last executing test programs:

3m44.084028717s ago: executing program 1 (id=1235):
accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)

3m42.95711174s ago: executing program 1 (id=1246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x3, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), 0x0)

3m42.383546669s ago: executing program 1 (id=1253):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c00000079100000000000006300000000100000950074000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

3m39.246311853s ago: executing program 1 (id=1270):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0)

3m38.980387844s ago: executing program 1 (id=1275):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)

3m37.091488933s ago: executing program 1 (id=1284):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

3m21.987559483s ago: executing program 32 (id=1284):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

2m43.533320383s ago: executing program 4 (id=1653):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6f, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x2c)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x800})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
write$tun(r1, &(0x7f00000003c0)={@void, @void, @mpls={[{0x9, 0x0, 0x1}], @llc={@snap={0x0, 0x1, 'z', "56f8ba", 0x4}}}}, 0xc)

2m42.164148154s ago: executing program 4 (id=1660):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m40.419510451s ago: executing program 4 (id=1662):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

2m40.184043395s ago: executing program 4 (id=1665):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

2m39.4389838s ago: executing program 4 (id=1673):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

2m39.016202937s ago: executing program 4 (id=1676):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2m26.82090604s ago: executing program 3 (id=1752):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

2m25.918005441s ago: executing program 3 (id=1767):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4)
shutdown(0xffffffffffffffff, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x0, 0x0)
r0 = socket(0x8, 0x3, 0xb)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x3, 'syz1\x00', @default, 0x3, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
socket$nl_route(0x10, 0x3, 0x0)

2m25.504334151s ago: executing program 3 (id=1771):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

2m25.330085433s ago: executing program 3 (id=1774):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2m25.161033891s ago: executing program 3 (id=1776):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563", 0xa}], 0x1}}], 0x1, 0x4001c00)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)

2m24.573296706s ago: executing program 3 (id=1783):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, 0x0, 0x0)

2m23.89465741s ago: executing program 33 (id=1676):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2m9.391724092s ago: executing program 34 (id=1783):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, 0x0, 0x0)

3.899063932s ago: executing program 2 (id=2682):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x1000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x48000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000120000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000040), 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)
socket(0x10, 0x803, 0x0)

3.809972205s ago: executing program 5 (id=2683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
epoll_create1(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0)
socket(0x1, 0x80802, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r4, &(0x7f0000000380)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x5, 0x38, 0x66, 0x0, 0xff, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x43}, {[@timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x3}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x2, 0x2, 0x2, 0x0, 0x1, 0x5, 0x3, 0x3, 0x0, 0x347b, 0x2, 0x4e20, 0x4e22}, 0x0, 0x2}}}}}}}}, 0x52)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)

3.779075678s ago: executing program 6 (id=2684):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, 0x0, 0x0)
sendmsg$can_bcm(r1, 0x0, 0x0)
write$6lowpan_control(r0, 0x0, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_control(r2, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b)

3.551024269s ago: executing program 6 (id=2685):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket(0x22, 0x2, 0x23)
close(r3)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xee82cffcb655e29e}, 0x20000000)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001a40), &(0x7f0000001a80)=0x8)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r0, @ANYBLOB="a1ab00000000020000003200000008000100300000000800c300040000000800c300f70000000800c400000100000800c400000000000800c300000000000800c300000000000800c300090000000800c300ffff0000c000c50017e8c6089d3bd535b66b11be151b5806941aeae5d2108fe068c73d35219f8e4ec4842c892e12ad3aeddebe5ac3154c4e6304191a8b5e8a086676f6d88d127128b9599c13b815788ea0203f91990400adf332af32b42116c3c09f1f15aad3449e3f7d98141d4da7cc"], 0x11c}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r6, &(0x7f0000019880)=[{&(0x7f0000000400)}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000540)=0x401, 0x4)
ppoll(&(0x7f0000000380)=[{r6}], 0x1, &(0x7f0000000400), 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r8=>0x0})
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, 0x3, 0x78, 0xfff9, 0x0, 0x8000000066b8, 0x444000fc, r8})
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000500)=0x5, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x130, 0x24, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfffb}, {0xfffc, 0x8}, {0x6, 0xfff3}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3b}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000)

3.360427814s ago: executing program 6 (id=2687):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f00000000c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x3, 0x300)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

3.172152661s ago: executing program 5 (id=2689):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.17151765s ago: executing program 0 (id=2690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

3.157523719s ago: executing program 6 (id=2691):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000006340))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x8, 0x6, 0x900, 0x401}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2a00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x20008081)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800)

2.94186085s ago: executing program 2 (id=2692):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4c0c8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', r6, 0x0, 0xffffffffc}, 0x18)
bpf$MAP_CREATE(0x700000000000000, 0x0, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xf5}}], 0x400000000000172, 0x4000000)

2.781126529s ago: executing program 5 (id=2693):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x200007ff, 0x4)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000202010800000000000000000a000009300002802c00018014000300fc0200e4000000000000000000000000140004"], 0x44}, 0x1, 0x0, 0x0, 0x20000820}, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff00070000000000000005f60000009e0c0907"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000940)=@delchain={0x608, 0x65, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0x5}, {0xfff1, 0xd}, {0x5, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5ac, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x5, 0x5b, 0x9, 0xc, {0x6, 0x0, 0x6, 0xa9c, 0xff, 0x401}, {0x0, 0x0, 0xb0, 0x4, 0x3ff, 0x80000000}, 0x3, 0x5cb, 0x3}}]}, @TCA_BPF_ACT={0x510, 0x1, [@m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x18, 0x6, "f89e0a77a97c7bfb7dee7de52e6a94901ee047e1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_csum={0x114, 0xf, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc89, 0x6, 0x6, 0x4}, 0x1c}}]}, {0xcb, 0x6, "b82112908395635941f95ffd7fbf39ace7786099e2e05ad77adebe8a2b0bb9cef288c46ea32611d447e01d9b79fd768e3e2742b8533b1e3682c9c746b3df6d1a85b564d688ae3684132859aa5d7328a800189a4312f0a38978fbea76b5a7013c3989f5d9e67fc8fe3212bf7151ff167a0083c49ceb11107c87f99190e10808f9aa27ff2662f48635f3390be39c8177232ef18556f64d42a88096e0ed1f6c977ab940de4c81058bb386545997b39b10f6012414be16d7ab8368be319aaefd9d283db9a59645bbd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0xa9be91959c0194aa}}}}, @m_gact={0xd4, 0x16, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xa7fd, 0x400, 0x7, 0x9, 0x61f}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x601, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11c9, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xe, 0x5, 0x3, 0xdd}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2302, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x37d, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x8, 0x8, 0x8}}]}, {0x30, 0x6, "29465292f3695732cf7509c490c310619ae245be12268f656307d6f28a8ae2b9eb7e02f501a8b99c78af51c5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x1e8, 0x20, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x400, 0x5, 0x6, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0xffffffffffffffff, 0x101, 0xfffffffb}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff00, 0x147, 0x10000000, 0x10, 0x5}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x20000000, 0xb, 0x800}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9f32, 0x6, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7fff, 0x0, 0x0, 0x79b}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x6, 0xffffffffffffffff, 0x7, 0xfffffff8}, 0x2, r4}}]}, {0xdb, 0x6, "ff87db062f2cf415eba0d01467b831b81705f60412827fe299a7bd31a72727460748895e389770b5712dfc23eb2a9c1dbf394792ab664cffe0a6423fde3745502f1b74a84b759b3b98f27f70ae3e70c025ca1dbbd0a7706cf3368b51d93ae3e4c6e1280c13ef13e354403358044e58decf176059de925c5fb5b63f868edb7e0bc66f85a013d41bbbc9c310e65bf6e3443848f145a4bbdde91a329c6ba59ba44d9e8522618350f077a6c18289bcbc505f4f18f6ae47dacc9882592fe74fbede4a983167d089c7eba7496879b4de239937cdc66a81fb99ad"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xf4, 0x16, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x9, 0x1, 0xffff0000, 0x80000}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x41, 0x20000000, 0x0, 0xfffffffa}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x10000004, 0xeafd, 0x5}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x3, 0x7fe00000}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x605b, 0x20000000, 0xffffffff, 0x5}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x7, 0x3, 0x7}, 0x3, r4}}]}, {0x5, 0x6, "cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0xb, 0x7, 0x4}, {0x9, 0x1, 0x0, 0x8}, {0x3, 0xff, 0x0, 0x2}, {0x400, 0x5, 0xa, 0x3}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x3, 0x5, 0x2}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0x1, 0xb2}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x608}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

2.738394102s ago: executing program 0 (id=2694):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.722008151s ago: executing program 6 (id=2695):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

2.548692189s ago: executing program 0 (id=2696):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000000000d}, 0x18)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
unshare(0x62040200)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)

2.203986299s ago: executing program 5 (id=2698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x80, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x4d}}, {0x8}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x6, 0xa)
connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x2, 0x1}}, 0x26)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

1.813850848s ago: executing program 7 (id=2700):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x1d, 0x0, 0x0)
r1 = socket(0x29, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000ac4f000000000081daa9ea2af600950000002000002c09beef5ce52d35e5e1d0b22b10b3a52d00"/56], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000140), &(0x7f0000000300)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

1.447686814s ago: executing program 0 (id=2701):
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x24, &(0x7f0000000040)=ANY=[], 0x1000f)
accept4$netrom(r1, 0x0, &(0x7f0000000040), 0x87d619735d3a14a1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.21232653s ago: executing program 2 (id=2702):
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socket$inet(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

1.010295836s ago: executing program 5 (id=2703):
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000400))
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x8010)
socket(0x10, 0x5, 0x0)
close(0x3)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r4, r3, 0x25, 0xa, @val=@iter={0x0}}, 0x20)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r6, 0x80)
accept$netrom(r6, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r7, 0x0, 0x0)

743.833776ms ago: executing program 7 (id=2704):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000000000", 0xa)

728.686425ms ago: executing program 2 (id=2705):
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000c00)={0x0, ""/256, 0x0, 0x0, <r0=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000e00)={{}, r0, 0x2, @unused=[0x7, 0x1, 0x18d5, 0xf0], @name="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"})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

540.185819ms ago: executing program 7 (id=2706):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

416.147509ms ago: executing program 2 (id=2707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)

414.71096ms ago: executing program 7 (id=2708):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)}}], 0x1, 0x4000)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000000)={'wlan1\x00'})
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000100)={r7, r7, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

403.41105ms ago: executing program 0 (id=2709):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
write$tun(r1, &(0x7f0000000540)={@void, @val={0x6, 0x1, 0xd, 0x4, 0x6, 0x4f4}, @ipv4=@generic={{0xa, 0x4, 0x1, 0x7, 0x6a, 0x67, 0x0, 0x7, 0x33, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x10, 0xc0, 0x0, 0x7, [0x1ff, 0x9, 0xc]}, @ra={0x94, 0x4, 0x1}]}}, "77adf1db1c1960691567b0c66d8a01cdccd8d85aa628c369996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3da0cf3bf546796a9f58005679"}}, 0x74)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

319.557542ms ago: executing program 6 (id=2710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r7, &(0x7f0000000100), 0xa, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
r8 = socket$netlink(0x10, 0x3, 0x6)
writev(r8, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0)

281.100359ms ago: executing program 0 (id=2711):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
socket$isdn_base(0x22, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x62040200)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38)
shutdown(0xffffffffffffffff, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0)
unshare(0x42020000)

243.403959ms ago: executing program 7 (id=2712):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
unshare(0x4000400)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

90.836076ms ago: executing program 7 (id=2713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x80, r4, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x4d}}, {0x8}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x6, 0xa)
connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x2, 0x1}}, 0x26)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

76.111633ms ago: executing program 5 (id=2714):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

0s ago: executing program 2 (id=2715):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$inet(r7, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c9d661e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee4581ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b5f9359b65a80f341ada2af53c028694e069e7ebd7ffbfdbdd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab9", 0x6b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="194129cc7d4d5a140f1f749697f9304a16fe9a812c1393a8b28af6b73d22a9348d4146e171e424b36a245bbbfe6910cc2011059d90799b56b4730c9147ebfb06f4e56fa79974240bebebe7fb1d9c42ec1017ea7838bf9b1656bb64c907a01a2567448645aa39d6d780bcbe890706b29f4d6565c89138726bda82f90a8043f1d9a1340bc47d8ef644637a62aaf393", 0x8e}, {&(0x7f00000001c0)="72f6cd754bdd0954a2c5c00394", 0xd}, {&(0x7f0000000500)="2ea0fbb5b5acfba63dc1af7dcab574d01320ecdadbbd3068ba5f714acf60a480725f07945c823b001d54900e4fbca493b951b3fdd19e86ca7d6d2c260d8f0ede9df30695a2f2c0d0eb28e359e9e975e2ee05d2fe33ce50ef15cdb58dc1f01b37e8b1b1c90431a6139519929291f8b3af2990826f4fe727d3ef5d79a14d8e9fa7ae19e6233817e6f694ea90dae5b93b0dd986adc63b6cc53319a20d5e73f73a5d10b1c0f765e84a1686c15df780de8eefc415776f8148040f00801c897076391b8d305e", 0xc3}, {&(0x7f0000000600)="e33268b53a6cefd73876b72a5ce8c491492442b968e256d21576d23f20d4c904a1255bdc9da62b51bcaaa2a0944f192955dc8a5ae453c6c57c88ab4bff57fbbd9f085a00196f7b332cff900be5428cfb220b331e8ab5333014ba6ee6742a54678e3c757676a306e8db8eb356b369d5cdb95f80b4b8c8f44aea7980229f2e52348b00c5ec09be6b6c55f6ec919bffd9a643f4a8685b9235f73f9ab2755b3f92a3af1ad9d152b71832aa0c2ee7ad27bcbbd76d6b56db0c4296f6edc5597a8a8fa93783662528fee10d225075fb0ff671a38d4ee061d40aba5f4d46354a77", 0xdd}], 0x4}}], 0x4, 0x44008090)
recvmmsg(r7, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r8 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x34, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic="a8bb"]}, 0x34}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20)
close(r8)

kernel console output (not intermixed with test programs):

