last executing test programs:

1.30025301s ago: executing program 1 (id=1570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d1014000000000000070000a1", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}}, 0x0)

1.298896549s ago: executing program 1 (id=1571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x5)
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x18}}}}}, 0x36)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r5 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030801020000160000000000000000200400048005000300"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000800)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000500)="586fa1", 0x3, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r6, 0x1)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={r8, 0x8}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r8}, 0x8)

750.081742ms ago: executing program 2 (id=1573):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r2, 0x1, 0xfe, 0x6, @remote}, 0x14) (async)
syz_emit_ethernet(0x16, &(0x7f0000001780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@llc={0x4, {@snap={0xaa, 0xab, '5', '\x00', 0x86dd}}}}}, 0x0)

671.024443ms ago: executing program 2 (id=1574):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x7000000}, 0xc010)

670.076172ms ago: executing program 2 (id=1575):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x2}]}, @func={0x7}, @restrict={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x61, 0x2e]}}, 0x0, 0x5d}, 0x28)
sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

511.362476ms ago: executing program 2 (id=1578):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xfffd, @default, @bpq0, 0x1, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x690303, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, &(0x7f0000000140)="7ef6c4b53c5a355f2847ed8958d03e08a02e2fb20752c0dffcc9", 0x1a, 0x4000000, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @mcast2, 0x1}, 0x1c)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e6, 0x56}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x434, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x3, 0x9}, {0x7}, {0x3, 0x3}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {0x7, 0x9}, {0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x3, 0x3}, {0x4}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x4}, {0x2}, {0x2}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0xb, 0x2, 0x4, 0x5, 0x8, 0x2]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7, 0x3, 0x0, 0x100, 0x651, 0x80, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6fd2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x6, 0x8}, {0x1, 0x7}, {0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x2, 0x1}, {}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x2}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x4}, {}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x6, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x88, 0x7fff, 0x5, 0x98, 0x9b, 0x81, 0x9, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x2}, {0x3, 0x1}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0xa}, {0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x1}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x8}, {0x3}, {0x7, 0x7}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x0, 0xa}, {0x6, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x9}, {0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x6}, {0x6}, {0x7}, {0x0, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x9}, {0x7, 0x6}, {0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x4, 0x7}, {0x6, 0x17}]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x4}, {0x3}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x6, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0xa}, {0x1}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x1b, 0x6c, 0x16, 0x7b, 0x60, 0x30, 0x16, 0x1, 0x3, 0x2, 0x2, 0x30, 0x1, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x6c, 0x4, 0x9, 0x36, 0x6, 0x48, 0x36, 0xb, 0x48, 0x4, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x130, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x4f, 0x80, 0x3, 0x3, 0xbb, 0xb2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x3]}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7cf, 0x9, 0x6, 0x3, 0x2, 0x3, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7}, {0x0, 0x6}, {}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x3}, {0x2, 0x3}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {}, {0x4, 0x8}, {0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x4, 0x1d}, {0x6, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x30, 0xc, 0x36, 0x9, 0x9, 0x1, 0x754fb99b0e0b0239, 0x36, 0x5, 0x6c, 0x12, 0x3, 0x36, 0x48, 0x60, 0x6, 0x5, 0x30, 0x4, 0xc, 0x2, 0x1, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff, 0x2, 0xd, 0x6, 0xff81, 0x0, 0x4]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a5, 0x2, 0xffc0, 0xcc3f, 0x6, 0x81, 0xdd4, 0x6]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0xe}, {0x5, 0x9}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {}, {0x2, 0x7}, {0x3, 0x3}, {}, {0x0, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x16, 0xc, 0x6, 0x3, 0x30, 0x2, 0x16, 0x0, 0x9, 0x12, 0x12, 0x2, 0x3, 0x0, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x74, 0x2, 0x5, 0x7, 0x2, 0x100, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x0, 0x3, 0x6c, 0x1c, 0x4, 0x1b, 0x16, 0x6c, 0x6, 0x9, 0x5, 0xb, 0x6, 0x48, 0x5, 0x30, 0xc, 0x18, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x19}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x51c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x62}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xde}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1ac, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x642, 0x6, 0x0, 0xfc, 0x5, 0xfff, 0x4, 0xb]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x2, 0x60, 0x6, 0x9, 0x4, 0xc, 0x3, 0x60, 0x6c, 0xc, 0x48, 0x18, 0x0, 0x24, 0x6c, 0x9, 0x1b, 0x36, 0xc, 0x2, 0x8aa429871800c742, 0xb, 0x13, 0x0, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xde8, 0x3a41, 0x0, 0x6, 0x10, 0x9, 0x3, 0x6]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x6, 0x1, 0x7, 0x1b, 0x9, 0x1b, 0x24, 0x0, 0x11, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x2, 0x1000, 0x1, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5f, 0x8, 0x0, 0x3, 0x8, 0xd, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xe, 0x4ef2, 0x9, 0x8001, 0x6, 0x660]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6b, 0xb, 0x1b, 0x4, 0x3, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbad2, 0x1, 0xb5cc, 0x1000, 0x401, 0x9, 0x7, 0x1d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x97c, 0x3015, 0x1000, 0x8, 0x3, 0x2, 0x8b]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x6, 0x7}, {0x3, 0x1d}, {0x2, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6}, {0x2}, {0x7, 0x1}, {0x6, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6000, 0x40, 0x1, 0x44, 0x8, 0xf, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x108, 0x6, 0x7f, 0x3e, 0x3, 0x10, 0x7]}}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8bb3, 0x5, 0x138, 0x7, 0xd7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x3, 0xfffd, 0x4, 0x8, 0x9, 0xc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0xf, 0x9, 0x9, 0x7f, 0x2, 0x7fff, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1, 0x16, 0x5, 0xc, 0x21, 0x18, 0xc, 0x60, 0x5, 0x16, 0x0, 0xc, 0x6c, 0x4, 0x24, 0x6, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33a, 0x8, 0x7, 0xb, 0xfffc, 0xceb, 0x9, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x3, 0xc, 0x0, 0xfffc, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x6}, {0x6, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x2}, {0x2, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1}, {0x7, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {}, {0x2, 0x9}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4}, {0x6, 0x1}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x6, 0xffff, 0x101, 0xf8, 0xf841, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2f1, 0x3, 0xd, 0x2e98, 0xbe, 0xd, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x4, 0xfff, 0x292e, 0x8, 0x101, 0x3]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x7}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x7}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {0x3, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x6}, {0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x1ff, 0x7, 0x4, 0x7d2, 0xffe0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x370, 0x5, 0x7, 0x6f0, 0x6, 0xffee, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x4b, 0x9, 0x6, 0xc, 0x3, 0x3, 0x12, 0xc, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x1b, 0x36, 0x3, 0x54, 0x4, 0x30, 0x36, 0x2, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x6, 0x0, 0x5fe9, 0x6, 0xf, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x280, 0xfffb, 0x1, 0x4, 0x7, 0x5]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x3, 0x30, 0x4d, 0x16, 0x36, 0xb, 0x4, 0x2, 0x60, 0xb, 0x60, 0x4, 0x48, 0x48, 0xc, 0xb, 0x2, 0x6c, 0xc, 0x30, 0x30, 0x24, 0x36, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x28c, 0x5, 0x4, 0x2, 0x6, 0xf84e, 0xa, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0xfffb, 0x5, 0x0, 0x6, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9562}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}]}]}, 0x964}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xb8, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0000000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x494}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x224}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000f40)='cgroup.stat\x00', 0x0, 0x0)
write(r2, &(0x7f0000000f80)="a1b5b077cd12350fb1a9fe3386df37ae2eb8258cab3a8efab6eaf2396655ae280894132df21f37f552d4a845700e90bc4150ad718c705621f21dcc47dbf18bf44c2a0fd34b13541903b803c07641fd080e95402f811dcb59edb6bf501d04effb95e4a41cc9691b5b94", 0x69)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'veth0_macvtap\x00', 0x1000})
r7 = openat$cgroup_ro(r5, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000001080)=@gcm_128={{0x303}, "e20a26fa97af386c", "75150bb65797913373aabbb1949b60b0", "5faec56e", "7ee57ef7b2e7d2ac"}, 0x28)
r8 = accept4(r6, &(0x7f00000010c0)=@l2, &(0x7f0000001140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x205, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000001)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000014c0)={'veth1_to_bridge\x00', 0x400})
connect$inet6(r0, &(0x7f0000001500)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000050)

508.767202ms ago: executing program 2 (id=1581):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x40}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)
sendto$rxrpc(r0, &(0x7f0000000000)="b0", 0x1, 0x2, 0x0, 0x0)

435.324769ms ago: executing program 2 (id=1583):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)=ANY=[@ANYBLOB="40100000", @ANYRES16=r2, @ANYBLOB="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"], 0x1040}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000001800010026bd7000fcdbdf25ac1414aa0000000000000000000006000000000000000000000000000000355d2ff6851668000000008767ff00d0144e2000ec105f09ff9c993ea8221fa4a738a01763943850b24c9835ff4c801bb6da9f68a8f07a0d1804d76df86b106e5243c057e64e0bb6572225325aa9c35a8f4f9bd5709c8530e0de195a05bf0dd475b79e84e19a8e619e1564cd5f5a439613af4a10", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d4ff000000ac14140c0000000000000000000000000600000000000000e9000000000000000800000000000000fdffffffffffffff0300000000000000ffffffffffffffff0500000000000000ffffff7fffffffff04000000000000000f00000000000000080000000000000001000000000000000600000007000000080000002dbd7000063500000a00070bdc00000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x24040040}, 0x4010)
socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x800000000000000}, 0x80)

381.666432ms ago: executing program 1 (id=1585):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT], 0x28}}, 0x20048010)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r7, @in={{0x2, 0x4e24, @empty}}, 0x2, 0x3, 0xa49, 0x1, 0x28, 0x9}, 0x9c)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r10, {0x2, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

321.101928ms ago: executing program 0 (id=1586):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x40, 0x1405, 0x21, 0x70bd25, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x40}, 0x1, 0x0, 0x6000000000000000}, 0x1004c810)

320.16055ms ago: executing program 0 (id=1587):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x0) (async)
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x4}]}}]}, 0x3c}}, 0x48004)

209.045529ms ago: executing program 1 (id=1588):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000016000600000000000200000000000000000000000000000002000100000000000000021600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0)

