last executing test programs:

17.880874299s ago: executing program 1 (id=1147):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

17.879384606s ago: executing program 1 (id=1149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000001c0)={r3, r3, 0x7, 0x0, 0x0, 0x7, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 'syz0\x00'})
ppoll(&(0x7f0000000d40)=[{r2, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
socket$inet6(0xa, 0x80002, 0x88) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) (async)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000001c0)={r3, r3, 0x7, 0x0, 0x0, 0x7, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 'syz0\x00'}) (async)
ppoll(&(0x7f0000000d40)=[{r2, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) (async)

17.753680581s ago: executing program 1 (id=1150):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2}, 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000180)={0x6, 'nicvf0\x00', {0x2ef}, 0x59})

17.69278473s ago: executing program 1 (id=1153):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff000000000000004f173d505e2ae6277949f26eb59ac4340ab66364476cd752e8a8e3ff14baec7bccb4d229c6a49162d5de2c9383c8bff91d8df5243954b72f8b5c1043f2163e5136e11e74f7e6a768c68a01ce98d8d4f1a825206e869f7a98495d30d3fdac29ff5324f2776fbf417e3b4476db3cf345dabcafb7a9a05cdd52ee40a33fa2851a33", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = gettid()
sendmsg$unix(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000000000000300000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000100)}], 0x3)
syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8080)
setsockopt$sock_timeval(r12, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7fff, 0x2}}}}]}, 0x44}}, 0x4004800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x9}, {0x58}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

17.183441571s ago: executing program 1 (id=1161):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket(0x25, 0x5, 0x3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x4085)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2e0, 0x30, 0x4, 0x70bd25, 0x25dfdbff, {}, [{0x4}, {0x2c8, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1d4, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1a6, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x78, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x4d, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a3e65a09e57be964fc0687b627bbda1f8bb6cac0200000000000000323e932cbec11bfdac6700"/73}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r2 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/115, 0x73}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/37, 0x25}, {&(0x7f0000000940)=""/62, 0x3e}, {&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/94, 0x5e}, {&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000b40)=""/90, 0x5a}], 0x8}, 0xcf}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/69, 0x45}, {&(0x7f0000000cc0)=""/36, 0x24}, {&(0x7f0000000d00)=""/150, 0x96}, {&(0x7f0000000dc0)=""/37, 0x25}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/28, 0x1c}, {&(0x7f00000032c0)=""/215, 0xd7}], 0x8, &(0x7f00000033c0)=""/71, 0x47}, 0x1}, {{&(0x7f0000003440)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/200, 0xc8}], 0x1}, 0x1}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003800)=""/210, 0xd2}, {&(0x7f0000003680)=""/82, 0x52}, {&(0x7f0000003740)=""/126, 0x7e}, {&(0x7f0000003900)=""/61, 0x3d}, {&(0x7f0000003940)=""/206, 0xce}, {&(0x7f0000003a40)=""/244, 0xf4}], 0x6, &(0x7f0000003bc0)=""/119, 0x77}, 0x4}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003cc0)=""/60, 0x3c}, {&(0x7f0000003d00)=""/17, 0x11}], 0x2, &(0x7f0000003d80)=""/131, 0x83}, 0x3}, {{&(0x7f0000003e40), 0x80, &(0x7f0000003f80)=[{&(0x7f0000003ec0)=""/159, 0x9f}], 0x1, &(0x7f0000003fc0)=""/190, 0xbe}, 0x1}, {{&(0x7f0000004080)=@hci, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004100)=""/140, 0x8c}, {&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/154, 0x9a}, {&(0x7f0000004300)=""/188, 0xbc}, {&(0x7f00000043c0)=""/49, 0x31}, {&(0x7f0000004400)=""/174, 0xae}], 0x6, &(0x7f0000004540)=""/115, 0x73}, 0x7}], 0x7, 0x10060, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0)

10.778951073s ago: executing program 1 (id=1161):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket(0x25, 0x5, 0x3)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000050}, 0x4085)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2e0, 0x30, 0x4, 0x70bd25, 0x25dfdbff, {}, [{0x4}, {0x2c8, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1d4, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1a6, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x78, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x4d, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a3e65a09e57be964fc0687b627bbda1f8bb6cac0200000000000000323e932cbec11bfdac6700"/73}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r2 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r2, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/115, 0x73}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/37, 0x25}, {&(0x7f0000000940)=""/62, 0x3e}, {&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/94, 0x5e}, {&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000b40)=""/90, 0x5a}], 0x8}, 0xcf}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/69, 0x45}, {&(0x7f0000000cc0)=""/36, 0x24}, {&(0x7f0000000d00)=""/150, 0x96}, {&(0x7f0000000dc0)=""/37, 0x25}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/162, 0xa2}, {&(0x7f0000000f00)=""/28, 0x1c}, {&(0x7f00000032c0)=""/215, 0xd7}], 0x8, &(0x7f00000033c0)=""/71, 0x47}, 0x1}, {{&(0x7f0000003440)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000034c0)=""/200, 0xc8}], 0x1}, 0x1}, {{&(0x7f0000003600)=@phonet, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003800)=""/210, 0xd2}, {&(0x7f0000003680)=""/82, 0x52}, {&(0x7f0000003740)=""/126, 0x7e}, {&(0x7f0000003900)=""/61, 0x3d}, {&(0x7f0000003940)=""/206, 0xce}, {&(0x7f0000003a40)=""/244, 0xf4}], 0x6, &(0x7f0000003bc0)=""/119, 0x77}, 0x4}, {{&(0x7f0000003c40)=@rc, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003cc0)=""/60, 0x3c}, {&(0x7f0000003d00)=""/17, 0x11}], 0x2, &(0x7f0000003d80)=""/131, 0x83}, 0x3}, {{&(0x7f0000003e40), 0x80, &(0x7f0000003f80)=[{&(0x7f0000003ec0)=""/159, 0x9f}], 0x1, &(0x7f0000003fc0)=""/190, 0xbe}, 0x1}, {{&(0x7f0000004080)=@hci, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004100)=""/140, 0x8c}, {&(0x7f00000041c0)=""/83, 0x53}, {&(0x7f0000004240)=""/154, 0x9a}, {&(0x7f0000004300)=""/188, 0xbc}, {&(0x7f00000043c0)=""/49, 0x31}, {&(0x7f0000004400)=""/174, 0xae}], 0x6, &(0x7f0000004540)=""/115, 0x73}, 0x7}], 0x7, 0x10060, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10)
recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0)

3.261801626s ago: executing program 2 (id=1270):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095", @ANYRESDEC=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="349df95815b5cb42dcc23526d80208aabac4fb397b958945fc19b93d31b2d2178bf40fba28fcf4ff46b1d83c00"/73, @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r6, 0x2f, 0x2010, 0x4}, 0x20)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x2, 0x3, 0xc3, 0x3, 0x4, 0x6]}]}, 0x60}}, 0x40001)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000001010100000000000000000200000204001640440001801400018008000100e000000108000200e00000012c0001801400030000000000000000000000ffffffffffffbbb94ab2bb5a5569dce5ad77853b14000400ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820)
sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x54, 0x30, 0x12f, 0x0, 0x25dfdbfd, {}, [{0x40, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r13, @ANYBLOB="00000000000000001c001a80080002801100e500080000003e120000080002"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600060000000800090001000000050007"], 0x44}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000600000000", @ANYRES32=0x1, @ANYBLOB="01000100"/20, @ANYRES32=r13, @ANYRES32, @ANYBLOB="04000000020000000400"/28], 0x50)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
pwrite64(r14, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff)

3.202583142s ago: executing program 2 (id=1271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x39, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
write$bt_hci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe)
sendto$phonet(r4, &(0x7f0000000100)="50e30848af6271fadc6e3efaa1a251ae561f8b21f97be0c934bddb26f3db03610b1305092c5ee68da3d307e2d891df51dc678ecfbe7444c496eb0ba04500feaa5d7dc065dae2f2bd81bc13e25740ce26b05006f8ec75d1c7f65588b8c8ddf115f8c399c54b381701b36606810f56d1ed16e3a6730a79e67452bf0f88e748de67a70f8b5a6b9b0531390086e784af9533d164d80ec4e4a8c7a0", 0x99, 0x6000090, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)

3.200628396s ago: executing program 0 (id=1272):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000009b000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0xfeff, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x4c}}, 0x0)
r8 = openat$cgroup_ro(r0, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bind$bt_sco(r8, &(0x7f00000001c0)={0x1f, @none}, 0x8)
write(r2, &(0x7f00000002c0)="03feba85", 0x4)
r9 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$NS_GET_PARENT(r9, 0xb702, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x400448de, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r14, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}}, 0x4044000)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.199022132s ago: executing program 2 (id=1273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0xffffffff, {{0xa, 0x4e22, 0x7fffffff, @remote, 0xffffff81}}}, 0x88)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000188ffffff0000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

231.260598ms ago: executing program 2 (id=1274):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4)

141.174559ms ago: executing program 0 (id=1275):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

140.589166ms ago: executing program 2 (id=1276):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000400040000000000000000000000850000008a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

138.515791ms ago: executing program 0 (id=1277):
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x0, 0x6}}}}]}, 0x44}}, 0x4010)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000680)={0x44, r4, 0x1, 0x70bd29, 0x25dfdc02, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000980)=r7, 0x4)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="280000001814010000000000000000000800030000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x24000000)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0)
socket$key(0xf, 0x3, 0x2)

82.232956ms ago: executing program 2 (id=1278):
socket$inet6(0xa, 0x4, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x5c, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x0, 0x8, "12f6b288ca575babe5d3d0189dd08d1535993ff98a843cad6f0ae11ef0a2852e02661f25b61e21c65b0ec8d743b6cb099161aa313df65ab3f82192e80ba4d9a6bbdaf9b56c104c11541a0aefbe587e71b0a47c11d5c5cb92de042210bd5e1a740ead0ef7da46659e3523a6c0b6cc0eab7ebd580d6813b4d68bf4c001e1ac53fd8011dda98926e3f07e9d81aaca2c80b5285878e7a67e08c2e1566a218a643333a51c7b0e5096e0b5206acc925729843638dd0f0c763d21e07477d1c0a1ff62fd412cbc9ec70f3020271b48bada9bf1305c23678933850fd278941e0d"}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x44)
unshare(0x22020600)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f)
connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r3 = socket$inet6(0xa, 0x3, 0x7)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006c00000018011ca8f79b000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8011)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b4"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa203000008000000b704000000000700850000000100"/61], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)

