last executing test programs:

31.508915287s ago: executing program 2 (id=112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff, 0x1, 0xa})
sendmsg$nl_generic(r1, 0x0, 0xc014) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @local, 0x9}}, 0x24)

25.774709597s ago: executing program 2 (id=112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff, 0x1, 0xa})
sendmsg$nl_generic(r1, 0x0, 0xc014) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @local, 0x9}}, 0x24)

20.392287513s ago: executing program 2 (id=112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff, 0x1, 0xa})
sendmsg$nl_generic(r1, 0x0, 0xc014) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @local, 0x9}}, 0x24)

14.812351152s ago: executing program 2 (id=112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff, 0x1, 0xa})
sendmsg$nl_generic(r1, 0x0, 0xc014) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @local, 0x9}}, 0x24)

9.180990135s ago: executing program 2 (id=112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff, 0x1, 0xa})
sendmsg$nl_generic(r1, 0x0, 0xc014) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @local, 0x9}}, 0x24)

3.810632225s ago: executing program 2 (id=112):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xffffffff, 0x1, 0xa})
sendmsg$nl_generic(r1, 0x0, 0xc014) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0xd, @local, 0x9}}, 0x24)

2.071937748s ago: executing program 0 (id=518):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=<r1=>0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000e38afa63042bfed20000000000000000aa3c040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.07121251s ago: executing program 0 (id=520):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x18, 0x3f, 0x1, 0x2, 0x0, "", [@typed={0x8, 0xff, 0x0, 0x0, @ipv4=@remote}]}, 0x18}], 0x1}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
syz_emit_ethernet(0x4a, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b6113", 0x40}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)

1.890931017s ago: executing program 0 (id=524):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$int_in(r2, 0x5421, &(0x7f00000003c0)=0x4)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@allocspi={0x130, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0x81}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@srcaddr={0x14, 0xd, @in=@remote}, @lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0xffffffff, {0x60, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0xb, 0x4}}}}]}, 0x40}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x20000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c3c, 0x0, 0x0, 0x200000000c70, 0x5], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000600000016eca8aeba000000000000000000000000000000000000000000000000000000000000000000feffff"]}, 0x108)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000bd3558e3976ee58f5b72972a1b2666972b408217f3dff911363d0cda44dd2d26ac507ccef56d12c7c2b04d5d8658aea3c505b5789986d1fe5cdabd408a84aac8529a8d8841815c4c828d8076e4bcabc0794ba8", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000"], 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)

1.711172928s ago: executing program 0 (id=527):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
socket(0x18, 0x80000, 0x40) (async)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c084}, 0x400c884)

1.432727934s ago: executing program 0 (id=530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6000}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0)

1.431654678s ago: executing program 0 (id=531):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
r3 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r3, &(0x7f0000009280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2001, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@empty, @dev, <r5=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_setlink={0x3c, 0x13, 0x300, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x5104, 0x20000}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_NET_NS_PID={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1d0f}]}, 0x3c}}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r8}, 0x18)
unshare(0x64000600)
r10 = socket$inet6(0x10, 0x2, 0x0)
write(r10, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0})
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(0xffffffffffffffff, 0x8b22, &(0x7f0000000040))
sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)

842.507121ms ago: executing program 1 (id=535):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32)
socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x5, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
shutdown(r4, 0x1)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

742.387661ms ago: executing program 1 (id=536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2e, &(0x7f0000000040)=0x8002, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=""/16, 0x1030000, 0x1000, 0x4}, 0x20)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=<r4=>r1], 0x1c}}, 0x48005)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r6, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0)

683.31594ms ago: executing program 1 (id=537):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c0000007e88eb4efe4c7ad5", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 64)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r4, r3, 0x2f}, 0x20) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r4, 0x0, r1}, 0x10) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000040)=0xc) (async)
syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, <r5=>0x41424344}, 0xffff, 0xff)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x66, 0x5, 0x81, 0x6, 0x0, @multicast2, @local}, {{0x4e20, 0x4e21, 0x41424344, r5, 0x1, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x2, {[@eol]}}, {"68bd896b"}}}}}}, 0x0)

122.190951ms ago: executing program 1 (id=538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf251a0000000700210030300000080022"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="62000001be993800", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf254100000008000300", @ANYRES32=r3, @ANYBLOB="0c009900050000000a0000000800a0000400000008009f00000000000800a000a00f0000080022014300000008009f00ae532073"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$kcm(0xa, 0x1, 0x106) (async)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x1, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x24000059)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) (async)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x15, 0x8, 0xfe, 0x9}]})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200000005e00010000000000fcdbdf250ccc6a9ed400000000040080040001807c31f244b0ddea113db2c5e3e665c1c87afc02f3426b39e75dd4778fbbd2838895"], 0x20}], 0x1}, 0x0)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000180)={0x7, &(0x7f0000000640)=[{0x1, 0xe4, 0x5, 0xc16c}, {0x6, 0x1, 0x0, 0x9}, {0x4, 0x0, 0x7, 0x2}, {0x1, 0x2, 0xd3, 0x8}, {0x7fff, 0xfd, 0x8, 0x2}, {0x9, 0x6, 0x3, 0x6}, {0x3, 0x9e, 0xcd, 0x7fff}]}) (async)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000180)={0x7, &(0x7f0000000640)=[{0x1, 0xe4, 0x5, 0xc16c}, {0x6, 0x1, 0x0, 0x9}, {0x4, 0x0, 0x7, 0x2}, {0x1, 0x2, 0xd3, 0x8}, {0x7fff, 0xfd, 0x8, 0x2}, {0x9, 0x6, 0x3, 0x6}, {0x3, 0x9e, 0xcd, 0x7fff}]})
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', <r8=>0x0, 0x40, 0x7800, 0x9, 0x1, {{0x1a, 0x4, 0x3, 0x29, 0x68, 0x66, 0x0, 0x7f, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x3, 0x99}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x9, [0x5, 0x1, 0x798b9bc2, 0x8]}, @ra={0x94, 0x4}, @generic={0x83, 0x11, "c3e1b44f5f821ffba47669a4e03050"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf2, 0x3, 0x8, [{@multicast2, 0xba}, {@multicast1, 0x2}]}, @ssrr={0x89, 0xf, 0xcf, [@private=0xa010101, @local, @broadcast]}]}}}}})
socket$inet(0xa, 0x801, 0x84) (async)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
r10 = accept4(r9, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xf}, &(0x7f0000000340)=0x8)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xe, 0xffff}, {0xc, 0xffe0}, {0x10, 0x2}}}, 0xffffffffffffffe7}}, 0x4000)
getsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
pipe(&(0x7f00000045c0)) (async)
pipe(&(0x7f00000045c0)={<r11=>0xffffffffffffffff})
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
accept4(r12, 0x0, 0x0, 0x0) (async)
r13 = accept4(r12, 0x0, 0x0, 0x0)
splice(r11, 0x0, r13, 0x0, 0x2, 0xe)
connect$llc(r11, &(0x7f0000000580)={0x1a, 0x20, 0x1, 0x2, 0x38, 0x4, @local}, 0x10)

1.866502ms ago: executing program 1 (id=539):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r2, 0x4cae3000) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000b00)) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000006540)={0x0, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x2}}}, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv6_newroute={0x50, 0x18, 0x8, 0x70bd29, 0x25dfdbfe, {0xa, 0x20, 0x20, 0x3, 0xfd, 0x1, 0xff, 0x2, 0x1000}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_UID={0x8}, @RTA_PRIORITY={0x8, 0x6, 0xcd4}, @RTA_MULTIPATH={0xc, 0x9, {0xdb, 0x0, 0x2}}, @RTA_EXPIRES={0x8, 0x17, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008091) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000090000000d00000000000007000000000b000000030000050200000006000000030000008d5b00000e0000000400000008ff00000000000001000000040000000500000d000000000a0000000500000007000000030000000d0000000100000010000000020000000e0000000200000000"], &(0x7f0000000440)=""/195, 0x91, 0xc3, 0x0, 0x800, 0x10000, @value=r5}, 0x28)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200b75}, 0x18) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)