208.158125ms ago: executing program 1 (id=1589):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001040)={&(0x7f0000000000), 0xc, &(0x7f0000001000)={&(0x7f0000000080)={0xf68, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0xf4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xc8, 0xe, 0x0, 0x1, [{0xc2, 0x0, "7c8b173c9d47d06bd41eb3ccf923f77430b852faa12e21a92a890337af5be21f087ed8988f04bfb965db04979259bd47e395deb328fdc1c31ec1ea6066d1800a5a915eca5083c2cbad345beda5d2ef38a367f30681e609f89a25d9cb70edd72dd17179d3478303c6f5eb739569445b86db4ec1803598e9a7e4e1063557337d25ee11533c186bec2f9e337a3ec82634705feb40474fb51a8f9d39d7904d79b88a926ec272e15c9889b55474a3658da95561037a54efa86f708a28e42ef12f"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x3}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xa4}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x394, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x388, 0xd, 0x0, 0x1, [{0x8e, 0x0, "85493b7053fbb96f5988799c385f3e9168f0473cbc269ca6984295d87cd6b5498e7d1154a0b168ce710e82d1f0ef62232d8b2f9c793f9ee7a7ac7b81af6cf1b935cb31b877022434f2cbb4bebea56a0019ef706d8535c075fd75f2392fff43125588221104be20f13da314cacd5ebdab2d1e4e611da58e3517bc0899d8474efec0d1b0f8b9fd916ef8b4"}, {0x57, 0x0, "ab87dd42964d8e52133d2d4c0763be2e1236ed0665222b92d8cde99d591182dff48d6bc624a56fa523127324c1fce546abcaec2fd15a8848cb93506c3b9bf874646175f87aeef8de82abba56928b0102f9754a"}, {0x53, 0x0, "73b681ae3743555b03adccb8d2eb97a2d0189325bdc7e0db4d29b8ec171995cb295474cf5fccdecee519d4115a1e536c0ee8b8414f40a63403dd79fe2e5f35a45c8d1af36438f9bef4d18dadc96ba5"}, {0xc9, 0x0, "3454469abcedfdb6f0a953ee8b904968b6b1a095e141e8255cf93c574a147fc1943e66b4911e8de576ac347eb0b22fc030258674b288d8f8df420f100e04e84178e6426164ce256f42927984da42e447ebc18e31ac33b9cd2705b05214514b9e758bbda51f248032bf05c8e999e4ce32c3473e655c5228e945ad7ad9302cde512011251ca485a7a5d7d4275f646ae82dab25993e47dbb84b9b04fe3079f79d2bbd3359db7fb7bf1f1fd9fbb425c5ba82efe7d2c80228ad9b540435eab50e489d45a3a27981"}, {0xba, 0x0, "8e737d0c32aa29fc3e5394ffd523630ca911b1aa60719458f2771da822621ff75aaf704beba5087aa8ce05e43e17f3ba6009c9723ba8f44a9840fd024e1840f1e7ce36fd888f7d2b737e2334be95961f8bc525c0f7c9054ba52b1b2b7d587858b2abb1d28d1cf9f47cf71d8166caa19c48da16f247073d07dacf0330992d9891aade811d87b9326849658ef0fec1e98230602b86bd66f758b24866786471442a2ae445e005095c1bf5bebe0f95edb7f4c53ee60ed707"}, {0xbf, 0x0, "e47439ee03ce6c16d441a81f7eced14ac2d409c37c625d7720738206f37498fe188bb00498956c292de472b4438705625cf9566dad2b0ff25312c2e6ae15e4ffef2e12bd80960eb79eaba1aec7829706ec356f3a495bb286f131f4a60e43ea1d812ea77deb5575a402169b0c8dcd56d992a19c5118d6dd5b2aa17d300a7da2434f7e2b485809d3bf4a2073ec49a59cedc9bb2004d794b8e7ca2346575e06c0a7db21d5af2cebb51a99905796e31a8a44f03cd776ccc4c1946913dc"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xd}]}, @NL80211_ATTR_NAN_FUNC={0xa0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3eddf21ad4e2"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8f, 0xb, "a6ee6b3d70bcf175ee741798ee94894f9ec16a808174f8c4a19a47c3cf86dc4cf40b99ec7376f016cf072de8373ed993dc547cfd14dd71ff15b98e61df32a06f32179b3c003d9f5c685e43942421cbb8e6b3b6b4ebaabe74cc5afd71e9a72ae38eb85b3697c5f3c086d5092413713727d973c03859c73b95f0cbb2d4e4261dae920c4462a9bf1d6f1fdc1a"}]}, @NL80211_ATTR_NAN_FUNC={0x5d4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11c, 0xe, 0x0, 0x1, [{0x70, 0x0, "412ed4cf66684c0e98b1c0764ccdfca216ad916503d27fcaf1ead22f7e42bfe208e866168fc2270b385f95d6934b11c41a754c4396b29bbf7dff85e2583e9d5f7a0b24af885b373367525ccfd17b350c7f0f1c57056f2e6513ae734e89e00a17a4dadaf5d877c2d1efa91d54"}, {0xa7, 0x0, "6460e881f7263a11213d0ef602967de83ff4bfbdc30abf06a7171a1d2c334686e09a8fc3baec07431696a8e2c78a69371e0c0e08b83a6e73c075e526db95faf8b84722d7c76e229e301b99cc9d2cc35dc25fb6f6dd8b992f2a2adde099308ac47d2975f22fa8b6c0d046ad21747dd4cac8e8989576cf56ab61c7778ea4709b7c3e0f4981a62ee9f2b85589a7c020e090f125cf8fd94ba35187d16240e845fc50b4e218"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SERVICE_INFO={0xeb, 0xb, "d16ff803a852c68dfa5e8daa962d9926c91441a899de3245d103f50f1c5b8680d01ded247c7138cde29f761617b27ddf34c9d404a374a5aed760aefd4026d4a7b27de33ef6cb585da0553718c6249b74658c8c10aef5e837f4de13e9bcbfef429f025ce7d16afaac1d300d3fd5d8da4708fafcde1ee3dedec19c59623c3bb8448e8387d7406de9882fbb4fe35e43d4d75acb4bd658b3c318f66adcb4c7c026de19fac98d9b580a898ea2b2d1d9f8a58b66da37f194ab5f5592f52c5fc5ec44790cf4abcc6a3221976594a4d2f5d1d0d350623300ddc48b6b156fb136cd7129b3469d1b0954918a"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x39c, 0xd, 0x0, 0x1, [{0xef, 0x0, "a7b9c8abb15401fe97ae37c04a5504674f80d58be2b853ec1ef8486cc3e0ac8ec8904e595d6b12c04478a64eedfc87f2624122d22a5da81045a6eab7d0f88d073924ce4be57e1ac9edcc7b957af041a151ed0d3f6243f85471a368b56d750e173fa83d9d2e55e7c3809deb21e74240fafb0e54602c52718a011c01e2c929a8980c973b32ef5e33117b704d59adef5f14eb40ac75b941aae7a9a131fa26c94ef49fd4952ad836ba96a84975692ad7c0d70899ce3c9c48b84c182b1b079c925ba10677e1a69196bbaf4b6d814f0bb2d8929b18d5c7ef89a631814f0b41754df9ab009db2b0e1fd8a0b42c322"}, {0x25, 0x0, "650e28f959a53897d6e5ce37a3212fb7a8bd3ea8a52c977e4ad42eb4e21e1f7e76"}, {0xa8, 0x0, "84a9b4587e7d6e6bc9823c1a48bd24772f2242ca5910e452851c2a44ce5ea3de1240a93630fbd794bda7d2f33348a1b936f4b4972dbb1911e1d2048ad8b0633ceae572f5bb9a031d4c01f106c5a17fdc2bc9c36aa7110834030876cd52d4cbc87cb1d7c1468500198712fef11e70bbb2d241a8ef417e5301f78b3782ae53e46c3d67db5074f1cd539e3674993dec9c8ee95d658de028c67e27ef49d7ec5b4f74ab1f2235"}, {0x13, 0x0, "b4b61b828afc8b8a574e7512ec7297"}, {0xbb, 0x0, "b67e6bdec4a9484ca032ea91992ff57b1202a7cd35b408264baf5fd52967508010f4b5d4e4d78e9a7b5ca81c968b42c2efba7f8352919f736a90adaabd595a8e18a04ab7fe5882c5c35f4173b273a2cbfcde651d909e5f24e8b08f022f16e0ed3d8ff44b7f8576ca36d570bd9a8cdb7b9bd0cc9158dec43f858d62781d241be168029569daf83d9b6b4167fc888bcc358a05653a8293a9b505ef07859b81c691a85ad3c94ac10cd76bf1b5c2cb98c526af40de88c0297e"}, {0xf, 0x0, "ea5320c348cd64c318e892"}, {0xd, 0x0, "31b005ce93d1ff362b"}, {0xe5, 0x0, "0ff5ef2482d9a03094e35a01cd434e9ed496669887751bb136382bbd0d5741669e0d0ac30a7caedd6d168c735057db161b2f4a100d46a715b27c5934f6a1fa9091fe7ddadc6b3554ac8f76d7e6034d15fe5374fefc7b5946ae4c7d2e4df7c5531c80252f5a7f5f3872cb9b7dada70ffceb4eb1343a0120ae5cfa036cdad1d17538d40fcb4969ba8584969fe0a9a19a36aa3b03ccc991ce3b19008e43a81fb03a759123a8b5d5d4400863683eacfbe2a6bc1921db62c487959a14b3ae26f17e8a61e672f4c2bf562e890eeeda12272371b98ac1b6c984b51f89f60c141b1dbbbd76"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "af164ec12258"}]}, @NL80211_ATTR_NAN_FUNC={0x338, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x80000000}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x318, 0xd, 0x0, 0x1, [{0xee, 0x0, "5c40e32de70fec0493575beeb10bfce17a3861afafbe7cb5ceabdd0da666cdbe612b13521958aaa9e86f4e2ec8731618c807c43d0af404b70ec9cc3ced9d4ceb58cacdf2ce6fb2887156d862d03741b2e57bebc2c91a118f9919a63b6420c5ecf1808b8d21a34bb87a03bc07d20405465c6b6252b94ba707f451f90bd4a2544cd9858410fdd71cdd237b59570c1d656ba48f53c35af508b1178b90517a727b6a7a65d24d996c3674e951bffd135a14c0be9dbb4c19ad4efffad7b374e8a1a1a30713aa6a087c82df52f22b7a115ec88b02f49520abfdf636df0849415c54fabfef6cfb6bdd50b54b818f"}, {0xde, 0x0, "f113bb96093e7851d5f6e1f092c991ad88927e2d46a51fb39c13d000456c76d25a9a9c1f6ced118efb3714df67d9042cc02a489c24c8975123c6448be63e576c9b52322a4a7d4eae8f99c97e431decf5f0b8f99ca7980bc14705ac9d62a38524c1060901061d8b7d09cad8f5e66c9441bd60c2e8024f3d6a696ab034d585752e0b93063208e6559aedb30a95bb84ade0717cb118f1c99032aa5409504d80d29ecfa52033d08d2b2414a37697d97c3c77e4cbdc021f5fd7a2afc01377df02afad7c8a29c2cc50054707465f8a940ddfa37d7a432152ebf956f099"}, {0xb9, 0x0, "6a3272422daaf84c24a18f8d68bd9eba139e6043fcf988e9aaf21886c4626237b7bf4684070f1f8c76a6ca0bf10f92d60199474244a5f8188a79f9679a7b53805b313eb1082352ba3ad058d047d2327dddf62328ee3e9de36b08e200531046b78a96252c4bf49c78ad9fe4e99d3ef3fae023cd22ee0ff29e3ea078a6f78f2a13d619493554f94e5eb4a092874d7b6fd7708002ea37e9150990106125c7a6f26975bcf5c27297c1cbf2391448bddb3c53348f37a759"}, {0x86, 0x0, "5c01395d2e9ac5a97940ee22e5cd48407420463deaccbdf7997312023f40b4966a7bd86810beee5c60b79fcb3a71663cc9674edc00c79b9ffc15b6e3709cbec20b02665c98132500e9dc96db9e93004a42923d5690cc0144b7f6522a821529471de8e474da0426b82db30657ef909ac17ea9d73fd5dda1312518d1a07b550160f889"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}]}]}, 0xf68}, 0x1, 0x0, 0x0, 0x20000010}, 0x40)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000001080)) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x800, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001100)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001180)={0x178, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x164, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34bf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5dd0}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffa8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa6}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb60a}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x489}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf28}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000001}, 0x4094) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000001380))
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000013c0), 0x8)
setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000001400)=0x9, 0x4) (async)
r5 = accept4$inet6(r4, &(0x7f0000001440)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001480)=0x1c, 0x80800)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000014c0)={0x5c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x10000}]}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan0\x00', <r9=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan4\x00', <r10=>0x0}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r11=>0x0}) (rerun: 64)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000001700)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x54, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x10000}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1001d}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc005}, 0x14) (async, rerun: 32)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001740)={'batadv_slave_0\x00', 0x8}) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000001780), &(0x7f00000017c0)=0x8) (async)
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x72}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000050) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x6c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x68, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x40}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001bc0), r7)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x74, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',\xf7\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0xc004800)
connect$l2tp(r4, &(0x7f0000001d00)={0x2, 0x0, @loopback, 0x3}, 0x10) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001d40)={0xb000200f}) (async)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7db6558b0bd0e65b94b970532d"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)

139.77579ms ago: executing program 0 (id=1590):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40)
mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r1, 0x12504000)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendto$rxrpc(r0, &(0x7f0000000000)="b0", 0x1, 0x2, 0x0, 0x0)

139.397552ms ago: executing program 0 (id=1591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000540)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
r4 = socket(0x2c, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)}, {0x0}], 0x2) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x9) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYRESHEX=r2], 0x14}}, 0x20040880) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r4}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
r10 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r10, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2000000022, 0x0)

81.918148ms ago: executing program 1 (id=1592):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@remote}, 0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="011900"/14], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000085)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0)
recvfrom$llc(r3, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0)
listen(r3, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xbbab, 0x4, 0x8001, 0x10, 0x4, 0xfffffff9, 0x5}, 0x9c)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000480))
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="463fa56163dd", 0x6}], 0x1}}], 0x2, 0x4000000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000200)="9c5bc7db210bc9d3e78d"}, 0x20)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, 0x0, 0x0)
sendto$rose(r7, 0x0, 0x0, 0xc0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4004)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))

80.997207ms ago: executing program 0 (id=1593):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
socket(0x840000000002, 0x3, 0x100)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