81.647471ms ago: executing program 0 (id=1279):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6759}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5a06}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004004)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x101, 0x5, 0x2, 0x3ff, 0x397]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffe01}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x6]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000800)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20000004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x38}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xef}]}}}]}, 0x40}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4000)

1.33357ms ago: executing program 0 (id=1280):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24)

0s ago: executing program 0 (id=1281):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010000000000080007"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd6, &(0x7f0000000380)=""/214}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010000000000080007"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd6, &(0x7f0000000380)=""/214}, 0x90) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57847' (ED25519) to the list of known hosts.
syzkaller login: [   55.749750][ T5799] cgroup: Unknown subsys name 'net'
[   55.878606][ T5799] cgroup: Unknown subsys name 'cpuset'
[   55.884584][ T5799] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.662687][ T5799] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.954255][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.958688][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.962549][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.966697][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.969877][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.993443][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.996038][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.000702][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.004633][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.007755][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.008255][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.014141][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.018959][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.024564][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.033906][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.325300][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   63.393928][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   63.426596][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   63.557744][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.561448][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.565201][ T5818] bridge_slave_0: entered allmulticast mode
[   63.568821][ T5818] bridge_slave_0: entered promiscuous mode
[   63.573703][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.576039][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.578393][ T5818] bridge_slave_1: entered allmulticast mode
[   63.581253][ T5818] bridge_slave_1: entered promiscuous mode
[   63.601924][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.604978][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.607971][ T5813] bridge_slave_0: entered allmulticast mode
[   63.611781][ T5813] bridge_slave_0: entered promiscuous mode
[   63.645186][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.647976][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.650854][ T5813] bridge_slave_1: entered allmulticast mode
[   63.655272][ T5813] bridge_slave_1: entered promiscuous mode
[   63.670052][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.672503][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.674985][ T5817] bridge_slave_0: entered allmulticast mode
[   63.677798][ T5817] bridge_slave_0: entered promiscuous mode
[   63.706469][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.709402][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.711600][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.715011][ T5817] bridge_slave_1: entered allmulticast mode
[   63.717666][ T5817] bridge_slave_1: entered promiscuous mode
[   63.722261][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.728779][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.742803][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.784904][ T5818] team0: Port device team_slave_0 added
[   63.815235][ T5818] team0: Port device team_slave_1 added
[   63.820659][ T5813] team0: Port device team_slave_0 added
[   63.826755][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.831727][ T5813] team0: Port device team_slave_1 added
[   63.851860][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.866931][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.869422][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.878397][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.883554][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.885675][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.893942][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.932084][ T5817] team0: Port device team_slave_0 added
[   63.936977][ T5817] team0: Port device team_slave_1 added
[   63.939450][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.941937][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.950781][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.955231][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.957346][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.966210][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.029987][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.032156][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.041260][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.063173][ T5818] hsr_slave_0: entered promiscuous mode
[   64.066559][ T5818] hsr_slave_1: entered promiscuous mode
[   64.070710][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.073432][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.081086][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.094803][ T5813] hsr_slave_0: entered promiscuous mode
[   64.097118][ T5813] hsr_slave_1: entered promiscuous mode
[   64.099231][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.101836][ T5813] Cannot create hsr debugfs directory
[   64.212201][ T5817] hsr_slave_0: entered promiscuous mode
[   64.217478][ T5817] hsr_slave_1: entered promiscuous mode
[   64.220359][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.223734][ T5817] Cannot create hsr debugfs directory
[   64.513367][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.521630][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.540342][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.548808][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.608341][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.624617][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.633825][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.664099][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.715297][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.733837][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.743718][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.756165][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.846655][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.859369][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.879153][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   64.889936][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   64.901110][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.903708][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.916850][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.919313][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.935659][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.938096][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.945629][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.947844][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.972015][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.039344][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   65.064165][ T3608] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.067093][ T3608] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.087649][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.090539][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.104431][   T54] Bluetooth: hci0: command tx timeout
[   65.105641][ T5203] Bluetooth: hci2: command tx timeout
[   65.106986][   T54] Bluetooth: hci1: command tx timeout
[   65.251470][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.310011][ T5813] veth0_vlan: entered promiscuous mode
[   65.329524][ T5813] veth1_vlan: entered promiscuous mode
[   65.369490][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.415968][ T5813] veth0_macvtap: entered promiscuous mode
[   65.429624][ T5813] veth1_macvtap: entered promiscuous mode
[   65.438959][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.441227][ T5818] veth0_vlan: entered promiscuous mode
[   65.456464][ T5818] veth1_vlan: entered promiscuous mode
[   65.471769][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.487903][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.505311][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.508027][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.510645][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.514965][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.538193][ T5817] veth0_vlan: entered promiscuous mode
[   65.546472][ T5818] veth0_macvtap: entered promiscuous mode
[   65.560137][ T5817] veth1_vlan: entered promiscuous mode
[   65.566891][ T5818] veth1_macvtap: entered promiscuous mode
[   65.596674][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.618266][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.640201][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.645636][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.649102][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.652860][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.664007][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.670650][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.686302][ T5817] veth0_macvtap: entered promiscuous mode
[   65.700833][ T5817] veth1_macvtap: entered promiscuous mode
[   65.728122][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.737578][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.745676][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.775576][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.795479][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.798043][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.798300][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.801365][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.804576][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.811801][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.818544][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.907925][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.914250][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.956779][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.959338][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.968408][ T5884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.003826][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.011496][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.015793][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.017816][ T5886] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.049656][ T5886] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   66.109521][ T5890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.181304][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.184749][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.239594][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.248204][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.308750][ T5890] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.311713][ T5890] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.315502][ T5890] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.318392][ T5890] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.491301][ T5905] netlink: 'syz.2.8': attribute type 29 has an invalid length.
[   66.696339][ T5907] unsupported nla_type 52263
[   66.740424][ T5910] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   66.869353][ T5917] Zero length message leads to an empty skb
[   66.916260][ T5923] netlink: 'syz.0.14': attribute type 4 has an invalid length.
[   66.919649][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   66.979130][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.182586][ T5820] Bluetooth: hci2: command tx timeout