0s ago: executing program 1 (id=540):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='scalable\x00', 0x9)
shutdown(r2, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = accept4(r5, 0x0, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x400e1}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @extra_flags={0x8, 0x18, 0x80000000}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r8, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/13, 0xd}}, 0x10)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'caif0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39, 0x4, [0xfffffffe, 0xfa5a, 0x365, 0x3]}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x21, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x972d, 0x3, 0x3fb, 0x6, 0x3]}})
r11 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33162' (ED25519) to the list of known hosts.
syzkaller login: [   41.290716][ T5788] cgroup: Unknown subsys name 'net'
[   41.406827][ T5788] cgroup: Unknown subsys name 'cpuset'
[   41.411062][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.722630][ T5788] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.016664][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.024072][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.026783][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.029522][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.032085][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.035476][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.040451][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.042987][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.045696][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.054626][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.065549][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.066665][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.071080][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.073387][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.076800][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.296829][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   46.319557][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   46.370989][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   46.418968][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.421572][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.424329][ T5830] bridge_slave_0: entered allmulticast mode
[   46.427070][ T5830] bridge_slave_0: entered promiscuous mode
[   46.453798][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.457262][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.459627][ T5830] bridge_slave_1: entered allmulticast mode
[   46.462815][ T5830] bridge_slave_1: entered promiscuous mode
[   46.472548][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.475072][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.477417][ T5834] bridge_slave_0: entered allmulticast mode
[   46.480107][ T5834] bridge_slave_0: entered promiscuous mode
[   46.483347][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.486610][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.488986][ T5834] bridge_slave_1: entered allmulticast mode
[   46.491616][ T5834] bridge_slave_1: entered promiscuous mode
[   46.508964][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.535736][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.552044][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.554537][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.556877][ T5838] bridge_slave_0: entered allmulticast mode
[   46.559575][ T5838] bridge_slave_0: entered promiscuous mode
[   46.564174][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.576148][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.579916][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.582863][ T5838] bridge_slave_1: entered allmulticast mode
[   46.587208][ T5838] bridge_slave_1: entered promiscuous mode
[   46.591503][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.605619][ T5830] team0: Port device team_slave_0 added
[   46.634888][ T5830] team0: Port device team_slave_1 added
[   46.638572][ T5834] team0: Port device team_slave_0 added
[   46.642448][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.656462][ T5834] team0: Port device team_slave_1 added
[   46.666525][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.677363][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.680370][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.691662][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.720463][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.723456][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.734669][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.740617][ T5838] team0: Port device team_slave_0 added
[   46.746620][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.748976][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.758758][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.764865][ T5838] team0: Port device team_slave_1 added
[   46.768282][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.770582][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.780201][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.830551][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.832819][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.841059][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.856173][ T5830] hsr_slave_0: entered promiscuous mode
[   46.858619][ T5830] hsr_slave_1: entered promiscuous mode
[   46.861371][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.863587][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.873070][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.882599][ T5834] hsr_slave_0: entered promiscuous mode
[   46.886251][ T5834] hsr_slave_1: entered promiscuous mode
[   46.888396][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.891003][ T5834] Cannot create hsr debugfs directory
[   46.967603][ T5838] hsr_slave_0: entered promiscuous mode
[   46.969940][ T5838] hsr_slave_1: entered promiscuous mode
[   46.972081][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.975837][ T5838] Cannot create hsr debugfs directory
[   47.102017][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.107981][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.131113][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.145698][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.180431][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.187634][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.193268][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.208229][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.235262][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.238441][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.241975][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.244675][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.264336][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.268773][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.273445][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.279071][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.281440][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.284203][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.286594][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.292405][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.303268][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.306728][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.309845][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.312513][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.382473][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.389558][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.407427][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   47.415497][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.417797][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.425303][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   47.431835][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.434255][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.441997][  T733] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.444420][  T733] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.456034][  T733] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.458411][  T733] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.489446][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.518304][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   47.530887][  T733] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.533258][  T733] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.543529][  T733] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.545928][  T733] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.611148][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.667725][ T5834] veth0_vlan: entered promiscuous mode
[   47.681345][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.688080][ T5834] veth1_vlan: entered promiscuous mode
[   47.699906][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.718985][ T5834] veth0_macvtap: entered promiscuous mode
[   47.732429][ T5834] veth1_macvtap: entered promiscuous mode
[   47.741047][ T5838] veth0_vlan: entered promiscuous mode
[   47.756448][ T5830] veth0_vlan: entered promiscuous mode
[   47.760570][ T5838] veth1_vlan: entered promiscuous mode
[   47.763830][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.772555][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.778468][ T5830] veth1_vlan: entered promiscuous mode
[   47.783088][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.786799][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.789655][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.792418][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.826284][ T5838] veth0_macvtap: entered promiscuous mode
[   47.836276][ T5830] veth0_macvtap: entered promiscuous mode
[   47.839929][ T5830] veth1_macvtap: entered promiscuous mode
[   47.849430][ T5838] veth1_macvtap: entered promiscuous mode
[   47.864741][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.876778][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.881091][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.888902][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.891784][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.897596][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.900455][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.906024][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.909553][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.910885][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.915560][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.918852][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.921809][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.926540][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.958871][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.961782][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.013839][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.022804][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.025994][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.026010][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.034403][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.051387][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.054044][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.093573][ T4448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.099209][ T4448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.132734][ T5900] unknown channel width for channel at 909000KHz?
[   48.136054][ T5900] unknown channel width for channel at 909000KHz?
[   48.165789][   T54] Bluetooth: hci2: command tx timeout
[   48.165912][ T5833] Bluetooth: hci1: command tx timeout
[   48.167747][   T54] Bluetooth: hci0: command tx timeout
[   48.182468][ T5902] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   48.187415][ T5904] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   48.209072][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.212357][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.266386][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.275943][ T5902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.309260][ T5902] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.312131][ T5902] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.316017][ T5902] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.319000][ T5902] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.466922][ T5913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4'.
[   48.521302][ T5917] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[   48.527483][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   48.530640][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'.
[   48.601700][ T5921] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   48.605268][ T5921] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   48.608591][ T5921] Zero length message leads to an empty skb
[   48.682015][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   49.082671][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'.