0s ago: executing program 0 (id=1594):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(0xffffffffffffffff, r1, 0x8f5, 0x100000000000000)
write$cgroup_type(r1, &(0x7f0000000180), 0x9)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
socket(0x28, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
pipe(&(0x7f0000000140))
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
shutdown(r3, 0x1)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7], 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29696' (ED25519) to the list of known hosts.
syzkaller login: [   55.786026][ T5810] cgroup: Unknown subsys name 'net'
[   55.889665][ T5810] cgroup: Unknown subsys name 'cpuset'
[   55.893754][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.598546][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.400557][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.417917][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.421355][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.425253][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.428240][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.442739][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.447768][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.451073][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.459434][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.462507][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.466677][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.493845][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.499197][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.504429][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.508153][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.783850][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   62.856007][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   62.907323][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   62.949011][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.952813][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.957862][ T5832] bridge_slave_0: entered allmulticast mode
[   62.961877][ T5832] bridge_slave_0: entered promiscuous mode
[   62.980839][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.984610][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.987751][ T5832] bridge_slave_1: entered allmulticast mode
[   62.991787][ T5832] bridge_slave_1: entered promiscuous mode
[   63.088852][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.094360][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.097067][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.100127][ T5829] bridge_slave_0: entered allmulticast mode
[   63.105352][ T5829] bridge_slave_0: entered promiscuous mode
[   63.138102][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.156822][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.160094][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.165191][ T5829] bridge_slave_1: entered allmulticast mode
[   63.169146][ T5829] bridge_slave_1: entered promiscuous mode
[   63.212549][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.216350][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.219606][ T5837] bridge_slave_0: entered allmulticast mode
[   63.223836][ T5837] bridge_slave_0: entered promiscuous mode
[   63.228546][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.231854][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.235490][ T5837] bridge_slave_1: entered allmulticast mode
[   63.239496][ T5837] bridge_slave_1: entered promiscuous mode
[   63.246396][ T5832] team0: Port device team_slave_0 added
[   63.275535][ T5832] team0: Port device team_slave_1 added
[   63.294473][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.323892][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.328144][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.331896][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.343362][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.352626][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.359419][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.392675][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.396101][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.410625][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.431884][ T5829] team0: Port device team_slave_0 added
[   63.460832][ T5829] team0: Port device team_slave_1 added
[   63.504519][ T5837] team0: Port device team_slave_0 added
[   63.520149][ T5832] hsr_slave_0: entered promiscuous mode
[   63.523679][ T5832] hsr_slave_1: entered promiscuous mode
[   63.528147][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.530443][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.540364][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.546773][ T5837] team0: Port device team_slave_1 added
[   63.560508][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.562860][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.573509][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.610694][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.614744][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.626430][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.653750][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.657184][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.669577][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.744922][ T5829] hsr_slave_0: entered promiscuous mode
[   63.748620][ T5829] hsr_slave_1: entered promiscuous mode
[   63.751810][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.756057][ T5829] Cannot create hsr debugfs directory
[   63.801105][ T5837] hsr_slave_0: entered promiscuous mode
[   63.804540][ T5837] hsr_slave_1: entered promiscuous mode
[   63.807444][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.810797][ T5837] Cannot create hsr debugfs directory
[   64.075531][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.096875][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.115990][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.131463][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.159270][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.170328][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.179818][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.191318][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.281640][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.290482][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.299345][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.311713][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.445693][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.456983][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.475033][ T5839] Bluetooth: hci0: command tx timeout
[   64.497403][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   64.505370][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   64.522550][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.526995][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.530112][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.545304][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.548047][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.553811][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.556363][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.563295][ T5839] Bluetooth: hci2: command tx timeout
[   64.563311][   T54] Bluetooth: hci1: command tx timeout
[   64.575132][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.578188][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.589057][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   64.628720][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.631381][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.659322][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.662282][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.707283][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.711744][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.868949][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.945443][ T5832] veth0_vlan: entered promiscuous mode
[   64.962035][ T5832] veth1_vlan: entered promiscuous mode
[   64.994562][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.001602][ T5832] veth0_macvtap: entered promiscuous mode
[   65.017289][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.022415][ T5832] veth1_macvtap: entered promiscuous mode
[   65.051229][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.068547][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.088357][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.093968][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.098139][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.101723][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.141940][ T5829] veth0_vlan: entered promiscuous mode
[   65.176163][ T5829] veth1_vlan: entered promiscuous mode
[   65.196012][ T5837] veth0_vlan: entered promiscuous mode
[   65.210414][ T5837] veth1_vlan: entered promiscuous mode
[   65.271424][ T5829] veth0_macvtap: entered promiscuous mode
[   65.297445][ T5837] veth0_macvtap: entered promiscuous mode
[   65.302511][ T5837] veth1_macvtap: entered promiscuous mode
[   65.317595][ T5829] veth1_macvtap: entered promiscuous mode
[   65.327126][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.330452][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.377577][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.392057][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.406719][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.420310][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.420899][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.429194][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.436956][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.440170][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.444823][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.448952][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.458451][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.462097][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.466805][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.469948][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.549279][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.616427][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.620347][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.633674][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   65.646674][ T5897] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'.
[   65.690746][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.703492][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.747364][ T5899] tipc: Started in network mode
[   65.749593][ T5899] tipc: Node identity b6adcfcf25ef, cluster identity 4711
[   65.752716][ T5899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.759715][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.767460][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.776245][ T5899] syzkaller0: entered promiscuous mode
[   65.778870][ T5899] syzkaller0: entered allmulticast mode
[   65.793802][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.796737][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.816776][ T5899] tipc: Resetting bearer <eth:syzkaller0>
[   65.830180][ T5898] tipc: Resetting bearer <eth:syzkaller0>
[   65.840901][ T5898] tipc: Disabling bearer <eth:syzkaller0>
[   65.929372][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   65.956207][ T5903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   65.960610][ T5901] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96
[   66.108475][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   66.237684][ T5918] netlink: 'syz.2.10': attribute type 2 has an invalid length.
[   66.250807][ T5918] : entered promiscuous mode
[   66.299470][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'.
[   66.398453][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x206
[   66.412866][ T5930] Zero length message leads to an empty skb
[   66.415950][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   66.421583][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   66.539127][ T5926] infiniband syz!: set active
[   66.541290][ T5926] infiniband syz!: added team_slave_0
[   66.554524][ T5839] Bluetooth: hci0: command tx timeout
[   66.592880][ T5926] RDS/IB: syz!: added
[   66.598611][ T5926] smc: adding ib device syz! with port count 1
[   66.601602][ T5926] smc:    ib device syz! port 1 has pnetid 
[   66.633573][ T5839] Bluetooth: hci1: command tx timeout
[   66.634084][   T54] Bluetooth: hci2: command tx timeout
[   67.088320][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   67.352621][ T5948] netlink: 56 bytes leftover after parsing attributes in process `syz.0.19'.
[   67.357472][ T5946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18'.
[   67.784176][ T5972] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   67.943988][ T5975] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   68.003519][ T5983] netlink: 'syz.2.30': attribute type 2 has an invalid length.
[   68.047197][ T5983] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET)
[   68.092073][ T5990] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   68.115439][ T5990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.286060][ T6003] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   68.477179][ T6015] tipc: Started in network mode
[   68.482289][ T6015] tipc: Node identity 0eaa6780a657, cluster identity 4711
[   68.492554][ T6015] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   68.539556][ T6015] tipc: Resetting bearer <eth:syzkaller0>
[   68.572703][ T6013] tipc: Resetting bearer <eth:syzkaller0>
[   68.635141][   T54] Bluetooth: hci0: command tx timeout
[   68.715527][   T54] Bluetooth: hci2: command tx timeout
[   68.715569][ T5839] Bluetooth: hci1: command tx timeout
[   69.494036][ T6013] tipc: Disabling bearer <eth:syzkaller0>
[   69.499276][ T6027] netlink: 'syz.0.39': attribute type 13 has an invalid length.
[   69.675157][ T6039] syz!: rxe_newlink: already configured on team_slave_0
[   69.784344][ T6047] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.796740][ T6047] netlink: 'syz.2.44': attribute type 2 has an invalid length.
[   69.971979][ T6049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.360722][ T6076] bridge0: port 3(gretap0) entered blocking state
[   70.365436][ T6076] bridge0: port 3(gretap0) entered disabled state
[   70.368523][ T6076] gretap0: entered allmulticast mode
[   70.378632][ T6076] gretap0: entered promiscuous mode
[   70.381381][ T6076] bridge0: port 3(gretap0) entered blocking state
[   70.384499][ T6076] bridge0: port 3(gretap0) entered forwarding state
[   70.627499][ T6052] tipc: Disabling bearer <eth:syzkaller0>
[   70.710828][ T6085] Bluetooth: MGMT ver 1.23
[   70.713348][ T5839] Bluetooth: hci0: command tx timeout
[   70.721358][ T6085] lo: entered promiscuous mode
[   70.724278][ T6085] __nla_validate_parse: 8 callbacks suppressed
[   70.724290][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'.
[   70.795614][ T5839] Bluetooth: hci1: command tx timeout
[   70.795682][   T54] Bluetooth: hci2: command tx timeout
[   70.868383][ T6087] xt_CT: No such helper "syz0"
[   70.999211][ T6084] lo: left promiscuous mode
[   71.096576][ T6108] syz_tun: entered allmulticast mode
[   71.100519][ T6107] syz_tun: left allmulticast mode
[   71.201581][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.205321][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.214609][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'.
[   71.558551][ T6146] openvswitch: netlink: Duplicate or invalid key (type 0).
[   71.562127][ T6146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.716660][ T6142] team0 (unregistering): Port device team_slave_0 removed
[   71.722518][ T6142] team0 (unregistering): Port device team_slave_1 removed
[   71.760817][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   71.885303][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   72.010038][ T6176] netlink: 'syz.0.73': attribute type 11 has an invalid length.
[   72.017076][ T6176] netlink: 224 bytes leftover after parsing attributes in process `syz.0.73'.
[   72.066472][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'.
[   72.104723][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   72.123192][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   72.258889][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   72.414791][ T6203] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   72.458175][ T6206] netlink: 'syz.0.82': attribute type 3 has an invalid length.
[   72.461498][ T6206] netlink: 224 bytes leftover after parsing attributes in process `syz.0.82'.
[   72.616037][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   72.667574][  T970] cfg80211: failed to load regulatory.db
[   72.781764][ T6227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.091788][ T6248] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   73.104875][ T6252] x_tables: duplicate underflow at hook 1
[   73.264790][ T6266] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   73.290638][ T6268] netlink: 'syz.0.105': attribute type 1 has an invalid length.
[   73.294556][ T6268] netlink: 'syz.0.105': attribute type 2 has an invalid length.
[   73.298477][ T6268] netlink: 'syz.0.105': attribute type 1 has an invalid length.
[   73.300904][ T6268] netlink: 'syz.0.105': attribute type 2 has an invalid length.
[   73.348239][ T6271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.352879][ T6271] syzkaller0: MTU too low for tipc bearer
[   73.356198][ T6271] tipc: Disabling bearer <eth:syzkaller0>
[   73.448194][ T6276] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   73.563877][ T6288] netlink: 'syz.2.112': attribute type 2 has an invalid length.