[   67.184438][ T5820] Bluetooth: hci0: command tx timeout
[   67.192662][   T54] Bluetooth: hci1: command tx timeout
[   67.742085][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   67.747129][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.782192][ T5930] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   67.788797][ T5930] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16'.
[   67.872196][ T5942] raw_sendmsg: syz.0.18 forgot to set AF_INET. Fix it!
[   67.934191][ T5945] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.19'.
[   68.213762][ T5963] dvmrp8: entered allmulticast mode
[   68.257471][ T5961] dvmrp8: left allmulticast mode
[   68.431119][ T5972] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.26'.
[   68.480420][ T5974] netlink: 'syz.0.27': attribute type 29 has an invalid length.
[   68.660590][ T5984] Bluetooth: MGMT ver 1.23
[   68.761376][ T5987] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.33'.
[   68.820996][ T5990] netlink: 'syz.0.34': attribute type 29 has an invalid length.
[   68.963601][ T6002] ip6gre1: entered promiscuous mode
[   69.050971][ T6011] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.41'.
[   69.135386][ T6016] netlink: 'syz.0.42': attribute type 29 has an invalid length.
[   69.266104][   T54] Bluetooth: hci1: command tx timeout
[   69.268354][   T54] Bluetooth: hci0: command tx timeout
[   69.270492][   T54] Bluetooth: hci2: command tx timeout
[   70.026018][ T6044] netlink: 'syz.1.52': attribute type 29 has an invalid length.
[   70.367379][ T6059] netlink: 'syz.0.58': attribute type 5 has an invalid length.
[   70.381753][ T6059] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   70.387339][ T6059] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   70.390004][ T6059] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   70.397315][ T6059] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   70.400311][ T6059] geneve2: entered promiscuous mode
[   70.401960][ T6059] geneve2: entered allmulticast mode
[   70.443574][ T6062] netlink: 'syz.1.59': attribute type 29 has an invalid length.
[   70.721859][ T6076] bridge_slave_0: left allmulticast mode
[   70.732938][ T6076] bridge_slave_0: left promiscuous mode
[   70.734984][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.749927][ T6076] bridge_slave_1: left allmulticast mode
[   70.751660][ T6076] bridge_slave_1: left promiscuous mode
[   70.757039][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.767609][ T6076] bond0: (slave bond_slave_0): Releasing backup interface
[   70.772838][ T6086] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   70.778448][ T6076] bond0: (slave bond_slave_1): Releasing backup interface
[   70.789967][ T6076] team0: Port device team_slave_0 removed
[   70.798203][ T6076] team0: Port device team_slave_1 removed
[   70.800521][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.803558][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.807222][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.809424][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.871570][ T6086] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.954554][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.124737][ T6099] __nla_validate_parse: 8 callbacks suppressed
[   71.124772][ T6099] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.72'.
[   71.267660][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.269719][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.342822][ T5203] Bluetooth: hci2: command tx timeout
[   71.343007][   T54] Bluetooth: hci0: command tx timeout
[   71.344956][ T5203] Bluetooth: hci1: command tx timeout
[   71.358542][ T6103] netlink: 348 bytes leftover after parsing attributes in process `syz.1.74'.
[   71.651775][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'.
[   71.660755][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   71.689650][ T6117] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.79'.
[   71.920608][ T6130] bridge0: entered promiscuous mode
[   71.923646][ T6130] bond0: entered promiscuous mode
[   71.925759][ T6130] bond_slave_0: entered promiscuous mode
[   71.928257][ T6130] bond_slave_1: entered promiscuous mode
[   71.935908][ T6130] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[   71.939782][ T6130] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[   71.944254][ T6130] hsr1: entered allmulticast mode
[   71.946348][ T6130] bridge0: entered allmulticast mode
[   71.948236][ T6130] bond0: entered allmulticast mode
[   71.949897][ T6130] bond_slave_0: entered allmulticast mode
[   71.951975][ T6130] bond_slave_1: entered allmulticast mode
[   72.058386][ T6133] validate_nla: 1 callbacks suppressed
[   72.058427][ T6133] netlink: 'syz.2.84': attribute type 29 has an invalid length.
[   72.645071][ T6143] trusted_key: syz.1.89 sent an empty control message without MSG_MORE.
[   72.649291][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   72.766071][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'.
[   72.797082][ T6153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.92'.
[   73.122030][ T6172] netlink: 64 bytes leftover after parsing attributes in process `syz.0.98'.
[   73.282812][ T6180] pim6reg: entered allmulticast mode
[   73.287556][ T6177] macvlan0: entered allmulticast mode
[   73.367628][ T6184] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[   73.388147][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'.
[   73.392990][ T6180] 8021q: VLANs not supported on lo
[   73.570618][ T6189] x_tables: duplicate underflow at hook 1
[   74.418789][ T6206] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   74.465396][ T6208] netlink: 'syz.0.112': attribute type 29 has an invalid length.
[   74.521072][    T9] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   74.530629][    T9] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   74.826928][ T6233] netlink: 'syz.2.122': attribute type 29 has an invalid length.
[   75.161910][ T6255] 8021q: VLANs not supported on wg0
[   75.224923][ T6259] netlink: 'syz.2.132': attribute type 29 has an invalid length.
[   75.685768][ T6286] netlink: 'syz.1.142': attribute type 29 has an invalid length.
[   75.977063][ T6307] netlink: 'syz.1.153': attribute type 29 has an invalid length.
[   76.098374][ T6316] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   76.116085][ T6317] xt_nat: multiple ranges no longer supported
[   76.346390][ T6340] netlink: 'syz.1.163': attribute type 29 has an invalid length.
[   76.402196][ T6344] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20001
[   76.512281][ T6350] __nla_validate_parse: 18 callbacks suppressed
[   76.512300][ T6350] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.167'.
[   76.605100][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   76.643578][ T6360] netlink: 'syz.0.172': attribute type 29 has an invalid length.
[   76.856512][ T6372] netlink: 212 bytes leftover after parsing attributes in process `syz.1.177'.
[   76.866978][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.178'.
[   76.956503][ T6376] netlink: 'syz.2.181': attribute type 29 has an invalid length.
[   77.864108][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.189'.
[   77.866985][ T6401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'.
[   77.870093][ T6400] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   77.875222][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'.
[   77.882213][ T6401] netlink: 31 bytes leftover after parsing attributes in process `syz.2.188'.
[   77.885597][ T6401] netlink: 'syz.2.188': attribute type 3 has an invalid length.
[   77.886156][ T6400] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.189'.
[   77.888180][ T6401] netlink: 'syz.2.188': attribute type 2 has an invalid length.
[   77.888208][ T6401] netlink: 31 bytes leftover after parsing attributes in process `syz.2.188'.
[   77.888222][ T6401] netlink: 'syz.2.188': attribute type 2 has an invalid length.
[   78.127025][ T6414] netlink: 'syz.1.194': attribute type 29 has an invalid length.
[   78.258430][ T6425] ksmbd: Unknown IPC event: 3, ignore.
[   78.485140][ T6445] netlink: 'syz.2.207': attribute type 29 has an invalid length.
[   78.582113][ T6451] x_tables: duplicate underflow at hook 1
[   79.435459][ T6502] x_tables: duplicate underflow at hook 1
[   79.660758][ T6514] netlink: 'syz.2.234': attribute type 29 has an invalid length.
[   79.660878][ T6515] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   80.266999][ T6533] vlan2: entered promiscuous mode
[   80.268837][ T6533] bond0: entered promiscuous mode
[   80.270549][ T6533] bond_slave_0: entered promiscuous mode
[   80.274369][ T6533] bond_slave_1: entered promiscuous mode
[   80.276891][ T6533] vlan2: entered allmulticast mode
[   80.278870][ T6533] bond0: entered allmulticast mode
[   80.281029][ T6533] bond_slave_0: entered allmulticast mode
[   80.283801][ T6533] bond_slave_1: entered allmulticast mode
[   81.384367][ T6553] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   81.386978][ T6553] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   81.408219][ T6555] netlink: 'syz.1.252': attribute type 29 has an invalid length.
[   81.496692][ T6557] smc: net device bond0 applied user defined pnetid SYZ
[   81.505861][   T46] cfg80211: failed to load regulatory.db
[   81.592661][ T6567] __nla_validate_parse: 15 callbacks suppressed
[   81.592673][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'.
[   81.691249][ T6569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.256'.
[   81.706537][ T6571] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.257'.
[   81.807700][ T6569] bond0 (unregistering): left promiscuous mode
[   81.810350][ T6569] bond_slave_0: left promiscuous mode
[   81.813242][ T6569] bond_slave_1: left promiscuous mode
[   81.817376][ T6569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.822036][ T6569] bond_slave_0: left allmulticast mode
[   81.826643][ T6569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.830106][ T6569] bond_slave_1: left allmulticast mode
[   81.835470][ T6569] bond0 (unregistering): Released all slaves
[   81.881264][ T6574] netlink: 'syz.1.258': attribute type 4 has an invalid length.
[   81.932192][ T6579] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.259'.
[   82.088617][ T6583] netlink: 'syz.2.261': attribute type 29 has an invalid length.
[   82.700568][ T6603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.739620][ T6603] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.268'.
[   82.767519][ T6608] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.270'.
[   83.070306][ T6633] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.280'.
[   83.198142][ T6642] validate_nla: 2 callbacks suppressed
[   83.198158][ T6642] netlink: 'syz.0.283': attribute type 29 has an invalid length.
[   83.246309][ T6644] tunl0: mtu less than device minimum
[   83.315520][ T6650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.286'.
[   83.332201][ T6653] netlink: 288 bytes leftover after parsing attributes in process `syz.0.288'.
[   83.358847][ T6658] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.289'.
[   83.490664][ T6669] netlink: 'syz.0.294': attribute type 29 has an invalid length.
[   83.640141][ T6680] netlink: 'syz.2.300': attribute type 1 has an invalid length.
[   83.726157][ T6686] unknown channel width for channel at 909000KHz?
[   83.729022][ T6686] unknown channel width for channel at 909000KHz?
[   83.731870][ T6683] af_packet: tpacket_rcv: packet too big, clamped from 5 to 4294967272. macoff=96
[   84.094054][ T6717] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   84.267527][ T6725] netlink: 'syz.1.318': attribute type 322 has an invalid length.
[   84.499719][    T9] IPVS: starting estimator thread 0...
[   84.615124][ T6739] IPVS: using max 45 ests per chain, 108000 per kthread
[   84.820812][ T6752] sctp: [Deprecated]: syz.1.330 (pid 6752) Use of int in max_burst socket option.
[   84.820812][ T6752] Use struct sctp_assoc_value instead
[   85.390810][ T6779] ip_vti0: Master is either lo or non-ether device
[   85.478258][ T6786] netlink: 'syz.0.342': attribute type 10 has an invalid length.
[   85.498299][ T6786] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   85.501203][ T6786] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   85.505552][ T6786] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.511053][ T6785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.621680][ T6792] netlink: 'syz.1.343': attribute type 5 has an invalid length.
[   85.907759][ T6809] nbd: must specify a size in bytes for the device
[   85.912644][ T6808] nbd: must specify a size in bytes for the device
[   86.068322][ T6817] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.646718][ T6867] __nla_validate_parse: 25 callbacks suppressed
[   86.646739][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'.