r on device bond6
[  305.115151][T11711] syz_tun: entered allmulticast mode
[  305.137165][T11709] dvmrp1: entered allmulticast mode
[  305.188247][T11713] 8021q: adding VLAN 0 to HW filter on device bond6
[  305.195540][T11713] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  305.208735][T11713] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  305.220074][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  305.238204][T11707] syz_tun: left allmulticast mode
[  305.286730][T11710] bond6: (slave bridge9): Enslaving as an active interface with a down link
[  305.684377][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1868'.
[  306.260075][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  306.314388][T11743] lo speed is unknown, defaulting to 1000
[  306.323482][T11743] wg1 speed is unknown, defaulting to 1000
[  306.739346][T11755] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1879'.
[  306.787717][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'.
[  306.816266][T11752] syz.0.1877 (11752) used greatest stack depth: 17864 bytes left
[  307.008263][T11767] netlink: 'syz.6.1884': attribute type 1 has an invalid length.
[  307.102045][T11772] vlan2: entered allmulticast mode
[  307.107208][T11772] veth0_to_batadv: entered allmulticast mode
[  307.268212][T11774] syzkaller0: entered promiscuous mode
[  307.273895][T11774] syzkaller0: entered allmulticast mode
[  307.299996][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  307.340301][T11779] netlink: 'syz.6.1888': attribute type 1 has an invalid length.
[  307.348187][T11779] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1888'.
[  307.908602][ T5876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.926005][T11784] netlink: 'syz.5.1890': attribute type 1 has an invalid length.
[  307.934331][ T5876] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.947859][ T5876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.971593][ T5876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.980122][ T5876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.340299][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  309.293899][T11781] lo speed is unknown, defaulting to 1000
[  309.331060][T11781] wg1 speed is unknown, defaulting to 1000
[  309.380130][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  309.408972][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'.
[  309.436931][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'.
[  309.439630][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1894'.
[  309.506458][T11792] hsr_slave_1 (unregistering): left promiscuous mode
[  309.599034][T11799] tipc: Resetting bearer <eth:syzkaller0>
[  309.644403][T11798] lo speed is unknown, defaulting to 1000
[  309.656061][T11798] wg1 speed is unknown, defaulting to 1000
[  310.021433][ T5876] Bluetooth: hci7: command tx timeout
[  310.168015][T11781] chnl_net:caif_netlink_parms(): no params data found
[  310.172899][T11813] netlink: 'syz.5.1898': attribute type 1 has an invalid length.
[  310.376200][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1898'.
[  310.420023][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  310.463345][T11817] bond1: (slave geneve2): making interface the new active one
[  310.484626][T11817] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  310.561899][T11820] 8021q: adding VLAN 0 to HW filter on device bond1
[  310.676905][   T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  310.689180][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1901'.
[  310.720074][   T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  310.763693][ T3478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  310.791856][ T3478] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  310.917115][   T12] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  310.942756][   T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  311.050332][   T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  311.059558][   T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  311.092579][T11834] tap0: tun_chr_ioctl cmd 1074025680
[  311.110165][T11781] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.117467][T11781] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.135465][T11781] bridge_slave_0: entered allmulticast mode
[  311.151881][T11781] bridge_slave_0: entered promiscuous mode
[  311.178293][T11781] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.196957][T11781] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.210576][T11781] bridge_slave_1: entered allmulticast mode
[  311.218307][T11781] bridge_slave_1: entered promiscuous mode
[  311.251310][T11842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'.
[  311.255826][T11834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.267884][T11842] netlink: 'syz.2.1906': attribute type 4 has an invalid length.
[  311.297253][T11839] D: renamed from syzkaller0
[  311.321459][T11839] tipc: Disabling bearer <eth:syzkaller0>
[  311.460080][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  311.465047][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.583417][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.917902][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'.
[  312.101786][ T5876] Bluetooth: hci7: command tx timeout
[  312.260681][T11781] team0: Port device team_slave_0 added
[  312.270573][T11781] team0: Port device team_slave_1 added
[  312.306369][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.318003][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.361381][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.396964][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.417500][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.452105][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.770278][T11871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.885009][T11781] hsr_slave_0: entered promiscuous mode
[  312.901922][T11781] hsr_slave_1: entered promiscuous mode
[  312.909303][T11781] debugfs: 'hsr0' already exists in 'hsr'
[  312.915919][T11781] Cannot create hsr debugfs directory
[  314.144377][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1923'.
[  314.197391][ T5876] Bluetooth: hci7: command tx timeout
[  316.260419][ T5876] Bluetooth: hci7: command tx timeout
[  316.337203][T11915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.379158][T11915] syzkaller0: entered promiscuous mode
[  316.386653][T11915] syzkaller0: entered allmulticast mode
[  316.458999][T11915] tipc: Resetting bearer <eth:syzkaller0>
[  316.477084][T11781] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  316.511342][T11781] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  316.559534][T11914] tipc: Resetting bearer <eth:syzkaller0>
[  316.613223][T11914] tipc: Disabling bearer <eth:syzkaller0>
[  316.644856][T11781] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  316.667430][T11781] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  316.844260][T11932] lo speed is unknown, defaulting to 1000
[  316.887462][T11932] wg1 speed is unknown, defaulting to 1000
[  317.008190][T11781] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.132580][T11781] 8021q: adding VLAN 0 to HW filter on device team0
[  317.172800][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.180029][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.203129][T11940] tipc: Started in network mode
[  317.208107][T11940] tipc: Node identity 665bb570812d, cluster identity 4711
[  317.270769][T11940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.292185][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.299396][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.367720][T11945] syzkaller0: entered promiscuous mode
[  317.414536][T11945] syzkaller0: entered allmulticast mode
[  317.537490][T11945] tipc: Resetting bearer <eth:syzkaller0>
[  317.664832][T11939] tipc: Resetting bearer <eth:syzkaller0>
[  317.766500][T11939] tipc: Disabling bearer <eth:syzkaller0>
[  318.429966][T11969] geneve2: entered promiscuous mode
[  318.562518][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.956264][T11781] veth0_vlan: entered promiscuous mode
[  319.008651][T11781] veth1_vlan: entered promiscuous mode
[  319.098568][T11781] veth0_macvtap: entered promiscuous mode
[  319.136573][T11781] veth1_macvtap: entered promiscuous mode
[  319.214486][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.261516][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.340905][ T1108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.371270][ T1108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.408767][ T1108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.472818][ T1108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.716622][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.725949][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.841629][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.870890][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.877287][T12001] lo speed is unknown, defaulting to 1000
[  319.948515][T12001] wg1 speed is unknown, defaulting to 1000
[  321.042884][T12027] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.337869][T12040] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.398520][T12043] tipc: Resetting bearer <eth:syzkaller0>
[  321.451833][T12040] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  321.564124][T12043] tipc: Resetting bearer <eth:syzkaller0>
[  321.809920][T12052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1962'.
[  322.241747][T12063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.257423][T12064] syzkaller0: entered promiscuous mode
[  322.309004][T12064] syzkaller0: entered allmulticast mode
[  322.413574][T12059] tipc: Resetting bearer <eth:syzkaller0>
[  322.430983][T12057] tipc: Resetting bearer <eth:syzkaller0>
[  322.476569][T12057] tipc: Disabling bearer <eth:syzkaller0>
[  322.823015][T12075] tipc: Started in network mode
[  322.828022][T12075] tipc: Node identity 3a18baf5960a, cluster identity 4711
[  322.834587][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.835571][T12075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.859955][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.919325][T12076] syzkaller0: entered promiscuous mode
[  322.973331][T12076] syzkaller0: entered allmulticast mode
[  323.062305][T12075] tipc: Resetting bearer <eth:syzkaller0>
[  323.220832][T12073] tipc: Resetting bearer <eth:syzkaller0>
[  323.250452][T12073] tipc: Disabling bearer <eth:syzkaller0>
[  323.290429][T12087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.438305][T12089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.446186][T12089] syzkaller0: entered promiscuous mode
[  323.452138][T12089] syzkaller0: entered allmulticast mode
[  324.559849][T10081] tipc: Node number set to 444832572
[  325.386600][ T5876] Bluetooth: hci7: command tx timeout
[  325.480332][T12097] vlan2: entered promiscuous mode
[  325.485445][T12097] team0: entered promiscuous mode
[  325.490815][T12097] team_slave_0: entered promiscuous mode
[  325.496603][T12097] team_slave_1: entered promiscuous mode
[  325.502595][T12097] batadv1: entered promiscuous mode
[  325.508013][T12097] !
: entered promiscuous mode
[  325.530730][T12100] tipc: Resetting bearer <eth:syzkaller0>
[  325.545727][T12088] tipc: Resetting bearer <eth:syzkaller0>
[  325.591080][T12088] tipc: Disabling bearer <eth:syzkaller0>
[  325.667382][T12115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.734100][T12102] lo speed is unknown, defaulting to 1000
[  325.834375][T12118] 8021q: adding VLAN 0 to HW filter on device bond2
[  325.847916][T12102] wg1 speed is unknown, defaulting to 1000
[  325.862345][T12122] gretap1: entered promiscuous mode
[  325.868546][T12122] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  325.881643][T12122] bond2: (slave macvlan0): Enslaving as a backup interface with an up link
[  325.890709][T12118] bridge_slave_0: left allmulticast mode
[  325.896370][T12118] bridge_slave_0: left promiscuous mode
[  325.902518][T12118] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.921574][T12118] bridge_slave_1: left allmulticast mode
[  325.927254][T12118] bridge_slave_1: left promiscuous mode
[  325.934247][T12118] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.941660][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  325.962792][T12118] team0: Port device team_slave_0 removed
[  325.973714][T12118] team0: Port device team_slave_1 removed
[  325.987642][T12118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.021880][T12118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.061934][   T78] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  326.083100][T12118] bond0: (slave gretap1): Releasing active interface
[  326.100820][T12118] gretap1: left promiscuous mode
[  326.121834][T12118] bond1: (slave geneve2): Releasing active interface
[  326.154782][T12118] bond2: (slave macvlan0): Removing an active aggregator
[  326.169886][T12118] bond2: (slave macvlan0): Releasing backup interface
[  326.372108][   T78] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.414950][   T78] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.506738][T12130] syzkaller0: entered promiscuous mode
[  326.512938][T12130] syzkaller0: entered allmulticast mode
[  326.520706][   T78] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  326.554822][   T78] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  329.012005][T12158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.027548][T12158] syzkaller0: entered promiscuous mode
[  329.034538][T12158] syzkaller0: entered allmulticast mode
[  329.187234][T12158] tipc: Resetting bearer <eth:syzkaller0>
[  329.193299][T12164] lo speed is unknown, defaulting to 1000
[  329.230416][T12172] netlink: 'syz.5.1996': attribute type 12 has an invalid length.
[  329.300318][T12157] tipc: Resetting bearer <eth:syzkaller0>
[  329.356683][T12157] tipc: Disabling bearer <eth:syzkaller0>
[  329.376181][T12164] wg1 speed is unknown, defaulting to 1000
[  329.580976][T12174] lo speed is unknown, defaulting to 1000
[  329.591197][T12177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.640646][T12174] wg1 speed is unknown, defaulting to 1000
[  330.726136][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2002'.
[  330.774623][T12193] geneve2: entered promiscuous mode
[  330.802265][T12193] geneve2: entered allmulticast mode
[  331.003522][T12196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.217659][T12203] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.258652][T12201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.320372][T12204] syzkaller0: entered promiscuous mode
[  331.325914][T12204] syzkaller0: entered allmulticast mode
[  331.421674][T12201] tipc: Resetting bearer <eth:syzkaller0>
[  331.456651][T12207] netlink: 'syz.0.2007': attribute type 1 has an invalid length.
[  331.479065][T12200] tipc: Resetting bearer <eth:syzkaller0>
[  331.520509][T12200] tipc: Disabling bearer <eth:syzkaller0>
[  331.617781][T12211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5
[  331.658058][T12207] 8021q: adding VLAN 0 to HW filter on device bond7
[  331.696634][T12208] bond7: (slave ip6erspan0): making interface the new active one
[  331.708801][T12208] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link
[  331.742056][T12214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.750051][T12214] syzkaller0: entered promiscuous mode
[  331.755713][T12214] syzkaller0: entered allmulticast mode
[  331.818617][T12214] tipc: Resetting bearer <eth:syzkaller0>
[  331.859571][T12213] tipc: Resetting bearer <eth:syzkaller0>
[  331.954771][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2009'.
[  331.964274][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2009'.
[  331.974182][T12213] tipc: Disabling bearer <eth:syzkaller0>
[  332.305021][T12231] netlink: 'syz.5.2012': attribute type 8 has an invalid length.
[  332.539973][   T30] audit: type=1800 audit(1756762712.696:2): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2010" name="memory.events" dev="tmpfs" ino=80 res=0 errno=0
[  332.617409][T12235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.750312][T12239] netlink: 'syz.0.2015': attribute type 1 has an invalid length.
[  332.778640][T12239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2015'.
[  332.795299][T12238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.804106][T12238] syzkaller0: entered promiscuous mode
[  332.809605][T12238] syzkaller0: entered allmulticast mode
[  332.908285][T12238] tipc: Resetting bearer <eth:syzkaller0>
[  332.943527][T12236] tipc: Resetting bearer <eth:syzkaller0>
[  333.016786][T12236] tipc: Disabling bearer <eth:syzkaller0>
[  333.024198][T12246] netlink: 'syz.7.2017': attribute type 1 has an invalid length.
[  333.252858][  T979] IPVS: starting estimator thread 0...
[  333.322676][T12253] openvswitch: netlink: Message has 4 unknown bytes.
[  333.349869][T12252] IPVS: using max 30 ests per chain, 72000 per kthread
[  333.386064][T12255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.420146][T12255] syzkaller0: entered promiscuous mode
[  333.426901][T12255] syzkaller0: entered allmulticast mode
[  333.473558][T12257] netlink: 'syz.0.2021': attribute type 1 has an invalid length.
[  333.492277][T12257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2021'.
[  333.493737][T12255] tipc: Resetting bearer <eth:syzkaller0>
[  333.570103][T12254] tipc: Resetting bearer <eth:syzkaller0>
[  333.671932][T12254] tipc: Disabling bearer <eth:syzkaller0>
[  333.733484][T12261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.741448][T12261] syzkaller0: entered promiscuous mode
[  333.767340][T12261] syzkaller0: entered allmulticast mode
[  333.860372][T12261] tipc: Resetting bearer <eth:syzkaller0>
[  333.883157][T12260] tipc: Resetting bearer <eth:syzkaller0>
[  333.902908][T12268] netlink: 'syz.0.2026': attribute type 12 has an invalid length.