[   73.823487][ T6298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.847792][ T6305] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   73.909217][ T6298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.954666][ T6309] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   73.957614][ T6309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.009064][ T6298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.059737][ T6298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.131593][ T6298] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.175173][ T6298] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.199933][ T6298] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.216225][ T6298] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.367746][ T6326] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[   74.371907][ T6326] netlink: 'syz.2.124': attribute type 4 has an invalid length.
[   74.559329][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039721400: rx timeout, send abort
[   74.564837][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888039721400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.878255][ T6344] netlink: 'syz.0.131': attribute type 2 has an invalid length.
[   74.889254][ T6344] : entered promiscuous mode
[   75.237727][ T6361] x_tables: duplicate underflow at hook 1
[   75.240392][ T6361] x_tables: duplicate underflow at hook 2
[   75.247856][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.252339][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.455526][ T6374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.492267][ T6393] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   76.512310][ T6393] __nla_validate_parse: 19 callbacks suppressed
[   76.512325][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   76.519626][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   76.604440][ T6403] netlink: 52 bytes leftover after parsing attributes in process `syz.0.155'.
[   76.617462][ T6404] Bluetooth: MGMT ver 1.23
[   76.947570][ T6420] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.159'.
[   77.182054][ T6432] netlink: 56 bytes leftover after parsing attributes in process `syz.2.163'.
[   77.185664][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[   77.243601][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'.
[   77.475848][ T6437] netlink: 280 bytes leftover after parsing attributes in process `syz.1.165'.
[   77.490261][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.165'.
[   77.497851][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.165'.
[   77.846084][ T6455] validate_nla: 5 callbacks suppressed
[   77.846097][ T6455] netlink: 'syz.1.173': attribute type 1 has an invalid length.
[   77.882271][ T6455] bond1: (slave gretap1): making interface the new active one
[   77.886344][ T6455] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   78.087071][ T6464] tipc: Cannot configure node identity twice
[   78.187461][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.277885][ T6479] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   78.314708][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.321832][ T6479] netlink: 'syz.2.180': attribute type 1 has an invalid length.
[   79.157793][    C0] Unknown status report in ack skb
[   79.161979][ T6527] openvswitch: netlink: Message has 5 unknown bytes.
[   79.409276][ T6541] tipc: New replicast peer: 255.255.255.255
[   79.414392][ T6541] tipc: Enabled bearer <udp:syz2>, priority 10
[   80.524669][  T970] tipc: Node number set to 2470629327
[   80.825195][ T6596] xt_nfacct: accounting object `syz1' does not exists
[   80.840275][ T6596] netlink: 'syz.2.220': attribute type 23 has an invalid length.
[   80.937988][ T6601] netlink: 'syz.2.223': attribute type 21 has an invalid length.
[   80.942154][ T6601] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   80.996380][ T6603] syz!: rxe_newlink: already configured on team_slave_0
[   81.150823][ T6614] syzkaller1: entered promiscuous mode
[   81.153136][ T6614] syzkaller1: entered allmulticast mode
[   81.165306][ T6614] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[   81.363929][ T6621] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   81.579392][ T6627] __nla_validate_parse: 25 callbacks suppressed
[   81.579408][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'.
[   81.589004][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[   81.649717][ T6632] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   81.655280][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   81.659280][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   81.779408][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.232'.
[   81.784226][  T970] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1
[   81.788966][  T970] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22
[   81.889888][ T6642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.235'.
[   81.908055][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'.
[   82.016733][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'.
[   82.021299][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[   82.056880][ T6656] : renamed from pim6reg1
[   82.072236][ T6653] mac80211_hwsim hwsim4 ": renamed from wlan0 (while UP)
[   82.521397][ T6679] Bluetooth: MGMT ver 1.23
[   82.642528][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'.
[   83.127447][ T6705] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   83.171237][ T6707] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   83.439215][ T6721] bridge0: entered allmulticast mode
[   83.442634][ T6722] gretap0: left allmulticast mode
[   83.444803][ T6722] gretap0: left promiscuous mode
[   83.446742][ T6722] bridge0: port 3(gretap0) entered disabled state
[   83.450696][ T6722] bridge_slave_1: left allmulticast mode
[   83.456022][ T6722] bridge_slave_1: left promiscuous mode
[   83.458253][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.465025][ T6722] bridge_slave_0: left allmulticast mode
[   83.467887][ T6722] bridge_slave_0: left promiscuous mode
[   83.470103][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.487759][ T6722] bridge0 (unregistering): left allmulticast mode
[   83.720163][ T5861] IPVS: starting estimator thread 0...
[   83.726953][ T6732] pimreg: entered allmulticast mode
[   83.823356][ T6733] IPVS: using max 78 ests per chain, 187200 per kthread
[   85.092094][ T6808] xt_hashlimit: max too large, truncated to 1048576
[   85.097151][ T6808] Cannot find add_set index 3 as target
[   85.351597][ T6822] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   85.726066][ T6847] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   86.666579][ T6853] __nla_validate_parse: 19 callbacks suppressed
[   86.666589][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[   86.937677][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'.
[   86.959609][ T6873] bond1: entered promiscuous mode
[   86.962363][ T6873] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.046466][ T6873] bond1 (unregistering): Released all slaves
[   87.288984][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   88.260978][ T6935] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   88.266233][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[   88.270100][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[   88.470671][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'.
[   88.477386][ T6953] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   88.480403][ T6953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.121537][ T6989] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   89.245006][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'.
[   89.342517][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'.
[   89.351578][ T7005] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   89.357589][ T7005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.377310][ T7007] netlink: 92 bytes leftover after parsing attributes in process `syz.1.353'.
[   89.381584][ T7007] netlink: 92 bytes leftover after parsing attributes in process `syz.1.353'.
[   89.783211][ T7022] nbd1: detected capacity change from 0 to 63
[   89.786673][ T7027] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   89.810573][   T56] block nbd1: Receive control failed (result -104)
[   90.181205][ T7057] netlink: 'syz.2.369': attribute type 1 has an invalid length.
[   90.200094][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.212521][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.215561][ T7057] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.220452][ T7057] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   90.239825][ T7053] xt_l2tp: v2 sid > 0xffff: 4294901760
[   90.295164][ T7061] veth3: entered promiscuous mode
[   90.301053][ T7061] bond1: (slave veth3): Enslaving as an active interface with a down link
[   90.352791][ T7065] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   90.401776][ T7076] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   90.423425][ T7076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.607851][ T7099] pim6reg: entered allmulticast mode
[   90.611749][ T7099] pim6reg: left allmulticast mode
[   90.830975][ T7120] netlink: 'syz.1.389': attribute type 11 has an invalid length.
[   90.834757][ T7120] netlink: 'syz.1.389': attribute type 4 has an invalid length.
[   91.211396][ T7161] netem: incorrect gi model size
[   91.213862][ T7161] netem: change failed
[   91.829494][ T7186] sctp: [Deprecated]: syz.1.411 (pid 7186) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.829494][ T7186] Use struct sctp_sack_info instead
[   91.897528][ T7190] __nla_validate_parse: 19 callbacks suppressed
[   91.897540][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   91.906647][ T7190] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   91.923385][ T7190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.091633][ T7205] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.095796][ T7205] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.099282][ T7205] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.102115][ T7205] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.124045][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'.
[   92.249863][ T7219] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   92.267697][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[   92.272184][ T7222] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   92.278678][ T7222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.356286][ T7219] netlink: 76 bytes leftover after parsing attributes in process `syz.1.423'.
[   92.409817][ T7235] netlink: 'syz.2.429': attribute type 1 has an invalid length.
[   92.430917][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'.
[   92.434583][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   92.508107][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'.
[   92.679616][ T7262] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   92.697272][ T7265] syz!: rxe_newlink: already configured on team_slave_0
[   92.701102][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[   92.702005][ T7262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'.
[   92.707617][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[   92.949637][ T7296] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   93.111104][ T7307] netlink: 'syz.0.456': attribute type 1 has an invalid length.
[   93.551591][ T7339] bridge: RTM_NEWNEIGH with invalid state 0x1
[   93.735965][ T7347] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   94.311973][ T7395] netlink: 'syz.2.479': attribute type 12 has an invalid length.
[   94.412839][ T7399] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   94.587578][ T7410] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.699167][ T7413] veth3: entered promiscuous mode
[   94.701674][ T7413] bridge1: port 1(veth3) entered blocking state
[   94.706762][ T7413] bridge1: port 1(veth3) entered disabled state
[   94.709052][ T7413] veth3: entered allmulticast mode
[   94.837082][ T7426] netlink: 'syz.1.488': attribute type 2 has an invalid length.
[   94.840156][ T7426] netlink: 'syz.1.488': attribute type 2 has an invalid length.
[   94.881216][ T7426] syzkaller0: entered promiscuous mode
[   94.884077][ T7426] syzkaller0: entered allmulticast mode
[   94.918757][ T7433] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   96.172910][ T7445] syz.2.495 (7445) used greatest stack depth: 20824 bytes left
[   96.227891][ T5296] IPVS: starting estimator thread 0...
[   96.333049][ T7453] IPVS: using max 79 ests per chain, 189600 per kthread
[   96.370233][ T7452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.795829][    C1] net_ratelimit: 6 callbacks suppressed
[   96.795846][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.969976][ T7498] __nla_validate_parse: 28 callbacks suppressed
[   96.969990][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   97.238514][ T7508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.514'.
[   97.256767][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'.
[   97.260783][ T7508] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   97.267033][ T7508] tipc: Enabled bearer <udp:syz1>, priority 10
[   97.391965][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[   97.537052][   T33] audit: type=1800 audit(1752631295.612:2): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.524" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=714 res=0 errno=0
[   97.550250][   T33] audit: type=1804 audit(1752631295.632:3): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.524" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=714 res=1 errno=0
[   97.571293][ T7531] netlink: 124 bytes leftover after parsing attributes in process `syz.0.523'.
[   97.577882][ T7531] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   97.812879][ T7548] netlink: 'syz.1.530': attribute type 15 has an invalid length.
[   97.823993][ T7547] netlink: 64 bytes leftover after parsing attributes in process `syz.2.531'.
[   97.858243][ T7551] syz!: rxe_newlink: already configured on team_slave_0
[   97.860937][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[   97.863857][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[   97.917995][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[   97.921041][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'.
[   97.929385][ T7553] netlink: 'syz.1.533': attribute type 12 has an invalid length.
[   97.932132][ T7553] netlink: 'syz.1.533': attribute type 11 has an invalid length.
[   98.170168][ T7568] syz!: rxe_newlink: already configured on team_slave_0
[   98.383145][ T5894] tipc: Node number set to 2835179392
[   98.384932][ T7577] xt_CT: No such helper "snmp"
[   98.395211][ T7588] syz!: rxe_newlink: already configured on team_slave_0
[   98.436518][ T7590] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.447504][ T7590] bond0: (slave bond2): Enslaving as an active interface with an up link
[   98.455689][ T7595] : renamed from batadv_slave_1 (while UP)
[   98.675166][ T7609] bridge_slave_0: left allmulticast mode
[   98.677692][ T7609] bridge_slave_0: left promiscuous mode
[   98.680708][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.705455][ T7609] bridge_slave_1: left allmulticast mode
[   98.708190][ T7609] bridge_slave_1: left promiscuous mode
[   98.720436][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.737830][ T7609] bond0: (slave bond_slave_0): Releasing backup interface
[   98.749336][ T7609] bond0: (slave bond_slave_1): Releasing backup interface
[   98.751594][ T7616] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   98.772627][ T7609] team0: Port device team_slave_0 removed
[   98.782303][ T7609] team0: Port device team_slave_1 removed
[   98.788604][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.791861][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.809340][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.813874][ T7609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.829432][ T7609] bond1: (slave veth3): Releasing active interface
[   98.837292][ T7609] bond0: (slave bond2): Releasing backup interface
[   98.865549][ T5861] syz!: Port: 1 Link DOWN
[   98.869266][ T7621] @: renamed from veth0_vlan (while UP)
[   99.029748][ T7639] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   99.107275][ T7647] syzkaller0: entered allmulticast mode
[   99.119780][ T7636] syzkaller0: left allmulticast mode
[   99.228715][ T7659] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[   99.230990][ T7660] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   99.231831][ T7659] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[   99.241026][ T7659] netlink: 'syz.1.573': attribute type 21 has an invalid length.
[   99.313563][ T7669] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   99.316114][ T7669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.350006][ T7670] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   99.584972][ T7685] Illegal XDP return value 4294967274 on prog  (id 109) dev N/A, expect packet loss!
[   99.591865][ T7685] netlink: 'syz.1.582': attribute type 13 has an invalid length.
[   99.596705][ T7685] netlink: 'syz.1.582': attribute type 17 has an invalid length.
[   99.631975][ T7685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.819867][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.843071][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.938278][ T7697] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  100.025060][ T7702] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  100.960379][ T7732] netlink: 'syz.2.601': attribute type 16 has an invalid length.
[  101.205688][ T7744] nbd0: detected capacity change from 0 to 127
[  101.213381][   T55] block nbd0: Receive control failed (result -104)
[  101.278336][ T7750] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  101.281757][ T7750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.840139][ T7776] openvswitch: netlink: Flow key attr not present in new flow.