[   86.653024][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'.
[   86.657946][ T6867] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.376'.
[   86.703962][   T64] wlan1: Trigger new scan to find an IBSS to join
[   86.719751][ T6869] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.724265][ T6869] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.728137][ T6869] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.731456][ T6869] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.788485][ T6872] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.378'.
[   86.839235][ T6876] netlink: 176 bytes leftover after parsing attributes in process `syz.1.379'.
[   87.209678][ T6899] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.388'.
[   87.293781][ T6906] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   87.549232][ T6915] netlink: 168 bytes leftover after parsing attributes in process `syz.2.391'.
[   88.051489][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[   88.059456][ T6928] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.397'.
[   88.441601][ T6931] syz.1.398: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.449079][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.1.398 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.449100][ T6931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.449108][ T6931] Call Trace:
[   88.449116][ T6931]  <TASK>
[   88.449123][ T6931]  dump_stack_lvl+0x189/0x250
[   88.449184][ T6931]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.449203][ T6931]  ? __pfx__printk+0x10/0x10
[   88.449217][ T6931]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.449232][ T6931]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.449248][ T6931]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.449265][ T6931]  warn_alloc+0x214/0x310
[   88.449287][ T6931]  ? __pfx_warn_alloc+0x10/0x10
[   88.449309][ T6931]  ? __get_vm_area_node+0x28f/0x300
[   88.449323][ T6931]  ? nf_tables_newset+0x132b/0x2530
[   88.449342][ T6931]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   88.449377][ T6931]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.449396][ T6931]  ? rcu_is_watching+0x15/0xb0
[   88.449418][ T6931]  ? nf_tables_newset+0x132b/0x2530
[   88.449434][ T6931]  ? nf_tables_newset+0x132b/0x2530
[   88.449449][ T6931]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   88.449462][ T6931]  ? nf_tables_newset+0x132b/0x2530
[   88.449477][ T6931]  ? nft_table_lookup+0x211/0x230
[   88.449519][ T6931]  ? nft_set_lookup+0x128/0x150
[   88.449537][ T6931]  ? nft_hash_privsize+0x6f/0xf0
[   88.449554][ T6931]  nf_tables_newset+0x132b/0x2530
[   88.449581][ T6931]  ? __pfx_nf_tables_newset+0x10/0x10
[   88.449615][ T6931]  ? __nla_parse+0x40/0x60
[   88.449636][ T6931]  nfnetlink_rcv+0x1132/0x2520
[   88.449679][ T6931]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   88.449712][ T6931]  ? ref_tracker_free+0x63a/0x7d0
[   88.449752][ T6931]  ? __netlink_deliver_tap+0x807/0x850
[   88.449773][ T6931]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.449794][ T6931]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.449813][ T6931]  netlink_unicast+0x75b/0x8d0
[   88.449836][ T6931]  netlink_sendmsg+0x805/0xb30
[   88.449861][ T6931]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.449877][ T6931]  ? aa_sock_msg_perm+0x94/0x160
[   88.449893][ T6931]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   88.449910][ T6931]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.449927][ T6931]  __sock_sendmsg+0x21c/0x270
[   88.449950][ T6931]  ____sys_sendmsg+0x505/0x830
[   88.449970][ T6931]  ? __pfx_____sys_sendmsg+0x10/0x10
[   88.449994][ T6931]  ? import_iovec+0x74/0xa0
[   88.450009][ T6931]  ___sys_sendmsg+0x21f/0x2a0
[   88.450025][ T6931]  ? __pfx____sys_sendmsg+0x10/0x10
[   88.450068][ T6931]  ? __fget_files+0x2a/0x420
[   88.450083][ T6931]  ? __fget_files+0x3a0/0x420
[   88.450105][ T6931]  __x64_sys_sendmsg+0x19b/0x260
[   88.450125][ T6931]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   88.450146][ T6931]  ? rcu_is_watching+0x15/0xb0
[   88.450168][ T6931]  ? do_syscall_64+0xbe/0x3b0
[   88.450184][ T6931]  do_syscall_64+0xfa/0x3b0
[   88.450195][ T6931]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.450215][ T6931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.450228][ T6931]  ? exc_page_fault+0x9f/0xf0
[   88.450248][ T6931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.450260][ T6931] RIP: 0033:0x7fe86898e929
[   88.450273][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.450283][ T6931] RSP: 002b:00007fe8667f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   88.450297][ T6931] RAX: ffffffffffffffda RBX: 00007fe868bb5fa0 RCX: 00007fe86898e929
[   88.450307][ T6931] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   88.450315][ T6931] RBP: 00007fe868a10b39 R08: 0000000000000000 R09: 0000000000000000
[   88.450323][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.450331][ T6931] R13: 0000000000000000 R14: 00007fe868bb5fa0 R15: 00007ffeae0aefa8
[   88.450352][ T6931]  </TASK>
[   88.582683][ T6931] Mem-Info:
[   88.583722][ T6931] active_anon:5341 inactive_anon:0 isolated_anon:0
[   88.583722][ T6931]  active_file:1101 inactive_file:38215 isolated_file:0
[   88.583722][ T6931]  unevictable:1768 dirty:203 writeback:0
[   88.583722][ T6931]  slab_reclaimable:9171 slab_unreclaimable:51948
[   88.583722][ T6931]  mapped:18176 shmem:2440 pagetables:919
[   88.583722][ T6931]  sec_pagetables:0 bounce:0
[   88.583722][ T6931]  kernel_misc_reclaimable:0
[   88.583722][ T6931]  free:295805 free_pcp:23405 free_cma:0
[   88.597607][ T6931] Node 0 active_anon:13224kB inactive_anon:0kB active_file:2908kB inactive_file:150088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40764kB dirty:412kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7068kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.609714][ T6931] Node 1 active_anon:8140kB inactive_anon:0kB active_file:1496kB inactive_file:2772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31940kB dirty:400kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4368kB pagetables:1420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.620178][ T6931] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.629384][ T6931] lowmem_reserve[]: 0 815 815 815 815
[   88.631571][ T6931] Node 0 DMA32 free:270492kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13156kB inactive_anon:0kB active_file:2908kB inactive_file:150088kB unevictable:3536kB writepending:412kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:51216kB local_pcp:34140kB free_cma:0kB
[   88.641387][ T6931] lowmem_reserve[]: 0 0 0 0 0
[   88.641649][ T6936] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.399'.
[   88.642974][ T6931] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   88.643030][ T6931] lowmem_reserve[]: 0 0 854 854 854
[   88.643048][ T6931] Node 1 Normal free:438492kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8208kB inactive_anon:0kB active_file:1496kB inactive_file:2772kB unevictable:3536kB writepending:400kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:42208kB local_pcp:21076kB free_cma:0kB
[   88.643071][ T6931] lowmem_reserve[]: 0 0 0 0 0
[   88.643087][ T6931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.643161][ T6931] Node 0 DMA32: 5397*4kB (UME) 832*8kB (UM) 308*16kB (UME) 310*32kB (UME) 64*64kB (UME) 25*128kB (UM) 16*256kB (UM) 10*512kB (UM) 8*1024kB (UM) 3*2048kB (UM) 48*4096kB (UME) = 270548kB
[   88.643233][ T6931] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   88.643304][ T6931] Node 1 Normal: 3*4kB (UME) 6*8kB (E) 242*16kB (UE) 106*32kB (UE) 64*64kB (UE) 28*128kB (UM) 6*256kB (U) 4*512kB (UME) 2*1024kB (ME) 4*2048kB (UM) 100*4096kB (M) = 438428kB
[   88.643377][ T6931] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.643384][ T6931] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.643390][ T6931] 41756 total pagecache pages
[   88.643394][ T6931] 0 pages in swap cache
[   88.643398][ T6931] Free swap  = 124996kB
[   88.643401][ T6931] Total swap = 124996kB
[   88.643405][ T6931] 786301 pages RAM
[   88.643408][ T6931] 0 pages HighMem/MovableOnly
[   88.643411][ T6931] 240368 pages reserved
[   88.643414][ T6931] 0 pages cma reserved
[   88.810113][ T6944] 8021q: VLANs not supported on ip_vti0
[   89.067224][ T6948] sctp: [Deprecated]: syz.0.404 (pid 6948) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.067224][ T6948] Use struct sctp_sack_info instead
[   89.656994][ T6967] bridge0: port 1(vlan2) entered blocking state
[   89.659189][ T6967] bridge0: port 1(vlan2) entered disabled state
[   89.661280][ T6967] vlan2: entered allmulticast mode
[   89.665422][ T6967] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   89.670477][ T6967] vlan2: entered promiscuous mode
[   89.672075][ T6967] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   89.743801][  T148] wlan1: Trigger new scan to find an IBSS to join
[   89.984318][ T6978] netlink: zone id is out of range
[   89.986722][ T6978] netlink: zone id is out of range
[   89.988896][ T6978] netlink: zone id is out of range
[   89.991247][ T6978] netlink: zone id is out of range
[   89.993599][ T6978] netlink: zone id is out of range
[   89.996251][ T6978] netlink: zone id is out of range
[   89.998640][ T6978] netlink: zone id is out of range
[   90.000834][ T6978] netlink: zone id is out of range
[   90.003561][ T6978] netlink: zone id is out of range
[   90.005788][ T6978] netlink: zone id is out of range
[   91.184924][ T7020] 8021q: VLANs not supported on vxcan0
[   92.601581][ T7073] __nla_validate_parse: 12 callbacks suppressed
[   92.601594][ T7073] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.452'.
[   92.610623][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.615851][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.619326][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.623907][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.629665][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.633455][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.636893][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.641225][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.645501][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.451'.
[   92.703659][   T27] wlan1: Trigger new scan to find an IBSS to join
[   93.585168][   T27] wlan1: Creating new IBSS network, BSSID 46:5c:a5:3d:4f:e3
[   93.671835][ T7131] tipc: Can't bind to reserved service type 0
[   94.770983][ T7159] vlan3: entered allmulticast mode
[   94.812961][ T7166] bridge_slave_1: default FDB implementation only supports local addresses
[   94.886695][ T7172] xt_TCPMSS: Only works on TCP SYN packets
[   95.002987][ T7180] netlink: 'syz.1.492': attribute type 1 has an invalid length.
[   95.005440][ T7180] netlink: 'syz.1.492': attribute type 2 has an invalid length.
[   95.016212][ T7180] netlink: 'syz.1.492': attribute type 1 has an invalid length.
[   95.022915][ T7180] netlink: 'syz.1.492': attribute type 2 has an invalid length.
[   95.174454][ T7193] Cannot find add_set index 0 as target
[   95.215753][ T7189] gretap0: entered promiscuous mode
[   95.217653][ T7189] macsec1: entered promiscuous mode
[   95.220274][ T7189] macsec1: entered allmulticast mode
[   95.221931][ T7189] gretap0: entered allmulticast mode
[   95.602610][ T7215] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[   95.865278][ T7231] netlink: 'syz.1.514': attribute type 16 has an invalid length.
[   95.882561][ T5846] tipc: Subscription rejected, illegal request
[   95.942921][ T7236] netlink: 'syz.0.516': attribute type 1 has an invalid length.
[   96.043835][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.047275][ T7244] net_ratelimit: 75 callbacks suppressed
[   96.047301][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.067108][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.070293][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.102753][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.114024][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.124961][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.128071][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.151546][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.161851][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.183047][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.221974][ T7240] bond0 (unregistering): Released all slaves
[   96.387066][ T7257] netlink: 'syz.2.524': attribute type 1 has an invalid length.
[   96.431986][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.513960][ T7257] bond0: (slave gretap1): making interface the new active one
[   96.518542][ T7257] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   96.525640][ T7256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.031480][ T7257] syz.2.524 (7257) used greatest stack depth: 19624 bytes left