[   49.089716][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   49.127426][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   49.131078][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'.
[   49.198835][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'.
[   49.207977][ T5951] openvswitch: netlink: Flow key attr not present in new flow.
[   49.231128][ T5953] unknown channel width for channel at 909000KHz?
[   49.234556][ T5953] unknown channel width for channel at 909000KHz?
[   49.241340][ T5955] 8021q: VLANs not supported on wg2
[   49.328653][ T5965] netlink: 92 bytes leftover after parsing attributes in process `syz.2.24'.
[   50.244112][   T54] Bluetooth: hci0: command tx timeout
[   50.257574][   T54] Bluetooth: hci1: command tx timeout
[   50.259302][   T54] Bluetooth: hci2: command tx timeout
[   50.308280][ T5993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.827351][ T6009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.933106][ T6017] pim6reg9: entered allmulticast mode
[   51.253673][ T6048] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   51.329125][ T6055] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.446879][ T6055] block nbd0: server does not support multiple connections per device.
[   51.449828][ T6065] netlink: 'syz.2.51': attribute type 2 has an invalid length.
[   51.452867][ T6065] netlink: 'syz.2.51': attribute type 2 has an invalid length.
[   51.456307][ T6055] block nbd0: shutting down sockets
[   51.529686][ T6077] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[   51.533347][ T6077] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[   51.643376][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.708734][ T6093] Illegal XDP return value 4294967274 on prog  (id 9) dev N/A, expect packet loss!
[   51.716918][ T6085] netlink: 'syz.0.56': attribute type 13 has an invalid length.
[   51.719432][ T6085] netlink: 'syz.0.56': attribute type 17 has an invalid length.
[   51.772907][ T6085] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.776510][ T6085] 8021q: adding VLAN 0 to HW filter on device team0
[   51.781945][ T6085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.894966][ T6099] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   51.980335][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.095242][ T6126] netlink: 'syz.2.65': attribute type 30 has an invalid length.
[   52.264239][ T6141] nbd1: detected capacity change from 0 to 63
[   52.272823][ T6141] block nbd1: NBD_DISCONNECT
[   52.276414][ T6141] block nbd1: Disconnected due to user request.
[   52.279324][ T6141] block nbd1: shutting down sockets
[   52.281825][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.284936][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[   52.287489][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.290324][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[   52.292753][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.295686][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[   52.298133][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.300991][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[   52.306129][ T6149] nbd: nbd1 already in use
[   52.310102][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.312984][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   52.316548][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.325010][   T54] Bluetooth: hci1: command tx timeout
[   52.326841][   T54] Bluetooth: hci2: command tx timeout
[   52.327307][ T5833] Bluetooth: hci0: command tx timeout
[   52.330212][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   52.340705][ T5831] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.346637][ T5831] Buffer I/O error on dev nbd1, logical block 2, async page read
[   52.356389][ T5831] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.372912][ T5831] Buffer I/O error on dev nbd1, logical block 3, async page read
[   52.384520][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.388703][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   52.391806][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   52.394869][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   52.402381][ T5831] ldm_validate_partition_table(): Disk read failed.
[   52.407036][ T5831] Dev nbd1: unable to read RDB block 0
[   52.411269][ T5831]  nbd1: unable to read partition table
[   52.418183][ T5831] ldm_validate_partition_table(): Disk read failed.
[   52.421002][ T5831] Dev nbd1: unable to read RDB block 0
[   52.423547][ T5831]  nbd1: unable to read partition table
[   52.485876][ T6162] gtp0: entered promiscuous mode
[   52.487473][ T6162] gtp0: entered allmulticast mode
[   52.643091][ T6184] 8021q: adding VLAN 0 to HW filter on device batadv1
[   52.690429][ T6186] lo speed is unknown, defaulting to 1000
[   52.705224][ T6186] lo speed is unknown, defaulting to 1000
[   52.723739][ T6186] lo speed is unknown, defaulting to 1000
[   52.728926][ T6186] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   52.739440][ T6186] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   52.770328][ T6186] lo speed is unknown, defaulting to 1000
[   52.773647][ T6186] lo speed is unknown, defaulting to 1000
[   52.778089][ T6186] lo speed is unknown, defaulting to 1000
[   52.937409][ T6202] vcan0: tx drop: invalid da for name 0x0000000000000003
[   53.052793][ T6217] bridge_slave_1: left allmulticast mode
[   53.056919][ T6217] bridge_slave_1: left promiscuous mode
[   53.061016][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.065919][ T6217] bridge_slave_0: left allmulticast mode
[   53.068638][ T6217] bridge_slave_0: left promiscuous mode
[   53.070601][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.265894][ T6231] netlink: 'syz.2.89': attribute type 4 has an invalid length.
[   53.405597][ T6239] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   53.547652][ T6248] hsr0: entered promiscuous mode
[   53.549587][ T6248] macsec1: entered allmulticast mode
[   53.551382][ T6248] hsr0: entered allmulticast mode
[   53.553130][ T6248] hsr_slave_0: entered allmulticast mode
[   53.555374][ T6248] hsr_slave_1: entered allmulticast mode
[   53.559790][ T6248] hsr0: left allmulticast mode
[   53.561528][ T6248] hsr_slave_0: left allmulticast mode
[   53.563359][ T6248] hsr_slave_1: left allmulticast mode
[   54.315296][ T6263] __nla_validate_parse: 90 callbacks suppressed
[   54.315306][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[   54.404073][ T5836] Bluetooth: hci2: command tx timeout
[   54.405845][ T5836] Bluetooth: hci1: command tx timeout
[   54.407566][ T5836] Bluetooth: hci0: command tx timeout
[   54.449661][ T6277] sctp: [Deprecated]: syz.1.106 (pid 6277) Use of int in max_burst socket option deprecated.
[   54.449661][ T6277] Use struct sctp_assoc_value instead
[   54.503299][ T6282] netlink: 'syz.0.108': attribute type 2 has an invalid length.
[   54.582486][ T6287] vlan2: entered allmulticast mode
[   54.584849][ T6287] ip6gretap0: entered allmulticast mode
[   54.649230][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.714828][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.780981][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.797098][ T6294] veth0_to_bond: entered allmulticast mode
[   54.868428][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.903102][ T6298] netlink: 'syz.0.115': attribute type 13 has an invalid length.
[   54.910930][ T6298] netlink: 'syz.0.115': attribute type 17 has an invalid length.
[   54.924090][ T6298] netlink: 'syz.0.115': attribute type 27 has an invalid length.
[   54.927997][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.930801][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.940616][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.951828][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.959526][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.982259][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   54.986842][ T6309] netlink: 'syz.1.118': attribute type 5 has an invalid length.
[   54.989381][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'.
[   55.015254][ T6309] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   55.018017][ T6309] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   55.020682][ T6309] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   55.023417][ T6309] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   55.026849][ T6309] geneve2: entered promiscuous mode
[   55.028529][ T6309] geneve2: entered allmulticast mode
[   55.062590][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.118871][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.209823][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.216429][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.221242][ T5693] bond0 (unregistering): Released all slaves
[   55.232264][ T5693] bond1 (unregistering): Released all slaves
[   55.245538][ T5693] bond2 (unregistering): Released all slaves
[   55.258137][ T6298] lo speed is unknown, defaulting to 1000
[   55.331111][ T6303] lo speed is unknown, defaulting to 1000
[   55.367551][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.120'.
[   55.375003][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.377863][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.571177][ T5693] hsr_slave_0: left promiscuous mode
[   55.573211][ T5693] hsr_slave_1: left promiscuous mode
[   55.575493][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.577846][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.580612][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.583038][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.592576][ T5693] veth1_macvtap: left promiscuous mode
[   55.594780][ T5693] veth0_macvtap: left promiscuous mode
[   55.596964][ T5693] veth1_vlan: left promiscuous mode
[   55.597994][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   55.598787][ T5693] veth0_vlan: left promiscuous mode
[   55.761532][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'.
[   55.799768][ T5693] team0 (unregistering): Port device team_slave_1 removed
[   55.817904][ T5693] team0 (unregistering): Port device team_slave_0 removed
[   56.018186][ T6303] chnl_net:caif_netlink_parms(): no params data found
[   56.063236][ T6334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'.
[   56.162193][ T6356] x_tables: duplicate underflow at hook 1
[   56.238057][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.246145][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.262980][ T6303] bridge_slave_0: entered allmulticast mode
[   56.275012][ T6303] bridge_slave_0: entered promiscuous mode
[   56.290256][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.293143][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.296803][ T6303] bridge_slave_1: entered allmulticast mode
[   56.301746][ T6303] bridge_slave_1: entered promiscuous mode
[   56.341396][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.348643][ T6362] erspan0: entered promiscuous mode
[   56.362743][ T6362] erspan0: left promiscuous mode
[   56.389305][ T6303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.489854][ T6303] team0: Port device team_slave_0 added
[   56.494981][ T6381] veth0: entered promiscuous mode
[   56.517119][ T6303] team0: Port device team_slave_1 added
[   56.533673][ T6380] veth0: left promiscuous mode
[   56.555197][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.557507][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.571780][ T6303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.607417][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.611967][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.625077][ T6303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.657629][ T6393] openvswitch: netlink: Multiple metadata blocks provided
[   56.661083][ T6393] netlink: 3 bytes leftover after parsing attributes in process `syz.1.132'.
[   56.687074][ T6393] batadv1: entered promiscuous mode
[   56.689312][ T6393] batadv1: entered allmulticast mode
[   56.833315][ T6393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.132'.
[   56.893261][ T6303] hsr_slave_0: entered promiscuous mode
[   56.896966][ T6303] hsr_slave_1: entered promiscuous mode
[   56.899006][ T6303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.901364][ T6303] Cannot create hsr debugfs directory
[   57.045890][ T5836] Bluetooth: hci1: command tx timeout
[   57.068224][ T6402] lo speed is unknown, defaulting to 1000
[   57.394395][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   57.787463][ T6490] netlink: 'syz.1.136': attribute type 1 has an invalid length.
[   57.824921][ T6502] pim6reg1: entered promiscuous mode
[   57.830207][ T6502] pim6reg1: entered allmulticast mode
[   57.936304][ T6303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.946826][ T6303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.950633][ T6303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.955743][ T6303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.986066][ T6514] netlink: 'syz.1.142': attribute type 11 has an invalid length.
[   57.988548][ T6514] netlink: 'syz.1.142': attribute type 11 has an invalid length.
[   58.038513][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.063696][ T6303] 8021q: adding VLAN 0 to HW filter on device team0
