscuous mode
[  117.484134][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.486575][ T7803] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.489511][ T7803] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.492050][ T7803] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.496612][ T7803] veth1_macvtap: left promiscuous mode
[  117.498567][ T7803] veth0_macvtap: left promiscuous mode
[  117.500426][ T7803] veth1_vlan: left promiscuous mode
[  117.502416][ T7803] veth0_vlan: left promiscuous mode
[  117.627544][ T7803] team0 (unregistering): Port device team_slave_1 removed
[  117.648217][ T7803] team0 (unregistering): Port device team_slave_0 removed
[  118.244365][ T7803] bridge_slave_0: left allmulticast mode
[  118.246273][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.570032][ T7803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.574495][ T7803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.578708][ T7803] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  118.583375][ T7803] bond0 (unregistering): Released all slaves
[  118.655915][ T7803] bond1 (unregistering): Released all slaves
[  118.664665][ T7803] bond2 (unregistering): (slave batadv1): Releasing active interface
[  118.668749][ T7803] bond2 (unregistering): Released all slaves
[  118.752621][ T7803] bond3 (unregistering): Released all slaves
[  118.756977][ T7803] bond4 (unregistering): Released all slaves
[  118.761497][ T7803] bond5 (unregistering): Released all slaves
[  118.825869][ T7803] tipc: Disabling bearer <udp:syz1>
[  118.828159][ T7803] tipc: Left network mode
[  118.976536][ T7803] hsr_slave_0: left promiscuous mode
[  118.979134][ T7803] hsr_slave_1: left promiscuous mode
[  119.181843][ T7803] team0 (unregistering): Port device team_slave_1 removed
[  119.204856][ T7803] team0 (unregistering): Port device team_slave_0 removed
[  119.697975][ T7803] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
21:25:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff8223bf3a RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13f160 RBP=dffffc0000000000 RSP=ffffc900030deb28
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900030dec58 R11=ffffffff81ad03a0
R12=1ffff9200061bd81 R13=ffffc900030dec40 R14=ffffc900030dec08 R15=ffffffff8172aae5
RIP=ffffffff819e3e10 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556e711500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8c01384338 CR3=000000010b6d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000009800000000 ffffffffffffffff XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000027800000004 ffffffff00000130 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8c01211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003fde350
R8 =ffff888107398237 R9 =1ffff11020e73046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d4 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1712cc06c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000350e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1711f85478 00007f1711f85450 XMM03=00007f1711f85488 00007f1711f85480
XMM04=00007f1712aed100 00007f1711f85440 XMM05=00007f1711f85458 00007f1711f854a0
XMM06=00007f1711f85498 00007f1711f85490 XMM07=00007f1711f85488 00007f1711f85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1711e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