[   97.290804][ T7296] bond0: (slave wlan1): Releasing backup interface
[   97.323927][ T7296] vlan2: left allmulticast mode
[   97.325535][ T7296] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   97.327728][ T7296] vlan2: left promiscuous mode
[   97.345683][ T7296] bridge0: port 1(vlan2) entered disabled state
[   97.958979][ T7331] __nla_validate_parse: 73 callbacks suppressed
[   97.958993][ T7331] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.553'.
[   97.981865][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[   97.988460][ T7333] dummy0: entered promiscuous mode
[   97.991876][ T7333] dummy0: left promiscuous mode
[   98.063615][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[   98.208372][ T7346] syz_tun: entered promiscuous mode
[   98.223832][ T7346] batadv_slave_0: entered promiscuous mode
[   98.226615][ T7346] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   98.235506][ T7346] Cannot create hsr debugfs directory
[   98.243216][ T7346] hsr1: entered allmulticast mode
[   98.244829][ T7346] syz_tun: entered allmulticast mode
[   98.246465][ T7346] batadv_slave_0: entered allmulticast mode
[   98.366212][ T7358] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.563'.
[   98.429828][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'.
[   98.435668][ T7363] netlink: 'syz.1.564': attribute type 1 has an invalid length.
[   98.862141][ T7393] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.573'.
[   98.996813][ T7404] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[   98.999541][ T7404] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.578'.
[   99.167803][ T7410] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.581'.
[   99.370640][ T7429] tipc: Started in network mode
[   99.373009][ T7429] tipc: Node identity 4, cluster identity 4711
[   99.374935][ T7429] tipc: Node number set to 4
[   99.452150][ T7433] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.591'.
[   99.493359][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[   99.539283][ T7441] bridge: RTM_NEWNEIGH with invalid ether address
[   99.880062][ T7472] syzkaller0: entered promiscuous mode
[   99.881927][ T7472] syzkaller0: entered allmulticast mode
[  100.776640][ T7486] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.793364][ T7487] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.796217][ T7487] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.800536][ T7487] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  100.822163][ T7493] syz.2.608 (7493) used obsolete PPPIOCDETACH ioctl
[  101.100547][ T7515] IPVS: Scheduler module ip_vs_sip not found
[  101.822778][ T5820] Bluetooth: hci1: command tx timeout
[  101.829322][ T7549] syzkaller0: entered promiscuous mode
[  101.831037][ T7549] syzkaller0: entered allmulticast mode
[  103.516246][ T7600] xt_TCPMSS: Only works on TCP SYN packets
[  103.582955][ T7608] ieee802154 phy0 wpan0: encryption failed: -90
[  103.585918][ T7608] validate_nla: 3 callbacks suppressed
[  103.585929][ T7608] netlink: 'syz.2.644': attribute type 3 has an invalid length.
[  103.621125][ T7612] syz.1.646 uses old SIOCAX25GETINFO
[  103.904239][ T5820] Bluetooth: hci1: command 0x0405 tx timeout
[  103.986685][ T7647] vlan4: entered promiscuous mode
[  104.725433][ T7663] netlink: 'syz.1.664': attribute type 1 has an invalid length.
[  104.829202][ T7674] __nla_validate_parse: 14 callbacks suppressed
[  104.829214][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[  104.976151][ T7697] netlink: 44 bytes leftover after parsing attributes in process `syz.1.674'.
[  105.239797][ T7727] netlink: 'syz.0.682': attribute type 21 has an invalid length.
[  105.249692][ T7727] netlink: 156 bytes leftover after parsing attributes in process `syz.0.682'.
[  105.260197][ T7730] netlink: 68 bytes leftover after parsing attributes in process `syz.1.683'.
[  105.854277][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'.
[  105.857097][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'.
[  105.859963][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'.
[  106.486085][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'.
[  106.488774][ T7815] net_ratelimit: 25 callbacks suppressed
[  106.488781][ T7815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.639650][ T7821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.716'.
[  107.514761][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'.
[  107.520753][ T7846] netlink: 'syz.1.726': attribute type 6 has an invalid length.
[  107.523838][ T7846] netlink: 'syz.1.726': attribute type 5 has an invalid length.
[  107.527159][ T7842] netlink: 'syz.0.725': attribute type 10 has an invalid length.
[  107.530528][ T7842] veth0_vlan: entered allmulticast mode
[  107.535169][ T7842] bridge0: port 3(veth0_vlan) entered blocking state
[  107.537293][ T7842] bridge0: port 3(veth0_vlan) entered disabled state
[  107.555718][ T7842] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  107.616900][ T7857] batadv_slave_0: entered promiscuous mode
[  107.618801][ T7857] batadv_slave_0: entered allmulticast mode
[  107.678163][ T7865] x9: renamed from bridge_slave_0 (while UP)
[  108.528397][ T7910] netlink: 'syz.2.747': attribute type 12 has an invalid length.
[  108.531268][ T7910] netlink: 'syz.2.747': attribute type 11 has an invalid length.
[  108.544463][ T7910] netlink: 'syz.2.747': attribute type 12 has an invalid length.
[  108.547458][ T7910] netlink: 'syz.2.747': attribute type 11 has an invalid length.
[  108.850423][ T7923] netlink: 'syz.2.752': attribute type 17 has an invalid length.
[  108.855642][ T7923] netlink: 'syz.2.752': attribute type 17 has an invalid length.
[  109.053484][ T7937] netlink: 'syz.1.758': attribute type 1 has an invalid length.
[  109.056319][ T7937] netlink: 'syz.1.758': attribute type 1 has an invalid length.
[  109.059330][ T7937] netlink: 'syz.1.758': attribute type 1 has an invalid length.
[  110.445642][ T8013] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  110.488029][ T8015] __nla_validate_parse: 23 callbacks suppressed
[  110.488049][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'.
[  110.539438][ T8019] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20002
[  110.768447][ T8032] syz.2.794: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  110.777113][ T8032] CPU: 0 UID: 0 PID: 8032 Comm: syz.2.794 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  110.777135][ T8032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.777143][ T8032] Call Trace:
[  110.777150][ T8032]  <TASK>
[  110.777159][ T8032]  dump_stack_lvl+0x189/0x250
[  110.777191][ T8032]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.777215][ T8032]  ? __pfx__printk+0x10/0x10
[  110.777231][ T8032]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  110.777244][ T8032]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  110.777254][ T8032]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  110.777264][ T8032]  warn_alloc+0x214/0x310
[  110.777276][ T8032]  ? stack_depot_save_flags+0x40/0x900
[  110.777289][ T8032]  ? __pfx_warn_alloc+0x10/0x10
[  110.777300][ T8032]  ? kasan_save_track+0x4f/0x80
[  110.777313][ T8032]  ? xskq_create+0x56/0x170
[  110.777324][ T8032]  ? xsk_init_queue+0xb0/0x110
[  110.777333][ T8032]  ? xsk_setsockopt+0x43f/0x710
[  110.777342][ T8032]  ? do_sock_setsockopt+0x25a/0x3e0
[  110.777352][ T8032]  ? __x64_sys_setsockopt+0x18b/0x220
[  110.777360][ T8032]  ? do_syscall_64+0xfa/0x3b0
[  110.777366][ T8032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.777379][ T8032]  __vmalloc_node_range_noprof+0x125/0x12f0
[  110.777403][ T8032]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.777415][ T8032]  ? __kasan_kmalloc+0x93/0xb0
[  110.777424][ T8032]  vmalloc_user_noprof+0xad/0xf0
[  110.777432][ T8032]  ? xskq_create+0xbf/0x170
[  110.777444][ T8032]  xskq_create+0xbf/0x170
[  110.777456][ T8032]  xsk_init_queue+0xb0/0x110
[  110.777468][ T8032]  xsk_setsockopt+0x43f/0x710
[  110.777479][ T8032]  ? __pfx_xsk_setsockopt+0x10/0x10
[  110.777488][ T8032]  ? __lock_acquire+0xab9/0xd20
[  110.777504][ T8032]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  110.777514][ T8032]  ? __pfx_xsk_setsockopt+0x10/0x10
[  110.777525][ T8032]  do_sock_setsockopt+0x25a/0x3e0
[  110.777535][ T8032]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  110.777545][ T8032]  ? __fget_files+0x2a/0x420
[  110.777558][ T8032]  __x64_sys_setsockopt+0x18b/0x220
[  110.777570][ T8032]  do_syscall_64+0xfa/0x3b0
[  110.777576][ T8032]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.777587][ T8032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.777595][ T8032]  ? exc_page_fault+0x9f/0xf0
[  110.777606][ T8032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.777613][ T8032] RIP: 0033:0x7fa80bf8e929
[  110.777622][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.777628][ T8032] RSP: 002b:00007fa80ce0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  110.777638][ T8032] RAX: ffffffffffffffda RBX: 00007fa80c1b5fa0 RCX: 00007fa80bf8e929
[  110.777644][ T8032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  110.777648][ T8032] RBP: 00007fa80c010b39 R08: 0000000000000004 R09: 0000000000000000
[  110.777653][ T8032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.777657][ T8032] R13: 0000000000000000 R14: 00007fa80c1b5fa0 R15: 00007ffe93185808
[  110.777671][ T8032]  </TASK>
[  110.777674][ T8032] Mem-Info:
[  110.789571][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'.
[  110.794201][ T8032] active_anon:5455 inactive_anon:0 isolated_anon:0
[  110.794201][ T8032]  active_file:1171 inactive_file:38224 isolated_file:0
[  110.794201][ T8032]  unevictable:1768 dirty:132 writeback:0
[  110.794201][ T8032]  slab_reclaimable:9362 slab_unreclaimable:53068
[  110.794201][ T8032]  mapped:18189 shmem:2448 pagetables:1151
[  110.794201][ T8032]  sec_pagetables:0 bounce:0
[  110.794201][ T8032]  kernel_misc_reclaimable:0
[  110.794201][ T8032]  free:295627 free_pcp:23103 free_cma:0
[  110.890877][ T8032] Node 0 active_anon:12480kB inactive_anon:0kB active_file:3060kB inactive_file:150096kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40752kB dirty:204kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6928kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  110.903419][ T8032] Node 1 active_anon:9612kB inactive_anon:0kB active_file:1624kB inactive_file:2800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32004kB dirty:324kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4676kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  110.916223][ T8032] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.928292][ T8032] lowmem_reserve[]: 0 815 815 815 815
[  110.930408][ T8032] Node 0 DMA32 free:284024kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12480kB inactive_anon:0kB active_file:3060kB inactive_file:150096kB unevictable:3536kB writepending:204kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:38652kB local_pcp:19472kB free_cma:0kB
[  110.945347][ T8032] lowmem_reserve[]: 0 0 0 0 0
[  110.947451][ T8032] Node 1 DMA32 free:433180kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1152kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:19496kB local_pcp:9804kB free_cma:0kB
[  110.959176][ T8032] lowmem_reserve[]: 0 0 854 854 854
[  110.961606][ T8032] Node 1 Normal free:449020kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8392kB inactive_anon:0kB active_file:1624kB inactive_file:2800kB unevictable:3536kB writepending:324kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34260kB local_pcp:16360kB free_cma:0kB
[  110.983414][ T8032] lowmem_reserve[]: 0 0 0 0 0
[  110.987259][ T8032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  110.992144][ T8032] Node 0 DMA32: 327*4kB (UM) 1006*8kB (UME) 483*16kB (UME) 486*32kB (UME) 160*64kB (UME) 46*128kB (UME) 70*256kB (UME) 48*512kB (UME) 30*1024kB (UME) 3*2048kB (UME) 38*4096kB (UM) = 283772kB
[  111.031327][ T8056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.801'.
[  111.033917][ T8032] Node 1 DMA32: 56*4kB (U) 56*8kB (UM) 45*16kB (U) 60*32kB (UM) 41*64kB (UM) 34*128kB (U) 34*256kB (UM) 29*512kB (U) 22*1024kB (UM) 0*2048kB 92*4096kB (UM) = 433200kB
[  111.042258][ T8032] Node 1 Normal: 327*4kB (UME) 224*8kB (UME) 648*16kB (UME) 414*32kB (UME) 263*64kB (UME) 220*128kB (UME) 200*256kB (UM) 188*512kB (UM) 178*1024kB (U) 5*2048kB (UM) 9*4096kB (M) = 448540kB
[  111.056997][ T8032] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.061547][ T8032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.066219][ T8032] 41843 total pagecache pages
[  111.068508][ T8032] 0 pages in swap cache
[  111.070138][ T8032] Free swap  = 124996kB
[  111.071730][ T8032] Total swap = 124996kB
[  111.076491][ T8032] 786301 pages RAM
[  111.078164][ T8032] 0 pages HighMem/MovableOnly
[  111.080469][ T8032] 240368 pages reserved