[  101.868879][ T7778] netlink: 'syz.0.615': attribute type 2 has an invalid length.
[  102.437292][ T7793] bond3: (slave gretap1): making interface the new active one
[  102.440863][ T7793] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  102.445208][ T7793] syz.2.618 (7793) used greatest stack depth: 20040 bytes left
[  102.609487][ T7798] __nla_validate_parse: 35 callbacks suppressed
[  102.609502][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  102.620364][ T7798] bridge0: entered promiscuous mode
[  102.626723][ T7798] bridge0: left promiscuous mode
[  102.704576][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'.
[  102.786305][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.623'.
[  102.789443][ T7806] openvswitch: netlink: Flow key attr not present in new flow.
[  102.798054][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'.
[  102.802212][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[  103.265911][ T7846] netlink: 410 bytes leftover after parsing attributes in process `syz.0.632'.
[  103.337563][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  103.371833][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'.
[  103.375116][ T7858] openvswitch: netlink: Flow key attr not present in new flow.
[  103.424875][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'.
[  103.427927][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.431077][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.591641][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'.
[  103.697392][ T7878] validate_nla: 3 callbacks suppressed
[  103.697441][ T7878] netlink: 'syz.0.641': attribute type 1 has an invalid length.
[  103.812490][ T7894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.816724][ T7894] syzkaller0: entered promiscuous mode
[  103.818956][ T7894] syzkaller0: entered allmulticast mode
[  104.209530][ T7926] netlink: 'syz.0.656': attribute type 2 has an invalid length.
[  104.213587][ T7926] netlink: 'syz.0.656': attribute type 5 has an invalid length.
[  104.954780][ T7939] netlink: 'syz.2.660': attribute type 58 has an invalid length.
[  105.668172][ T7978] batadv0: entered promiscuous mode
[  105.671881][ T7978] macvtap1: entered promiscuous mode
[  105.675445][ T7978] macvtap1: entered allmulticast mode
[  105.678022][ T7978] batadv0: entered allmulticast mode
[  105.682546][ T7978] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  105.702133][ T7978] batadv0: left allmulticast mode
[  105.706176][ T7978] batadv0: left promiscuous mode
[  106.241869][ T8008] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  106.285169][ T8010] raw_sendmsg: syz.1.687 forgot to set AF_INET. Fix it!
[  106.670004][ T8031] erspan0: entered promiscuous mode
[  106.675851][ T8031] gretap0: entered promiscuous mode
[  106.810903][ T8042] syz!: rxe_newlink: already configured on team_slave_0
[  106.872048][ T8045] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[  106.907058][ T8045] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.923629][ T8045] bond1: (slave gretap1): making interface the new active one
[  106.929411][ T8045] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  106.966756][ T8045] syz.0.699 (8045) used greatest stack depth: 19088 bytes left
[  107.421826][ T8071] syzkaller1: entered promiscuous mode
[  107.424553][ T8071] syzkaller1: entered allmulticast mode
[  107.888297][ T8088] __nla_validate_parse: 25 callbacks suppressed
[  107.888318][ T8088] netlink: 596 bytes leftover after parsing attributes in process `syz.1.709'.
[  107.907515][ T5296] IPVS: starting estimator thread 0...
[  107.919952][ T8092] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.711'.
[  107.920847][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'.
[  107.927131][ T8093] openvswitch: netlink: Message has 8 unknown bytes.
[  107.993880][ T8090] IPVS: using max 76 ests per chain, 182400 per kthread
[  108.072670][ T8106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.715'.
[  108.259615][ T8119] netlink: 13 bytes leftover after parsing attributes in process `syz.2.720'.
[  108.361001][ T8123] tipc: New replicast peer: 255.255.255.83
[  108.364765][ T8123] tipc: Enabled bearer <udp:>, priority 10
[  108.368626][ T8123] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  108.708480][ T8126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.905393][ T8140] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  108.908779][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  108.912668][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  109.029990][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'.
[  109.034259][ T8148] openvswitch: netlink: Message has 8 unknown bytes.
[  109.133268][ T8156] netlink: 'syz.1.734': attribute type 4 has an invalid length.
[  109.139736][ T8156] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  109.143195][ T8156] netlink: 'syz.1.734': attribute type 2 has an invalid length.
[  109.215471][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'.
[  109.258918][ T8166] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  109.262018][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'.
[  109.315736][ T8172] openvswitch: netlink: Message has 8 unknown bytes.
[  109.627061][ T8195] netlink: 'syz.0.751': attribute type 2 has an invalid length.
[  109.917065][ T8210] sctp: [Deprecated]: syz.0.758 (pid 8210) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.917065][ T8210] Use struct sctp_sack_info instead
[  110.545546][ T8233] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  110.586256][ T8235] sctp: [Deprecated]: syz.1.767 (pid 8235) Use of int in max_burst socket option.
[  110.586256][ T8235] Use struct sctp_assoc_value instead
[  110.682502][ T8244] C: renamed from team_slave_0 (while UP)
[  110.689054][ T8244] netlink: 'syz.1.769': attribute type 3 has an invalid length.
[  110.692453][ T8244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  110.818780][ T8253] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  110.902648][ T8262] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[  110.906354][ T8262] netlink: 'syz.1.776': attribute type 11 has an invalid length.
[  110.995182][ T8269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.014196][ T8269] tipc: Disabling bearer <eth:syzkaller0>
[  111.518278][ T8314] syz_tun: entered allmulticast mode
[  111.645264][ T8329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  112.659739][ T8350] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  112.772856][ T8352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.796652][ T5861] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  112.801311][ T5861] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  112.804259][ T8352] syzkaller1: entered promiscuous mode
[  112.806211][ T8352] syzkaller1: entered allmulticast mode
[  112.862438][   T36] wlan1: authenticated
[  112.865189][ T8363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.877218][   T36] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  112.882174][ T8364] netlink: 'syz.1.806': attribute type 3 has an invalid length.
[  112.889437][ T8364] netlink: 'syz.1.806': attribute type 3 has an invalid length.
[  112.928622][ T8363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.932234][   T36] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  112.943507][   T36] wlan1: associated
[  113.271997][ T8390] __nla_validate_parse: 25 callbacks suppressed
[  113.272009][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'.
[  113.581244][ T8400] openvswitch: netlink: Message has 8 unknown bytes.
[  113.748209][ T8412] syz.0.824 (8412) used obsolete PPPIOCDETACH ioctl
[  113.795174][ T8416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.826'.
[  114.347205][ T8431] netlink: 'syz.1.830': attribute type 2 has an invalid length.
[  114.355763][ T8431] : entered promiscuous mode
[  114.409153][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'.
[  114.414648][ T8435] openvswitch: netlink: Flow key attr not present in new flow.
[  114.481977][ T8443] ieee802154 phy0 wpan0: encryption failed: -22
[  114.707057][ T8462] D: renamed from syzkaller0 (while UP)
[  114.714857][ T8462] tipc: Disabling bearer <eth:syzkaller0>
[  114.779502][ T8470] SET target dimension over the limit!
[  114.865764][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.844'.
[  114.970674][ T8493] netlink: 'syz.2.846': attribute type 2 has an invalid length.
[  115.049005][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'.
[  115.054919][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
[  115.167502][ T8511] netlink: 4464 bytes leftover after parsing attributes in process `syz.2.851'.
[  115.248803][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  115.266417][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  115.304196][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'.
[  115.315419][ T8529] gtp0: entered promiscuous mode
[  115.317430][ T8529] gtp0: entered allmulticast mode
[  115.322083][ T8529] netlink: 'syz.2.853': attribute type 29 has an invalid length.
[  115.762871][ T8551] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  116.230451][ T8557] netlink: 'syz.2.860': attribute type 39 has an invalid length.
[  116.281765][ T8558] netlink: 'syz.2.860': attribute type 2 has an invalid length.
[  116.287274][ T8558] netlink: 'syz.2.860': attribute type 1 has an invalid length.
[  116.291273][ T8558] netlink: 'syz.2.860': attribute type 1 has an invalid length.
[  117.032546][ T8598] tipc: Bearer <eth:bridge_slave_0>: already 2 bearers with priority 10
[  117.038349][ T8598] tipc: Bearer <eth:bridge_slave_0>: trying with adjusted priority
[  117.041336][ T8598] tipc: Enabled bearer <eth:bridge_slave_0>, priority 9
[  117.801650][ T8604] netlink: 'syz.1.875': attribute type 6 has an invalid length.
[  118.092321][ T8621] bridge3: entered promiscuous mode
[  118.119512][ T8623] pim6reg: entered allmulticast mode
[  118.125122][ T8623] pim6reg: left allmulticast mode
[  118.284615][ T8621] infiniband syz2: set down
[  118.286709][ T8621] infiniband syz2: added syzkaller0
[  118.334181][ T8621] RDS/IB: syz2: added
[  118.336495][ T8621] smc: adding ib device syz2 with port count 1
[  118.343274][ T8621] smc:    ib device syz2 port 1 has pnetid 
[  118.432053][ T8634] __nla_validate_parse: 6 callbacks suppressed
[  118.432070][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  118.440834][ T8634] openvswitch: netlink: Key type 8198 is out of range max 32
[  118.511598][ T8636] netlink: 'syz.2.888': attribute type 23 has an invalid length.
[  118.807464][   T27] smc: removing ib device syz2
[  119.845609][   T11] block nbd1: Possible stuck request ffff888020b30000: control (read@0,1024B). Runtime 30 seconds
[  119.849766][   T11] block nbd1: Possible stuck request ffff888020b28000: control (read@1024,1024B). Runtime 30 seconds
[  119.854513][   T11] block nbd1: Possible stuck request ffff888020b28200: control (read@2048,1024B). Runtime 30 seconds
[  119.858724][   T11] block nbd1: Possible stuck request ffff888020b28400: control (read@3072,1024B). Runtime 30 seconds
[  120.266436][ T8679] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  120.287483][ T8679] netlink: 56 bytes leftover after parsing attributes in process `syz.0.900'.
[  120.826274][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'.
[  120.889396][ T8694] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.906475][ T8694] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  120.911069][ T8694] bond4: (slave macvlan2): Enslaving as a backup interface with a down link
[  120.942388][ T8694] bond3: (slave gretap1): Releasing active interface
[  120.951361][ T8694] bond4: (slave macvlan2): Releasing backup interface
[  121.080772][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'.
[  121.166874][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'.
[  121.214712][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'.
[  121.245866][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  121.333791][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'.
[  121.336914][ T8712] openvswitch: netlink: Missing key (keys=40, expected=100)
[  121.626615][ T8728] netlink: 'syz.2.918': attribute type 3 has an invalid length.
[  121.691629][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'.
[  121.694748][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[  121.877487][ T8739] netlink: 'syz.2.923': attribute type 1 has an invalid length.
[  121.892723][ T8739] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.907209][ T8739] bond5: (slave bridge0): making interface the new active one
[  121.910557][ T8739] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  121.925089][ T8739] gretap2: entered promiscuous mode
[  121.960813][ T8742] syz!: rxe_newlink: already configured on team_slave_0
[  122.151620][ T8756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  122.160249][ T8756] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  122.230259][ T8760] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  122.358899][ T8764] IPVS: Scheduler module ip_vs_sip not found
[  122.361503][ T8764] IPVS: length: 8 != 446622349272
[  122.464520][ T8774] syzkaller0: entered promiscuous mode
[  122.466982][ T8774] syzkaller0: entered allmulticast mode
[  122.470833][ T8774] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  122.615305][ T8779] netlink: 'syz.1.940': attribute type 21 has an invalid length.
[  122.618891][ T8779] netlink: 'syz.1.940': attribute type 4 has an invalid length.
[  123.154230][ T8805] nbd2: detected capacity change from 0 to 127
[  123.207336][   T55] block nbd2: Receive control failed (result -104)
[  123.218389][ T8808] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  123.221124][ T8808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.064659][ T8809] delete_channel: no stack
[  124.068555][ T8810] syz.0.948: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  124.076392][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.0.948 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  124.076405][ T8810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.076410][ T8810] Call Trace:
[  124.076413][ T8810]  <TASK>
[  124.076417][ T8810]  dump_stack_lvl+0x189/0x250
[  124.076433][ T8810]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.076443][ T8810]  ? __pfx__printk+0x10/0x10
[  124.076453][ T8810]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.076465][ T8810]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.076474][ T8810]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  124.076484][ T8810]  warn_alloc+0x214/0x310
[  124.076497][ T8810]  ? __pfx_warn_alloc+0x10/0x10
[  124.076510][ T8810]  ? __get_vm_area_node+0x28f/0x300
[  124.076520][ T8810]  ? hash_netport_create+0x358/0xfe0
[  124.076532][ T8810]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  124.076541][ T8810]  ? do_syscall_64+0xfa/0x3b0
[  124.076560][ T8810]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.076572][ T8810]  ? rcu_is_watching+0x15/0xb0
[  124.076581][ T8810]  ? hash_netport_create+0x358/0xfe0
[  124.076590][ T8810]  ? hash_netport_create+0x358/0xfe0
[  124.076598][ T8810]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  124.076608][ T8810]  ? hash_netport_create+0x358/0xfe0
[  124.076617][ T8810]  ? hash_netport_create+0x2fe/0xfe0
[  124.076627][ T8810]  hash_netport_create+0x358/0xfe0
[  124.076639][ T8810]  ? __nla_parse+0x40/0x60
[  124.076647][ T8810]  ? __pfx_hash_netport_create+0x10/0x10
[  124.076657][ T8810]  ip_set_create+0xa97/0x1940
[  124.076665][ T8810]  ? ip_set_create+0x4a2/0x1940
[  124.076675][ T8810]  ? __pfx_ip_set_create+0x10/0x10
[  124.076695][ T8810]  nfnetlink_rcv_msg+0xb4d/0x1130
[  124.076707][ T8810]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  124.076724][ T8810]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  124.076734][ T8810]  ? kasan_save_free_info+0x46/0x50
[  124.076763][ T8810]  netlink_rcv_skb+0x208/0x470
[  124.076772][ T8810]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  124.076784][ T8810]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.076796][ T8810]  ? bpf_lsm_capable+0x9/0x20
[  124.076805][ T8810]  ? security_capable+0x7e/0x2e0
[  124.076820][ T8810]  nfnetlink_rcv+0x26a/0x2520
[  124.076832][ T8810]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  124.076845][ T8810]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  124.076854][ T8810]  ? __dev_queue_xmit+0x27e/0x3a70
[  124.076864][ T8810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.076875][ T8810]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  124.076885][ T8810]  ? __pfx___dev_queue_xmit+0x10/0x10
[  124.076900][ T8810]  ? ref_tracker_free+0x63a/0x7d0
[  124.076910][ T8810]  ? __copy_skb_header+0xa7/0x550
[  124.076921][ T8810]  ? __pfx_ref_tracker_free+0x10/0x10
[  124.076938][ T8810]  ? skb_clone+0x246/0x3a0
[  124.076949][ T8810]  ? __netlink_deliver_tap+0x807/0x850
[  124.076957][ T8810]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.076967][ T8810]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.076975][ T8810]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.076985][ T8810]  netlink_unicast+0x75c/0x8e0
[  124.076997][ T8810]  netlink_sendmsg+0x805/0xb30
[  124.077009][ T8810]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.077019][ T8810]  ? aa_sock_msg_perm+0x94/0x160
[  124.077030][ T8810]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.077040][ T8810]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.077049][ T8810]  __sock_sendmsg+0x21c/0x270
[  124.077057][ T8810]  ____sys_sendmsg+0x505/0x830
[  124.077069][ T8810]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.077081][ T8810]  ? import_iovec+0x74/0xa0
[  124.077091][ T8810]  ___sys_sendmsg+0x21f/0x2a0
[  124.077101][ T8810]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.077123][ T8810]  ? __fget_files+0x2a/0x420
[  124.077216][ T8810]  ? __fget_files+0x3a0/0x420