[  333.931563][T12260] tipc: Disabling bearer <eth:syzkaller0>
[  334.185055][T12276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.202231][T12278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.218737][T12276] syzkaller0: entered promiscuous mode
[  334.225435][T12276] syzkaller0: entered allmulticast mode
[  334.240724][T12278] syzkaller0: entered promiscuous mode
[  334.260338][T12278] syzkaller0: entered allmulticast mode
[  334.322167][T12280] lo speed is unknown, defaulting to 1000
[  334.333151][T12276] tipc: Resetting bearer <eth:syzkaller0>
[  334.345683][T12278] tipc: Resetting bearer <eth:syzkaller0>
[  334.353338][T12280] wg1 speed is unknown, defaulting to 1000
[  334.361608][T12273] tipc: Resetting bearer <eth:syzkaller0>
[  334.378988][T12273] tipc: Disabling bearer <eth:syzkaller0>
[  334.389161][T12275] tipc: Resetting bearer <eth:syzkaller0>
[  334.407935][T12275] tipc: Disabling bearer <eth:syzkaller0>
[  334.624600][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2033'.
[  334.711072][T12291] bridge_slave_1: left allmulticast mode
[  334.765728][T12291] bridge_slave_1: left promiscuous mode
[  334.772053][T12291] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.789343][T12291] bridge_slave_0: left allmulticast mode
[  334.795418][T12291] bridge_slave_0: left promiscuous mode
[  334.801729][T12291] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.906578][T12297] netlink: 'syz.0.2035': attribute type 1 has an invalid length.
[  335.213591][T12297] 8021q: adding VLAN 0 to HW filter on device bond8
[  335.419204][T12298] 8021q: adding VLAN 0 to HW filter on device bond8
[  335.437495][T12298] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  335.452528][T12298] bond8: (slave vcan1): Error -95 calling set_mac_address
[  335.524644][T12301] gretap1: entered promiscuous mode
[  335.535170][T12301] bond8: (slave gretap1): making interface the new active one
[  335.557254][T12301] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  335.610580][T12310] lo speed is unknown, defaulting to 1000
[  335.688997][T12310] wg1 speed is unknown, defaulting to 1000
[  335.781744][T12319] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.832487][T12319] syzkaller0: entered promiscuous mode
[  335.845805][T12319] syzkaller0: entered allmulticast mode
[  335.887120][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'.
[  335.925071][T12328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2045'.
[  335.948494][T12319] tipc: Resetting bearer <eth:syzkaller0>
[  335.955529][T12325] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  335.966688][T12325] CPU: 1 UID: 0 PID: 12325 Comm: syz.0.2044 Not tainted syzkaller #0 PREEMPT(full) 
[  335.966716][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  335.966728][T12325] Call Trace:
[  335.966735][T12325]  <TASK>
[  335.966745][T12325]  dump_stack_lvl+0x189/0x250
[  335.966777][T12325]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.966798][T12325]  ? __pfx__printk+0x10/0x10
[  335.966829][T12325]  ? kernfs_path_from_node+0x2f/0x290
[  335.966848][T12325]  ? kernfs_path_from_node+0x250/0x290
[  335.966864][T12325]  ? kernfs_path_from_node+0x2f/0x290
[  335.966888][T12325]  sysfs_warn_dup+0x8e/0xa0
[  335.966907][T12325]  sysfs_do_create_link_sd+0xc0/0x110
[  335.966929][T12325]  device_add_class_symlinks+0x1cf/0x240
[  335.966952][T12325]  device_add+0x475/0xb50
[  335.966976][T12325]  wiphy_register+0x1ba6/0x28d0
[  335.967014][T12325]  ? __pfx_wiphy_register+0x10/0x10
[  335.967053][T12325]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  335.967086][T12325]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  335.967113][T12325]  ieee80211_register_hw+0x3425/0x4080
[  335.967156][T12325]  ? ieee80211_register_hw+0x13f1/0x4080
[  335.967184][T12325]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  335.967209][T12325]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.967242][T12325]  ? __hrtimer_setup+0x187/0x210
[  335.967257][T12325]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  335.967284][T12325]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  335.967342][T12325]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  335.967362][T12325]  ? trace_kmalloc+0x1f/0xd0
[  335.967380][T12325]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  335.967402][T12325]  ? kstrndup+0xbf/0x160
[  335.967431][T12325]  hwsim_new_radio_nl+0xea4/0x1b10
[  335.967456][T12325]  ? __pfx___nla_validate_parse+0x10/0x10
[  335.967506][T12325]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  335.967544][T12325]  ? __nla_parse+0x40/0x60
[  335.967572][T12325]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  335.967602][T12325]  genl_family_rcv_msg_doit+0x215/0x300
[  335.967631][T12325]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  335.967668][T12325]  ? bpf_lsm_capable+0x9/0x20
[  335.967687][T12325]  ? security_capable+0x7e/0x2e0
[  335.967718][T12325]  genl_rcv_msg+0x60e/0x790
[  335.967746][T12325]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.967766][T12325]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  335.967806][T12325]  netlink_rcv_skb+0x205/0x470
[  335.967821][T12325]  ? __lock_acquire+0xab9/0xd20
[  335.967845][T12325]  ? __pfx_genl_rcv_msg+0x10/0x10
[  335.967867][T12325]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.967908][T12325]  ? down_read+0x1ad/0x2e0
[  335.967931][T12325]  genl_rcv+0x28/0x40
[  335.967950][T12325]  netlink_unicast+0x82c/0x9e0
[  335.967983][T12325]  ? __pfx_netlink_unicast+0x10/0x10
[  335.968008][T12325]  ? netlink_sendmsg+0x642/0xb30
[  335.968023][T12325]  ? skb_put+0x11b/0x210
[  335.968046][T12325]  netlink_sendmsg+0x805/0xb30
[  335.968075][T12325]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.968097][T12325]  ? aa_sock_msg_perm+0xf1/0x1d0
[  335.968116][T12325]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  335.968133][T12325]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.968152][T12325]  __sock_sendmsg+0x21c/0x270
[  335.968179][T12325]  ____sys_sendmsg+0x505/0x830
[  335.968204][T12325]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.968234][T12325]  ? import_iovec+0x74/0xa0
[  335.968259][T12325]  ___sys_sendmsg+0x21f/0x2a0
[  335.968281][T12325]  ? __pfx____sys_sendmsg+0x10/0x10
[  335.968341][T12325]  ? __fget_files+0x2a/0x420
[  335.968356][T12325]  ? __fget_files+0x3a0/0x420
[  335.968384][T12325]  __x64_sys_sendmsg+0x19b/0x260
[  335.968406][T12325]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  335.968438][T12325]  ? rcu_is_watching+0x15/0xb0
[  335.968463][T12325]  ? do_syscall_64+0xbe/0x3b0
[  335.968493][T12325]  do_syscall_64+0xfa/0x3b0
[  335.968511][T12325]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.968529][T12325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.968546][T12325]  ? clear_bhb_loop+0x60/0xb0
[  335.968568][T12325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.968584][T12325] RIP: 0033:0x7f8c4738ebe9
[  335.968602][T12325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.968618][T12325] RSP: 002b:00007f8c48125038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.968636][T12325] RAX: ffffffffffffffda RBX: 00007f8c475c5fa0 RCX: 00007f8c4738ebe9
[  335.968650][T12325] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  335.968662][T12325] RBP: 00007f8c47411e19 R08: 0000000000000000 R09: 0000000000000000
[  335.968673][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.968684][T12325] R13: 00007f8c475c6038 R14: 00007f8c475c5fa0 R15: 00007ffe97611318
[  335.968717][T12325]  </TASK>
[  336.426859][   T51] Bluetooth: hci7: command 0x0405 tx timeout
[  336.443133][T12318] tipc: Resetting bearer <eth:syzkaller0>
[  336.498543][T12318] tipc: Disabling bearer <eth:syzkaller0>
[  336.550226][T12329] syzkaller0: entered promiscuous mode
[  336.555746][T12329] syzkaller0: entered allmulticast mode
[  336.635054][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2047'.
[  336.721384][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2049'.
[  336.772639][T12344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  336.822811][T12343] 8021q: adding VLAN 0 to HW filter on device bond1
[  336.830915][T12345] syzkaller0: entered promiscuous mode
[  336.836427][T12345] syzkaller0: entered allmulticast mode
[  336.840817][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'.
[  336.864785][T12343] bridge_slave_0: left allmulticast mode
[  336.870937][T12343] bridge_slave_0: left promiscuous mode
[  336.876772][T12343] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.899359][T12343] bridge_slave_1: left allmulticast mode
[  336.905723][T12343] bridge_slave_1: left promiscuous mode
[  336.916536][T12343] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.935057][T12343] bond0: (slave bond_slave_0): Releasing backup interface
[  336.948619][T12343] bond0: (slave bond_slave_1): Releasing backup interface
[  336.965437][T12343] team0: Port device team_slave_0 removed
[  336.978140][T12343] team0: Port device team_slave_1 removed
[  336.986357][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.995263][T12343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.004966][T12343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.012739][T12343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.046547][T12346] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  337.060714][T12346] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  337.136927][T12351] batman_adv: batadv0: Adding interface: dummy0
[  337.176150][T12351] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.216616][T12351] batman_adv: batadv0: Interface activated: dummy0
[  337.275507][T12352] batadv0: mtu less than device minimum
[  337.283216][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.295584][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.307530][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.319321][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.331347][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.343271][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.355207][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.367200][T12352] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  337.400233][T12345] tipc: Resetting bearer <eth:syzkaller0>
[  337.418194][T12335] tipc: Resetting bearer <eth:syzkaller0>
[  337.451880][T12335] tipc: Disabling bearer <eth:syzkaller0>
[  337.511846][T12365] syzkaller0: entered promiscuous mode
[  337.517778][T12365] syzkaller0: entered allmulticast mode
[  337.548658][T12358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.581660][T12365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  337.625011][T12359] lo speed is unknown, defaulting to 1000
[  337.641470][T12358] tipc: Resetting bearer <eth:syzkaller0>
[  337.652750][T12359] wg1 speed is unknown, defaulting to 1000
[  337.659560][T12355] tipc: Resetting bearer <eth:syzkaller0>
[  337.697250][T12355] tipc: Disabling bearer <eth:syzkaller0>
[  337.786343][T12379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.817902][T12378] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.835191][T12373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.851563][T12375] syzkaller0: entered promiscuous mode
[  337.858549][T12375] syzkaller0: entered allmulticast mode
[  337.873725][T12373] syzkaller0: entered promiscuous mode
[  337.880129][T12373] syzkaller0: entered allmulticast mode
[  337.896330][T12375] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  337.968684][T12373] tipc: Resetting bearer <eth:syzkaller0>
[  338.045059][T12372] tipc: Resetting bearer <eth:syzkaller0>
[  338.108436][T12372] tipc: Disabling bearer <eth:syzkaller0>
[  338.159577][T12375] tipc: Resetting bearer <eth:syzkaller0>
[  338.168984][T12389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.219655][T12385] syzkaller0: entered promiscuous mode
[  338.232834][T12385] syzkaller0: entered allmulticast mode
[  338.249630][T12392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.287452][T12374] tipc: Resetting bearer <eth:syzkaller0>
[  338.307764][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2063'.
[  338.339149][T12374] tipc: Disabling bearer <eth:syzkaller0>
[  338.373919][T12383] tipc: Resetting bearer <eth:syzkaller0>
[  338.452011][T12383] tipc: Disabling bearer <eth:syzkaller0>
[  338.573936][T12404] vlan0: entered promiscuous mode
[  338.579101][T12404] team0: entered promiscuous mode
[  338.631618][T12403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.639579][T12403] syzkaller0: entered promiscuous mode
[  338.649497][T12403] syzkaller0: entered allmulticast mode
[  338.673345][T12405] team0: No ports can be present during mode change
[  338.731435][T12403] tipc: Resetting bearer <eth:syzkaller0>
[  338.774947][T12402] tipc: Resetting bearer <eth:syzkaller0>
[  338.831267][T12402] tipc: Disabling bearer <eth:syzkaller0>
[  338.906586][T12414] lo speed is unknown, defaulting to 1000
[  339.016408][T12414] wg1 speed is unknown, defaulting to 1000
[  339.027420][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'.
[  339.073137][T12417] dummy0: entered promiscuous mode
[  339.115325][T12417] dummy0: left promiscuous mode
[  339.291921][T12427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.316325][T12421] syzkaller0: entered promiscuous mode
[  339.340009][T12421] syzkaller0: entered allmulticast mode
[  339.478746][T12429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2074'.
[  339.500544][T12421] tipc: Resetting bearer <eth:syzkaller0>
[  339.558809][T12431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.582628][T12431] syzkaller0: entered promiscuous mode
[  339.598885][T12431] syzkaller0: entered allmulticast mode
[  339.714945][T12420] tipc: Resetting bearer <eth:syzkaller0>
[  339.773289][T12420] tipc: Disabling bearer <eth:syzkaller0>
[  339.844311][T12437] delete_channel: no stack
[  339.876276][T12436] delete_channel: no stack
[  339.910386][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2077'.
[  339.921945][T12438] tipc: Resetting bearer <eth:syzkaller0>
[  339.991618][T12430] tipc: Resetting bearer <eth:syzkaller0>
[  340.063601][T12430] tipc: Disabling bearer <eth:syzkaller0>
[  340.280617][T12449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.344941][T12454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.364228][T12454] syzkaller0: entered promiscuous mode
[  340.379866][T12454] syzkaller0: entered allmulticast mode
[  340.501263][T12454] tipc: Resetting bearer <eth:syzkaller0>
[  340.553742][T12453] tipc: Resetting bearer <eth:syzkaller0>
[  340.621785][T12453] tipc: Disabling bearer <eth:syzkaller0>
[  340.722574][T12469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.789396][T12471] netlink: 'syz.5.2085': attribute type 12 has an invalid length.
[  340.810246][T12471] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2085'.
[  340.870139][T12469] syzkaller0: entered promiscuous mode
[  340.875870][T12469] syzkaller0: entered allmulticast mode
[  340.953798][T12469] tipc: Resetting bearer <eth:syzkaller0>
[  341.090244][T12468] tipc: Resetting bearer <eth:syzkaller0>
[  341.125635][T12477] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2086'.
[  341.154560][T12468] tipc: Disabling bearer <eth:syzkaller0>
[  341.302222][T12482] lo speed is unknown, defaulting to 1000
[  341.346994][T12482] wg1 speed is unknown, defaulting to 1000
[  341.350247][T12487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.389009][T12491] netlink: 'syz.7.2091': attribute type 7 has an invalid length.
[  341.404468][T12491] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2091'.
[  341.424198][T12487] syzkaller0: entered promiscuous mode
[  341.442586][T12487] syzkaller0: entered allmulticast mode
[  341.509042][T12487] tipc: Resetting bearer <eth:syzkaller0>
[  341.526104][T12494] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.538912][T12485] tipc: Resetting bearer <eth:syzkaller0>
[  341.567100][T12485] tipc: Disabling bearer <eth:syzkaller0>
[  341.665710][T12501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.684448][T12501] syzkaller0: entered promiscuous mode
[  341.704758][T12501] syzkaller0: entered allmulticast mode
[  341.791806][T12501] tipc: Resetting bearer <eth:syzkaller0>
[  341.809310][T12500] tipc: Resetting bearer <eth:syzkaller0>
[  341.839415][T12500] tipc: Disabling bearer <eth:syzkaller0>
[  341.859112][T12507] vlan2: entered promiscuous mode
[  341.864687][T12507] bond0: entered promiscuous mode
[  341.869920][T12507] bond_slave_0: entered promiscuous mode
[  341.875862][T12507] bond_slave_1: entered promiscuous mode
[  341.882851][T12507] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  341.895483][T12505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.907712][T12505] syzkaller0: entered promiscuous mode
[  341.916123][T12505] syzkaller0: entered allmulticast mode
[  341.991611][T12505] tipc: Resetting bearer <eth:syzkaller0>
[  342.015729][T12503] tipc: Resetting bearer <eth:syzkaller0>
[  342.075893][T12503] tipc: Disabling bearer <eth:syzkaller0>
[  342.177090][T12516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.218694][T12519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.228572][T12519] syzkaller0: entered promiscuous mode
[  342.235622][T12519] syzkaller0: entered allmulticast mode
[  342.294286][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2100'.
[  342.319252][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2100'.
[  342.353121][T12519] tipc: Resetting bearer <eth:syzkaller0>
[  342.359649][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2100'.
[  342.390935][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2100'.
[  342.411730][T12526] lo speed is unknown, defaulting to 1000
[  342.419466][T12526] wg1 speed is unknown, defaulting to 1000
[  342.473587][T12518] tipc: Resetting bearer <eth:syzkaller0>
[  342.497537][T12518] tipc: Disabling bearer <eth:syzkaller0>