[  111.082194][ T8032] 0 pages cma reserved
[  111.515068][ T8081] netlink: 'syz.0.810': attribute type 1 has an invalid length.
[  111.554715][ T8046] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  111.604377][ T8087] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  111.708611][ T8098] netlink: 'syz.2.818': attribute type 2 has an invalid length.
[  111.760432][ T8102] netlink: 'syz.2.819': attribute type 1 has an invalid length.
[  111.795985][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.798229][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.800529][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.802902][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.805133][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.807378][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.809605][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.811737][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.814364][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  111.816575][ T8104] xt_TPROXY: Can be used only with -p tcp or -p udp
[  112.782772][  T150] wlan0: Trigger new scan to find an IBSS to join
[  112.838915][ T8129] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  112.853681][ T8129] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  112.858522][ T8133] netlink: 'syz.2.827': attribute type 1 has an invalid length.
[  112.867170][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.828'.
[  113.131038][ T8144] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  113.137869][ T8144] netlink: 236 bytes leftover after parsing attributes in process `syz.2.833'.
[  113.249008][ T8148] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20000
[  113.266586][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  113.668462][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.708570][ T8173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.844'.
[  114.065444][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'.
[  114.078392][   T56] block nbd0: Receive control failed (result -107)
[  114.123814][ T8197] nbd0: detected capacity change from 0 to 32
[  114.133464][ T8004] block nbd0: Dead connection, failed to find a fallback
[  114.138095][ T8004] block nbd0: shutting down sockets
[  114.145457][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.148688][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.160737][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.166152][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.169585][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.177221][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.180173][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.190433][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.195382][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.198289][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.211136][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.222286][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.226560][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.232017][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.242195][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.245478][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.248328][ T8004] ldm_validate_partition_table(): Disk read failed.
[  114.250802][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.271445][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.275732][ T8004] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  114.278397][ T8004] Buffer I/O error on dev nbd0, logical block 0, async page read
[  114.280887][ T8004] Dev nbd0: unable to read RDB block 0
[  114.289389][ T8004]  nbd0: unable to read partition table
[  114.295336][ T8004] ldm_validate_partition_table(): Disk read failed.
[  114.297572][ T8004] Dev nbd0: unable to read RDB block 0
[  114.299561][ T8004]  nbd0: unable to read partition table
[  114.365538][ T8216] validate_nla: 1 callbacks suppressed
[  114.365553][ T8216] netlink: 'syz.2.859': attribute type 7 has an invalid length.
[  114.676997][ T8243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.866'.
[  114.891314][ T8250] xt_CT: No such helper "syz0"
[  114.942615][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.871'.
[  115.193847][ T8271] netlink: 'syz.1.877': attribute type 4 has an invalid length.
[  115.193859][ T8273] netlink: 'syz.1.877': attribute type 4 has an invalid length.
[  115.477374][ T8288] sctp: [Deprecated]: syz.1.883 (pid 8288) Use of int in max_burst socket option.
[  115.477374][ T8288] Use struct sctp_assoc_value instead
[  115.632967][ T8301] __nla_validate_parse: 2 callbacks suppressed
[  115.632983][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'.
[  115.746787][   T52] wlan0: Trigger new scan to find an IBSS to join
[  115.855689][ T8311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.889'.
[  116.396932][ T8335] netlink: 'syz.1.897': attribute type 27 has an invalid length.
[  116.399671][ T8335] bond0: option mode: unable to set because the bond device is up
[  116.549709][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'.
[  116.894287][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'.
[  116.930068][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  117.122224][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  117.558633][ T8412] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  117.937383][ T8436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.081425][ T8442] bridge1: entered allmulticast mode
[  118.088670][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[  118.497437][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'.
[  118.501066][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.937'.
[  118.506059][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'.
[  118.788431][ T3608] wlan0: Trigger new scan to find an IBSS to join
[  118.833114][ T8473] netlink: 'syz.0.944': attribute type 18 has an invalid length.
[  119.160500][ T8498] xt_bpf: check failed: parse error
[  119.193916][ T8494] syzkaller1: entered promiscuous mode
[  119.195652][ T8494] syzkaller1: entered allmulticast mode
[  119.245950][ T8505] bridge0: entered promiscuous mode
[  119.249780][ T8505] hsr2: entered allmulticast mode
[  119.251434][ T8505] bridge0: entered allmulticast mode
[  119.613212][ T8535] Bluetooth: MGMT ver 1.23
[  119.710037][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.059423][ T8585] macsec0: entered promiscuous mode
[  120.061714][ T8586] macsec0: left promiscuous mode
[  120.084716][ T8590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.088713][ T8591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.098095][ T8590] syzkaller0: entered promiscuous mode
[  120.099849][ T8590] syzkaller0: entered allmulticast mode
[  120.107964][ T8591] tipc: Resetting bearer <eth:syzkaller0>
[  120.120546][ T8587] tipc: Resetting bearer <eth:syzkaller0>
[  120.140658][ T8587] tipc: Disabling bearer <eth:syzkaller0>
[  120.484931][ T8616] tipc: Enabled bearer <eth:gre0>, priority 10
[  120.641660][ T8620] netlink: 'syz.1.998': attribute type 12 has an invalid length.
[  120.723388][ T8625] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  120.728173][ T8622] IPVS: stopping master sync thread 8625 ...
[  120.774092][ T8629] __nla_validate_parse: 14 callbacks suppressed
[  120.774103][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'.
[  120.816896][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'.
[  120.905467][ T8633] wg2: entered promiscuous mode
[  120.907017][ T8633] wg2: entered allmulticast mode
[  120.951748][ T8646] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1007'.
[  120.958045][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'.
[  120.960903][ T8646] ksmbd: Unknown IPC event: 0, ignore.
[  120.963570][ T8646] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1007'.
[  121.370658][   T54] Bluetooth: hci1: link tx timeout
[  121.374937][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.412279][ T8701] Bluetooth: MGMT ver 1.23
[  121.473577][ T8707] xt_hashlimit: max too large, truncated to 1048576
[  121.476245][ T8707] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  121.727728][ T8715] netlink: 'syz.0.1028': attribute type 5 has an invalid length.
[  121.755193][ T8715] ip6erspan0: entered promiscuous mode
[  121.881676][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  121.887514][ T8718] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  122.356370][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'.
[  122.467493][ T8726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1032'.
[  122.565487][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'.
[  122.747625][ T8754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.750894][ T8754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.780274][ T5820] Bluetooth: hci1: link tx timeout
[  122.782423][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.785180][ T5820] Bluetooth: hci1: link tx timeout
[  122.787689][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  122.842128][ T8754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.846304][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'.
[  122.850247][ T8768] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  122.863617][ T8754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.933718][ T8754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.936934][ T8754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.061018][ T8754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.064830][ T8754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.131916][ T8754] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.135449][ T8754] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.146612][ T8754] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.149354][ T8754] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.164357][ T8786] netlink: 'syz.0.1050': attribute type 1 has an invalid length.
[  123.166372][ T8754] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.167384][ T8786] NCSI netlink: No device for ifindex 0
[  123.169832][ T8754] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.182834][ T8754] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.185445][ T8754] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.284490][ T8794] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  123.425728][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  123.491581][ T8815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.758454][ T8830] netlink: 'syz.2.1067': attribute type 1 has an invalid length.
[  125.254986][ T8882] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.262864][ T8882] IPv6: NLM_F_REPLACE set, but no existing node found!
[  125.274183][ T8882] bridge_slave_1: left allmulticast mode
[  125.276487][ T8882] bridge_slave_1: left promiscuous mode
[  125.278994][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.287373][ T8882] bridge_slave_0: left promiscuous mode
[  125.289743][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.310649][ T8882] bridge0 (unregistering): left promiscuous mode
[  125.338032][ T8886] netlink: 'syz.2.1086': attribute type 2 has an invalid length.
[  126.261176][ T8900] __nla_validate_parse: 6 callbacks suppressed
[  126.261188][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1091'.
[  126.684761][ T8916] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1097'.
[  126.688465][ T8916] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1097'.
[  126.691547][ T8916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'.
[  126.700114][ T8918] bridge3: entered allmulticast mode
[  126.778531][ T8923] xt_nat: multiple ranges no longer supported
[  127.907029][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'.
[  127.960765][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'.
[  127.964309][ T8939] bond0: invalid ARP target 0.0.0.0 specified for addition
[  127.966553][ T8939] bond0: option arp_ip_target: invalid value (0)
[  127.969460][ T8939] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  128.030565][ T8946] netlink: 'syz.0.1106': attribute type 1 has an invalid length.
[  128.037918][ T8946] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1106'.
[  128.042998][ T8946] veth1_macvtap: left promiscuous mode
[  128.044945][ T8946] macsec0: entered allmulticast mode
[  128.049662][ T8946] veth1_macvtap: entered promiscuous mode
[  128.051534][ T8946] veth1_macvtap: entered allmulticast mode
[  128.054172][ T8946] macsec0: left allmulticast mode
[  128.055789][ T8946] veth1_macvtap: left allmulticast mode
[  128.137411][ T8950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1107'.
[  128.137442][ T8954] macsec2: entered promiscuous mode
[  128.143548][ T8951] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1107'.
[  128.147478][ T8954] macsec2: entered allmulticast mode