[  124.077232][ T8810]  __x64_sys_sendmsg+0x19b/0x260
[  124.077245][ T8810]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.077257][ T8810]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.077272][ T8810]  ? rcu_is_watching+0x15/0xb0
[  124.077285][ T8810]  ? do_syscall_64+0xbe/0x3b0
[  124.077295][ T8810]  do_syscall_64+0xfa/0x3b0
[  124.077303][ T8810]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.077314][ T8810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.077322][ T8810]  ? exc_page_fault+0x9f/0xf0
[  124.077336][ T8810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.077345][ T8810] RIP: 0033:0x7f3d7878e929
[  124.077355][ T8810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.077362][ T8810] RSP: 002b:00007f3d79592038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.077372][ T8810] RAX: ffffffffffffffda RBX: 00007f3d789b5fa0 RCX: 00007f3d7878e929
[  124.077378][ T8810] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000026
[  124.077383][ T8810] RBP: 00007f3d78810b39 R08: 0000000000000000 R09: 0000000000000000
[  124.077417][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.077424][ T8810] R13: 0000000000000000 R14: 00007f3d789b5fa0 R15: 00007ffdd6a4fa88
[  124.077437][ T8810]  </TASK>
[  124.077586][ T8810] Mem-Info:
[  124.253155][ T8810] active_anon:5565 inactive_anon:0 isolated_anon:0
[  124.253155][ T8810]  active_file:1104 inactive_file:38233 isolated_file:0
[  124.253155][ T8810]  unevictable:1768 dirty:17 writeback:0
[  124.253155][ T8810]  slab_reclaimable:9343 slab_unreclaimable:117997
[  124.253155][ T8810]  mapped:18312 shmem:2456 pagetables:916
[  124.253155][ T8810]  sec_pagetables:0 bounce:0
[  124.253155][ T8810]  kernel_misc_reclaimable:0
[  124.253155][ T8810]  free:225942 free_pcp:26226 free_cma:0
[  124.276267][ T8810] Node 0 active_anon:14308kB inactive_anon:0kB active_file:3896kB inactive_file:136320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36372kB dirty:8kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6388kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.291639][ T8810] Node 1 active_anon:8012kB inactive_anon:0kB active_file:520kB inactive_file:16620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36828kB dirty:8kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5372kB pagetables:1468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.306486][ T8810] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.330986][ T8810] lowmem_reserve[]: 0 812 812 812 812
[  124.334806][ T8810] Node 0 DMA32 free:194560kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14240kB inactive_anon:0kB active_file:3896kB inactive_file:136320kB unevictable:3536kB writepending:8kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:49440kB local_pcp:17244kB free_cma:0kB
[  124.351210][ T8810] lowmem_reserve[]: 0 0 0 0 0
[  124.355007][ T8810] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  124.367957][ T8810] lowmem_reserve[]: 0 0 854 854 854
[  124.370007][ T8810] Node 1 Normal free:235444kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8012kB inactive_anon:0kB active_file:520kB inactive_file:16620kB unevictable:3536kB writepending:8kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:56436kB local_pcp:39776kB free_cma:0kB
[  124.382211][ T8810] lowmem_reserve[]: 0 0 0 0 0
[  124.384077][ T8810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.389915][ T8810] Node 0 DMA32: 332*4kB (U) 412*8kB (UME) 325*16kB (UME) 257*32kB (UME) 22*64kB (UM) 10*128kB (UME) 13*256kB (UM) 13*512kB (UME) 14*1024kB (UM) 5*2048kB (UM) 34*4096kB (M) = 194560kB
[  124.400116][ T8810] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  124.407883][ T8810] Node 1 Normal: 521*4kB (UE) 478*8kB (UE) 478*16kB (UE) 316*32kB (UE) 177*64kB (UME) 80*128kB (UE) 21*256kB (UME) 15*512kB (UE) 25*1024kB (UM) 2*2048kB (U) 36*4096kB (M) = 235444kB
[  124.416656][ T8810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  124.420577][ T8810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  124.424786][ T8810] 42903 total pagecache pages
[  124.426845][ T8810] 0 pages in swap cache
[  124.428675][ T8810] Free swap  = 124996kB
[  124.430448][ T8810] Total swap = 124996kB
[  124.431890][ T8810] 786301 pages RAM
[  124.434221][ T8810] 0 pages HighMem/MovableOnly
[  124.436256][ T8810] 241085 pages reserved
[  124.437961][ T8810] 0 pages cma reserved
[  124.743227][ T8855] block nbd3: server does not support multiple connections per device.
[  124.747508][ T8855] block nbd3: shutting down sockets
[  124.834789][ T8863] __nla_validate_parse: 15 callbacks suppressed
[  124.834808][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'.
[  124.898695][ T8870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'.
[  125.006882][ T8881] vlan2: entered promiscuous mode
[  125.009201][ T8881] bond0: entered promiscuous mode
[  125.011948][ T8881] bond_slave_0: entered promiscuous mode
[  125.015174][ T8881] bond_slave_1: entered promiscuous mode
[  125.081767][ T8884] netlink: 'syz.0.972': attribute type 10 has an invalid length.
[  125.126357][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'.
[  125.130704][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'.
[  125.136206][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'.
[  125.228019][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'.
[  125.231166][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'.
[  125.240376][ T8900] netlink: 'syz.1.976': attribute type 10 has an invalid length.
[  125.247951][ T8900] bridge0: port 3(team0) entered blocking state
[  125.250906][ T8900] bridge0: port 3(team0) entered disabled state
[  125.254788][ T8898] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  125.256083][ T8900] team0: entered allmulticast mode
[  125.260535][ T8900] C: entered allmulticast mode
[  125.262228][ T8900] team_slave_1: entered allmulticast mode
[  125.266928][ T8900] team0: entered promiscuous mode
[  125.268888][ T8900] C: entered promiscuous mode
[  125.270801][ T8900] team_slave_1: entered promiscuous mode
[  125.276877][ T8900] bridge0: port 3(team0) entered blocking state
[  125.279010][ T8900] bridge0: port 3(team0) entered forwarding state
[  125.412190][ T8915] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc
[  125.607806][ T8931] tls_set_device_offload: netdev not found
[  125.661432][ T8941] bond4: option mode: unable to set because the bond device is up
[  125.672382][ T8941] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  125.677251][ T8941] bond4: (slave macvlan3): Enslaving as a backup interface with a down link
[  125.684477][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'.
[  125.690945][ T8931] veth1: entered promiscuous mode
[  125.727553][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'.
[  125.732688][ T8931] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  125.878199][ T8954] netlink: 9 bytes leftover after parsing attributes in process `syz.1.991'.
[  125.886026][ T8954] gretap0: entered promiscuous mode
[  126.040816][ T8966] netlink: 'syz.2.993': attribute type 5 has an invalid length.
[  126.341328][ T8980] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.370121][ T8980] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.381959][ T8980] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[  126.599067][ T8994] xt_cgroup: xt_cgroup: no path or classid specified
[  126.818654][ T9001] ieee802154 phy0 wpan0: encryption failed: -90
[  128.438540][ T9047] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  128.538674][ T9056] netlink: 'syz.2.1014': attribute type 1 has an invalid length.
[  129.350510][ T9077] netlink: 'syz.2.1023': attribute type 10 has an invalid length.
[  129.417486][ T9080] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  129.421754][ T9080] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  129.426364][ T9080] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  129.430960][ T9080] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  129.436758][ T9080] geneve2: entered promiscuous mode
[  129.438949][ T9080] geneve2: entered allmulticast mode
[  129.986375][ T9112] bond4: option mode: unable to set because the bond device has slaves
[  130.054811][ T9115] netlink: 'syz.2.1033': attribute type 1 has an invalid length.
[  130.358770][ T9137] netlink: 'syz.2.1039': attribute type 1 has an invalid length.
[  130.365943][ T9137] __nla_validate_parse: 8 callbacks suppressed
[  130.365964][ T9137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1039'.
[  130.372237][ T9137] netlink: 'syz.2.1039': attribute type 1 has an invalid length.
[  130.441776][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'.
[  130.508241][ T9144] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  130.514855][ T9144] syzkaller0: entered promiscuous mode
[  130.517004][ T9144] syzkaller0: entered allmulticast mode
[  130.577538][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'.
[  130.581518][ T9146] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  130.587086][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1044'.
[  130.600896][ T9148] bridge4: port 1(ip6gretap1) entered blocking state
[  130.604662][ T9148] bridge4: port 1(ip6gretap1) entered disabled state
[  130.606524][ T9146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.612710][ T9148] ip6gretap1: entered allmulticast mode
[  130.623480][ T9148] ip6gretap1: entered promiscuous mode
[  130.628518][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'.
[  130.635438][ T9148] veth2: entered promiscuous mode
[  130.637277][ T9148] veth2: entered allmulticast mode
[  130.645385][ T9148] veth3: entered promiscuous mode
[  130.655000][ T9150] netlink: 'syz.2.1045': attribute type 1 has an invalid length.
[  130.659991][ T9150] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1045'.
[  130.693542][ T9154] netlink: 'syz.0.1046': attribute type 1 has an invalid length.
[  130.723562][ T9154] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  130.753419][ T9154] veth5: entered promiscuous mode
[  130.758066][ T9154] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  130.868012][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1053'.
[  130.871530][ T9176] openvswitch: netlink: Flow actions attr not present in new flow.
[  130.930669][ T9190] netlink: 212172 bytes leftover after parsing attributes in process `syz.1.1057'.
[  131.214745][ T9215] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1064'.
[  131.226484][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'.
[  131.353676][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.365582][   T11] block nbd0: Possible stuck request ffff888020af0000: control (read@0,1024B). Runtime 30 seconds
[  131.369064][   T11] block nbd0: Possible stuck request ffff888020af0200: control (read@1024,1024B). Runtime 30 seconds
[  131.372795][   T11] block nbd0: Possible stuck request ffff888020af0400: control (read@2048,1024B). Runtime 30 seconds
[  131.377794][   T11] block nbd0: Possible stuck request ffff888020af0600: control (read@3072,1024B). Runtime 30 seconds
[  131.444892][ T9225] sctp: [Deprecated]: syz.1.1067 (pid 9225) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.444892][ T9225] Use struct sctp_sack_info instead
[  131.671139][ T9239] _Z`Ԁ@: entered promiscuous mode
[  131.989104][ T9261] 8021q: adding VLAN 0 to HW filter on device bond3
[  132.017330][ T9260] netlink: 'syz.1.1082': attribute type 13 has an invalid length.
[  132.019995][ T9260] netlink: 'syz.1.1082': attribute type 17 has an invalid length.
[  132.025300][ T9260] gretap0: left promiscuous mode
[  132.031655][ T9260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.172359][ T9273] openvswitch: netlink: Flow actions attr not present in new flow.
[  132.263715][ T9275] netlink: 'syz.0.1086': attribute type 7 has an invalid length.
[  132.271449][ T9259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.278783][ T9275] : entered promiscuous mode
[  132.579654][ T9285] netlink: 'syz.2.1088': attribute type 2 has an invalid length.
[  132.582781][ T9285] netlink: 'syz.2.1088': attribute type 5 has an invalid length.
[  132.590816][ T9285] geneve2: entered promiscuous mode
[  132.635744][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.679842][ T9290] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002
[  133.584934][ T9344] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20003
[  134.064897][ T9375] macvtap2: entered promiscuous mode
[  134.067235][ T9375] bond0: entered promiscuous mode
[  134.069598][ T9375] macvtap2: entered allmulticast mode
[  134.071902][ T9375] bond0: entered allmulticast mode
[  134.076455][ T9375] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  134.084423][ T9373] ip6gretap0: entered promiscuous mode
[  134.086521][ T9373] macsec1: entered allmulticast mode
[  134.088635][ T9373] ip6gretap0: entered allmulticast mode
[  134.092908][ T9373] ip6gretap0: left allmulticast mode
[  134.095940][ T9373] ip6gretap0: left promiscuous mode
[  134.108978][ T9375] bond0: left allmulticast mode
[  134.110783][ T9375] bond0: left promiscuous mode
[  134.172167][ T9382] bridge_slave_0: default FDB implementation only supports local addresses
[  134.198237][ T9385] dvmrp1: tun_chr_ioctl cmd 1074025677
[  134.200300][ T9385] dvmrp1: linktype set to 805
[  134.300669][   T54] Bluetooth: hci2: link tx timeout
[  134.303368][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.521069][ T9407] syz!: rxe_newlink: already configured on team_slave_0
[  134.924252][ T9418] x_tables: ip_tables: osf match: only valid for protocol 6
[  135.221180][ T9445] netlink: 'syz.0.1140': attribute type 21 has an invalid length.
[  135.225058][ T9445] IPv6: NLM_F_CREATE should be specified when creating new route
[  135.229246][ T9447] netlink: 'syz.0.1140': attribute type 21 has an invalid length.
[  135.366864][ T9453] netlink: 'syz.0.1142': attribute type 23 has an invalid length.
[  135.508378][ T9467] __nla_validate_parse: 29 callbacks suppressed
[  135.508398][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  135.516625][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  135.575523][ T9471] sctp: [Deprecated]: syz.2.1147 (pid 9471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.575523][ T9471] Use struct sctp_sack_info instead
[  135.587626][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'.
[  135.701695][ T9478] delete_channel: no stack
[  135.746473][ T9478] 8021q: adding VLAN 0 to HW filter on device bond6
[  135.801641][ T9486] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  136.025485][ T9499] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1157'.
[  136.182470][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'.
[  136.188483][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'.
[  136.201727][ T9506] syz_tun: entered promiscuous mode
[  136.205777][ T9506] syz_tun: left promiscuous mode
[  136.314600][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  136.396374][ T9525] netlink: 'syz.0.1165': attribute type 1 has an invalid length.
[  136.398920][ T5296] hid-generic 0005:10CF:0007.0002: collection stack underflow
[  136.411630][ T5296] hid-generic 0005:10CF:0007.0002: item 0 0 0 12 parsing failed
[  136.415594][ T5296] hid-generic 0005:10CF:0007.0002: probe with driver hid-generic failed with error -22
[  136.484685][ T9531] xt_CONNSECMARK: invalid mode: 254
[  136.685820][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  136.689759][ T9538] netlink: ct family unspecified
[  136.692431][ T9538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.788836][ T9544] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.989770][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'.
[  136.996521][ T9561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.108993][ T9569] tipc: Started in network mode
[  137.111122][ T9569] tipc: Node identity 327a13aa08c4, cluster identity 4711
[  137.119447][ T9569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.125302][ T9569] syzkaller0: entered promiscuous mode
[  137.128714][ T9569] syzkaller0: entered allmulticast mode
[  137.164989][ T9569] tipc: Resetting bearer <eth:syzkaller0>
[  137.201121][ T9568] tipc: Resetting bearer <eth:syzkaller0>
[  137.239099][ T9568] tipc: Disabling bearer <eth:syzkaller0>
[  137.472903][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1189'.
[  137.484927][ T9599] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1189'.
[  137.613700][ T9612] syzkaller0: entered promiscuous mode
[  137.616332][ T9612] syzkaller0: entered allmulticast mode
[  137.645508][ T9612] openvswitch: netlink: IP tunnel dst address not specified
[  137.659362][ T9607] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  137.684318][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  137.705996][ T9612] netlink: 'syz.0.1193': attribute type 11 has an invalid length.
[  137.849633][ T9626] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  137.925589][ T9635] bond0: (slave bond_slave_1): Releasing backup interface
[  137.942305][ T9640] netlink: 'syz.0.1200': attribute type 9 has an invalid length.
[  137.956083][ T9640] hsr0: entered promiscuous mode
[  137.958450][ T9640] macvlan5: entered promiscuous mode
[  137.961102][ T9640] macvlan5: entered allmulticast mode
[  137.964638][ T9640] hsr0: entered allmulticast mode
[  137.966631][ T9640] hsr_slave_0: entered allmulticast mode
[  137.968819][ T9640] hsr_slave_1: entered allmulticast mode
[  138.393484][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  138.562748][ T9664] netlink: 'syz.2.1208': attribute type 18 has an invalid length.
[  138.899790][ T9677] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  138.933842][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.001072][ T9683] bond2: (slave macvlan3): Error -98 calling set_mac_address
[  139.223504][ T9695] mac80211_hwsim hwsim11 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  139.859505][ T9705] bond_slave_0: entered promiscuous mode