[  342.538566][T12529] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.554215][T12525] lo speed is unknown, defaulting to 1000
[  342.568829][T12525] wg1 speed is unknown, defaulting to 1000
[  342.707298][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2107'.
[  342.746484][T12535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.910201][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'.
[  342.991536][T12546] netlink: 'syz.0.2110': attribute type 1 has an invalid length.
[  343.157322][T12546] bond9: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  343.265724][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2110'.
[  343.284121][T12557] veth9: entered promiscuous mode
[  343.311240][T12557] bond9: (slave veth9): Enslaving as a backup interface with a down link
[  343.418571][T12546] 8021q: adding VLAN 0 to HW filter on device bond9
[  343.421114][ T1150] net_ratelimit: 12 callbacks suppressed
[  343.421129][ T1150] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  343.458662][T12556] lo speed is unknown, defaulting to 1000
[  343.491792][T12556] wg1 speed is unknown, defaulting to 1000
[  343.536444][T12564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.559430][T12563] syzkaller0: entered promiscuous mode
[  343.567212][T12563] syzkaller0: entered allmulticast mode
[  343.582339][ T1163] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  343.658887][T12563] tipc: Resetting bearer <eth:syzkaller0>
[  343.683257][T12566] lo speed is unknown, defaulting to 1000
[  343.699216][T12562] tipc: Resetting bearer <eth:syzkaller0>
[  343.721965][T12562] tipc: Disabling bearer <eth:syzkaller0>
[  343.736526][T12571] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.738299][T12566] wg1 speed is unknown, defaulting to 1000
[  343.847867][T12574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.854911][T12576] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  343.894743][T12576] 8021q: adding VLAN 0 to HW filter on device bond4
[  343.986727][T12576] bond4: (slave ip6gretap1): making interface the new active one
[  344.048642][T12576] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  344.199019][T12583] veth7: entered promiscuous mode
[  344.218884][T12583] bond4: (slave veth7): Enslaving as an active interface with a down link
[  344.238957][T12588] batman_adv: batadv0: Interface deactivated: dummy0
[  344.245840][T12588] batman_adv: batadv0: Removing interface: dummy0
[  344.263287][T12588] bond0: (slave bond_slave_0): Releasing backup interface
[  344.274983][T12588] bond0: (slave bond_slave_1): Releasing backup interface
[  344.304771][T12588] team0: Port device team_slave_0 removed
[  344.346405][T12588] team0: Port device team_slave_1 removed
[  344.355384][T12588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.372111][T12588] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.395691][T12588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.409912][T12588] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.437158][T12588] batman_adv: batadv0: Removing interface: geneve2
[  344.503628][T12591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.515178][T12576] erspan0: entered allmulticast mode
[  344.535731][T12576] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  344.544998][T12582] syzkaller0: entered promiscuous mode
[  344.600096][T12582] syzkaller0: entered allmulticast mode
[  344.643392][T12586] syzkaller0: entered promiscuous mode
[  344.649091][T12586] syzkaller0: entered allmulticast mode
[  344.731419][T12601] tipc: Resetting bearer <eth:syzkaller0>
[  344.792671][T12581] tipc: Resetting bearer <eth:syzkaller0>
[  344.818826][T12581] tipc: Disabling bearer <eth:syzkaller0>
[  344.831696][T12607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2125'.
[  344.867323][T12603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.887078][T12606] syzkaller0: entered promiscuous mode
[  344.910267][T12606] syzkaller0: entered allmulticast mode
[  345.047326][T12603] tipc: Resetting bearer <eth:syzkaller0>
[  345.151931][T12602] tipc: Resetting bearer <eth:syzkaller0>
[  345.192102][T12602] tipc: Disabling bearer <eth:syzkaller0>
[  345.324775][T12619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.341354][T12614] syzkaller0: entered promiscuous mode
[  345.366102][T12614] syzkaller0: entered allmulticast mode
[  345.508676][T12625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.560256][T12614] tipc: Resetting bearer <eth:syzkaller0>
[  345.566750][T12625] syzkaller0: entered promiscuous mode
[  345.583752][T12625] syzkaller0: entered allmulticast mode
[  345.715275][T12613] tipc: Resetting bearer <eth:syzkaller0>
[  345.749364][T12613] tipc: Disabling bearer <eth:syzkaller0>
[  345.774918][T12630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.799121][T12635] syzkaller0: entered promiscuous mode
[  345.829970][T12635] syzkaller0: entered allmulticast mode
[  345.922200][T12625] tipc: Resetting bearer <eth:syzkaller0>
[  345.956927][T12635] tipc: Resetting bearer <eth:syzkaller0>
[  345.974762][T12624] tipc: Resetting bearer <eth:syzkaller0>
[  346.018787][T12624] tipc: Disabling bearer <eth:syzkaller0>
[  346.122475][T12629] tipc: Resetting bearer <eth:syzkaller0>
[  346.174456][T12629] tipc: Disabling bearer <eth:syzkaller0>
[  346.238016][T12645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.258428][T12642] syzkaller0: entered promiscuous mode
[  346.265368][T12642] syzkaller0: entered allmulticast mode
[  346.317113][T12650] bridge0: port 1(veth0_to_team) entered blocking state
[  346.326868][T12650] bridge0: port 1(veth0_to_team) entered disabled state
[  346.336816][T12655] netlink: 'syz.6.2138': attribute type 4 has an invalid length.
[  346.347610][T12650] veth0_to_team: entered allmulticast mode
[  346.359160][T12650] veth0_to_team: entered promiscuous mode
[  346.382211][T12645] tipc: Resetting bearer <eth:syzkaller0>
[  346.387125][T12652] netlink: 'syz.6.2138': attribute type 4 has an invalid length.
[  346.433269][T12641] tipc: Resetting bearer <eth:syzkaller0>
[  346.488652][T12641] tipc: Disabling bearer <eth:syzkaller0>
[  346.620225][T12663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.631102][T12657] syzkaller0: entered promiscuous mode
[  346.640412][T12657] syzkaller0: entered allmulticast mode
[  346.733316][T12662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.744686][T12664] syzkaller0: entered promiscuous mode
[  346.751994][T12664] syzkaller0: entered allmulticast mode
[  346.790084][T12657] tipc: Resetting bearer <eth:syzkaller0>
[  346.797740][T12662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  346.833339][T12656] tipc: Resetting bearer <eth:syzkaller0>
[  346.856709][T12656] tipc: Disabling bearer <eth:syzkaller0>
[  346.871453][T12664] tipc: Resetting bearer <eth:syzkaller0>
[  346.879054][T12668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.893309][T12668] syzkaller0: entered promiscuous mode
[  346.899387][T12668] syzkaller0: entered allmulticast mode
[  346.941420][T12660] tipc: Resetting bearer <eth:syzkaller0>
[  346.988885][T12660] tipc: Disabling bearer <eth:syzkaller0>
[  346.995573][T12674] netlink: 'syz.0.2144': attribute type 11 has an invalid length.
[  347.068613][T12668] tipc: Resetting bearer <eth:syzkaller0>
[  347.103576][T12677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.127238][T12677] syzkaller0: entered promiscuous mode
[  347.133274][T12677] syzkaller0: entered allmulticast mode
[  347.147950][T12667] tipc: Resetting bearer <eth:syzkaller0>
[  347.172260][T12667] tipc: Disabling bearer <eth:syzkaller0>
[  347.270568][T12682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.295512][T12680] syzkaller0: entered promiscuous mode
[  347.324812][T12684] __nla_validate_parse: 2 callbacks suppressed
[  347.324829][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2147'.
[  347.335436][T12680] syzkaller0: entered allmulticast mode
[  347.371595][T12681] tipc: Resetting bearer <eth:syzkaller0>
[  347.401207][T12676] tipc: Resetting bearer <eth:syzkaller0>
[  347.493321][T12676] tipc: Disabling bearer <eth:syzkaller0>
[  347.525103][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2147'.
[  347.532267][T12687] netlink: 'syz.0.2148': attribute type 10 has an invalid length.
[  347.546056][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2148'.
[  347.617819][T12687] geneve0: entered promiscuous mode
[  347.632927][T12687] team0: Port device geneve0 added
[  347.653635][   T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.677453][T12680] tipc: Resetting bearer <eth:syzkaller0>
[  347.771995][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.788052][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.796898][T12679] tipc: Resetting bearer <eth:syzkaller0>
[  347.845735][T12679] tipc: Disabling bearer <eth:syzkaller0>
[  347.891586][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.925008][T12691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.954667][T12691] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  347.993110][T12691] tipc: Resetting bearer <eth:syzkaller0>
[  348.072513][T12704] lo speed is unknown, defaulting to 1000
[  348.096189][T12704] wg1 speed is unknown, defaulting to 1000
[  348.105055][T12713] bond0: (slave rose0): Error: Device can not be enslaved while up
[  348.118043][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2154'.
[  348.128078][T12697] syzkaller0: entered promiscuous mode
[  348.139700][T12697] syzkaller0: entered allmulticast mode
[  348.159374][T12710] !
: entered promiscuous mode
[  348.167648][T12710] !
: left promiscuous mode
[  348.217325][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2155'.
[  348.290378][T12690] tipc: Resetting bearer <eth:syzkaller0>
[  348.323171][T12690] tipc: Disabling bearer <eth:syzkaller0>
[  348.355725][T12717] netlink: 'syz.6.2156': attribute type 5 has an invalid length.
[  348.375560][T12717] netlink: 'syz.6.2156': attribute type 7 has an invalid length.
[  348.433858][T12717] : entered promiscuous mode
[  348.535504][T12726] netlink: 'syz.5.2159': attribute type 1 has an invalid length.
[  348.573059][T12726] 8021q: adding VLAN 0 to HW filter on device bond2
[  348.616961][T12726] bond2: (slave vcan0): The slave device specified does not support setting the MAC address
[  348.632265][T12726] bond2: (slave vcan0): Error -95 calling set_mac_address
[  348.641323][T12733] siw: device registration error -23
[  348.656868][T12723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.680602][T12729] bond2: (slave vcan0): The slave device specified does not support setting the MAC address
[  348.702040][T12736] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  348.704932][T12729] bond2: (slave vcan0): Error -95 calling set_mac_address
[  348.732630][T12730] syzkaller0: entered promiscuous mode
[  348.738180][T12730] syzkaller0: entered allmulticast mode
[  348.884304][T12734] 8021q: adding VLAN 0 to HW filter on device bond2
[  348.908220][T12743] tipc: Resetting bearer <eth:syzkaller0>
[  348.995902][T12746] netlink: 'syz.2.2164': attribute type 1 has an invalid length.
[  349.039057][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'.
[  349.054084][T12750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2164'.
[  349.064218][T12722] tipc: Resetting bearer <eth:syzkaller0>
[  349.115476][T12722] tipc: Disabling bearer <eth:syzkaller0>
[  349.128679][T12738] lo speed is unknown, defaulting to 1000
[  349.157961][T12750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  349.170726][T12750] gretap3: entered promiscuous mode
[  349.183321][T12738] wg1 speed is unknown, defaulting to 1000
[  349.184981][T12751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.232998][T12751] syzkaller0: entered promiscuous mode
[  349.238507][T12751] syzkaller0: entered allmulticast mode
[  349.304444][T12751] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  349.335878][T12755] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  349.348804][T12751] tipc: Resetting bearer <eth:syzkaller0>
[  349.368298][T12747] tipc: Resetting bearer <eth:syzkaller0>
[  349.411126][T12747] tipc: Disabling bearer <eth:syzkaller0>
[  349.459417][T12755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.467956][T12755] syzkaller0: entered promiscuous mode
[  349.493837][T12755] syzkaller0: entered allmulticast mode
[  349.543936][T12755] tipc: Resetting bearer <eth:syzkaller0>
[  349.575281][T12754] tipc: Resetting bearer <eth:syzkaller0>
[  349.650960][T12754] tipc: Disabling bearer <eth:syzkaller0>
[  349.775572][T12764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.783783][T12766] syzkaller0: entered promiscuous mode
[  349.789279][T12766] syzkaller0: entered allmulticast mode
[  349.841650][T12764] tipc: Resetting bearer <eth:syzkaller0>
[  349.855711][T12763] tipc: Resetting bearer <eth:syzkaller0>
[  349.902962][T12763] tipc: Disabling bearer <eth:syzkaller0>
[  349.929173][T12773] dummy0: entered promiscuous mode
[  349.935890][T12773] macsec1: entered promiscuous mode
[  349.943100][T12773] macsec1: entered allmulticast mode
[  349.948534][T12773] dummy0: entered allmulticast mode
[  349.958822][T12773] dummy0: left allmulticast mode
[  349.966319][T12774] syz.2.2173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  349.973380][T12773] dummy0: left promiscuous mode
[  349.982859][T12774] CPU: 0 UID: 0 PID: 12774 Comm: syz.2.2173 Not tainted syzkaller #0 PREEMPT(full) 
[  349.982884][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  349.982895][T12774] Call Trace:
[  349.982901][T12774]  <TASK>
[  349.982909][T12774]  dump_stack_lvl+0x189/0x250
[  349.982941][T12774]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.982961][T12774]  ? __pfx__printk+0x10/0x10
[  349.982985][T12774]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  349.983005][T12774]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  349.983027][T12774]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  349.983049][T12774]  warn_alloc+0x214/0x310
[  349.983073][T12774]  ? stack_depot_save_flags+0x40/0x860
[  349.983098][T12774]  ? __pfx_warn_alloc+0x10/0x10
[  349.983121][T12774]  ? kasan_save_track+0x4f/0x80
[  349.983142][T12774]  ? xskq_create+0x56/0x170
[  349.983155][T12774]  ? xsk_init_queue+0xb0/0x110
[  349.983177][T12774]  ? xsk_setsockopt+0x4dc/0x8d0
[  349.983197][T12774]  ? do_sock_setsockopt+0x17c/0x1b0
[  349.983214][T12774]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  349.983229][T12774]  ? do_syscall_64+0xfa/0x3b0
[  349.983245][T12774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.983270][T12774]  __vmalloc_node_range_noprof+0x125/0x12f0
[  349.983324][T12774]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  349.983353][T12774]  ? __kasan_kmalloc+0x93/0xb0
[  349.983392][T12774]  vmalloc_user_noprof+0xad/0xf0
[  349.983424][T12774]  ? xskq_create+0xbf/0x170
[  349.983441][T12774]  xskq_create+0xbf/0x170
[  349.983461][T12774]  xsk_init_queue+0xb0/0x110
[  349.983488][T12774]  xsk_setsockopt+0x4dc/0x8d0
[  349.983514][T12774]  ? __pfx_xsk_setsockopt+0x10/0x10
[  349.983538][T12774]  ? __pfx_aa_sk_perm+0x10/0x10
[  349.983566][T12774]  ? aa_sock_opt_perm+0xff/0x1b0
[  349.983586][T12774]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  349.983604][T12774]  ? __pfx_xsk_setsockopt+0x10/0x10
[  349.983627][T12774]  do_sock_setsockopt+0x17c/0x1b0
[  349.983650][T12774]  __x64_sys_setsockopt+0x13f/0x1b0
[  349.983674][T12774]  do_syscall_64+0xfa/0x3b0
[  349.983690][T12774]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.983706][T12774]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.983723][T12774]  ? clear_bhb_loop+0x60/0xb0
[  349.983743][T12774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.983759][T12774] RIP: 0033:0x7f899958ebe9
[  349.983776][T12774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.983790][T12774] RSP: 002b:00007f89977cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  349.983814][T12774] RAX: ffffffffffffffda RBX: 00007f89997c6090 RCX: 00007f899958ebe9
[  349.983827][T12774] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  349.983837][T12774] RBP: 00007f8999611e19 R08: 0000000000000004 R09: 0000000000000000
[  349.983848][T12774] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.983859][T12774] R13: 00007f89997c6128 R14: 00007f89997c6090 R15: 00007fff4d076ed8
[  349.983889][T12774]  </TASK>
[  349.983908][T12774] Mem-Info:
[  350.287732][T12774] active_anon:7520 inactive_anon:0 isolated_anon:0
[  350.287732][T12774]  active_file:3273 inactive_file:39955 isolated_file:0
[  350.287732][T12774]  unevictable:768 dirty:210 writeback:5
[  350.287732][T12774]  slab_reclaimable:12465 slab_unreclaimable:140277
[  350.287732][T12774]  mapped:48351 shmem:4227 pagetables:1398
[  350.287732][T12774]  sec_pagetables:0 bounce:0
[  350.287732][T12774]  kernel_misc_reclaimable:0
[  350.287732][T12774]  free:1243295 free_pcp:12058 free_cma:0
[  350.336788][T12774] Node 0 active_anon:30040kB inactive_anon:0kB active_file:13092kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:193404kB dirty:840kB writeback:20kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14204kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  350.369581][T12774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  350.400589][T12774] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  350.437720][T12774] lowmem_reserve[]: 0 2497 2499 2499 2499
[  350.445358][T12774] Node 0 DMA32 free:1066376kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29992kB inactive_anon:0kB active_file:13092kB inactive_file:158056kB unevictable:1536kB writepending:860kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:30424kB local_pcp:18608kB free_cma:0kB
[  350.480363][T12774] lowmem_reserve[]: 0 0 1 1 1
[  350.491973][T12774] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  350.521789][T12774] lowmem_reserve[]: 0 0 0 0 0
[  350.526971][T12774] Node 1 Normal free:3891420kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17612kB local_pcp:9344kB free_cma:0kB