[  128.989904][ T8963] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20004
[  128.994938][ T8963] netlink: 'syz.1.1112': attribute type 1 has an invalid length.
[  129.027424][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  129.034501][ T8963] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  129.039874][ T8963] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  129.050054][ T8963] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  129.054770][ T8963] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  129.060670][ T8963] bond2: (slave geneve2): making interface the new active one
[  129.065107][ T8963] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  129.248409][ T8985] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  129.278204][ T8985] veth0: entered promiscuous mode
[  129.414802][ T8987] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  129.931033][ T9043] tap0: tun_chr_ioctl cmd 1074025676
[  129.939907][ T9043] tap0: owner set to 0
[  130.518721][ T9093] syz_tun: entered allmulticast mode
[  130.531805][ T9093] dvmrp8: entered allmulticast mode
[  130.616294][ T9092] syz_tun: left allmulticast mode
[  130.705253][ T9107] sch_fq: defrate 1 ignored.
[  131.000931][ T9138] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.006532][ T9138] bond1: entered promiscuous mode
[  131.008357][ T9138] bond1: entered allmulticast mode
[  131.010560][ T9138] bond0: (slave bond1): Enslaving as an active interface with an up link
[  131.030705][ T9138] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.039661][ T9138] bond2: entered promiscuous mode
[  131.041575][ T9138] bond2: entered allmulticast mode
[  131.043800][ T9138] bond0: (slave bond2): Enslaving as an active interface with an up link
[  131.357736][ T9163] syzkaller1: entered promiscuous mode
[  131.359945][ T9163] syzkaller1: entered allmulticast mode
[  131.423662][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  131.667588][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.672600][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.676425][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  131.745749][ T9170] xt_TPROXY: Can be used only with -p tcp or -p udp
[  131.779435][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.788616][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.795975][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  131.840903][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.844976][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.848777][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  131.900481][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.912980][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.915998][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  132.067531][ T9181] netlink: 'syz.0.1162': attribute type 2 has an invalid length.
[  132.091892][   T12] tipc: Resetting bearer <eth:gre0>
[  132.141656][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.144929][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.148536][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.152190][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.154900][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.253581][ T9188] __nla_validate_parse: 8 callbacks suppressed
[  132.253597][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'.
[  132.264765][   T12] tipc: Disabling bearer <eth:gre0>
[  132.335754][   T12] dvmrp8 (unregistering): left allmulticast mode
[  132.353446][   T12] bond2 (unregistering): (slave geneve2): Releasing active interface
[  132.639669][   T12] bond0 (unregistering): Released all slaves
[  132.652045][   T12] bond1 (unregistering): Released all slaves
[  132.667481][   T12] bond2 (unregistering): Released all slaves
[  132.705909][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.795338][   T12] tipc: Left network mode
[  133.198871][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'.
[  133.248958][   T12] hsr_slave_0: left promiscuous mode
[  133.251578][   T12] hsr_slave_1: left promiscuous mode
[  133.263159][ T9225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.265478][ T9225] IPv6: NLM_F_CREATE should be set when creating new route
[  133.267769][ T9225] IPv6: NLM_F_CREATE should be set when creating new route
[  133.270038][ T9225] IPv6: NLM_F_CREATE should be set when creating new route
[  133.275549][   T12] veth1_macvtap: left promiscuous mode
[  133.277523][   T12] veth0_macvtap: left promiscuous mode
[  133.279352][   T12] veth1_vlan: left promiscuous mode
[  133.281927][   T12] veth0_vlan: left promiscuous mode
[  133.901092][ T9185] chnl_net:caif_netlink_parms(): no params data found
[  133.950193][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'.
[  134.023389][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'.
[  134.098722][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.101771][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.112336][ T9185] bridge_slave_0: entered allmulticast mode
[  134.116346][ T9185] bridge_slave_0: entered promiscuous mode
[  134.127887][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.130976][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.134102][ T9185] bridge_slave_1: entered allmulticast mode
[  134.138244][ T9185] bridge_slave_1: entered promiscuous mode
[  134.195257][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.218218][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.222799][ T5820] Bluetooth: hci0: command tx timeout
[  134.340251][ T9185] team0: Port device team_slave_0 added
[  134.372214][ T9185] team0: Port device team_slave_1 added
[  134.450484][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.455066][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.465061][ T9185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.474472][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.477093][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.486616][ T9185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.611034][ T9185] hsr_slave_0: entered promiscuous mode
[  134.615251][ T9185] hsr_slave_1: entered promiscuous mode
[  134.618032][ T9185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.620919][ T9185] Cannot create hsr debugfs directory
[  134.752652][    C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888106c75400: connection exists (fe ff). last cmd: 20
[  134.757869][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'.
[  135.364018][ T9185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  135.369699][ T9185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  135.376201][ T9185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  135.381040][ T9185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  135.484599][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.503829][ T9185] 8021q: adding VLAN 0 to HW filter on device team0
[  135.510206][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.513397][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.527457][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.529814][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.577604][ T9185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.580992][ T9185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.883788][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.007305][ T9329] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1192'.
[  136.051150][ T9185] veth0_vlan: entered promiscuous mode
[  136.067956][ T9185] veth1_vlan: entered promiscuous mode
[  136.133645][ T9185] veth0_macvtap: entered promiscuous mode
[  136.140540][ T9185] veth1_macvtap: entered promiscuous mode
[  136.180006][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.206061][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.237411][ T9185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.246358][ T9185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.249762][ T9185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.262505][ T9185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.302696][ T5820] Bluetooth: hci0: command tx timeout
[  136.422777][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.425858][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.580182][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.604218][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.804845][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'.
[  136.807664][ T9361] netlink: 'syz.0.1197': attribute type 2 has an invalid length.
[  136.822045][ T9361] macvlan2: entered allmulticast mode
[  136.824208][ T9361] veth1_vlan: entered allmulticast mode
[  137.386007][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  137.386561][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  137.388727][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'.
[  137.388749][ T9363] netlink: 'syz.2.1199': attribute type 18 has an invalid length.
[  137.398963][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'.
[  137.404746][ T9364] netlink: 'syz.2.1199': attribute type 18 has an invalid length.
[  137.495004][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'.
[  137.507815][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'.
[  137.511249][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'.
[  137.534389][ T9369] bridge1: port 1(veth0_to_bond) entered blocking state
[  137.537881][ T9369] bridge1: port 1(veth0_to_bond) entered disabled state
[  137.544295][ T9369] veth0_to_bond: entered allmulticast mode
[  137.548329][ T9369] veth0_to_bond: entered promiscuous mode
[  138.111445][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.129588][ T9396] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1211'.
[  138.133765][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1211'.
[  138.138128][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'.
[  138.401555][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.408066][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.412174][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.416767][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.421226][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.535928][ T9403] chnl_net:caif_netlink_parms(): no params data found
[  138.590947][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.593369][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.595671][ T9403] bridge_slave_0: entered allmulticast mode
[  138.598416][ T9403] bridge_slave_0: entered promiscuous mode
[  138.601886][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.604621][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.606915][ T9403] bridge_slave_1: entered allmulticast mode
[  138.609636][ T9403] bridge_slave_1: entered promiscuous mode
[  138.643249][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.650883][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.693438][ T9403] team0: Port device team_slave_0 added
[  138.699637][ T9403] team0: Port device team_slave_1 added
[  138.741698][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.746502][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.756723][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.764233][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.767473][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.778181][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.833683][ T9403] hsr_slave_0: entered promiscuous mode
[  138.836069][ T9403] hsr_slave_1: entered promiscuous mode
[  138.838133][ T9403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.840443][ T9403] Cannot create hsr debugfs directory
[  138.914313][  T794] IPVS: starting estimator thread 0...
[  139.012912][ T9420] IPVS: using max 62 ests per chain, 148800 per kthread
[  140.015548][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.022056][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.039696][ T9435] veth0_vlan: left allmulticast mode
[  140.059862][ T9435] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.062892][ T9435] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.065616][ T9435] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.068315][ T9435] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.091322][ T9435] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  140.094560][ T9435] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  140.097345][ T9435] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  140.100056][ T9435] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  140.103350][ T9435] geneve2: left promiscuous mode
[  140.104907][ T9435] geneve2: left allmulticast mode
[  140.107700][ T9435] vlan2: left promiscuous mode
[  140.109331][ T9435] vlan2: left allmulticast mode
[  140.111371][ T9435] vlan3: left allmulticast mode
[  140.113045][ T9435] bridge_slave_0: left allmulticast mode
[  140.116146][ T9435] gretap0: left allmulticast mode
[  140.117856][ T9435] macsec1: left promiscuous mode