[  139.862573][ T9705] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  139.870192][ T9705] bond3: (slave macvlan6): Enslaving as a backup interface with an up link
[  140.096103][ T9714] pimreg: entered allmulticast mode
[  140.542301][ T9739] __nla_validate_parse: 13 callbacks suppressed
[  140.542315][ T9739] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1230'.
[  140.554790][ T9739] xt_hashlimit: size too large, truncated to 1048576
[  140.785266][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  140.806800][ T9726] warn_alloc: 1 callbacks suppressed
[  140.806816][ T9726] syz.2.1228: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  140.817194][ T9726] CPU: 0 UID: 0 PID: 9726 Comm: syz.2.1228 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  140.817205][ T9726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.817210][ T9726] Call Trace:
[  140.817214][ T9726]  <TASK>
[  140.817218][ T9726]  dump_stack_lvl+0x189/0x250
[  140.817232][ T9726]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.817242][ T9726]  ? __pfx__printk+0x10/0x10
[  140.817252][ T9726]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  140.817262][ T9726]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  140.817272][ T9726]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  140.817282][ T9726]  warn_alloc+0x214/0x310
[  140.817295][ T9726]  ? __pfx_warn_alloc+0x10/0x10
[  140.817308][ T9726]  ? __get_vm_area_node+0x28f/0x300
[  140.817318][ T9726]  ? nf_tables_newset+0x132b/0x2530
[  140.817329][ T9726]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  140.817350][ T9726]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  140.817361][ T9726]  ? rcu_is_watching+0x15/0xb0
[  140.817370][ T9726]  ? nf_tables_newset+0x132b/0x2530
[  140.817379][ T9726]  ? nf_tables_newset+0x132b/0x2530
[  140.817388][ T9726]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  140.817398][ T9726]  ? nf_tables_newset+0x132b/0x2530
[  140.817408][ T9726]  ? nft_table_lookup+0x211/0x230
[  140.817417][ T9726]  ? nft_set_lookup+0x128/0x150
[  140.817427][ T9726]  ? nft_hash_privsize+0x5f/0xf0
[  140.817437][ T9726]  nf_tables_newset+0x132b/0x2530
[  140.817451][ T9726]  ? __pfx_nf_tables_newset+0x10/0x10
[  140.817469][ T9726]  ? __nla_parse+0x40/0x60
[  140.817478][ T9726]  nfnetlink_rcv+0x1132/0x2520
[  140.817519][ T9726]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  140.817539][ T9726]  ? ref_tracker_free+0x63a/0x7d0
[  140.817561][ T9726]  ? __netlink_deliver_tap+0x807/0x850
[  140.817573][ T9726]  ? netlink_deliver_tap+0x2e/0x1b0
[  140.817581][ T9726]  ? netlink_deliver_tap+0x2e/0x1b0
[  140.817592][ T9726]  netlink_unicast+0x75c/0x8e0
[  140.817604][ T9726]  netlink_sendmsg+0x805/0xb30
[  140.817616][ T9726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.817626][ T9726]  ? aa_sock_msg_perm+0x94/0x160
[  140.817639][ T9726]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  140.817650][ T9726]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.817659][ T9726]  __sock_sendmsg+0x21c/0x270
[  140.817667][ T9726]  ____sys_sendmsg+0x505/0x830
[  140.817679][ T9726]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.817691][ T9726]  ? import_iovec+0x74/0xa0
[  140.817701][ T9726]  ___sys_sendmsg+0x21f/0x2a0
[  140.817711][ T9726]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.817735][ T9726]  ? __fget_files+0x2a/0x420
[  140.817744][ T9726]  ? __fget_files+0x3a0/0x420
[  140.817757][ T9726]  __x64_sys_sendmsg+0x19b/0x260
[  140.817767][ T9726]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  140.817780][ T9726]  ? rcu_is_watching+0x15/0xb0
[  140.817797][ T9726]  ? do_syscall_64+0xbe/0x3b0
[  140.817806][ T9726]  do_syscall_64+0xfa/0x3b0
[  140.817813][ T9726]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.817824][ T9726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.817831][ T9726]  ? exc_page_fault+0x9f/0xf0
[  140.817842][ T9726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.817849][ T9726] RIP: 0033:0x7f771a18e929
[  140.817856][ T9726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.817863][ T9726] RSP: 002b:00007f7717ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.817871][ T9726] RAX: ffffffffffffffda RBX: 00007f771a3b5fa0 RCX: 00007f771a18e929
[  140.817876][ T9726] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  140.817880][ T9726] RBP: 00007f771a210b39 R08: 0000000000000000 R09: 0000000000000000
[  140.817884][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.817888][ T9726] R13: 0000000000000000 R14: 00007f771a3b5fa0 R15: 00007ffde1bf7488
[  140.817919][ T9726]  </TASK>
[  140.818227][ T9726] Mem-Info:
[  140.946301][ T9753] tap0: tun_chr_ioctl cmd 2147767506
[  140.956735][ T9726] active_anon:5706 inactive_anon:0 isolated_anon:0
[  140.956735][ T9726]  active_file:1121 inactive_file:38241 isolated_file:0
[  140.956735][ T9726]  unevictable:1768 dirty:189 writeback:0
[  140.956735][ T9726]  slab_reclaimable:9646 slab_unreclaimable:120341
[  140.956735][ T9726]  mapped:18499 shmem:2445 pagetables:957
[  140.956735][ T9726]  sec_pagetables:0 bounce:0
[  140.956735][ T9726]  kernel_misc_reclaimable:0
[  140.956735][ T9726]  free:222130 free_pcp:26892 free_cma:0
[  140.968482][ T9753] tap0: tun_chr_ioctl cmd 1074025677
[  140.969852][ T9726] Node 0 active_anon:14108kB inactive_anon:0kB active_file:3896kB inactive_file:136320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36660kB dirty:528kB writeback:0kB shmem:5108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6300kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  140.969892][ T9726] Node 1 active_anon:8716kB inactive_anon:0kB active_file:588kB inactive_file:16644kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37336kB dirty:228kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5552kB pagetables:1752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  140.969951][ T9726] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  140.980995][ T9753] tap0: linktype set to 270
[  140.997447][ T9726] lowmem_reserve[]: 0 812 812 812 812
[  141.046580][ T9726] Node 0 DMA32 free:185520kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14108kB inactive_anon:0kB active_file:3896kB inactive_file:136320kB unevictable:3536kB writepending:528kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:58260kB local_pcp:38408kB free_cma:0kB
[  141.060654][ T9726] lowmem_reserve[]: 0 0 0 0 0
[  141.062795][ T9726] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  141.075654][ T9726] lowmem_reserve[]: 0 0 854 854 854
[  141.077834][ T9726] Node 1 Normal free:228944kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8716kB inactive_anon:0kB active_file:588kB inactive_file:16644kB unevictable:3536kB writepending:228kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:49656kB local_pcp:22088kB free_cma:0kB
[  141.091516][ T9726] lowmem_reserve[]: 0 0 0 0 0
[  141.093798][ T9726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  141.099433][ T9726] Node 0 DMA32: 110*4kB (UM) 432*8kB (UME) 252*16kB (UME) 68*32kB (UME) 164*64kB (UM) 50*128kB (U) 29*256kB (UME) 7*512kB (U) 10*1024kB (U) 1*2048kB (M) 33*4096kB (M) = 185464kB
[  141.107125][ T9726] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  141.114742][ T9726] Node 1 Normal: 606*4kB (UME) 586*8kB (UME) 558*16kB (UME) 229*32kB (UME) 264*64kB (UME) 116*128kB (UME) 43*256kB (UME) 26*512kB (UM) 26*1024kB (UM) 4*2048kB (U) 28*4096kB (UM) = 228936kB
[  141.123529][ T9726] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  141.127246][ T9726] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  141.130712][ T9726] 41807 total pagecache pages
[  141.133168][ T9726] 0 pages in swap cache
[  141.135253][ T9726] Free swap  = 124996kB
[  141.136938][ T9726] Total swap = 124996kB
[  141.138598][ T9726] 786301 pages RAM
[  141.139932][ T9726] 0 pages HighMem/MovableOnly
[  141.141526][ T9726] 241085 pages reserved
[  141.142876][ T9726] 0 pages cma reserved
[  141.387017][ T9763] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1238'.
[  141.398616][ T9765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1239'.
[  141.471662][ T9770] netlink: 'syz.0.1241': attribute type 11 has an invalid length.
[  141.474191][ T9768] syz_tun: entered promiscuous mode
[  141.479813][ T9768] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  141.554226][   T13] bond4: (slave macvlan3): link status definitely up, 10000 Mbps full duplex
[  141.557411][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  141.562850][   T13] bond4: active interface up!
[  141.588990][ T9776] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  141.591997][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  141.597707][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  141.607268][ T9778] pimreg: entered allmulticast mode
[  141.610010][ T9778] pimreg: left allmulticast mode
[  142.248375][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  142.352020][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'.
[  142.931150][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'.
[  143.424532][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'.
[  143.449705][ T9827] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.478836][ T9827] bond3: (slave macvlan7): Error -98 calling set_mac_address
[  143.566373][ T9837] unknown channel width for channel at 909000KHz?
[  143.650108][ T9843] bridge_slave_0: entered promiscuous mode
[  143.794927][ T9855] netlink: 'syz.1.1272': attribute type 1 has an invalid length.
[  143.871395][ T9858] 8021q: adding VLAN 0 to HW filter on device bond7
[  143.947176][ T9870] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  143.957670][ T9870] netlink: 'syz.2.1276': attribute type 23 has an invalid length.
[  143.968336][ T9868] x_tables: duplicate underflow at hook 2
[  144.020436][ T9873] netlink: 'syz.2.1278': attribute type 11 has an invalid length.
[  144.250838][ T9888] veth1_macvtap: left promiscuous mode
[  144.255237][ T9888] macsec0: entered promiscuous mode
[  144.269757][ T9888] veth1_macvtap: entered promiscuous mode
[  144.272625][ T9888] macsec0: left promiscuous mode
[  144.472268][ T9896] v: renamed from ip6_vti0 (while UP)
[  145.020183][ T9944] openvswitch: netlink: Missing valid actions attribute.
[  145.022482][ T9944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.064173][ T9948] syz!: rxe_newlink: already configured on team_slave_0
[  145.234099][ T9965] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.242996][ T9965] bond3: (slave macvlan7): Error -98 calling set_mac_address
[  145.325630][ T9973] syzkaller1: entered promiscuous mode
[  145.327769][ T9973] syzkaller1: entered allmulticast mode
[  145.332795][ T9973] netlink: 'syz.0.1308': attribute type 1 has an invalid length.
[  145.411446][ T9976] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  145.549997][ T9980] __nla_validate_parse: 26 callbacks suppressed
[  145.550010][ T9980] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1312'.
[  145.727395][ T9987] 8021q: adding VLAN 0 to HW filter on device bond8
[  145.738473][ T9990] bond4: (slave macvlan6): Error -98 calling set_mac_address
[  146.226677][ T9998] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1318'.
[  146.384214][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'.
[  146.387170][T10002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.372131][T10023] openvswitch: netlink: IPv4 tun info is not correct
[  147.420505][T10027] netlink: 'syz.0.1327': attribute type 1 has an invalid length.
[  147.423698][T10027] netlink: 'syz.0.1327': attribute type 4 has an invalid length.
[  147.426248][T10027] netlink: 14506 bytes leftover after parsing attributes in process `syz.0.1327'.
[  148.299452][T10033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1329'.
[  148.300712][T10034] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  148.303868][T10033] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1329'.
[  148.397086][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1333'.
[  148.468700][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1336'.
[  148.531753][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1338'.
[  148.591878][T10056] delete_channel: no stack
[  148.662760][T10063] IPv6: NLM_F_CREATE should be specified when creating new route
[  148.666701][T10063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.670004][T10063] IPv6: NLM_F_CREATE should be set when creating new route
[  148.731378][T10068] netlink: 'syz.0.1344': attribute type 2 has an invalid length.
[  148.736123][T10068] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1344'.
[  148.740641][T10067] netlink: 'syz.0.1344': attribute type 2 has an invalid length.
[  148.858703][T10076] netlink: 'syz.0.1345': attribute type 4 has an invalid length.
[  148.872520][T10076] netlink: 'syz.0.1345': attribute type 4 has an invalid length.
[  148.889096][T10076] netlink: 'syz.0.1345': attribute type 3 has an invalid length.
[  148.966235][T10080] bond3: option mode: unable to set because the bond device has slaves
[  149.915264][   T11] block nbd1: Possible stuck request ffff888020b30000: control (read@0,1024B). Runtime 60 seconds
[  149.919498][   T11] block nbd1: Possible stuck request ffff888020b28000: control (read@1024,1024B). Runtime 60 seconds
[  149.924034][   T11] block nbd1: Possible stuck request ffff888020b28200: control (read@2048,1024B). Runtime 60 seconds
[  149.929320][   T11] block nbd1: Possible stuck request ffff888020b28400: control (read@3072,1024B). Runtime 60 seconds
[  150.110226][T10103] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20004
[  150.118099][T10104] syz!: rxe_newlink: already configured on team_slave_0
[  151.176085][T10119] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  151.179033][T10119] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  151.267376][T10127] __nla_validate_parse: 5 callbacks suppressed
[  151.267388][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'.
[  151.508089][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1365'.
[  152.379683][ T5278] udevd[5278]: worker [5835] /devices/virtual/block/nbd1 is taking a long time
[  152.441210][T10144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1368'.
[  152.489305][T10146] netlink: 'syz.0.1369': attribute type 11 has an invalid length.
[  152.492742][T10146] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1369'.
[  152.718513][T10160] netlink: 'syz.0.1376': attribute type 9 has an invalid length.
[  152.772877][T10166] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1377'.
[  153.188587][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'.
[  153.243564][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'.
[  153.257041][T10198] dummy0: entered promiscuous mode
[  153.262277][T10198] dummy0: left promiscuous mode
[  153.364640][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'.
[  153.372893][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  153.753854][   T11] block nbd2: Possible stuck request ffff888020be0000: control (read@0,1024B). Runtime 30 seconds
[  153.758687][   T11] block nbd2: Possible stuck request ffff888020be0200: control (read@1024,1024B). Runtime 30 seconds
[  153.764678][   T11] block nbd2: Possible stuck request ffff888020be0400: control (read@2048,1024B). Runtime 30 seconds
[  153.769776][   T11] block nbd2: Possible stuck request ffff888020be0600: control (read@3072,1024B). Runtime 30 seconds
[  154.351076][T10232] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1401'.
[  154.481235][T10243] openvswitch: netlink: Duplicate or invalid key (type 0).
[  154.485235][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.782235][T10269] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  155.002666][T10284] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  155.077156][T10288] x_tables: duplicate underflow at hook 2
[  155.121116][T10292] netlink: 'syz.0.1424': attribute type 1 has an invalid length.
[  155.171356][T10291] netlink: 'syz.1.1425': attribute type 2 has an invalid length.
[  155.176214][T10291] netlink: 'syz.1.1425': attribute type 8 has an invalid length.
[  155.190324][T10292] veth7: entered promiscuous mode
[  155.197361][T10292] bond6: (slave veth7): Enslaving as a backup interface with a down link
[  155.765492][T10325] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.815800][T10365] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20003
[  156.919079][T10370] __nla_validate_parse: 5 callbacks suppressed
[  156.919093][T10370] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1449'.
[  156.942358][T10370] 8021q: adding VLAN 0 to HW filter on device bond9
[  156.963295][T10370] bridge2: entered promiscuous mode
[  156.969412][T10370] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  157.095398][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1452'.
[  157.162824][T10387] netlink: 'syz.2.1456': attribute type 23 has an invalid length.
[  157.326303][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'.
[  157.700620][T10405] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  157.949440][T10410] IPVS: Scheduler module ip_vs_ not found
[  158.199903][T10422] netlink: 'syz.1.1467': attribute type 1 has an invalid length.
[  158.203807][T10422] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1467'.
[  158.441813][T10443] netlink: 'syz.2.1475': attribute type 11 has an invalid length.
[  158.447996][T10443] netlink: 'syz.2.1475': attribute type 4 has an invalid length.
[  158.457861][T10443] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1475'.
[  158.581577][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'.
[  158.923909][T10466] lo speed is unknown, defaulting to 1000
[  158.928123][T10466] lo speed is unknown, defaulting to 1000
[  158.930467][T10466] lo speed is unknown, defaulting to 1000
[  159.040222][T10466] infiniband syz0: set down
[  159.042160][ T5894] lo speed is unknown, defaulting to 1000
[  159.045113][T10466] infiniband syz0: added lo
[  159.102218][T10466] RDS/IB: syz0: added
[  159.105455][T10466] smc: adding ib device syz0 with port count 1