[  350.527222][T12772] bond4: (slave erspan0): Releasing active interface
[  350.567231][T12772] ip6gretap1: entered promiscuous mode
[  350.575409][T12774] lowmem_reserve[]: 0 0 0 0 0
[  350.582536][T12774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  350.598922][T12772] bond4: (slave ip6gretap1): Releasing active interface
[  350.599492][T12774] Node 0 
[  350.606691][T12772] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 62:56:88:c3:b7:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  350.613576][T12774] DMA32: 
[  350.629188][T12772] ip6gretap1: left promiscuous mode
[  350.639469][T12774] 536*4kB (UM) 353*8kB (UM) 166*16kB (UM) 190*32kB (UME) 157*64kB (UME) 68*128kB (UME) 245*256kB (UM) 255*512kB (UM) 191*1024kB (UM) 7*2048kB (UME) 154*4096kB (UM) = 1066440kB
[  350.657601][T12774] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  350.658522][T12772] bond4: (slave veth7): Releasing active interface
[  350.670061][T12774] Node 1 Normal: 175*4kB (UE) 46*8kB (UME) 37*16kB (UME) 95*32kB (UME) 28*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891420kB
[  350.670255][T12774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  350.670272][T12774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  350.670288][T12774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  350.670304][T12774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  350.670320][T12774] 47452 total pagecache pages
[  350.670341][T12774] 0 pages in swap cache
[  350.670348][T12774] Free swap  = 124996kB
[  350.670355][T12774] Total swap = 124996kB
[  350.670364][T12774] 2097051 pages RAM
[  350.670371][T12774] 0 pages HighMem/MovableOnly
[  350.670379][T12774] 425671 pages reserved
[  350.670386][T12774] 0 pages cma reserved
[  350.798544][T12779] netlink: 16182 bytes leftover after parsing attributes in process `syz.6.2174'.
[  350.943143][T12788] netlink: 'syz.6.2177': attribute type 1 has an invalid length.
[  351.295512][T12788] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.374121][T12795] macvlan2: entered promiscuous mode
[  351.398821][T12795] macvlan2: entered allmulticast mode
[  351.428254][T12795] bond1: entered promiscuous mode
[  351.462778][T12795] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  351.505803][T12795] bond1: left promiscuous mode
[  351.627924][T12794] lo speed is unknown, defaulting to 1000
[  351.648307][T12794] wg1 speed is unknown, defaulting to 1000
[  352.336637][T12823] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.371527][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2186'.
[  352.382557][T12823] tipc: Resetting bearer <eth:syzkaller0>
[  352.428272][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2186'.
[  352.778353][   T30] audit: type=1800 audit(1756762732.936:3): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2185" name="memory.events" dev="tmpfs" ino=926 res=0 errno=0
[  353.337960][T12841] lo speed is unknown, defaulting to 1000
[  353.367414][T12842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.379255][T12841] wg1 speed is unknown, defaulting to 1000
[  353.380819][T12842] syzkaller0: entered promiscuous mode
[  353.448019][T12842] syzkaller0: entered allmulticast mode
[  353.839604][T12847] tipc: Resetting bearer <eth:syzkaller0>
[  353.869001][T12862] netlink: 'syz.7.2195': attribute type 3 has an invalid length.
[  353.983701][T12838] tipc: Resetting bearer <eth:syzkaller0>
[  354.064911][T12838] tipc: Disabling bearer <eth:syzkaller0>
[  354.435403][T12877] netlink: 'syz.2.2200': attribute type 29 has an invalid length.
[  354.762135][T12889] netem: change failed
[  355.302116][T12893] lo speed is unknown, defaulting to 1000
[  355.319297][T12893] wg1 speed is unknown, defaulting to 1000
[  355.394821][T12895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.413288][T12896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.428923][T12895] syzkaller0: entered promiscuous mode
[  355.434963][T12895] syzkaller0: entered allmulticast mode
[  355.633582][T12898] tipc: Resetting bearer <eth:syzkaller0>
[  355.674978][T12894] tipc: Resetting bearer <eth:syzkaller0>
[  355.719987][T12901] netlink: 'syz.6.2205': attribute type 4 has an invalid length.
[  355.747484][T12894] tipc: Disabling bearer <eth:syzkaller0>
[  355.816892][T12903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.842001][T12903] syzkaller0: entered promiscuous mode
[  355.860007][T12903] syzkaller0: entered allmulticast mode
[  355.860722][T12907] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2206'.
[  355.929515][T12903] tipc: Resetting bearer <eth:syzkaller0>
[  355.966442][T12902] tipc: Resetting bearer <eth:syzkaller0>
[  356.014543][T12902] tipc: Disabling bearer <eth:syzkaller0>
[  356.415935][T12921] syzkaller0: entered promiscuous mode
[  356.428503][T12921] syzkaller0: entered allmulticast mode
[  356.438954][T12924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.515718][T12921] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  356.635209][T12917] tipc: Resetting bearer <eth:syzkaller0>
[  356.654156][T12916] tipc: Resetting bearer <eth:syzkaller0>
[  356.793673][T12916] tipc: Disabling bearer <eth:syzkaller0>
[  357.147454][T12942] syzkaller1: entered allmulticast mode
[  357.241584][T12945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.249441][T12945] syzkaller0: entered promiscuous mode
[  357.255162][T12945] syzkaller0: entered allmulticast mode
[  357.278853][T12945] tipc: Resetting bearer <eth:syzkaller0>
[  357.301277][T12944] tipc: Resetting bearer <eth:syzkaller0>
[  357.320872][T12944] tipc: Disabling bearer <eth:syzkaller0>
[  357.554830][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2220'.
[  358.050358][T12955] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  358.234448][T12958] xt_policy: neither incoming nor outgoing policy selected
[  358.283524][T12960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.302206][T12960] syzkaller0: entered promiscuous mode
[  358.307719][T12960] syzkaller0: entered allmulticast mode
[  358.416243][T12960] tipc: Resetting bearer <eth:syzkaller0>
[  358.463265][T12959] tipc: Resetting bearer <eth:syzkaller0>
[  358.542466][T12959] tipc: Disabling bearer <eth:syzkaller0>
[  358.689966][T12970] netlink: 'syz.5.2227': attribute type 1 has an invalid length.
[  358.801842][T12970] 8021q: adding VLAN 0 to HW filter on device bond3
[  358.820945][T12975] bond3: (slave ip6gretap3): making interface the new active one
[  358.830819][T12975] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link
[  358.846088][T12972] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2228'.
[  358.913400][T12977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.922051][T12977] syzkaller0: entered promiscuous mode
[  358.927980][T12977] syzkaller0: entered allmulticast mode
[  358.963034][T12977] tipc: Resetting bearer <eth:syzkaller0>
[  359.024846][T12970] veth3: entered promiscuous mode
[  359.050919][T12970] bond3: (slave veth3): Enslaving as an active interface with a down link
[  359.073336][T12976] tipc: Resetting bearer <eth:syzkaller0>
[  359.110714][T12976] tipc: Disabling bearer <eth:syzkaller0>
[  359.125698][T12975] erspan0: entered allmulticast mode
[  359.166758][T12975] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  359.288814][T12981] lo speed is unknown, defaulting to 1000
[  359.461692][T12981] wg1 speed is unknown, defaulting to 1000
[  359.511184][T12988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.519356][T12988] syzkaller0: entered promiscuous mode
[  359.526484][T12988] syzkaller0: entered allmulticast mode
[  359.596440][T12984] tc_dump_action: action bad kind
[  359.683943][T12992] tipc: Resetting bearer <eth:syzkaller0>
[  359.748073][T12985] tipc: Resetting bearer <eth:syzkaller0>
[  359.802546][T12985] tipc: Disabling bearer <eth:syzkaller0>
[  360.099566][T13000] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2234'.
[  360.164199][T13000] ip6tnl0: entered promiscuous mode
[  360.178375][T13000] ip6tnl0: entered allmulticast mode
[  360.401379][T12997] lo speed is unknown, defaulting to 1000
[  360.441293][T12997] wg1 speed is unknown, defaulting to 1000
[  360.662088][T13011] lo speed is unknown, defaulting to 1000
[  360.670816][T13011] wg1 speed is unknown, defaulting to 1000
[  360.963158][T13012] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  362.073639][T13030] lo speed is unknown, defaulting to 1000
[  362.095880][T13030] wg1 speed is unknown, defaulting to 1000
[  362.904360][T13043] lo speed is unknown, defaulting to 1000
[  362.959164][T13043] wg1 speed is unknown, defaulting to 1000
[  363.359076][T13046] lo speed is unknown, defaulting to 1000
[  363.391063][T13046] wg1 speed is unknown, defaulting to 1000
[  363.579318][T13052] lo speed is unknown, defaulting to 1000
[  363.604440][T13053] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2248'.
[  363.622699][T13052] wg1 speed is unknown, defaulting to 1000
[  364.052570][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'.
[  364.131468][T13064] netlink: 'syz.7.2251': attribute type 1 has an invalid length.
[  364.233625][T13064] 8021q: adding VLAN 0 to HW filter on device bond2
[  364.322341][T13062] bond2: (slave geneve3): making interface the new active one
[  364.394047][T13062] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  364.636979][T13072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.673820][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2255'.
[  364.686313][T13072] syzkaller0: entered promiscuous mode
[  364.716027][T13072] syzkaller0: entered allmulticast mode
[  364.845081][T13084] tipc: Resetting bearer <eth:syzkaller0>
[  364.889107][T13071] tipc: Resetting bearer <eth:syzkaller0>
[  364.956587][T13071] tipc: Disabling bearer <eth:syzkaller0>
[  365.137444][T13096] lo speed is unknown, defaulting to 1000
[  365.147109][T13096] wg1 speed is unknown, defaulting to 1000
[  365.418506][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'.
[  365.428049][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'.
[  365.575599][T13107] dvmrp1: left allmulticast mode
[  365.704811][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'.
[  365.714862][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'.
[  365.734243][T13110] ip6tnl3: entered promiscuous mode
[  365.739647][T13110] ip6tnl3: entered allmulticast mode
[  366.060743][T13118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.173270][T13118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.271864][T13118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.376529][T13118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.517214][T13124] lo speed is unknown, defaulting to 1000
[  366.547287][T13124] wg1 speed is unknown, defaulting to 1000
[  366.588598][   T78] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.598465][   T78] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.632470][   T78] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.657230][   T78] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.891563][T13130] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2274'.
[  367.073865][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2276'.
[  367.241829][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'.
[  367.558891][T13147] syzkaller0: entered promiscuous mode
[  367.564800][T13147] syzkaller0: entered allmulticast mode
[  367.577746][T13147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.601010][T13147] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  367.710810][T13147] tipc: Resetting bearer <eth:syzkaller0>
[  367.758552][T13146] tipc: Resetting bearer <eth:syzkaller0>
[  367.789095][T13146] tipc: Disabling bearer <eth:syzkaller0>
[  367.911702][ T1108] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  367.988757][T13160] netlink: 'syz.7.2283': attribute type 9 has an invalid length.
[  368.136933][T13164] lo speed is unknown, defaulting to 1000
[  368.182112][T13164] wg1 speed is unknown, defaulting to 1000
[  368.295065][T13169] syzkaller0: entered promiscuous mode
[  368.306113][T13169] syzkaller0: entered allmulticast mode
[  368.658428][T13182] netlink: 'syz.2.2290': attribute type 1 has an invalid length.
[  368.710842][T13179] lo speed is unknown, defaulting to 1000
[  368.729685][T13182] __nla_validate_parse: 4 callbacks suppressed
[  368.729703][T13182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2290'.
[  368.835194][T13179] wg1 speed is unknown, defaulting to 1000
[  368.859709][T13187] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  369.140288][T13201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.148102][T13201] syzkaller0: entered promiscuous mode
[  369.153853][T13201] syzkaller0: entered allmulticast mode
[  369.197184][T13201] tipc: Resetting bearer <eth:syzkaller0>
[  369.207367][T13200] tipc: Resetting bearer <eth:syzkaller0>
[  369.256063][T13200] tipc: Disabling bearer <eth:syzkaller0>
[  369.282731][T13205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.293293][T13205] syzkaller0: entered promiscuous mode
[  369.298895][T13205] syzkaller0: entered allmulticast mode
[  369.321856][T11254] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  369.330812][T11254] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  369.364472][T11254] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[  369.403728][T11254] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  369.425982][T13211] openvswitch: netlink: IP tunnel dst address not specified
[  369.543751][T13205] tipc: Resetting bearer <eth:syzkaller0>
[  369.575478][T13203] tipc: Resetting bearer <eth:syzkaller0>
[  369.635311][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2300'.
[  369.646165][T13203] tipc: Disabling bearer <eth:syzkaller0>
[  369.679065][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2299'.
[  369.728829][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2299'.
[  369.833250][T13223] macvtap1: entered promiscuous mode
[  369.844041][T13223] bond0: entered promiscuous mode
[  369.849375][T13223] macvtap1: entered allmulticast mode
[  369.868103][T13223] bond0: entered allmulticast mode
[  369.880780][T13223] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  369.911524][T13218] lo speed is unknown, defaulting to 1000
[  369.920650][T13218] wg1 speed is unknown, defaulting to 1000
[  370.003488][T13224] bond0: left allmulticast mode
[  370.008404][T13224] bond0: left promiscuous mode
[  370.082840][T13226] erspan0: left allmulticast mode
[  370.202944][T13226] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  370.363780][T13240] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  370.605116][T13243] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  370.636696][T13243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.644307][T13243] syzkaller0: entered promiscuous mode
[  370.650030][T13243] syzkaller0: entered allmulticast mode
[  370.659396][T13242] tipc: Resetting bearer <eth:syzkaller0>
[  370.727521][T13242] tipc: Disabling bearer <eth:syzkaller0>
[  370.808402][T13246] netlink: zone id is out of range
[  370.814534][T13246] netlink: zone id is out of range
[  370.832494][T13246] netlink: zone id is out of range
[  370.865971][T13247] netlink: del zone limit has 4 unknown bytes
[  370.886072][T13249] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2306'.
[  370.952884][T13246] netlink: set zone limit has 4 unknown bytes
[  371.000325][T13252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.050249][T13252] syzkaller0: entered promiscuous mode
[  371.055776][T13252] syzkaller0: entered allmulticast mode
[  371.172136][T13252] tipc: Resetting bearer <eth:syzkaller0>
[  371.204737][T13251] tipc: Resetting bearer <eth:syzkaller0>
[  371.245569][T13251] tipc: Disabling bearer <eth:syzkaller0>
[  371.358189][T13256] lo speed is unknown, defaulting to 1000
[  371.395214][T13256] wg1 speed is unknown, defaulting to 1000
[  371.690543][T13270] netlink: 'syz.6.2312': attribute type 10 has an invalid length.
[  372.310472][T13284] lo speed is unknown, defaulting to 1000
[  372.318114][T13284] wg1 speed is unknown, defaulting to 1000
[  373.352401][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2321'.
[  373.369634][T13297] batadv0: entered promiscuous mode
[  373.386773][T13297] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  373.411585][T13297] batadv0: left promiscuous mode
[  373.876365][T13311] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.642531][T13311] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.679381][T13319] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.700366][T13320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.707378][T13322] syzkaller0: entered promiscuous mode
[  374.716013][T13322] syzkaller0: entered allmulticast mode
[  374.750722][T13326] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  374.776022][T13329] tipc: Resetting bearer <eth:syzkaller0>
[  374.787072][T13330] tipc: Resetting bearer <eth:syzkaller0>
[  374.864511][T13330] tipc: Disabling bearer <eth:syzkaller0>
[  375.052316][T13311] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.152838][T13319] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.251851][T13311] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.301091][T13319] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.361812][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'.
[  375.425679][T13319] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.474110][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'.
[  375.589458][   T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.620094][ T1108] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.635460][T13342] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  375.834877][ T1150] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.873583][ T1150] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.918836][ T1150] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.965733][T13347] lo speed is unknown, defaulting to 1000