[   58.092383][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.094694][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.098646][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.100989][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.112975][ T6303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.116717][ T6303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.260202][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.327647][ T6303] veth0_vlan: entered promiscuous mode
[   58.342612][ T6303] veth1_vlan: entered promiscuous mode
[   58.361415][ T6303] veth0_macvtap: entered promiscuous mode
[   58.378139][ T6552] macsec1: entered promiscuous mode
[   58.379830][ T6552] macsec1: entered allmulticast mode
[   58.408181][ T6303] veth1_macvtap: entered promiscuous mode
[   58.427356][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.435906][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.445946][ T6303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.455442][ T6303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.458272][ T6303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.461075][ T6303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.556416][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.558968][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.600879][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.604654][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.646872][ T6573] netlink: 'syz.1.150': attribute type 29 has an invalid length.
[   58.676900][ T6580] bridge0: port 3(syz_tun) entered blocking state
[   58.679994][ T6580] bridge0: port 3(syz_tun) entered disabled state
[   58.685329][ T6580] syz_tun: entered allmulticast mode
[   58.693053][ T6580] syz_tun: entered promiscuous mode
[   58.697232][ T6580] bridge0: port 3(syz_tun) entered blocking state
[   58.699654][ T6580] bridge0: port 3(syz_tun) entered forwarding state
[   58.877270][ T6589] lo speed is unknown, defaulting to 1000
[   59.031880][ T6604] netlink: 'syz.0.158': attribute type 16 has an invalid length.
[   59.034419][ T6604] netlink: 'syz.0.158': attribute type 17 has an invalid length.
[   59.050196][ T6604] bridge0: port 3(syz_tun) entered disabled state
[   59.060034][ T1269] lo speed is unknown, defaulting to 1000
[   59.062090][ T1269] syz1: Port: 1 Link DOWN
[   59.067353][ T6604] IPv6: NLM_F_REPLACE set, but no existing node found!
[   59.413589][ T6608] __nla_validate_parse: 9 callbacks suppressed
[   59.413598][ T6608] netlink: 9 bytes leftover after parsing attributes in process `syz.1.160'.
[   59.419820][ T6608] 0: renamed from hsr0 (while UP)
[   59.423247][ T6608] 0: entered allmulticast mode
[   59.425740][ T6608] hsr_slave_0: entered allmulticast mode
[   59.427663][ T6608] hsr_slave_1: entered allmulticast mode
[   59.429754][ T6608] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   59.507405][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'.
[   59.638233][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   59.646445][ T6613] wireguard0: entered promiscuous mode
[   59.648248][ T6613] wireguard0: entered allmulticast mode
[   59.756483][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'.
[   59.814344][ T6621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.165'.
[   59.818701][ T6621] netlink: 'syz.1.165': attribute type 26 has an invalid length.
[   59.836600][ T6623] syzkaller0: entered promiscuous mode
[   59.841392][ T6623] syzkaller0: entered allmulticast mode
[   59.902345][ T6630] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.905940][ T6630] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.908852][ T6630] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.911658][ T6630] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.924895][ T6628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.167'.
[   59.928044][ T6625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.167'.
[   59.965802][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'.
[   59.968926][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'.
[   59.971869][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'.
[   60.318828][ T6664] netlink: 'syz.1.180': attribute type 2 has an invalid length.
[   60.437636][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.474364][ T6676] lo speed is unknown, defaulting to 1000
[   60.635206][ T6685] xt_CT: You must specify a L4 protocol and not use inversions on it
[   60.726315][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.729137][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.731811][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.737976][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.740705][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.761168][ T6686] lo speed is unknown, defaulting to 1000
[   60.876585][ T6686] chnl_net:caif_netlink_parms(): no params data found
[   60.899355][ T6696] netlink: 'syz.1.186': attribute type 7 has an invalid length.
[   60.906439][ T6696] netlink: 'syz.1.186': attribute type 8 has an invalid length.
[   60.926035][ T6696] ip6gretap0: entered promiscuous mode
[   60.934111][ T6696] ip6gretap0: left promiscuous mode
[   60.971359][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.973772][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.977710][ T6686] bridge_slave_0: entered allmulticast mode
[   60.980338][ T6686] bridge_slave_0: entered promiscuous mode
[   60.983278][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.985724][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.988022][ T6686] bridge_slave_1: entered allmulticast mode
[   60.990631][ T6686] bridge_slave_1: entered promiscuous mode
[   61.010883][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.016221][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.036581][ T6686] team0: Port device team_slave_0 added
[   61.040340][ T6686] team0: Port device team_slave_1 added
[   61.066000][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.068327][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.500674][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.511766][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.515876][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.536533][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.588214][ T6686] hsr_slave_0: entered promiscuous mode
[   61.592494][ T6686] hsr_slave_1: entered promiscuous mode
[   61.833524][ T6714] netlink: 'syz.1.191': attribute type 11 has an invalid length.
[   62.100825][ T6740] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   62.117295][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.123537][ T6740] syz_tun: left allmulticast mode
[   62.126204][ T6740] syz_tun: left promiscuous mode
[   62.127954][ T6740] bridge0: port 3(syz_tun) entered disabled state
[   62.131526][ T6740] bridge_slave_0: left allmulticast mode
[   62.133361][ T6740] bridge_slave_0: left promiscuous mode
[   62.136731][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.141783][ T6740] bridge_slave_1: left allmulticast mode
[   62.147883][ T6740] bridge_slave_1: left promiscuous mode
[   62.150392][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.159334][ T6740] bond0: (slave bond_slave_0): Releasing backup interface
[   62.165195][ T6740] bond0: (slave bond_slave_1): Releasing backup interface
[   62.172032][ T6740] team0: Port device team_slave_0 removed
[   62.180466][ T6741] netlink: 'syz.0.199': attribute type 10 has an invalid length.
[   62.181232][ T6740] team0: Port device team_slave_1 removed
[   62.185813][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.189619][ T6740] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.204911][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.213085][ T6741] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   62.218007][ T6741] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.258970][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.281566][ T6745] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   62.400106][   T12] bridge_slave_1: left allmulticast mode
[   62.402442][   T12] bridge_slave_1: left promiscuous mode
[   62.407059][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.412202][   T12] bridge_slave_0: left allmulticast mode
[   62.418015][   T12] bridge_slave_0: left promiscuous mode
[   62.420302][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.638711][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.642528][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.648052][   T12] bond0 (unregistering): Released all slaves
[   62.806013][ T5833] Bluetooth: hci1: command tx timeout
[   63.018677][   T12] hsr_slave_0: left promiscuous mode
[   63.021482][   T12] hsr_slave_1: left promiscuous mode
[   63.023509][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.030641][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.034498][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.036828][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.052966][   T12] veth1_macvtap: left promiscuous mode
[   63.055093][   T12] veth0_macvtap: left promiscuous mode
[   63.056857][   T12] veth1_vlan: left promiscuous mode
[   63.058561][   T12] veth0_vlan: left promiscuous mode
[   63.306931][   T12] team0 (unregistering): Port device team_slave_1 removed
[   63.324810][   T12] team0 (unregistering): Port device team_slave_0 removed
[   63.502976][ T6790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.506959][ T6794] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.509596][ T6794] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.512122][ T6794] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.515047][ T6794] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.568234][ T6686] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.575527][ T6686] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.579395][ T6686] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.583635][ T6686] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.656711][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.670527][ T6686] 8021q: adding VLAN 0 to HW filter on device team0
[   63.679164][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.681464][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.695088][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.697306][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.811739][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.833974][ T6686] veth0_vlan: entered promiscuous mode
[   63.842764][ T6686] veth1_vlan: entered promiscuous mode
[   63.859299][ T6686] veth0_macvtap: entered promiscuous mode
[   63.863573][ T6686] veth1_macvtap: entered promiscuous mode
[   63.882470][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.890206][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.893844][ T6686] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.898912][ T6686] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.901657][ T6686] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.908067][ T6686] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.970440][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.976068][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.988811][ T6832] pimreg3: entered allmulticast mode
[   63.997018][ T6831] netlink: 'syz.0.214': attribute type 5 has an invalid length.
[   64.002083][ T6830] pimreg3: left allmulticast mode
[   64.016316][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.021313][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.238174][ T6855] netlink: 'syz.0.221': attribute type 21 has an invalid length.
[   64.240832][ T6855] netlink: 'syz.0.221': attribute type 4 has an invalid length.
[   64.243365][ T6855] netlink: 'syz.0.221': attribute type 5 has an invalid length.
[   64.476010][ T6879] syzkaller0: left promiscuous mode
[   64.478158][ T6879] syzkaller0: left allmulticast mode
[   64.578164][ T6891] __nla_validate_parse: 17 callbacks suppressed
[   64.578174][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[   64.750884][ T6904] ieee802154 phy0 wpan0: encryption failed: -22
[   64.801366][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   64.907061][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'.
[   65.108946][ T6921] lo speed is unknown, defaulting to 1000
[   65.179910][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   65.179930][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   65.182711][ T6930] netlink: 68 bytes leftover after parsing attributes in process `syz.0.244'.
[   65.185491][ T6931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.244'.
[   65.328862][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'.
[   65.403776][ T6951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.251'.
[   65.428856][ T6953] batadv_slave_0: entered promiscuous mode
[   65.431993][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'.
[   65.437517][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.453555][ T6956] batadv_slave_0 (unregistering): left promiscuous mode
[   65.457163][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.491825][ T6957] netlink: 'syz.0.247': attribute type 10 has an invalid length.