[  140.119421][ T9435] macsec1: left allmulticast mode
[  140.123035][ T9435] hsr1: left allmulticast mode
[  140.124571][ T9435] syz_tun: left allmulticast mode
[  140.126181][ T9435] batadv_slave_0: left allmulticast mode
[  140.128977][ T9435] vlan4: left promiscuous mode
[  140.473343][ T5820] Bluetooth: hci0: command tx timeout
[  140.787175][ T9435] bridge1: left allmulticast mode
[  140.791339][ T9435] hsr2: left allmulticast mode
[  140.796582][ T9435] bond0: left allmulticast mode
[  140.798561][ T9435] bond_slave_0: left allmulticast mode
[  140.800725][ T9435] bond_slave_1: left allmulticast mode
[  140.803087][ T9435] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  140.805656][ T9435] bond1: left allmulticast mode
[  140.807870][ T9435] bond2: left allmulticast mode
[  140.818065][ T9435] ip6erspan0: left promiscuous mode
[  140.821841][ T9435] bridge3: left allmulticast mode
[  140.826843][ T9435] macsec2: left promiscuous mode
[  140.828959][ T9435] macsec2: left allmulticast mode
[  140.836206][ T9435] veth1_vlan: left allmulticast mode
[  140.838095][ T9435] macvlan2: left allmulticast mode
[  140.860374][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.937333][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.010110][ T9453] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  141.033030][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.174532][   T12] bridge_slave_1: left allmulticast mode
[  141.177264][   T12] bridge_slave_1: left promiscuous mode
[  141.180171][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.218938][   T12] bridge_slave_0: left allmulticast mode
[  141.221107][   T12] bridge_slave_0: left promiscuous mode
[  141.234060][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.554795][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.560527][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.568122][   T12] bond0 (unregistering): Released all slaves
[  142.559536][ T5820] Bluetooth: hci0: command tx timeout
[  142.801087][ T9496] netlink: 'syz.0.1239': attribute type 11 has an invalid length.
[  142.902280][ T9501] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  143.028387][   T12] hsr_slave_0: left promiscuous mode
[  143.044450][   T12] hsr_slave_1: left promiscuous mode
[  143.054635][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.057028][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.070255][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.075703][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.115424][   T12] veth1_macvtap: left promiscuous mode
[  143.119170][   T12] veth0_macvtap: left promiscuous mode
[  143.121108][   T12] veth1_vlan: left promiscuous mode
[  143.124137][   T12] veth0_vlan: left promiscuous mode
[  143.491979][   T12] team0 (unregistering): Port device team_slave_1 removed
[  143.519461][   T12] team0 (unregistering): Port device team_slave_0 removed
[  144.151036][ T9403] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  144.169931][ T9403] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  144.190168][ T9403] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  144.200183][ T9403] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  144.203936][ T9548] __nla_validate_parse: 3 callbacks suppressed
[  144.203948][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1251'.
[  144.268150][ T9561] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  144.307004][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.332100][ T9403] 8021q: adding VLAN 0 to HW filter on device team0
[  144.351151][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.354139][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.375118][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.377836][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.411243][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1255'.
[  144.487929][ T9575] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.581240][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.624298][ T5820] Bluetooth: hci0: command tx timeout
[  144.626111][ T9403] veth0_vlan: entered promiscuous mode
[  144.631491][ T9403] veth1_vlan: entered promiscuous mode
[  144.666052][ T9403] veth0_macvtap: entered promiscuous mode
[  144.676290][ T9403] veth1_macvtap: entered promiscuous mode
[  144.682233][ T9602] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1262'.
[  144.701707][ T9605] xt_SECMARK: invalid mode: 0
[  144.703050][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.710062][ T9606] xt_SECMARK: invalid mode: 0
[  144.713608][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.724846][ T9403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.727550][ T9403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.730163][ T9403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.733960][ T9403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.787480][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.789891][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.818301][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.820892][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.596310][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'.
[  145.628134][ T9630] netlink: 'syz.2.1271': attribute type 2 has an invalid length.
[  148.764378][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'.
[  148.796882][ T9657] batadv_slave_0: entered allmulticast mode
[  148.801004][ T9657] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.820194][ T9653] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1278'.
[  148.860932][ T9662] netlink: 'syz.0.1281': attribute type 7 has an invalid length.
[  148.867645][ T9662] netlink: 'syz.0.1281': attribute type 7 has an invalid length.
[  148.907073][ T9668] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  148.910794][ T9668] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  148.913588][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.0.1282 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  148.918347][ T9668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.921352][ T9668] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[  148.923431][ T9668] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9f 2d 5c fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[  148.929363][ T9668] RSP: 0018:ffffc900034470c0 EFLAGS: 00010202
[  148.931270][ T9668] RAX: 000000000000000b RBX: 0000000000000050 RCX: ffff888026610000
[  148.933722][ T9668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  148.936317][ T9668] RBP: dffffc0000000000 R08: ffff888026610000 R09: 0000000000000002
[  148.938858][ T9668] R10: 00000000ffffffff R11: ffffffff897eac80 R12: 0000000000000000
[  148.941319][ T9668] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888109fcf000
[  148.943771][ T9668] FS:  00007fed3fb576c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  148.946543][ T9668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.948622][ T9668] CR2: 00007fed3fb56fc8 CR3: 000000003ee40000 CR4: 00000000000006f0
[  148.951168][ T9668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  148.953727][ T9668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  148.956684][ T9668] Call Trace:
[  148.957820][ T9668]  <TASK>
[  148.958812][ T9668]  drr_qlen_notify+0x2c/0xf0
[  148.960348][ T9668]  qdisc_tree_reduce_backlog+0x29c/0x480
[  148.962162][ T9668]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  148.964190][ T9668]  hhf_change+0x764/0xad0
[  148.965627][ T9668]  ? __pfx_hhf_change+0x10/0x10
[  148.967236][ T9668]  ? __pfx_hhf_init+0x10/0x10
[  148.968778][ T9668]  hhf_init+0x213/0x950
[  148.970074][ T9668]  ? __pfx_hhf_init+0x10/0x10
[  148.971598][ T9668]  qdisc_create+0x7ac/0xea0
[  148.973117][ T9668]  tc_modify_qdisc+0x1426/0x2010
[  148.974693][ T9668]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  148.976389][ T9668]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  148.978132][ T9668]  rtnetlink_rcv_msg+0x77c/0xb70
[  148.979667][ T9668]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  148.981351][ T9668]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  148.983130][ T9668]  netlink_rcv_skb+0x208/0x470
[  148.984702][ T9668]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  148.986473][ T9668]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  148.988195][ T9668]  ? netlink_deliver_tap+0x2e/0x1b0
[  148.989890][ T9668]  ? netlink_deliver_tap+0x2e/0x1b0
[  148.991587][ T9668]  netlink_unicast+0x75b/0x8d0
[  148.993655][ T9668]  netlink_sendmsg+0x805/0xb30
[  148.995623][ T9668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.997381][ T9668]  ? aa_sock_msg_perm+0x94/0x160
[  148.998997][ T9668]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  149.000730][ T9668]  ? __pfx_netlink_sendmsg+0x10/0x10
[  149.002537][ T9668]  __sock_sendmsg+0x21c/0x270
[  149.004130][ T9668]  ____sys_sendmsg+0x505/0x830
[  149.005686][ T9668]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.007415][ T9668]  ? import_iovec+0x74/0xa0
[  149.008905][ T9668]  ___sys_sendmsg+0x21f/0x2a0
[  149.010451][ T9668]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.012210][ T9668]  ? __fget_files+0x2a/0x420
[  149.013724][ T9668]  ? __fget_files+0x3a0/0x420
[  149.015293][ T9668]  __x64_sys_sendmsg+0x19b/0x260
[  149.016946][ T9668]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  149.018667][ T9668]  ? rcu_is_watching+0x15/0xb0
[  149.020226][ T9668]  ? do_syscall_64+0xbe/0x3b0
[  149.021757][ T9668]  do_syscall_64+0xfa/0x3b0
[  149.023234][ T9668]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.024898][ T9668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.026845][ T9668]  ? exc_page_fault+0x9f/0xf0
[  149.028393][ T9668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.030307][ T9668] RIP: 0033:0x7fed3ed8e929
[  149.031835][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.038211][ T9668] RSP: 002b:00007fed3fb57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.040921][ T9668] RAX: ffffffffffffffda RBX: 00007fed3efb6080 RCX: 00007fed3ed8e929
[  149.043583][ T9668] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000007
[  149.046119][ T9668] RBP: 00007fed3ee10b39 R08: 0000000000000000 R09: 0000000000000000
[  149.048713][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.051154][ T9668] R13: 0000000000000000 R14: 00007fed3efb6080 R15: 00007ffea7c49328
[  149.053631][ T9668]  </TASK>
[  149.054622][ T9668] Modules linked in:
[  149.056040][ T9668] ---[ end trace 0000000000000000 ]---
[  149.057754][ T9668] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[  149.059898][ T9668] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9f 2d 5c fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[  149.066006][ T9668] RSP: 0018:ffffc900034470c0 EFLAGS: 00010202
[  149.067930][ T9668] RAX: 000000000000000b RBX: 0000000000000050 RCX: ffff888026610000
[  149.070410][ T9668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  149.072987][ T9668] RBP: dffffc0000000000 R08: ffff888026610000 R09: 0000000000000002
[  149.075690][ T9668] R10: 00000000ffffffff R11: ffffffff897eac80 R12: 0000000000000000
[  149.078175][ T9668] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888109fcf000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  149.080822][ T9668] FS:  00007fed3fb576c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  149.084437][ T9668] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  149.086470][ T9668] CR2: 00007fed3fb56fc8 CR3: 000000003ee40000 CR4: 00000000000006f0
[  149.088940][ T9668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  149.091302][ T9668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  149.093877][ T9668] Kernel panic - not syncing: Fatal exception in interrupt
[  149.096828][ T9668] Kernel Offset: disabled
[  149.098211][ T9668] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:49:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003446850
R8 =ffff8880204c0237 R9 =1ffff11004098046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48d7 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fed3fb576c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed3fb56fc8 CR3=000000003ee40000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fed3ef84478 00007fed3ef84450 XMM03=00007fed3ef84488 00007fed3ef84480
XMM04=00007fed3faed100 00007fed3ef84440 XMM05=00007fed3ef84458 00007fed3ef844a0
XMM06=00007fed3ef84498 00007fed3ef84490 XMM07=00007fed3ef84488 00007fed3ef84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fed3ee11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a098711eb46d3a00 RBX=ffffffff81974d58 RCX=a098711eb46d3a00 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d1000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000200 CR3=00000000239b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa80c011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