[  375.965761][ T1150] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.013098][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.026353][T13347] wg1 speed is unknown, defaulting to 1000
[  376.049107][T13356] netlink: 'syz.5.2336': attribute type 10 has an invalid length.
[  376.070383][T13356] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2336'.
[  376.097720][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.112526][T13356] geneve0: entered promiscuous mode
[  376.133399][T13356] team0: Port device geneve0 added
[  376.175810][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.217999][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.229979][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.239230][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.307153][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2337'.
[  376.352095][T13368] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2339'.
[  376.391762][T13368] netlink: 'syz.6.2339': attribute type 1 has an invalid length.
[  376.436262][T13368] 8021q: adding VLAN 0 to HW filter on device bond2
[  376.452958][T13372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.461809][T13372] syzkaller0: entered promiscuous mode
[  376.468029][T13372] syzkaller0: entered allmulticast mode
[  376.498071][T13376] bond2: (slave gretap1): making interface the new active one
[  376.558824][T13376] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  376.574045][T13368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2339'.
[  376.620402][T13372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  376.726443][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'.
[  376.788114][T13384] veth0: entered promiscuous mode
[  376.810902][T13384] veth0: left promiscuous mode
[  376.924534][T13369] tipc: Resetting bearer <eth:syzkaller0>
[  376.978629][T13369] tipc: Disabling bearer <eth:syzkaller0>
[  377.005528][T13378] lo speed is unknown, defaulting to 1000
[  377.046086][T13378] wg1 speed is unknown, defaulting to 1000
[  377.115265][T13388] syzkaller0: create flow: hash 1247918556 index 1
[  377.204491][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2345'.
[  377.274487][ T3478] syzkaller0: tun_net_xmit 76
[  377.292909][ T3478] syzkaller0: tun_net_xmit 48
[  377.300508][ T5916] syzkaller0: tun_net_xmit 76
[  377.586684][T13386] syzkaller0: delete flow: hash 1247918556 index 1
[  379.845504][T13399] macvtap1: entered allmulticast mode
[  379.851647][T13399] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode
[  379.874570][T13399] mac80211_hwsim hwsim17 wlan0: left allmulticast mode
[  379.947865][T13405] lo speed is unknown, defaulting to 1000
[  379.957671][T13405] wg1 speed is unknown, defaulting to 1000
[  380.113354][T13418] syz_tun: entered allmulticast mode
[  380.128803][T13417] lo speed is unknown, defaulting to 1000
[  380.151417][T13418] dvmrp8: entered allmulticast mode
[  380.173743][T13418] tipc: Enabled bearer <udp:syz0>, priority 10
[  380.193287][T13417] wg1 speed is unknown, defaulting to 1000
[  380.199280][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2349'.
[  380.201355][T13416] syz_tun: left allmulticast mode
[  380.225345][T13416] dvmrp8: left allmulticast mode
[  380.510804][T13424] batman_adv: batadv0: Adding interface: dummy0
[  380.517104][T13424] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  380.543766][T13424] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  380.618655][T13424] batman_adv: batadv0: Adding interface: ip6gretap2
[  380.634194][T13424] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  380.671297][T13424] batman_adv: batadv0: Interface activated: ip6gretap2
[  381.381246][T13446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.662752][T13447] syzkaller0: entered promiscuous mode
[  381.668350][T13447] syzkaller0: entered allmulticast mode
[  381.811228][T13435] tipc: Resetting bearer <eth:syzkaller0>
[  381.916221][T13435] tipc: Disabling bearer <eth:syzkaller0>
[  382.210228][T13474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.350189][T13476] syzkaller0: entered promiscuous mode
[  382.355709][T13476] syzkaller0: entered allmulticast mode
[  382.469078][T13474] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2359'.
[  382.559194][T13474] tipc: Resetting bearer <eth:syzkaller0>
[  382.661245][T13473] tipc: Resetting bearer <eth:syzkaller0>
[  382.868370][T13473] tipc: Disabling bearer <eth:syzkaller0>
[  382.884629][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2363'.
[  383.164844][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2363'.
[  383.276396][T13514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.302739][T13514] syzkaller0: entered promiscuous mode
[  383.325863][T13514] syzkaller0: entered allmulticast mode
[  383.388041][T13519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.399675][T13514] tipc: Resetting bearer <eth:syzkaller0>
[  383.409582][T13519] syzkaller0: entered promiscuous mode
[  383.419054][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2368'.
[  383.434250][T13519] syzkaller0: entered allmulticast mode
[  383.459707][T13523] dummy0: entered promiscuous mode
[  383.465352][T13523] macvtap2: entered promiscuous mode
[  383.472724][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2368'.
[  383.482415][T13523] macvtap2: entered allmulticast mode
[  383.487824][T13523] dummy0: entered allmulticast mode
[  383.496134][T13513] tipc: Resetting bearer <eth:syzkaller0>
[  383.513689][T13513] tipc: Disabling bearer <eth:syzkaller0>
[  383.532012][T13524] dummy0: left allmulticast mode
[  383.537440][T13524] dummy0: left promiscuous mode
[  383.582327][T13519] tipc: Resetting bearer <eth:syzkaller0>
[  383.619672][T13517] tipc: Resetting bearer <eth:syzkaller0>
[  383.688602][T13517] tipc: Disabling bearer <eth:syzkaller0>
[  383.728248][T13531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.739611][T13531] syzkaller0: entered promiscuous mode
[  383.749097][T13531] syzkaller0: entered allmulticast mode
[  383.772055][T13531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  383.806472][T13530] lo speed is unknown, defaulting to 1000
[  383.821353][T13529] tipc: Resetting bearer <eth:syzkaller0>
[  383.916977][T13529] tipc: Disabling bearer <eth:syzkaller0>
[  383.948707][T13530] wg1 speed is unknown, defaulting to 1000
[  384.118702][T13544] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.355611][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'.
[  384.652572][T13560] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  384.698583][T13560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.724675][T13560] syzkaller0: entered promiscuous mode
[  384.738164][T13560] syzkaller0: entered allmulticast mode
[  384.790391][T13558] tipc: Resetting bearer <eth:syzkaller0>
[  384.888727][T13558] tipc: Disabling bearer <eth:syzkaller0>
[  384.928855][T13564] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2378'.
[  384.948923][T13564] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2378'.
[  385.495616][T13578] lo speed is unknown, defaulting to 1000
[  385.545525][T13578] wg1 speed is unknown, defaulting to 1000
[  385.592255][T13584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2383'.
[  385.692754][T13585] macsec1: entered promiscuous mode
[  385.711068][T13585] macsec1: entered allmulticast mode
[  385.736471][T13584] 8021q: VLANs not supported on ipvlan1
[  385.814944][T13591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.830920][T13591] syzkaller0: entered promiscuous mode
[  385.836634][T13591] syzkaller0: entered allmulticast mode
[  385.849646][T13591] tipc: Resetting bearer <eth:syzkaller0>
[  385.927820][T13590] tipc: Resetting bearer <eth:syzkaller0>
[  385.985091][T13590] tipc: Disabling bearer <eth:syzkaller0>
[  386.035303][T13594] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  386.402681][T13605] lo speed is unknown, defaulting to 1000
[  386.600397][T13605] wg1 speed is unknown, defaulting to 1000
[  386.984233][T13614] netlink: 'syz.2.2393': attribute type 4 has an invalid length.
[  387.114705][T13619] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  387.138973][T13619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.187895][T13619] tipc: Resetting bearer <eth:syzkaller0>
[  387.210990][T13618] tipc: Disabling bearer <eth:syzkaller0>
[  387.396047][T13605] macsec1: entered promiscuous mode
[  387.402026][T13605] ip6gretap0: entered promiscuous mode
[  387.446177][T13605] ip6gretap0: left promiscuous mode
[  387.706327][T13635] lo speed is unknown, defaulting to 1000
[  387.768747][T13635] wg1 speed is unknown, defaulting to 1000
[  388.799103][T13647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.816895][T13647] syzkaller0: entered promiscuous mode
[  388.830587][T13647] syzkaller0: entered allmulticast mode
[  389.057912][T13652] tipc: Resetting bearer <eth:syzkaller0>
[  389.107844][T13646] tipc: Resetting bearer <eth:syzkaller0>
[  389.296228][T13646] tipc: Disabling bearer <eth:syzkaller0>
[  390.084501][T13664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6
[  390.167255][T13669] netlink: 'syz.6.2405': attribute type 10 has an invalid length.
[  390.171596][T13666] lo speed is unknown, defaulting to 1000
[  390.196436][T13669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.215468][T13669] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  390.247283][T13666] wg1 speed is unknown, defaulting to 1000
[  390.310205][T13662] netlink: 'syz.6.2405': attribute type 10 has an invalid length.
[  390.329182][T13662] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2405'.
[  390.357709][T13671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  390.367652][T13662] batadv0: entered promiscuous mode
[  390.374920][T13662] batadv0: entered allmulticast mode
[  390.384593][T13662] bond0: (slave batadv0): Releasing backup interface
[  390.404920][T13662] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  390.444889][T13674] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  390.539249][T13677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  390.625892][T13677] tipc: Resetting bearer <eth:syzkaller0>
[  390.728620][T13674] syzkaller0: entered promiscuous mode
[  390.739082][T13674] syzkaller0: entered allmulticast mode
[  390.941253][T13684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.336694][T13696] lo speed is unknown, defaulting to 1000
[  391.344520][T13696] wg1 speed is unknown, defaulting to 1000
[  391.828591][T13707] netlink: 'syz.0.2415': attribute type 10 has an invalid length.
[  391.894330][T13707] 8021q: adding VLAN 0 to HW filter on device team0
[  391.933296][T13707] bond0: (slave team0): Enslaving as an active interface with an up link
[  392.184778][T13710] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.358447][T13713] netlink: zone id is out of range
[  392.363889][T13713] netlink: zone id is out of range
[  392.373598][T13715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.389979][T13713] netlink: zone id is out of range
[  392.395127][T13713] netlink: zone id is out of range
[  392.410485][T13713] netlink: zone id is out of range
[  392.426718][T13713] netlink: zone id is out of range
[  392.461608][T13713] netlink: zone id is out of range
[  392.472919][T13716] netlink: del zone limit has 4 unknown bytes
[  392.490281][T13713] netlink: zone id is out of range
[  392.633257][T13718] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.031745][T13728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.051905][T13728] syzkaller0: entered promiscuous mode
[  393.057744][T13728] syzkaller0: entered allmulticast mode
[  393.073511][T13727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.115444][T13727] syzkaller0: entered promiscuous mode
[  393.121421][T13727] syzkaller0: entered allmulticast mode
[  393.157087][T13728] tipc: Resetting bearer <eth:syzkaller0>
[  393.200572][T13726] tipc: Resetting bearer <eth:syzkaller0>
[  393.255170][T13726] tipc: Disabling bearer <eth:syzkaller0>
[  393.286834][T13725] tipc: Resetting bearer <eth:syzkaller0>
[  393.350075][T13725] tipc: Disabling bearer <eth:syzkaller0>
[  393.421905][T13733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.430409][T13733] syzkaller0: entered promiscuous mode
[  393.436077][T13733] syzkaller0: entered allmulticast mode
[  393.470196][T13734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.491276][T13734] syzkaller0: entered promiscuous mode
[  393.501029][T13734] syzkaller0: entered allmulticast mode
[  393.523060][T13733] tipc: Resetting bearer <eth:syzkaller0>
[  393.649421][T13732] tipc: Resetting bearer <eth:syzkaller0>
[  393.738998][T13732] tipc: Disabling bearer <eth:syzkaller0>
[  393.803065][T13740] tipc: Resetting bearer <eth:syzkaller0>
[  393.872548][T13731] tipc: Resetting bearer <eth:syzkaller0>
[  393.996536][T13731] tipc: Disabling bearer <eth:syzkaller0>
[  394.083887][T13744] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  394.132457][T13744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.162788][T13744] tipc: Resetting bearer <eth:syzkaller0>
[  394.245916][T13743] tipc: Disabling bearer <eth:syzkaller0>
[  394.281735][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2431'.
[  394.313547][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2433'.
[  394.314002][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'.
[  394.547256][T13773] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2437'.
[  394.733165][T13771] lo speed is unknown, defaulting to 1000
[  394.761209][T13771] wg1 speed is unknown, defaulting to 1000
[  394.944910][T13774] lo speed is unknown, defaulting to 1000
[  395.018694][T13774] wg1 speed is unknown, defaulting to 1000
[  395.050492][T13789] lo speed is unknown, defaulting to 1000
[  395.074183][T13789] wg1 speed is unknown, defaulting to 1000
[  395.892613][T13818] siw: device registration error -23
[  396.219117][T13818] netlink: 'syz.7.2448': attribute type 4 has an invalid length.
[  396.470369][T13826] netlink: 'syz.7.2450': attribute type 13 has an invalid length.
[  396.526692][T13826] netlink: 'syz.7.2450': attribute type 17 has an invalid length.
[  396.654730][T13824] wg1 speed is unknown, defaulting to 1000
[  397.077029][T13826] net_ratelimit: 17 callbacks suppressed
[  397.077039][T13826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  397.211920][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'.
[  397.581444][T13850] dvmrp0: entered allmulticast mode
[  397.688411][T13853] netlink: 'syz.6.2459': attribute type 1 has an invalid length.
[  398.028715][T13860] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2460'.
[  398.337134][T13871] netlink: 'syz.0.2463': attribute type 7 has an invalid length.
[  398.345907][T13871] netlink: 'syz.0.2463': attribute type 8 has an invalid length.
[  398.400150][T13871] netlink: 'syz.0.2463': attribute type 15 has an invalid length.
[  398.438262][T13871] netlink: 'syz.0.2463': attribute type 1 has an invalid length.
[  398.474997][T13871] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2463'.
[  398.611914][T13876] Bluetooth: MGMT ver 1.23
[  398.688699][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2465'.
[  398.888201][T13891] netlink: 'syz.5.2467': attribute type 13 has an invalid length.
[  398.924261][T13891] netlink: 'syz.5.2467': attribute type 17 has an invalid length.
[  399.085231][T13891] erspan0: left allmulticast mode
[  399.120441][T13897] siw: device registration error -23
[  399.153299][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2468'.
[  399.175711][T13891] 8021q: adding VLAN 0 to HW filter on device team0
[  399.189545][T13891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  399.665489][T13904] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  399.676038][T13904] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  399.709965][T13906] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.2470'.
[  399.792692][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'.
[  399.805482][T13909] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2472'.
[  399.851426][T13909] wg1 speed is unknown, defaulting to 1000
[  400.026216][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2474'.
[  400.299084][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2474'.
[  401.005183][T13935] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  401.056768][T13935] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.096207][T13935] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  401.322239][T13932] wg1 speed is unknown, defaulting to 1000
[  401.405893][T13935] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  401.453768][T13935] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.486254][T13935] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  401.617037][T13935] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  401.638444][T13935] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.658761][T13935] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  401.762826][T13935] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  401.787909][T13935] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  401.799957][T13935] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  401.979508][ T3478] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  402.001302][ T3478] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  402.016491][ T3478] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 19999 - 0
[  402.109068][ T3478] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  402.135324][ T3478] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  402.145795][ T3478] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 19999 - 0
[  402.176780][T13958] wg1 speed is unknown, defaulting to 1000
[  402.183399][ T3478] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  402.202250][ T3478] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  402.220819][ T3478] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 19999 - 0