[   65.631182][ T6965] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   65.811151][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.045654][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.049391][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.051966][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.058514][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.061250][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.070582][ T6985] syzkaller1: entered promiscuous mode
[   66.072348][ T6985] syzkaller1: entered allmulticast mode
[   66.089086][ T6982] lo speed is unknown, defaulting to 1000
[   66.210460][ T6982] chnl_net:caif_netlink_parms(): no params data found
[   66.273739][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.276265][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.278509][ T6982] bridge_slave_0: entered allmulticast mode
[   66.281162][ T6982] bridge_slave_0: entered promiscuous mode
[   66.287958][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.290995][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.293776][ T6982] bridge_slave_1: entered allmulticast mode
[   66.296986][ T6982] bridge_slave_1: entered promiscuous mode
[   66.341629][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.347595][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.394488][ T6982] team0: Port device team_slave_0 added
[   66.405399][ T6982] team0: Port device team_slave_1 added
[   66.427013][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.429341][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.438483][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.442836][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.445975][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.455226][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.489717][ T6982] hsr_slave_0: entered promiscuous mode
[   66.492017][ T6982] hsr_slave_1: entered promiscuous mode
[   66.495324][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.498025][ T6982] Cannot create hsr debugfs directory
[   67.221906][ T7023] bridge0: port 3(erspan0) entered blocking state
[   67.224309][ T7023] bridge0: port 3(erspan0) entered disabled state
[   67.226447][ T7023] erspan0: entered allmulticast mode
[   67.228982][ T7023] erspan0: entered promiscuous mode
[   67.235826][ T7024] erspan0: left allmulticast mode
[   67.237454][ T7024] erspan0: left promiscuous mode
[   67.239158][ T7024] bridge0: port 3(erspan0) entered disabled state
[   67.346626][ T7039] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[   67.391093][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.396973][ T7043] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   67.438337][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.456905][ T7049] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[   67.519756][ T7047] wireguard1: entered promiscuous mode
[   67.521518][ T7047] wireguard1: entered allmulticast mode
[   67.560999][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.649570][ T5693] bridge_slave_1: left allmulticast mode
[   67.651570][ T5693] bridge_slave_1: left promiscuous mode
[   67.653477][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.657535][ T5693] bridge_slave_0: left allmulticast mode
[   67.659331][ T5693] bridge_slave_0: left promiscuous mode
[   67.661201][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.837321][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.841306][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.845639][ T5693] bond0 (unregistering): Released all slaves
[   67.982289][ T7067] lo speed is unknown, defaulting to 1000
[   68.091258][ T5833] Bluetooth: hci1: command tx timeout
[   68.108304][ T5693] hsr_slave_0: left promiscuous mode
[   68.110468][ T5693] hsr_slave_1: left promiscuous mode
[   68.116207][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.118515][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.122914][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.126657][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.141607][ T5693] veth1_macvtap: left promiscuous mode
[   68.143382][ T5693] veth0_macvtap: left promiscuous mode
[   68.153172][ T5693] veth1_vlan: left promiscuous mode
[   68.164199][ T5693] veth0_vlan: left promiscuous mode
[   68.256644][ T7086] netlink: ct family unspecified
[   68.258294][ T7086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.441796][ T5693] team0 (unregistering): Port device team_slave_1 removed
[   68.462422][ T5693] team0 (unregistering): Port device team_slave_0 removed
[   68.701305][ T6982] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.707918][ T6982] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.711894][ T6982] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.716811][ T6982] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.767085][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.767474][ T7100] netlink: 'syz.1.288': attribute type 1 has an invalid length.
[   68.779465][ T6982] 8021q: adding VLAN 0 to HW filter on device team0
[   68.785467][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.787846][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.804270][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.806583][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.822879][ T6982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.828484][ T6982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.942377][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.983502][ T6982] veth0_vlan: entered promiscuous mode
[   68.988763][ T6982] veth1_vlan: entered promiscuous mode
[   69.027678][ T6982] veth0_macvtap: entered promiscuous mode
[   69.032007][ T6982] veth1_macvtap: entered promiscuous mode
[   69.033662][ T7111] syz.1.291: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   69.042872][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.046712][ T7111] CPU: 0 UID: 0 PID: 7111 Comm: syz.1.291 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   69.046723][ T7111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.046728][ T7111] Call Trace:
[   69.046731][ T7111]  <TASK>
[   69.046735][ T7111]  dump_stack_lvl+0x189/0x250
[   69.046749][ T7111]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.046759][ T7111]  ? __pfx__printk+0x10/0x10
[   69.046769][ T7111]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   69.046779][ T7111]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   69.046790][ T7111]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   69.046801][ T7111]  warn_alloc+0x214/0x310
[   69.046811][ T7111]  ? stack_depot_save_flags+0x40/0x900
[   69.046823][ T7111]  ? __pfx_warn_alloc+0x10/0x10
[   69.046833][ T7111]  ? kasan_save_track+0x4f/0x80
[   69.046841][ T7111]  ? xskq_create+0x56/0x170
[   69.046852][ T7111]  ? xsk_init_queue+0xb0/0x110
[   69.046861][ T7111]  ? xsk_setsockopt+0x43f/0x710
[   69.046870][ T7111]  ? do_sock_setsockopt+0x25a/0x3e0
[   69.046878][ T7111]  ? __x64_sys_setsockopt+0x18b/0x220
[   69.046886][ T7111]  ? do_syscall_64+0xfa/0x3b0
[   69.046892][ T7111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.046902][ T7111]  __vmalloc_node_range_noprof+0x125/0x12f0
[   69.046923][ T7111]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   69.046935][ T7111]  ? __kasan_kmalloc+0x93/0xb0
[   69.046945][ T7111]  vmalloc_user_noprof+0xad/0xf0
[   69.046955][ T7111]  ? xskq_create+0xbf/0x170
[   69.046965][ T7111]  xskq_create+0xbf/0x170
[   69.046978][ T7111]  xsk_init_queue+0xb0/0x110
[   69.046989][ T7111]  xsk_setsockopt+0x43f/0x710
[   69.047005][ T7111]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.047014][ T7111]  ? __lock_acquire+0xab9/0xd20
[   69.047026][ T7111]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   69.047037][ T7111]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.047047][ T7111]  do_sock_setsockopt+0x25a/0x3e0
[   69.047057][ T7111]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   69.047067][ T7111]  ? __fget_files+0x2a/0x420
[   69.047080][ T7111]  __x64_sys_setsockopt+0x18b/0x220
[   69.047093][ T7111]  do_syscall_64+0xfa/0x3b0
[   69.047099][ T7111]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.047110][ T7111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.047139][ T7111]  ? exc_page_fault+0x9f/0xf0
[   69.047151][ T7111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.047158][ T7111] RIP: 0033:0x7f3ff058e929
[   69.047167][ T7111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.047173][ T7111] RSP: 002b:00007f3ff13e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   69.047182][ T7111] RAX: ffffffffffffffda RBX: 00007f3ff07b5fa0 RCX: 00007f3ff058e929
[   69.047188][ T7111] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   69.047192][ T7111] RBP: 00007f3ff0610b39 R08: 0000000000000004 R09: 0000000000000000
[   69.047197][ T7111] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.047201][ T7111] R13: 0000000000000000 R14: 00007f3ff07b5fa0 R15: 00007ffc442a0398
[   69.047213][ T7111]  </TASK>
[   69.047216][ T7111] Mem-Info:
[   69.084544][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.086141][ T7111] active_anon:5367 inactive_anon:0 isolated_anon:0
[   69.086141][ T7111]  active_file:1066 inactive_file:38213 isolated_file:0
[   69.086141][ T7111]  unevictable:1768 dirty:1526 writeback:0
[   69.086141][ T7111]  slab_reclaimable:9342 slab_unreclaimable:65191
[   69.086141][ T7111]  mapped:18255 shmem:2457 pagetables:968
[   69.086141][ T7111]  sec_pagetables:0 bounce:0
[   69.086141][ T7111]  kernel_misc_reclaimable:0
[   69.086141][ T7111]  free:285663 free_pcp:20326 free_cma:0
[   69.091889][ T6982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.093618][ T7111] Node 0 active_anon:14976kB inactive_anon:0kB active_file:2788kB inactive_file:17912kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39896kB dirty:3972kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5744kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.094877][ T6982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.096103][ T7111] Node 1 active_anon:6492kB inactive_anon:0kB active_file:1476kB inactive_file:134940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33124kB dirty:2132kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6132kB pagetables:1256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.097203][ T6982] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.098335][ T7111] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   69.098361][ T7111] lowmem_reserve[]: 0 812 812 812 812
[   69.098378][ T7111] Node 0 
[   69.100181][ T6982] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.101599][ T7111] DMA32 free:409332kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14976kB inactive_anon:0kB active_file:2788kB inactive_file:17912kB unevictable:3536kB writepending:3972kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:39828kB local_pcp:21356kB free_cma:0kB
[   69.215021][ T7111] lowmem_reserve[]: 0 0 0 0 0
[   69.216566][ T7111] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   69.274266][ T7111] lowmem_reserve[]: 0 0 854 854 854
[   69.275920][ T7111] Node 1 Normal free:257868kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6492kB inactive_anon:0kB active_file:1476kB inactive_file:134940kB unevictable:3536kB writepending:2132kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41088kB local_pcp:18976kB free_cma:0kB
[   69.278696][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.289521][ T7111] lowmem_reserve[]: 0 0 0 0 0
[   69.291091][ T7111] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   69.304294][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.309306][ T7118] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   69.312966][ T5869] IPVS: starting estimator thread 0...
[   69.315411][ T7111] Node 0 DMA32: 355*4kB (M) 125*8kB (ME) 103*16kB (ME) 22*32kB (UME) 15*64kB (ME) 7*128kB (UM) 15*256kB (UM) 12*512kB (UME) 9*1024kB (UME) 5*2048kB (UME) 91*4096kB (M) = 408804kB
[   69.321327][ T7111] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   69.326860][ T7111] Node 1 Normal: 437*4kB (UME) 120*8kB (UM) 324*16kB (UME) 243*32kB (UME) 60*64kB (UM) 23*128kB (UME) 26*256kB (UME) 9*512kB (UME) 8*1024kB (ME) 3*2048kB (M) 51*4096kB (UM) = 256948kB
[   69.332688][ T7111] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.335772][ T7111] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.336975][  T733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.338813][ T7111] 41738 total pagecache pages
[   69.341291][  T733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.342688][ T7111] 0 pages in swap cache
[   69.347222][ T7111] Free swap  = 124996kB
[   69.348619][ T7111] Total swap = 124996kB
[   69.350246][ T7111] 786301 pages RAM
[   69.351460][ T7111] 0 pages HighMem/MovableOnly
[   69.352942][ T7111] 241085 pages reserved
[   69.354731][ T7111] 0 pages cma reserved
[   69.389449][ T7111] Bluetooth: MGMT ver 1.23
[   69.392528][ T7116] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   69.404149][ T7122] IPVS: using max 78 ests per chain, 187200 per kthread
[   69.625222][ T7132] __nla_validate_parse: 8 callbacks suppressed
[   69.625231][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.295'.
[   70.498947][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'.
[   70.530341][ T7148] netlink: 'syz.1.302': attribute type 1 has an invalid length.
[   70.543732][ T7148] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.551387][ T7148] bond1: (slave ip6gretap1): making interface the new active one