[  159.107942][T10466] smc:    ib device syz0 port 1 has pnetid 
[  159.110195][  T970] lo speed is unknown, defaulting to 1000
[  159.114059][T10466] lo speed is unknown, defaulting to 1000
[  159.229101][T10466] lo speed is unknown, defaulting to 1000
[  159.346006][T10466] lo speed is unknown, defaulting to 1000
[  159.597737][T10475] syzkaller0: entered allmulticast mode
[  159.603913][T10475] bridge0: port 1(veth0_to_bridge) entered blocking state
[  159.606720][T10475] bridge0: port 1(veth0_to_bridge) entered disabled state
[  159.609446][T10475] veth0_to_bridge: entered allmulticast mode
[  159.614866][T10475] veth0_to_bridge: entered promiscuous mode
[  159.718542][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1486'.
[  159.798563][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1488'.
[  159.801922][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'.
[  159.806920][T10486] RDS: rds_bind could not find a transport for ::ffff:172.30.17.3, load rds_tcp or rds_rdma?
[  159.885972][T10496] netlink: 'syz.0.1491': attribute type 13 has an invalid length.
[  159.900375][T10498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1492'.
[  159.914028][T10496] vlan2: entered promiscuous mode
[  159.916155][T10496] bridge0: entered promiscuous mode
[  159.918956][T10496] vlan2: entered allmulticast mode
[  159.921528][T10496] bridge0: entered allmulticast mode
[  159.955912][T10500] veth0_to_bridge: left allmulticast mode
[  159.958401][T10500] veth0_to_bridge: left promiscuous mode
[  159.961265][T10500] bridge0: port 1(veth0_to_bridge) entered disabled state
[  159.974506][T10500] bond0: (slave bond_slave_0): Releasing backup interface
[  159.980235][T10500] bond_slave_0: left promiscuous mode
[  159.989033][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.993548][T10500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.998199][T10500] batman_adv: batadv0: Interface deactivated: 26
[  160.001045][T10500] batman_adv: batadv0: Removing interface: 26
[  160.021046][T10500] veth3: left allmulticast mode
[  160.024870][T10500] bridge1: port 1(veth3) entered disabled state
[  160.031927][T10500] bond1: (slave gretap1): Releasing active interface
[  160.042047][T10500] bond2: (slave ip6gretap1): Releasing backup interface
[  160.047735][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.053869][T10500] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 42:aa:4f:55:14:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  160.075499][T10500] bond2: (slave veth5): Releasing backup interface
[  160.079917][T10500] bond3: (slave macvlan6): Removing an active aggregator
[  160.083911][T10500] bond3: (slave macvlan6): Releasing backup interface
[  160.089985][T10500] bond6: (slave veth7): Releasing backup interface
[  160.298568][T10518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.314969][T10518] team0: Port device gtp1 added
[  160.318685][T10518] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  160.429620][T10529] netlink: zone id is out of range
[  160.431858][T10529] netlink: zone id is out of range
[  160.436328][T10529] netlink: zone id is out of range
[  160.438683][T10529] netlink: zone id is out of range
[  160.441148][T10529] netlink: zone id is out of range
[  160.444542][T10529] netlink: zone id is out of range
[  160.448168][T10529] netlink: zone id is out of range
[  160.450357][T10529] netlink: zone id is out of range
[  160.680278][T10550] @: renamed from veth0_vlan (while UP)
[  160.801796][T10557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.807664][T10557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.901204][T10557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.906504][T10557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.958467][T10557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.962024][T10557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.014347][T10557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.018840][T10557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.126968][T10557] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.131453][T10557] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.148348][T10557] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.152140][T10557] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.170533][T10557] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.175533][T10557] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.194758][T10557] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.198816][T10557] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.380669][T10585] xt_cgroup: xt_cgroup: no path or classid specified
[  161.443248][   T11] block nbd0: Possible stuck request ffff888020af0000: control (read@0,1024B). Runtime 60 seconds
[  161.448459][   T11] block nbd0: Possible stuck request ffff888020af0200: control (read@1024,1024B). Runtime 60 seconds
[  161.452532][   T11] block nbd0: Possible stuck request ffff888020af0400: control (read@2048,1024B). Runtime 60 seconds
[  161.456743][   T11] block nbd0: Possible stuck request ffff888020af0600: control (read@3072,1024B). Runtime 60 seconds
[  161.752239][T10612] syzkaller1: entered allmulticast mode
[  162.018190][T10623] __nla_validate_parse: 6 callbacks suppressed
[  162.018207][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'.
[  162.511979][T10634] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1540'.
[  162.721131][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1542'.
[  162.821532][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  162.828928][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  162.900974][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  163.061631][T10658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.065147][T10658] IPv6: NLM_F_CREATE should be set when creating new route
[  163.068898][T10658] IPv6: NLM_F_CREATE should be set when creating new route
[  163.113327][ T5278] udevd[5278]: worker [7344] /devices/virtual/block/nbd0 is taking a long time
[  163.241388][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'.
[  163.316732][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  163.323049][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  163.468526][T10694] netlink: 'syz.1.1561': attribute type 4 has an invalid length.
[  163.473890][T10694] x_tables: unsorted entry at hook 3
[  163.578403][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1564'.
[  163.827992][T10717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.832218][T10717] syzkaller0: entered promiscuous mode
[  163.838152][T10717] syzkaller0: entered allmulticast mode
[  163.858898][T10717] tipc: Resetting bearer <eth:syzkaller0>
[  163.863396][T10716] tipc: Resetting bearer <eth:syzkaller0>
[  163.874914][T10716] tipc: Disabling bearer <eth:syzkaller0>
[  164.063988][T10721] bridge0: port 3(team0) entered disabled state
[  164.067959][T10721] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.275702][T10721] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.281343][T10721] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.284492][T10721] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.287394][T10721] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.360483][T10721] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  164.364025][T10721] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  164.367512][T10721] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  164.371898][T10721] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  165.276979][T10795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  165.422886][T10800] 
[  165.423981][T10800] ======================================================
[  165.427055][T10800] WARNING: possible circular locking dependency detected
[  165.430306][T10800] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  165.435097][T10800] ------------------------------------------------------
[  165.438103][T10800] syz.1.1592/10800 is trying to acquire lock:
[  165.440804][T10800] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  165.445615][T10800] 
[  165.445615][T10800] but task is already holding lock:
[  165.448992][T10800] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  165.453013][T10800] 
[  165.453013][T10800] which lock already depends on the new lock.
[  165.453013][T10800] 
[  165.457389][T10800] 
[  165.457389][T10800] the existing dependency chain (in reverse order) is:
[  165.461778][T10800] 
[  165.461778][T10800] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  165.466275][T10800]        lock_acquire+0x120/0x360
[  165.468443][T10800]        _raw_spin_lock_bh+0x36/0x50
[  165.470698][T10800]        nr_rt_ioctl+0x390/0xd50
[  165.472714][T10800]        sock_do_ioctl+0xdc/0x300
[  165.474875][T10800]        sock_ioctl+0x576/0x790
[  165.477202][T10800]        __se_sys_ioctl+0xfc/0x170
[  165.480005][T10800]        do_syscall_64+0xfa/0x3b0
[  165.482551][T10800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.485363][T10800] 
[  165.485363][T10800] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  165.488777][T10800]        lock_acquire+0x120/0x360
[  165.491063][T10800]        _raw_spin_lock_bh+0x36/0x50
[  165.493803][T10800]        nr_rt_ioctl+0x193/0xd50
[  165.496541][T10800]        sock_do_ioctl+0xdc/0x300
[  165.498773][T10800]        sock_ioctl+0x576/0x790
[  165.500864][T10800]        __se_sys_ioctl+0xfc/0x170
[  165.503011][T10800]        do_syscall_64+0xfa/0x3b0
[  165.505167][T10800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.507765][T10800] 
[  165.507765][T10800] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  165.511266][T10800]        validate_chain+0xb9b/0x2140
[  165.514229][T10800]        __lock_acquire+0xab9/0xd20
[  165.516988][T10800]        lock_acquire+0x120/0x360
[  165.519301][T10800]        _raw_spin_lock_bh+0x36/0x50
[  165.521563][T10800]        nr_rt_device_down+0xa9/0x720
[  165.523914][T10800]        nr_device_event+0x137/0x150
[  165.526084][T10800]        notifier_call_chain+0x1b6/0x3e0
[  165.528566][T10800]        dev_close_many+0x29c/0x410
[  165.531136][T10800]        netif_close+0x158/0x210
[  165.533714][T10800]        dev_close+0x10a/0x220
[  165.535931][T10800]        bpq_device_event+0x2f4/0x600
[  165.538236][T10800]        notifier_call_chain+0x1b6/0x3e0
[  165.540638][T10800]        dev_close_many+0x29c/0x410
[  165.542873][T10800]        netif_close+0x158/0x210
[  165.545195][T10800]        dev_close+0x10a/0x220
[  165.547837][T10800]        bond_setup_by_slave+0x5f/0x3f0
[  165.550528][T10800]        bond_enslave+0x7a0/0x3a20
[  165.552883][T10800]        bond_do_ioctl+0x635/0x9b0
[  165.554961][T10800]        dev_ifsioc+0x90b/0xf00
[  165.556910][T10800]        dev_ioctl+0x7b4/0x1150
[  165.558990][T10800]        sock_do_ioctl+0x22c/0x300
[  165.561236][T10800]        sock_ioctl+0x576/0x790
[  165.563407][T10800]        __se_sys_ioctl+0xfc/0x170
[  165.565711][T10800]        do_syscall_64+0xfa/0x3b0
[  165.568051][T10800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.570991][T10800] 
[  165.570991][T10800] other info that might help us debug this:
[  165.570991][T10800] 
[  165.575236][T10800] Chain exists of:
[  165.575236][T10800]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  165.575236][T10800] 
[  165.581719][T10800]  Possible unsafe locking scenario:
[  165.581719][T10800] 
[  165.584764][T10800]        CPU0                    CPU1
[  165.586979][T10800]        ----                    ----
[  165.589087][T10800]   lock(nr_neigh_list_lock);
[  165.591111][T10800]                                lock(&nr_node->node_lock);
[  165.594632][T10800]                                lock(nr_neigh_list_lock);
[  165.598487][T10800]   lock(nr_node_list_lock);
[  165.600643][T10800] 
[  165.600643][T10800]  *** DEADLOCK ***
[  165.600643][T10800] 
[  165.603979][T10800] 2 locks held by syz.1.1592/10800:
[  165.606146][T10800]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  165.609969][T10800]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  165.615068][T10800] 
[  165.615068][T10800] stack backtrace:
[  165.617611][T10800] CPU: 1 UID: 0 PID: 10800 Comm: syz.1.1592 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  165.617631][T10800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.617639][T10800] Call Trace:
[  165.617646][T10800]  <TASK>
[  165.617654][T10800]  dump_stack_lvl+0x189/0x250
[  165.617674][T10800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.617689][T10800]  ? __pfx__printk+0x10/0x10
[  165.617707][T10800]  ? print_lock_name+0xde/0x100
[  165.617724][T10800]  print_circular_bug+0x2ee/0x310
[  165.617748][T10800]  check_noncircular+0x134/0x160
[  165.617765][T10800]  validate_chain+0xb9b/0x2140
[  165.617780][T10800]  ? rt6_disable_ip+0x6b3/0x720
[  165.617799][T10800]  ? __lock_acquire+0xab9/0xd20
[  165.617811][T10800]  __lock_acquire+0xab9/0xd20
[  165.617824][T10800]  ? nr_rt_device_down+0xa9/0x720
[  165.617837][T10800]  lock_acquire+0x120/0x360
[  165.617849][T10800]  ? nr_rt_device_down+0xa9/0x720
[  165.617863][T10800]  ? nr_rt_device_down+0xa9/0x720
[  165.617874][T10800]  _raw_spin_lock_bh+0x36/0x50
[  165.617891][T10800]  ? nr_rt_device_down+0xa9/0x720
[  165.617902][T10800]  nr_rt_device_down+0xa9/0x720
[  165.617913][T10800]  ? do_raw_spin_unlock+0x4d/0x240
[  165.617931][T10800]  nr_device_event+0x137/0x150
[  165.617948][T10800]  notifier_call_chain+0x1b6/0x3e0
[  165.617964][T10800]  dev_close_many+0x29c/0x410
[  165.617979][T10800]  ? __pfx_dev_close_many+0x10/0x10
[  165.617990][T10800]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  165.618007][T10800]  ? bond_netdev_event+0x227/0xe80
[  165.618023][T10800]  netif_close+0x158/0x210
[  165.618034][T10800]  ? __pfx_netif_close+0x10/0x10
[  165.618044][T10800]  ? tun_device_event+0x77/0x1020
[  165.618055][T10800]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.618074][T10800]  dev_close+0x10a/0x220
[  165.618088][T10800]  bpq_device_event+0x2f4/0x600
[  165.618104][T10800]  notifier_call_chain+0x1b6/0x3e0
[  165.618119][T10800]  dev_close_many+0x29c/0x410
[  165.618131][T10800]  ? __pfx_dev_close_many+0x10/0x10
[  165.618145][T10800]  netif_close+0x158/0x210
[  165.618156][T10800]  ? __pfx_netif_close+0x10/0x10
[  165.618167][T10800]  ? do_raw_spin_lock+0x121/0x290
[  165.618182][T10800]  ? __local_bh_enable_ip+0x12d/0x1c0
[  165.618195][T10800]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.618213][T10800]  dev_close+0x10a/0x220
[  165.618226][T10800]  bond_setup_by_slave+0x5f/0x3f0
[  165.618244][T10800]  bond_enslave+0x7a0/0x3a20
[  165.618269][T10800]  ? __pfx_bond_enslave+0x10/0x10
[  165.618288][T10800]  ? apparmor_capable+0x137/0x1b0
[  165.618301][T10800]  ? full_name_hash+0x92/0xe0
[  165.618318][T10800]  ? netdev_name_node_lookup+0xdf/0x120
[  165.618335][T10800]  bond_do_ioctl+0x635/0x9b0
[  165.618348][T10800]  ? __pfx_bond_do_ioctl+0x10/0x10
[  165.618359][T10800]  ? trace_contention_end+0x39/0x120
[  165.618374][T10800]  ? __mutex_lock+0x330/0xe80
[  165.618387][T10800]  ? full_name_hash+0x92/0xe0
[  165.618407][T10800]  ? netdev_name_node_lookup+0xdf/0x120
[  165.618424][T10800]  dev_ifsioc+0x90b/0xf00
[  165.618437][T10800]  ? dev_load+0x21/0x1f0
[  165.618448][T10800]  dev_ioctl+0x7b4/0x1150
[  165.618460][T10800]  sock_do_ioctl+0x22c/0x300
[  165.618478][T10800]  ? __pfx_sock_do_ioctl+0x10/0x10
[  165.618493][T10800]  ? __lock_acquire+0xab9/0xd20
[  165.618507][T10800]  sock_ioctl+0x576/0x790
[  165.618524][T10800]  ? __pfx_sock_ioctl+0x10/0x10
[  165.618540][T10800]  ? __fget_files+0x2a/0x420
[  165.618555][T10800]  ? __fget_files+0x3a0/0x420
[  165.618599][T10800]  ? __fget_files+0x2a/0x420
[  165.618617][T10800]  ? bpf_lsm_file_ioctl+0x9/0x20
[  165.618633][T10800]  ? __pfx_sock_ioctl+0x10/0x10
[  165.618649][T10800]  __se_sys_ioctl+0xfc/0x170
[  165.618663][T10800]  do_syscall_64+0xfa/0x3b0
[  165.618675][T10800]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.618692][T10800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.618703][T10800]  ? exc_page_fault+0x9f/0xf0
[  165.618720][T10800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.618731][T10800] RIP: 0033:0x7f072af8e929
[  165.618751][T10800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.618761][T10800] RSP: 002b:00007f072856e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  165.618776][T10800] RAX: ffffffffffffffda RBX: 00007f072b1b6320 RCX: 00007f072af8e929
[  165.618784][T10800] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000004
[  165.618793][T10800] RBP: 00007f072b010b39 R08: 0000000000000000 R09: 0000000000000000
[  165.618801][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.618809][T10800] R13: 0000000000000000 R14: 00007f072b1b6320 R15: 00007ffdc91d47f8
[  165.618823][T10800]  </TASK>
[  165.823206][T10800] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.828636][T10800] bond0: (slave rose0): Enslaving as an active interface with an up link

VM DIAGNOSIS:
02:02:43  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000cabf40 RBX=ffffc9000655f9e8 RCX=ffffc9000655f9e8 RDX=ffffc9000655f9c8
RSI=ffff888040dd5640 RDI=ffffc9000655f968 RBP=ffffc9000655fa01 RSP=ffffc9000655f938
R8 =ffffc9000655fa27 R9 =0000000000000000 R10=ffffc9000655f9c8 R11=fffff52000cabf45
R12=ffffc9000655f968 R13=ffffc9000655f9e8 R14=ffffc9000655f9c8 R15=1ffff92000cabf3e
RIP=ffffffff8165c173 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f739d234380 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f739d4e6690 CR3=0000000027fca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=ffffffffffffff00 0000000000ff0000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000007273 RDI=0000000000007274 RBP=00000000000003f8 RSP=ffffc9000667e8d0
R8 =ffff888108a88237 R9 =1ffff11021151046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bd R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f072856e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d79570fc8 CR3=000000012bb6e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f072b011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