[  402.291510][ T3478] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  402.317107][ T3478] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  402.325623][ T3478] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 19999 - 0
[  402.918066][T13958] __nla_validate_parse: 3 callbacks suppressed
[  402.918094][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2485'.
[  402.952423][T13958] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2485'.
[  402.969183][T13982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.996655][T13958] validate_nla: 4 callbacks suppressed
[  402.996676][T13958] netlink: 'syz.6.2485': attribute type 13 has an invalid length.
[  403.043314][T13958] netlink: 'syz.6.2485': attribute type 17 has an invalid length.
[  403.072253][T13958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  403.207353][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  403.476844][T13993] batadv_slave_1: entered promiscuous mode
[  403.555492][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2494'.
[  403.582551][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2496'.
[  403.617583][T13992] batadv_slave_1: left promiscuous mode
[  403.803739][T14008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  403.849580][T14008] syzkaller0: entered promiscuous mode
[  403.879404][T14008] syzkaller0: entered allmulticast mode
[  403.914519][T14003] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2500'.
[  404.267684][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'.
[  404.435381][ T9743] svc: failed to register nfsdv3 RPC service (errno 512).
[  404.492105][ T9743] svc: failed to register nfsaclv3 RPC service (errno 512).
[  404.654636][T14032] netlink: 'syz.7.2506': attribute type 10 has an invalid length.
[  404.990928][T14022] bond0: (slave team0): Releasing backup interface
[  405.001812][T14022] team_slave_0: left promiscuous mode
[  405.011413][T14022] team0 (unregistering): Port device team_slave_0 removed
[  405.019180][T14022] team_slave_1: left promiscuous mode
[  405.033991][T14022] team0 (unregistering): Port device team_slave_1 removed
[  405.054400][T14022] batadv1: left promiscuous mode
[  405.203060][T14022] team0 (unregistering): Port device batadv1 removed
[  405.238467][T14022] !
: left promiscuous mode
[  405.276019][T14022] team0 (unregistering): Port device 
0!
 removed
[  405.284062][T14022] geneve0: left promiscuous mode
[  405.309164][T14022] team0 (unregistering): Port device geneve0 removed
[  405.394151][T14032] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode
[  405.442099][T14032] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  405.564730][T14045] syzkaller0: entered promiscuous mode
[  405.684540][T14045] syzkaller0: entered allmulticast mode
[  405.716758][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.733055][T14074] netlink: 'syz.7.2512': attribute type 6 has an invalid length.
[  405.749135][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.803826][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.819327][T14069] wg1 speed is unknown, defaulting to 1000
[  405.836051][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.907240][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  405.983687][T14078] wg1 speed is unknown, defaulting to 1000
[  406.071943][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.084984][T14084] netlink: 'syz.5.2515': attribute type 7 has an invalid length.
[  406.102388][T14084] netlink: 'syz.5.2515': attribute type 8 has an invalid length.
[  406.116104][T14084] netlink: 'syz.5.2515': attribute type 15 has an invalid length.
[  406.135794][T14084] netlink: 'syz.5.2515': attribute type 1 has an invalid length.
[  406.146643][T14084] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2515'.
[  406.190945][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.314991][T14092] wg1 speed is unknown, defaulting to 1000
[  406.351394][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  406.611807][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'.
[  406.917715][T14100] bridge_slave_1: left allmulticast mode
[  406.930204][T14100] bridge_slave_1: left promiscuous mode
[  406.936031][T14100] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.959584][T14100] bridge_slave_0: left allmulticast mode
[  406.966270][T14100] bridge_slave_0: left promiscuous mode
[  406.972624][T14100] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.170198][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  407.217716][T14105] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2519'.
[  407.293891][T14114] wg1 speed is unknown, defaulting to 1000
[  407.322503][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  407.645748][T14108] syzkaller0: entered promiscuous mode
[  407.652061][T14108] syzkaller0: entered allmulticast mode
[  407.737786][T14132] bond5: (slave erspan0): Releasing active interface
[  407.776459][T14132] bond0: (slave bond_slave_0): Releasing backup interface
[  407.799437][T14132] bond_slave_0: left promiscuous mode
[  407.809708][T14132] bond0: (slave bond_slave_1): Releasing backup interface
[  407.826921][T14132] bond_slave_1: left promiscuous mode
[  407.834238][T14132] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.842156][T14132] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.856471][T14132] bond0: (slave wlan1): Releasing backup interface
[  407.866379][T14132] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  407.876247][T14132] bond3: (slave ip6gretap1): Removing an active aggregator
[  407.885076][T14132] bond3: (slave ip6gretap1): Releasing backup interface
[  407.894852][T14132] bond4: (slave wireguard0): Releasing backup interface
[  407.902016][T14132] wireguard0: left promiscuous mode
[  407.907406][T14132] bond4: (slave wireguard1): making interface the new active one
[  407.915748][T14132] wireguard1: entered promiscuous mode
[  407.928729][T14132] bond4: (slave wireguard1): Releasing backup interface
[  407.936213][T14132] wireguard1: left promiscuous mode
[  407.946936][T14132] bond5: (slave veth7): Releasing active interface
[  407.959395][T14132] bond6: (slave bridge9): Releasing active interface
[  407.974864][T14132] bond7: (slave ip6erspan0): Releasing active interface
[  407.992495][T14132] bond8: (slave gretap1): Releasing active interface
[  408.008316][T14132] bond9: (slave ip6gretap3): Removing an active aggregator
[  408.016795][T14132] bond9: (slave ip6gretap3): Releasing backup interface
[  408.024255][T14132] bond9: (slave ip6gretap3): the permanent HWaddr of slave - ca:a8:74:d0:8a:26 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  408.047454][T14132] bond9: (slave veth9): Releasing backup interface
[  408.060713][T14138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.183517][T14142] syzkaller0: entered promiscuous mode
[  408.189286][T14142] syzkaller0: entered allmulticast mode
[  408.199475][T14148] tipc: Resetting bearer <eth:syzkaller0>
[  408.267033][T14127] tipc: Resetting bearer <eth:syzkaller0>
[  408.296076][T14127] tipc: Disabling bearer <eth:syzkaller0>
[  408.348037][T14153] netlink: 'syz.2.2526': attribute type 7 has an invalid length.
[  408.356560][T14153] netlink: 'syz.2.2526': attribute type 8 has an invalid length.
[  408.368067][T14153] netlink: 'syz.2.2526': attribute type 15 has an invalid length.
[  408.387092][T14153] netlink: 'syz.2.2526': attribute type 1 has an invalid length.
[  408.417070][T14153] __nla_validate_parse: 1 callbacks suppressed
[  408.417087][T14153] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2526'.
[  408.461021][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.569959][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.679884][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.693326][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2528'.
[  408.800975][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  408.862526][T14158] wg1 speed is unknown, defaulting to 1000
[  409.082424][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.221344][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.258432][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2535'.
[  409.375473][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.485282][T14182] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.2534'.
[  409.549473][T14186] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  409.580368][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.709636][   T49] bond1: (slave macvlan2): failed to get link speed/duplex
[  409.833230][T14198] wg1 speed is unknown, defaulting to 1000
[  409.840652][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  410.016099][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2543'.
[  410.636809][T14225] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma?
[  410.656584][T14223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.671949][T14225] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2549'.
[  410.824187][T14223] syzkaller0: entered promiscuous mode
[  410.860497][T14223] syzkaller0: entered allmulticast mode
[  411.108075][T14225] bond0 (unregistering): Released all slaves
[  413.256296][T14235] tipc: Resetting bearer <eth:syzkaller0>
[  413.287148][T14249] batadv0: entered promiscuous mode
[  413.293134][T14249] vlan2: entered promiscuous mode
[  413.327385][T14222] tipc: Resetting bearer <eth:syzkaller0>
[  413.357047][T14222] tipc: Disabling bearer <eth:syzkaller0>
[  413.509905][   T12] net_ratelimit: 7 callbacks suppressed
[  413.509925][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.660047][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.769970][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.910818][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  413.961128][T14281] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  414.044875][T14281] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode
[  414.053858][T14281] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode
[  414.091063][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.243698][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.308852][T14287] vlan2: entered promiscuous mode
[  414.329056][T14287] macvtap0: entered promiscuous mode
[  414.376583][T14293] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2564'.
[  414.582628][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  414.724797][T14292] wg1 speed is unknown, defaulting to 1000
[  414.748421][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.018589][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2571'.
[  415.081078][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.214390][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  415.219123][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2572'.
[  415.306998][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'.
[  415.371339][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2572'.
[  415.441143][T14324] netlink: 'syz.5.2572': attribute type 10 has an invalid length.
[  415.449191][T14319] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2572'.
[  415.449251][T14319] netlink: 540 bytes leftover after parsing attributes in process `syz.5.2572'.
[  416.010112][T14343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  416.508670][T14366] tipc: Resetting bearer <eth:syzkaller0>
[  416.662815][   T51] Bluetooth: hci6: command 0x0406 tx timeout
[  416.706962][T14369] wg1 speed is unknown, defaulting to 1000
[  416.962079][T14374] netlink: 'syz.2.2585': attribute type 1 has an invalid length.
[  416.999252][T14374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2585'.
[  417.159523][T14392] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  417.413259][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2590'.
[  417.438728][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2591'.
[  417.827322][T14398] wg1 speed is unknown, defaulting to 1000
[  417.965316][T14400] wg1 speed is unknown, defaulting to 1000
[  417.968199][T14408] netlink: 'syz.0.2594': attribute type 16 has an invalid length.
[  417.980300][T14408] netlink: 'syz.0.2594': attribute type 17 has an invalid length.
[  418.121264][T14414] IPv6: NLM_F_REPLACE set, but no existing node found!
[  418.324772][T14417] atomic_op ffff88802c31f198 conn xmit_atomic 0000000000000000
[  418.700297][   T12] net_ratelimit: 15 callbacks suppressed
[  418.700319][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  418.852092][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  418.927433][T14428] wg1 speed is unknown, defaulting to 1000
[  419.159918][T14426] wg1 speed is unknown, defaulting to 1000
[  419.179289][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  419.501697][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  419.686769][T14451] vlan0: entered promiscuous mode
[  419.717793][T14439] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  419.755548][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  419.782846][T14448] wg1 speed is unknown, defaulting to 1000
[  420.178561][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.241938][T14457] tun0: tun_chr_ioctl cmd 2148045848
[  420.278304][T14457] tun0: tun_chr_ioctl cmd 21731
[  420.590176][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  420.655063][T14475] syz_tun: entered allmulticast mode
[  420.683958][T14472] wg1 speed is unknown, defaulting to 1000
[  421.110508][T14481] veth3: left promiscuous mode
[  421.138004][T14481] vlan2: left allmulticast mode
[  421.169880][T14481] bridge0: left allmulticast mode
[  421.199167][T14481] geneve2: left promiscuous mode
[  421.208894][T14481] geneve2: left allmulticast mode
[  421.246475][T14481] geneve3: left promiscuous mode
[  421.256147][T14481] geneve3: left allmulticast mode
[  421.272954][T14489] __nla_validate_parse: 3 callbacks suppressed
[  421.272972][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'.
[  421.321773][T14481] veth7: left promiscuous mode
[  421.345195][T14481] gretap3: left promiscuous mode
[  421.368859][T14481] ip6tnl3: left promiscuous mode
[  421.392239][T14481] ip6tnl3: left allmulticast mode
[  421.423403][T14481] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  421.446417][T14481] macsec1: left promiscuous mode
[  421.452418][T14481] macsec1: left allmulticast mode
[  421.527609][T14487] vlan0: entered promiscuous mode
[  421.533025][T14487] vlan0: entered allmulticast mode
[  421.538248][T14487] hsr_slave_1: entered allmulticast mode
[  421.570159][ T1108] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  421.588495][ T1108] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  421.596977][ T1108] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 19999 - 0
[  421.608689][ T1108] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  421.619404][ T1108] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  421.633260][ T1108] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 19999 - 0
[  421.759677][T14494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2616'.
[  421.761463][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  421.812431][ T1108] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  421.830411][ T1108] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  421.849263][ T1108] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 19999 - 0
[  421.976631][ T1108] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  422.030381][ T1108] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  422.038880][ T1108] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 19999 - 0
[  422.089919][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  422.212548][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  423.005283][T14520] wg1 speed is unknown, defaulting to 1000
[  423.606347][T14538] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  423.655307][T14526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.679627][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2628'.
[  423.860823][T14528] tipc: Resetting bearer <eth:syzkaller0>
[  423.869128][T14525] tipc: Disabling bearer <eth:syzkaller0>
[  423.997399][   T13] net_ratelimit: 8 callbacks suppressed
[  423.997419][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  424.199483][T14554] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2630'.
[  424.200164][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  424.208778][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2630'.
[  424.243271][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'.
[  424.330141][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  424.533108][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  424.753307][T14567] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2636'.
[  424.864098][T14562] bridge_slave_0: entered promiscuous mode
[  424.871109][T14562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  424.949982][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.036677][T14576] netlink: 'syz.0.2638': attribute type 10 has an invalid length.
[  425.060518][T14576] netlink: 'syz.0.2638': attribute type 10 has an invalid length.
[  425.090716][T14576] !
: entered promiscuous mode
[  425.103808][T14576] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  425.150032][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.281392][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.397893][T14581] syzkaller1: entered promiscuous mode
[  425.406823][T14581] syzkaller1: entered allmulticast mode
[  425.490118][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.600951][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  425.725183][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2641'.
[  426.011583][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.035567][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.510180][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2647'.
[  426.672025][T14608] wg1 speed is unknown, defaulting to 1000
[  427.224272][T14634] wg1 speed is unknown, defaulting to 1000