[   70.555213][ T7148] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   70.765316][ T7162] netlink: 'syz.1.305': attribute type 23 has an invalid length.
[   70.810227][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.812956][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.872991][ T7175] netlink: 64 bytes leftover after parsing attributes in process `syz.0.310'.
[   70.909734][ T7178] 8021q: VLANs not supported on bond0
[   70.912965][ T7178] netlink: 68 bytes leftover after parsing attributes in process `syz.0.311'.
[   70.943716][ T7180] bridge_slave_0: left allmulticast mode
[   70.946835][ T7180] bridge_slave_0: left promiscuous mode
[   70.948831][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.952625][ T7180] bridge_slave_1: left allmulticast mode
[   70.963019][ T7180] bridge_slave_1: left promiscuous mode
[   70.967836][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.972463][ T7180] bond0: (slave bond_slave_0): Releasing backup interface
[   70.979495][ T7180] bond0: (slave bond_slave_1): Releasing backup interface
[   70.992379][ T7180] team0: Port device team_slave_0 removed
[   70.999500][ T7180] team0: Port device team_slave_1 removed
[   71.001801][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.005558][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.023393][ T7180] bond1: (slave ip6gretap1): Releasing active interface
[   71.151207][ T7190] bridge0: entered allmulticast mode
[   71.157162][ T7190] pim6reg: entered allmulticast mode
[   71.159730][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   71.169546][ T7190] bridge0 (unregistering): left allmulticast mode
[   71.282894][ T7192] x_tables: duplicate underflow at hook 2
[   71.363805][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.444262][ T5833] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   71.942925][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'.
[   71.997498][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.000588][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.003737][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.014752][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.018787][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.078049][ T7215] lo speed is unknown, defaulting to 1000
[   72.152714][ T7221] netlink: 596 bytes leftover after parsing attributes in process `syz.0.322'.
[   72.175470][ T7215] chnl_net:caif_netlink_parms(): no params data found
[   72.223158][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.226796][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.229267][ T7215] bridge_slave_0: entered allmulticast mode
[   72.231897][ T7215] bridge_slave_0: entered promiscuous mode
[   72.236150][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.238634][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.241173][ T7215] bridge_slave_1: entered allmulticast mode
[   72.243887][ T7215] bridge_slave_1: entered promiscuous mode
[   72.267384][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.272060][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.293867][ T7215] team0: Port device team_slave_0 added
[   72.298209][ T7215] team0: Port device team_slave_1 added
[   72.323570][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.329608][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.339679][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.349461][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.351862][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.361136][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.403773][ T7215] hsr_slave_0: entered promiscuous mode
[   72.408614][ T7215] hsr_slave_1: entered promiscuous mode
[   72.516074][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'.
[   72.520985][ T7237] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   72.608568][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'.
[   72.806851][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'.
[   73.022356][ T7290] netlink: 'syz.1.343': attribute type 4 has an invalid length.
[   73.079480][ T7296] sctp: [Deprecated]: syz.1.345 (pid 7296) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.079480][ T7296] Use struct sctp_sack_info instead
[   73.265771][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.307689][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.319077][ T7323] macsec2: entered promiscuous mode
[   73.320752][ T7323] macsec2: entered allmulticast mode
[   73.358679][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.506805][   T12] bridge_slave_1: left allmulticast mode
[   73.508667][   T12] bridge_slave_1: left promiscuous mode
[   73.510637][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.528169][   T12] bridge_slave_0: left allmulticast mode
[   73.530015][   T12] bridge_slave_0: left promiscuous mode
[   73.532037][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.747523][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.752165][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.758223][   T12] bond0 (unregistering): Released all slaves
[   74.057995][   T12] hsr_slave_0: left promiscuous mode
[   74.061530][   T12] hsr_slave_1: left promiscuous mode
[   74.074337][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.075144][ T7363] netlink: 'syz.1.364': attribute type 3 has an invalid length.
[   74.077382][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.084594][ T5836] Bluetooth: hci1: command tx timeout
[   74.089650][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.092813][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.112254][   T12] veth1_macvtap: left promiscuous mode
[   74.114532][   T12] veth0_macvtap: left promiscuous mode
[   74.116884][   T12] veth1_vlan: left promiscuous mode
[   74.119240][   T12] veth0_vlan: left promiscuous mode
[   74.351430][   T12] team0 (unregistering): Port device team_slave_1 removed
[   74.371368][   T12] team0 (unregistering): Port device team_slave_0 removed
[   74.609430][ T7215] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.621512][ T7215] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.651566][ T7215] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.678992][ T7215] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.682362][ T7375] netlink: 'syz.0.367': attribute type 39 has an invalid length.
[   74.716829][ T7383] __nla_validate_parse: 16 callbacks suppressed
[   74.716838][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'.
[   74.789044][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'.
[   74.816150][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.819243][ T7392] netlink: 'syz.1.369': attribute type 6 has an invalid length.
[   74.822629][ T7392] netlink: 'syz.1.369': attribute type 7 has an invalid length.
[   74.826379][ T7392] netlink: 'syz.1.369': attribute type 8 has an invalid length.
[   74.846288][ T7215] 8021q: adding VLAN 0 to HW filter on device team0
[   74.857315][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.859620][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.876032][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.878738][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.972334][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'.
[   75.011207][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.039213][ T7215] veth0_vlan: entered promiscuous mode
[   75.048744][ T7215] veth1_vlan: entered promiscuous mode
[   75.079850][ T7215] veth0_macvtap: entered promiscuous mode
[   75.092124][ T7215] veth1_macvtap: entered promiscuous mode
[   75.109779][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.116933][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.122939][ T7215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.126377][ T7215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.129207][ T7215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.132016][ T7215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.180067][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.185413][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.201514][ T4661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.204813][ T4661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.220503][ T7420] netlink: 112 bytes leftover after parsing attributes in process `syz.1.375'.
[   75.227566][ T7420] nftables ruleset with unbound set
[   75.299888][ T7424] netlink: 'syz.1.377': attribute type 4 has an invalid length.
[   75.302520][ T7424] netlink: 17 bytes leftover after parsing attributes in process `syz.1.377'.
[   75.468381][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'.
[   75.516506][ T7445] netlink: 'syz.1.385': attribute type 12 has an invalid length.
[   75.518966][ T7445] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.385'.
[   75.553229][ T7449] IPVS: stopping backup sync thread 7237 ...
[   75.701318][ T7469] xt_TPROXY: Can be used only with -p tcp or -p udp
[   75.716572][ T7472] netlink: 452 bytes leftover after parsing attributes in process `syz.1.393'.
[   75.788235][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[   75.940939][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'.
[   76.570259][ T7551] lo speed is unknown, defaulting to 1000
[   77.037210][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.688931][ T7584] bridge0: port 1(ipvlan2) entered blocking state
[   77.691216][ T7584] bridge0: port 1(ipvlan2) entered disabled state
[   77.693351][ T7584] ipvlan2: entered allmulticast mode
[   77.696750][ T7584] bridge0: entered allmulticast mode
[   77.699571][ T7584] ipvlan2: left allmulticast mode
[   77.701434][ T7584] bridge0: left allmulticast mode
[   77.747395][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.750663][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.755337][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.758664][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.763007][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.798642][ T7588] lo speed is unknown, defaulting to 1000
[   77.892310][ T7588] chnl_net:caif_netlink_parms(): no params data found
[   77.924488][ T7604] netlink: 'syz.1.427': attribute type 4 has an invalid length.
[   77.949314][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.952084][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.964158][ T7588] bridge_slave_0: entered allmulticast mode
[   77.968267][ T7588] bridge_slave_0: entered promiscuous mode
[   77.971285][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.973611][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.976395][ T7588] bridge_slave_1: entered allmulticast mode
[   77.979171][ T7588] bridge_slave_1: entered promiscuous mode
[   78.000072][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.007892][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.030019][ T7588] team0: Port device team_slave_0 added
[   78.033324][ T7588] team0: Port device team_slave_1 added
[   78.052012][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.055166][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.063728][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.073050][ T7615] erspan0: entered promiscuous mode
[   78.076365][ T7615] batman_adv: batadv0: Adding interface: macvlan2
[   78.078553][ T7615] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.086971][ T7615] batman_adv: batadv0: Interface activated: macvlan2
[   78.090430][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.092582][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.101209][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.130298][ T7588] hsr_slave_0: entered promiscuous mode
[   78.132590][ T7588] hsr_slave_1: entered promiscuous mode
[   78.135219][ T7588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.137874][ T7588] Cannot create hsr debugfs directory
[   78.260527][ T7628] netlink: 'syz.1.435': attribute type 3 has an invalid length.
[   78.386054][ T7635] siw: device registration error -23
[   78.416597][ T7639] netlink: 'syz.1.439': attribute type 1 has an invalid length.
[   78.439019][ T7639] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   78.443752][ T7639] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   78.495988][ T7645] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   78.600321][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.617009][ T7656] netlink: 'syz.1.444': attribute type 29 has an invalid length.
[   78.649790][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.696895][ T7660] netlink: 'syz.1.445': attribute type 11 has an invalid length.
[   78.704172][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.795208][ T5870] bridge_slave_1: left allmulticast mode
[   78.797616][ T5870] bridge_slave_1: left promiscuous mode
[   78.801462][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.807244][ T5870] bridge_slave_0: left allmulticast mode
[   78.809336][ T5870] bridge_slave_0: left promiscuous mode
[   78.811185][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.018930][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.022971][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.026867][ T5870] bond0 (unregistering): Released all slaves
[   79.202753][ T7683] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   79.213718][ T7683] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   79.310219][ T5870] hsr_slave_0: left promiscuous mode
[   79.312439][ T5870] hsr_slave_1: left promiscuous mode
[   79.316877][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.319850][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.322542][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.326884][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.343990][ T5870] veth1_macvtap: left promiscuous mode
[   79.348322][ T5870] veth0_macvtap: left promiscuous mode
[   79.350259][ T5870] veth1_vlan: left promiscuous mode
[   79.352527][ T5870] veth0_vlan: left promiscuous mode
[   79.583763][ T5870] team0 (unregistering): Port device team_slave_1 removed
[   79.606511][ T5870] team0 (unregistering): Port device team_slave_0 removed
[   79.854406][ T5833] Bluetooth: hci1: command tx timeout
[   79.857203][ T7697] __nla_validate_parse: 11 callbacks suppressed
[   79.857211][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   79.962968][ T7588] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.993311][ T7588] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.012311][ T7588] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.040542][ T7588] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.070251][ T7711] lo speed is unknown, defaulting to 1000
[   80.131590][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'.
[   80.191910][ T7588] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.207748][ T7588] 8021q: adding VLAN 0 to HW filter on device team0
[   80.221933][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.224365][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.250954][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.253350][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.327267][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'.
[   80.378593][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.0.465'.
[   80.391173][ T7588] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.420660][ T7588] veth0_vlan: entered promiscuous mode
[   80.436380][ T7588] veth1_vlan: entered promiscuous mode
[   80.449211][ T7588] veth0_macvtap: entered promiscuous mode
[   80.464845][ T7588] veth1_macvtap: entered promiscuous mode
[   80.480434][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.488575][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.493188][ T7588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.498585][ T7588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.502671][ T7588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.506285][ T7588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.555039][  T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.559285][  T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.572948][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.576427][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.641114][ T7747] lo speed is unknown, defaulting to 1000
[   80.777109][ T7754] netlink: 'syz.0.469': attribute type 8 has an invalid length.
[   80.779613][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[   80.892512][ T7764] netlink: 788 bytes leftover after parsing attributes in process `syz.0.472'.
[   80.910840][ T7765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.472'.
[   80.922368][ T7765] batadv_slave_0: entered promiscuous mode
[   81.057178][   T10] cfg80211: failed to load regulatory.db
[   81.137139][ T7780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.478'.
[   81.140716][ T7780] netlink: 136 bytes leftover after parsing attributes in process `syz.1.478'.
[   81.199459][ T7786] batadv_slave_1: entered promiscuous mode
[   81.201840][ T7786] batadv_slave_1: left promiscuous mode
[   81.370155][ T7797] syz.0.483: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.384020][ T7797] CPU: 1 UID: 0 PID: 7797 Comm: syz.0.483 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   81.384033][ T7797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.384037][ T7797] Call Trace:
[   81.384041][ T7797]  <TASK>
[   81.384045][ T7797]  dump_stack_lvl+0x189/0x250
[   81.384058][ T7797]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.384068][ T7797]  ? __pfx__printk+0x10/0x10
[   81.384098][ T7797]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.384110][ T7797]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.384120][ T7797]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.384131][ T7797]  warn_alloc+0x214/0x310
[   81.384142][ T7797]  ? stack_depot_save_flags+0x40/0x900
[   81.384155][ T7797]  ? __pfx_warn_alloc+0x10/0x10
[   81.384165][ T7797]  ? kasan_save_track+0x4f/0x80
[   81.384173][ T7797]  ? xskq_create+0x56/0x170
[   81.384183][ T7797]  ? xsk_init_queue+0xb0/0x110
[   81.384193][ T7797]  ? xsk_setsockopt+0x43f/0x710
[   81.384201][ T7797]  ? do_sock_setsockopt+0x25a/0x3e0
[   81.384210][ T7797]  ? __x64_sys_setsockopt+0x18b/0x220
[   81.384219][ T7797]  ? do_syscall_64+0xfa/0x3b0
[   81.384225][ T7797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.384235][ T7797]  __vmalloc_node_range_noprof+0x125/0x12f0
[   81.384260][ T7797]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.384270][ T7797]  ? xskq_create+0x56/0x170
[   81.384281][ T7797]  ? __kasan_kmalloc+0x93/0xb0
[   81.384290][ T7797]  vmalloc_user_noprof+0xad/0xf0
[   81.384300][ T7797]  ? xskq_create+0xbf/0x170
[   81.384310][ T7797]  xskq_create+0xbf/0x170
[   81.384341][ T7797]  xsk_init_queue+0xb0/0x110
[   81.384352][ T7797]  xsk_setsockopt+0x43f/0x710
[   81.384363][ T7797]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.384372][ T7797]  ? __lock_acquire+0xab9/0xd20
[   81.384383][ T7797]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   81.384394][ T7797]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.384404][ T7797]  do_sock_setsockopt+0x25a/0x3e0
[   81.384414][ T7797]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   81.384424][ T7797]  ? __fget_files+0x2a/0x420
[   81.384437][ T7797]  __x64_sys_setsockopt+0x18b/0x220
[   81.384450][ T7797]  do_syscall_64+0xfa/0x3b0
[   81.384457][ T7797]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.384468][ T7797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.384475][ T7797]  ? exc_page_fault+0x9f/0xf0
[   81.384486][ T7797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.384492][ T7797] RIP: 0033:0x7f0732d8e929
[   81.384500][ T7797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.384506][ T7797] RSP: 002b:00007f0733bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.384515][ T7797] RAX: ffffffffffffffda RBX: 00007f0732fb5fa0 RCX: 00007f0732d8e929
[   81.384520][ T7797] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   81.384524][ T7797] RBP: 00007f0732e10b39 R08: 0000000000000004 R09: 0000000000000000
[   81.384528][ T7797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.384532][ T7797] R13: 0000000000000000 R14: 00007f0732fb5fa0 R15: 00007ffefd19e448
[   81.384544][ T7797]  </TASK>
[   81.384563][ T7797] Mem-Info:
[   81.486313][ T7797] active_anon:5385 inactive_anon:0 isolated_anon:0
[   81.486313][ T7797]  active_file:1066 inactive_file:38226 isolated_file:0
[   81.486313][ T7797]  unevictable:1768 dirty:41 writeback:0
[   81.486313][ T7797]  slab_reclaimable:9495 slab_unreclaimable:68015
[   81.486313][ T7797]  mapped:18314 shmem:2420 pagetables:983
[   81.486313][ T7797]  sec_pagetables:0 bounce:0
[   81.486313][ T7797]  kernel_misc_reclaimable:0
[   81.486313][ T7797]  free:281058 free_pcp:20119 free_cma:0
[   81.500933][ T7797] Node 0 active_anon:14116kB inactive_anon:0kB active_file:2788kB inactive_file:17928kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24616kB dirty:100kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5924kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.512527][ T7797] Node 1 active_anon:7424kB inactive_anon:0kB active_file:1476kB inactive_file:134976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48640kB dirty:64kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6124kB pagetables:1432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.523552][ T7797] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.533192][ T7797] lowmem_reserve[]: 0 812 812 812 812
[   81.535586][ T7797] Node 0 DMA32 free:435096kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14116kB inactive_anon:0kB active_file:2788kB inactive_file:17928kB unevictable:3536kB writepending:100kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:45208kB local_pcp:20828kB free_cma:0kB
[   81.552699][ T7797] lowmem_reserve[]: 0 0 0 0 0
[   81.558755][ T7809] netlink: 76 bytes leftover after parsing attributes in process `syz.0.483'.
[   81.561636][ T7797] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   81.575565][ T7797] lowmem_reserve[]: 0 0 854 854 854
[   81.582363][ T7797] Node 1 Normal free:215108kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7424kB inactive_anon:0kB active_file:1476kB inactive_file:134976kB unevictable:3536kB writepending:64kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:35336kB local_pcp:19624kB free_cma:0kB
[   81.594569][ T7797] lowmem_reserve[]: 0 0 0 0 0
[   81.597283][ T7797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.601366][ T7797] Node 0 DMA32: 712*4kB (UM) 670*8kB (UME) 401*16kB (UME) 487*32kB (UM) 74*64kB (UM) 31*128kB (UM) 25*256kB (UM) 9*512kB (UM) 9*1024kB (UME) 5*2048kB (UME) 91*4096kB (M) = 442112kB
[   81.608173][ T7797] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   81.613351][ T7797] Node 1 Normal: 67*4kB (UME) 89*8kB (UME) 27*16kB (UME) 248*32kB (UME) 32*64kB (UM) 25*128kB (UME) 19*256kB (UM) 10*512kB (M) 12*1024kB (UME) 3*2048kB (M) 42*4096kB (M) = 215044kB
[   81.619458][ T7797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.622320][ T7797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.625471][ T7797] 41712 total pagecache pages
[   81.626967][ T7797] 0 pages in swap cache
[   81.628321][ T7797] Free swap  = 124996kB
[   81.629796][ T7797] Total swap = 124996kB
[   81.631131][ T7797] 786301 pages RAM
[   81.632369][ T7797] 0 pages HighMem/MovableOnly
[   81.633850][ T7797] 241085 pages reserved
[   81.635582][ T7797] 0 pages cma reserved
[   81.704534][ T7814] nbd1: detected capacity change from 0 to 63
[   81.708657][ T7815] block nbd1: NBD_DISCONNECT
[   81.710882][ T7815] block nbd1: Disconnected due to user request.
[   81.713488][ T7815] block nbd1: shutting down sockets
[   81.715808][    C0] blk_print_req_error: 138 callbacks suppressed
[   81.715817][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.720645][    C0] buffer_io_error: 138 callbacks suppressed
[   81.720650][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[   81.725116][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.727896][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[   81.730323][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.733115][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[   81.735654][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.738472][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[   81.740984][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.743806][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   81.746871][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.749724][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   81.752188][ T5831] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.757925][ T5831] Buffer I/O error on dev nbd1, logical block 2, async page read
[   81.760473][ T5831] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.763344][ T5831] Buffer I/O error on dev nbd1, logical block 3, async page read
[   81.767917][ T5831] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.771264][ T5831] Buffer I/O error on dev nbd1, logical block 0, async page read
[   81.773868][ T5831] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.779126][ T5831] Buffer I/O error on dev nbd1, logical block 1, async page read
[   81.782709][ T5831] ldm_validate_partition_table(): Disk read failed.
[   81.786720][ T5831] Dev nbd1: unable to read RDB block 0
[   81.789610][ T5831]  nbd1: unable to read partition table
[   81.797535][ T5831] ldm_validate_partition_table(): Disk read failed.
[   81.800576][ T5831] Dev nbd1: unable to read RDB block 0
[   81.803251][ T5831]  nbd1: unable to read partition table
[   81.863058][ T7823] syz.1.491 (7823) used greatest stack depth: 19392 bytes left
[   82.195315][ T7803] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   82.296782][ T7850] netlink: 'syz.1.497': attribute type 10 has an invalid length.
[   82.299529][ T7850] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   82.307416][ T7850] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   82.360957][ T7859] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[   82.363803][ T7859] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[   82.367983][ T7859] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[   82.371823][ T7859] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[   82.415935][ T5693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.190425][ T7875] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   83.204025][ T7875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.307575][ T7882] netlink: 'syz.0.507': attribute type 29 has an invalid length.
[   83.311720][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.314991][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.318023][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.322474][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.325779][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.353896][ T7883] lo speed is unknown, defaulting to 1000
[   83.357798][ T7889] lo speed is unknown, defaulting to 1000
[   83.360165][ T7889] lo speed is unknown, defaulting to 1000
[   83.363516][ T7889] lo speed is unknown, defaulting to 1000
[   83.513401][ T7903] netlink: 'syz.0.510': attribute type 4 has an invalid length.
[   83.518015][ T7903] wlan1: mtu less than device minimum
[   83.522874][ T7889] infiniband syz0: set down
[   83.524273][ T7883] chnl_net:caif_netlink_parms(): no params data found
[   83.530504][ T7889] infiniband syz0: added lo
[   83.536878][   T10] lo speed is unknown, defaulting to 1000
[   83.556410][ T7889] RDS/IB: syz0: added
[   83.557995][ T7889] smc: adding ib device syz0 with port count 1
[   83.560613][ T7889] smc:    ib device syz0 port 1 has pnetid 
[   83.564710][   T10] lo speed is unknown, defaulting to 1000
[   83.573252][ T7889] lo speed is unknown, defaulting to 1000
[   83.591532][ T7907] openvswitch: netlink: IP tunnel TTL not specified.
[   83.633093][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.637042][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.639286][ T7883] bridge_slave_0: entered allmulticast mode
[   83.642188][ T7883] bridge_slave_0: entered promiscuous mode
[   83.647456][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.649979][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.652253][ T7883] bridge_slave_1: entered allmulticast mode
[   83.656353][ T7883] bridge_slave_1: entered promiscuous mode
[   83.678942][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.683628][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.694129][ T7889] lo speed is unknown, defaulting to 1000
[   83.766250][ T7883] team0: Port device team_slave_0 added
[   83.771936][ T7883] team0: Port device team_slave_1 added
[   83.796433][ T7889] lo speed is unknown, defaulting to 1000
[   83.805776][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.807989][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.825562][ T7883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.830361][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.832629][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.843123][ T7883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.864306][ T7914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.903322][ T7889] lo speed is unknown, defaulting to 1000
[   83.923432][ T5869] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   83.986256][ T7883] hsr_slave_0: entered promiscuous mode
[   83.995378][ T7883] hsr_slave_1: entered promiscuous mode
[   84.063864][ T5693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.226218][ T5693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.269767][ T5693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.449954][ T5693] bridge_slave_1: left allmulticast mode
[   84.452128][ T5693] bridge_slave_1: left promiscuous mode
[   84.461441][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.473591][ T5693] bridge_slave_0: left allmulticast mode
[   84.479044][ T5693] bridge_slave_0: left promiscuous mode
[   84.480936][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.672884][ T5693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.678492][ T5693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.682135][ T5693] bond0 (unregistering): Released all slaves
[   84.918110][ T7981] lo speed is unknown, defaulting to 1000
[   84.921125][ T7981] lo speed is unknown, defaulting to 1000
[   84.986469][ T7992] __nla_validate_parse: 25 callbacks suppressed
[   84.986482][ T7992] netlink: 68 bytes leftover after parsing attributes in process `syz.1.533'.
[   85.109415][ T7883] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.125955][ T7883] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.140870][ T7883] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.161390][ T7883] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.220203][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'.
[   85.326386][ T5693] hsr_slave_0: left promiscuous mode
[   85.329479][ T5693] hsr_slave_1: left promiscuous mode
[   85.335552][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.337968][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.346005][ T5693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.349116][ T5693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.364434][ T5836] Bluetooth: hci1: command tx timeout
[   85.367344][ T5693] veth1_macvtap: left promiscuous mode
[   85.369134][ T5693] veth0_macvtap: left promiscuous mode
[   85.370976][ T5693] veth1_vlan: left promiscuous mode
[   85.372707][ T5693] veth0_vlan: left promiscuous mode
[   85.658192][ T5693] team0 (unregistering): Port device team_slave_1 removed
[   85.677271][ T5693] team0 (unregistering): Port device team_slave_0 removed
[   85.879743][ T7976] netlink: 'syz.0.531': attribute type 12 has an invalid length.
[   85.890524][ T7991] lo speed is unknown, defaulting to 1000
[   85.979378][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.993790][ T7883] 8021q: adding VLAN 0 to HW filter on device team0
[   85.998965][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.001249][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.010490][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.012755][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.221726][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.254497][   T36] wlan1: Trigger new scan to find an IBSS to join
[   86.256847][   T36] ------------[ cut here ]------------
[   86.258591][   T36] WARNING: CPU: 1 PID: 36 at net/mac80211/scan.c:1228 ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.261802][   T36] Modules linked in:
[   86.264295][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   86.268462][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.271705][   T36] Workqueue: events_unbound cfg80211_wiphy_work
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   86.273748][   T36] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.276267][ T7883] veth0_vlan: entered promiscuous mode
[   86.276267][   T36] Code: e8 17 a8 de f6 eb 05 e8 10 a8 de f6 b8 ea ff ff ff e9 fb f8 ff ff e8 01 a8 de f6 90 0f 0b 90 e9 bb f8 ff ff e8 f3 a7 de f6 90 <0f> 0b 90 eb dd 48 c7 c1 30 25 a2 8f 80 e1 07 80 c1 03 38 c1 0f 8c
[   86.278038][   T36] RSP: 0018:ffffc900006af800 EFLAGS: 00010293
[   86.287018][   T36] RAX: ffffffff8ae18e7d RBX: 0000000000000000 RCX: ffff888105040000
[   86.289558][   T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   86.292091][   T36] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff920000d5eb8
[   86.294837][   T36] R10: dffffc0000000000 R11: fffff520000d5eb9 R12: ffff888032383268
[   86.297318][   T36] R13: ffff888032380e80 R14: dffffc0000000000 R15: 0000000000000c80
[   86.299755][   T36] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   86.302499][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.304743][   T36] CR2: 00007fd5b4c55318 CR3: 0000000108c76000 CR4: 00000000000006f0
[   86.307230][   T36] Call Trace:
[   86.308357][   T36]  <TASK>
[   86.309318][   T36]  ieee80211_ibss_work+0xde7/0x1060
[   86.310919][   T36]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[   86.312735][   T36]  ? ieee80211_iface_work+0xf39/0xfe0
[   86.314570][   T36]  ? rcu_is_watching+0x15/0xb0
[   86.315187][ T7883] veth1_vlan: entered promiscuous mode
[   86.316087][   T36]  cfg80211_wiphy_work+0x2df/0x460
[   86.319474][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   86.321223][   T36]  process_scheduled_works+0xae1/0x17b0
[   86.323499][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[   86.325558][   T36]  worker_thread+0x8a0/0xda0
[   86.327000][   T36]  kthread+0x711/0x8a0
[   86.328313][   T36]  ? __pfx_worker_thread+0x10/0x10
[   86.329917][   T36]  ? __pfx_kthread+0x10/0x10
[   86.331404][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   86.333089][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.333515][ T7883] veth0_macvtap: entered promiscuous mode
[   86.334740][   T36]  ? __pfx_kthread+0x10/0x10
[   86.334754][   T36]  ret_from_fork+0x3fc/0x770
[   86.339502][ T7883] veth1_macvtap: entered promiscuous mode
[   86.341321][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[   86.342993][   T36]  ? __switch_to_asm+0x39/0x70
[   86.344691][   T36]  ? __switch_to_asm+0x33/0x70
[   86.345475][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.346259][   T36]  ? __pfx_kthread+0x10/0x10
[   86.350097][   T36]  ret_from_fork_asm+0x1a/0x30
[   86.351667][   T36]  </TASK>
[   86.351925][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.352675][   T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   86.352684][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   86.352693][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.352698][   T36] Workqueue: events_unbound cfg80211_wiphy_work
[   86.352709][   T36] Call Trace:
[   86.352713][   T36]  <TASK>
[   86.352717][   T36]  dump_stack_lvl+0x99/0x250
[   86.352726][   T36]  ? __asan_memcpy+0x40/0x70
[   86.352734][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.352743][   T36]  ? __pfx__printk+0x10/0x10
[   86.352757][   T36]  panic+0x2db/0x790
[   86.352768][   T36]  ? __pfx_panic+0x10/0x10
[   86.352775][   T36]  ? show_trace_log_lvl+0x4fb/0x550
[   86.352787][   T36]  ? ret_from_fork_asm+0x1a/0x30
[   86.352798][   T36]  __warn+0x31b/0x4b0
[   86.352805][   T36]  ? ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.352817][   T36]  ? ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.352828][   T36]  report_bug+0x2be/0x4f0
[   86.352838][   T36]  ? ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.352849][   T36]  ? ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.352859][   T36]  ? ieee80211_request_ibss_scan+0x830/0x8b0
[   86.352870][   T36]  handle_bug+0x84/0x160
[   86.352878][   T36]  exc_invalid_op+0x1a/0x50
[   86.352886][   T36]  asm_exc_invalid_op+0x1a/0x20
[   86.352893][   T36] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0
[   86.352904][   T36] Code: e8 17 a8 de f6 eb 05 e8 10 a8 de f6 b8 ea ff ff ff e9 fb f8 ff ff e8 01 a8 de f6 90 0f 0b 90 e9 bb f8 ff ff e8 f3 a7 de f6 90 <0f> 0b 90 eb dd 48 c7 c1 30 25 a2 8f 80 e1 07 80 c1 03 38 c1 0f 8c
[   86.352910][   T36] RSP: 0018:ffffc900006af800 EFLAGS: 00010293
[   86.352917][   T36] RAX: ffffffff8ae18e7d RBX: 0000000000000000 RCX: ffff888105040000
[   86.352922][   T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   86.352926][   T36] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff920000d5eb8
[   86.352930][   T36] R10: dffffc0000000000 R11: fffff520000d5eb9 R12: ffff888032383268
[   86.352936][   T36] R13: ffff888032380e80 R14: dffffc0000000000 R15: 0000000000000c80
[   86.352944][   T36]  ? ieee80211_request_ibss_scan+0x82d/0x8b0
[   86.352966][   T36]  ieee80211_ibss_work+0xde7/0x1060
[   86.352979][   T36]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[   86.352994][   T36]  ? ieee80211_iface_work+0xf39/0xfe0
[   86.353001][   T36]  ? rcu_is_watching+0x15/0xb0
[   86.353012][   T36]  cfg80211_wiphy_work+0x2df/0x460
[   86.353021][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[   86.353029][   T36]  process_scheduled_works+0xae1/0x17b0
[   86.353047][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[   86.353061][   T36]  worker_thread+0x8a0/0xda0
[   86.353100][   T36]  kthread+0x711/0x8a0
[   86.353112][   T36]  ? __pfx_worker_thread+0x10/0x10
[   86.353120][   T36]  ? __pfx_kthread+0x10/0x10
[   86.353131][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[   86.353141][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.353151][   T36]  ? __pfx_kthread+0x10/0x10
[   86.353161][   T36]  ret_from_fork+0x3fc/0x770
[   86.353171][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[   86.353181][   T36]  ? __switch_to_asm+0x39/0x70
[   86.353190][   T36]  ? __switch_to_asm+0x33/0x70
[   86.353199][   T36]  ? __pfx_kthread+0x10/0x10
[   86.353209][   T36]  ret_from_fork_asm+0x1a/0x30
[   86.353224][   T36]  </TASK>
[   86.355605][   T36] Kernel Offset: disabled

VM DIAGNOSIS:
20:36:58  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11027ffde01 RBX=ffff8881051f5c80 RCX=ffffffff82044073 RDX=0000000000000008
RSI=0000000000000000 RDI=ffffe8ffffc2cb88 RBP=0000000000000000 RSP=ffffc9000240efc0
R8 =ffffe8ffffc2cb8f R9 =1ffffd1ffff85971 R10=dffffc0000000000 R11=fffff91ffff85972
R12=1ffffffff1b77e60 R13=000000000002cb88 R14=0000000000000001 R15=ffffe8ffffc2cb88
RIP=ffffffff8223bc21 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000106950000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000000000ff 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 0000ff0000000000 XMM05=0000000000000000 00007fd124611b1f
XMM06=0000000000000000 00007fd124611b19 XMM07=0000000000000000 00007fd124611b2d
XMM08=0000000000000000 00007fd124611bb3 XMM09=0000000000000000 00007fd124611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900006aefb0
R8 =ffff888107d38237 R9 =1ffff11020fa7046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9881 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd5b4c55318 CR3=0000000108c76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3ff0611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