[  427.591830][T14644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.845824][T14644] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  427.906763][T14652] netlink: 'syz.2.2658': attribute type 1 has an invalid length.
[  427.931278][T14652] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2658'.
[  427.966362][T14653] netlink: 'syz.5.2657': attribute type 5 has an invalid length.
[  428.137609][T14650] wg1 speed is unknown, defaulting to 1000
[  428.338770][T14657] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  428.391033][T14656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.480934][T14656] syzkaller0: entered promiscuous mode
[  428.486442][T14656] syzkaller0: entered allmulticast mode
[  428.556565][T14658] tipc: Resetting bearer <eth:syzkaller0>
[  428.636465][T14655] tipc: Resetting bearer <eth:syzkaller0>
[  428.720175][T10083] tipc: Node number set to 2886908661
[  428.830546][T14655] tipc: Disabling bearer <eth:syzkaller0>
[  428.930249][T14662] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2661'.
[  429.180675][ T3478] net_ratelimit: 16 callbacks suppressed
[  429.180694][ T3478] bond1: (slave macvlan2): failed to get link speed/duplex
[  429.321057][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  429.432205][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  429.572269][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  429.730878][T14680] veth5: entered promiscuous mode
[  429.861127][ T3478] bond1: (slave macvlan2): failed to get link speed/duplex
[  429.980316][ T3478] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.113663][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.196396][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880435c0800: rx timeout, send abort
[  430.204824][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880227ba400: rx timeout, send abort
[  430.214420][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880435c0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  430.228879][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880227ba400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  430.322270][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.394099][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2667'.
[  430.446123][T14685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2667'.
[  430.459990][ T3478] bond1: (slave macvlan2): failed to get link speed/duplex
[  430.493970][T14691] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2669'.
[  430.619655][T14685] bond0: entered promiscuous mode
[  430.693973][T14685] bond0: entered allmulticast mode
[  430.725442][T14685] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.733463][T14686] wg1 speed is unknown, defaulting to 1000
[  430.935259][T14690] wg1 speed is unknown, defaulting to 1000
[  430.970900][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  431.029096][T14696] wg1 speed is unknown, defaulting to 1000
[  431.428801][T14709] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.546504][T14719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.582482][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'.
[  431.631760][T14709] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.665076][T14715] syzkaller0: entered promiscuous mode
[  431.673985][T14715] syzkaller0: entered allmulticast mode
[  431.699561][T14724] syzkaller0: entered promiscuous mode
[  431.708261][T14724] syzkaller0: entered allmulticast mode
[  431.728970][T14722] tipc: Resetting bearer <eth:syzkaller0>
[  431.786440][T14709] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.814754][T14714] tipc: Resetting bearer <eth:syzkaller0>
[  431.864369][T14714] tipc: Disabling bearer <eth:syzkaller0>
[  432.000372][T14709] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.140933][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2676'.
[  432.201572][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2676'.
[  432.255078][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2676'.
[  432.278834][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2676'.
[  432.506141][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.660864][T14743] wg1 speed is unknown, defaulting to 1000
[  432.669143][   T78] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.735577][T13470] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.897787][T13470] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  433.018085][T14765] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2680'.
[  433.427509][T14781] delete_channel: no stack
[  433.711441][T14788] netlink: 'syz.7.2688': attribute type 13 has an invalid length.
[  433.735667][T14788] netlink: 'syz.7.2688': attribute type 17 has an invalid length.
[  433.777821][T14792] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  433.832074][T14790] syzkaller0: entered promiscuous mode
[  433.847878][T14790] syzkaller0: entered allmulticast mode
[  433.866631][T14792] bond0: (slave 
0!
): Releasing backup interface
[  433.886561][T14792] !
: left promiscuous mode
[  433.917975][T14798] smc: net device bond0 applied user defined pnetid SYZ2
[  433.947502][T14792] netlink: 'syz.0.2690': attribute type 10 has an invalid length.
[  434.019188][T14792] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  434.042171][T14792] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  434.055106][T14792] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  434.193923][T14806] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2694'.
[  434.359840][   T78] net_ratelimit: 13 callbacks suppressed
[  434.359866][   T78] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.521337][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.680086][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  434.900238][T14827] netlink: 'syz.5.2698': attribute type 10 has an invalid length.
[  434.987193][T14822] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.049219][T14818] wg1 speed is unknown, defaulting to 1000
[  435.113389][T14822] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.219911][   T51] Bluetooth: hci7: command 0x0405 tx timeout
[  435.229006][T14822] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.277240][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.348511][T14822] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.451045][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.523603][T14833] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2700'.
[  435.664584][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.724304][   T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.760001][   T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.782396][   T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.817788][   T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.850888][   T36] bond1: (slave macvlan2): failed to get link speed/duplex
[  435.944626][T14844] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  435.981598][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  436.119839][ T1108] bond1: (slave macvlan2): failed to get link speed/duplex
[  436.239017][T13470] bond1: (slave macvlan2): failed to get link speed/duplex
[  436.330076][T14854] dvmrp8: entered allmulticast mode
[  436.354521][T14853] dvmrp8: left allmulticast mode
[  436.415910][T14856] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2706'.
[  436.547745][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2708'.
[  436.677005][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'.
[  436.735476][T14871] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.879027][T14872] wg1 speed is unknown, defaulting to 1000
[  436.882900][T14875] wg1: entered promiscuous mode
[  436.912681][T14875] wg1: entered allmulticast mode
[  436.980179][   T31] INFO: task syz.4.1676:11108 blocked for more than 143 seconds.
[  436.988699][   T31]       Not tainted syzkaller #0
[  437.009919][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  437.018944][   T31] task:syz.4.1676      state:D stack:26792 pid:11108 tgid:11106 ppid:5863   task_flags:0x400140 flags:0x00004004
[  437.035840][   T31] Call Trace:
[  437.039513][   T31]  <TASK>
[  437.043204][   T31]  __schedule+0x1798/0x4cc0
[  437.048148][   T31]  ? __lock_acquire+0xab9/0xd20
[  437.057026][   T31]  ? __lock_acquire+0xab9/0xd20
[  437.065133][   T31]  ? __pfx___schedule+0x10/0x10
[  437.071035][   T31]  ? schedule+0x91/0x360
[  437.075570][   T31]  schedule+0x165/0x360
[  437.083602][   T31]  schedule_preempt_disabled+0x13/0x30
[  437.089663][   T31]  __mutex_lock+0x7e6/0x1350
[  437.097912][T14890] netlink: 'syz.7.2713': attribute type 10 has an invalid length.
[  437.115734][   T31]  ? __mutex_lock+0x5bb/0x1350
[  437.123520][   T31]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  437.129582][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  437.135149][   T31]  ? net_generic+0x1e/0x240
[  437.146357][   T31]  ? net_generic+0x1e/0x240
[  437.151360][   T31]  ? net_generic+0x1e/0x240
[  437.156317][   T31]  ? net_generic+0x1e/0x240
[  437.161311][   T31]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  437.167515][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  437.173591][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  437.180429][   T31]  ? bpf_lsm_capable+0x9/0x20
[  437.185528][   T31]  ? security_capable+0x7e/0x2e0
[  437.192164][   T31]  genl_rcv_msg+0x60e/0x790
[  437.197159][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.203116][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  437.209703][   T31]  netlink_rcv_skb+0x205/0x470
[  437.215218][   T31]  ? __lock_acquire+0xab9/0xd20
[  437.235450][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.245756][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.254801][   T31]  ? down_read+0x1ad/0x2e0
[  437.259585][   T31]  genl_rcv+0x28/0x40
[  437.269037][   T31]  netlink_unicast+0x82c/0x9e0
[  437.278378][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  437.294460][   T31]  ? netlink_sendmsg+0x642/0xb30
[  437.300590][ T5869] Bluetooth: hci7: command 0x0405 tx timeout
[  437.311562][   T31]  ? skb_put+0x11b/0x210
[  437.316789][   T31]  netlink_sendmsg+0x805/0xb30
[  437.323770][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.329570][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  437.335727][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.346078][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.362234][   T31]  __sock_sendmsg+0x21c/0x270
[  437.378615][   T31]  ____sys_sendmsg+0x505/0x830
[  437.389501][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.409629][   T31]  ? import_iovec+0x74/0xa0
[  437.425034][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  437.438824][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.449136][   T31]  ? __fget_files+0x2a/0x420
[  437.459041][   T31]  ? __fget_files+0x3a0/0x420
[  437.469682][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  437.486603][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.498165][   T31]  ? rcu_is_watching+0x15/0xb0
[  437.508197][   T31]  ? do_syscall_64+0xbe/0x3b0
[  437.516975][   T31]  do_syscall_64+0xfa/0x3b0
[  437.553029][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.576160][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.602519][   T31]  ? clear_bhb_loop+0x60/0xb0
[  437.622165][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.646436][T14864] base_sock_release(ffff88808184f200) sk=ffff888078f9b000
[  437.659979][   T31] RIP: 0033:0x7fa7eaf8ebe9
[  437.667414][   T31] RSP: 002b:00007fa7ebe25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.695848][   T31] RAX: ffffffffffffffda RBX: 00007fa7eb1c5fa0 RCX: 00007fa7eaf8ebe9
[  437.707022][   T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008
[  437.750984][   T51] block nbd2: Receive control failed (result -32)
[  437.768312][   T31] RBP: 00007fa7eb011e19 R08: 0000000000000000 R09: 0000000000000000
[  437.787302][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.802919][   T31] R13: 00007fa7eb1c6038 R14: 00007fa7eb1c5fa0 R15: 00007ffe15514418
[  437.811250][   T31]  </TASK>
[  437.814439][   T31] INFO: task syz.3.1783:11431 blocked for more than 144 seconds.
[  437.822538][   T31]       Not tainted syzkaller #0
[  437.827614][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  437.836617][   T31] task:syz.3.1783      state:D stack:25544 pid:11431 tgid:11430 ppid:5864   task_flags:0x400140 flags:0x00004004
[  437.854367][T14881] nbd2: detected capacity change from 0 to 63
[  437.863193][T14885] block nbd2: NBD_DISCONNECT
[  437.864544][   T31] Call Trace:
[  437.867836][T14885] block nbd2: Send disconnect failed -32
[  437.871595][   T31]  <TASK>
[  437.871614][   T31]  __schedule+0x1798/0x4cc0
[  437.871655][   T31]  ? __lock_acquire+0xab9/0xd20
[  437.890496][   T31]  ? __lock_acquire+0xab9/0xd20
[  437.895471][   T31]  ? __pfx___schedule+0x10/0x10
[  437.897108][T14885] block nbd2: shutting down sockets
[  437.906262][   T31]  ? schedule+0x91/0x360
[  437.910880][   T31]  schedule+0x165/0x360
[  437.915136][   T31]  schedule_preempt_disabled+0x13/0x30
[  437.920966][   T31]  __mutex_lock+0x7e6/0x1350
[  437.925786][   T31]  ? __mutex_lock+0x5bb/0x1350
[  437.931218][   T31]  ? nfsd_nl_threads_set_doit+0x2cb/0x960
[  437.937113][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  437.942919][   T31]  ? net_generic+0x1e/0x240
[  437.947610][   T31]  ? net_generic+0x1e/0x240
[  437.952439][   T31]  ? net_generic+0x1e/0x240
[  437.957210][   T31]  ? net_generic+0x1e/0x240
[  437.978320][   T31]  nfsd_nl_threads_set_doit+0x2cb/0x960
[  437.984344][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  437.990289][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  437.996512][   T31]  ? bpf_lsm_capable+0x9/0x20
[  438.001500][   T31]  ? security_capable+0x7e/0x2e0
[  438.006560][   T31]  genl_rcv_msg+0x60e/0x790
[  438.011312][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.016531][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[  438.022985][   T51] Bluetooth: hci0: command tx timeout
[  438.028614][   T31]  netlink_rcv_skb+0x205/0x470
[  438.033642][   T31]  ? __lock_acquire+0xab9/0xd20
[  438.038689][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  438.044149][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  438.049654][   T31]  ? down_read+0x1ad/0x2e0
[  438.054373][   T31]  genl_rcv+0x28/0x40
[  438.058457][   T31]  netlink_unicast+0x82c/0x9e0
[  438.063464][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  438.068857][   T31]  ? netlink_sendmsg+0x642/0xb30
[  438.074375][   T31]  ? skb_put+0x11b/0x210
[  438.078731][   T31]  netlink_sendmsg+0x805/0xb30
[  438.083836][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.089312][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  438.094625][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  438.100251][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  438.105627][   T31]  __sock_sendmsg+0x21c/0x270
[  438.110690][   T31]  ____sys_sendmsg+0x505/0x830
[  438.115553][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  438.121176][   T31]  ? import_iovec+0x74/0xa0
[  438.125772][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  438.130660][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.136075][   T31]  ? __fget_files+0x2a/0x420
[  438.140785][   T31]  ? __fget_files+0x3a0/0x420
[  438.145551][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  438.150832][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.156416][   T31]  ? rcu_is_watching+0x15/0xb0
[  438.161468][   T31]  ? trace_sys_enter+0x25/0x100
[  438.166457][   T31]  do_syscall_64+0xfa/0x3b0
[  438.171232][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.176656][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.183605][   T31]  ? clear_bhb_loop+0x60/0xb0
[  438.188676][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.194867][   T31] RIP: 0033:0x7f5d4678ebe9
[  438.199459][   T31] RSP: 002b:00007f5d449f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.208421][   T31] RAX: ffffffffffffffda RBX: 00007f5d469c5fa0 RCX: 00007f5d4678ebe9
[  438.216765][   T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008
[  438.224908][   T31] RBP: 00007f5d46811e19 R08: 0000000000000000 R09: 0000000000000000
[  438.233279][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.241465][   T31] R13: 00007f5d469c6038 R14: 00007f5d469c5fa0 R15: 00007ffcaa2f6068
[  438.249650][   T31]  </TASK>
[  438.253011][   T31] 
[  438.253011][   T31] Showing all locks held in the system:
[  438.261292][   T31] 3 locks held by kworker/u8:1/13:
[  438.266613][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.283858][   T31]  #1: ffffc90000127bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.295279][   T31]  #2: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  438.304513][   T31] 1 lock held by khungtaskd/31:
[  438.309557][   T31]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  438.320066][   T31] 3 locks held by kworker/u8:2/36:
[  438.325273][   T31]  #0: ffff88814c3c3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.337279][   T31]  #1: ffffc90000ac7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.355942][   T31]  #2: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  438.372514][   T31] 2 locks held by getty/5622:
[  438.377379][   T31]  #0: ffff88814d58e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  438.394876][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  438.406877][   T31] 2 locks held by syz.1.1284/9743:
[  438.417550][   T31]  #0: ffffffff8f59e450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  438.426718][   T31]  #1: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  438.437426][   T31] 2 locks held by syz.4.1676/11108:
[  438.442958][   T31]  #0: ffffffff8f59e450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  438.451607][   T31]  #1: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  438.462000][   T31] 2 locks held by syz.3.1783/11431:
[  438.467299][   T31]  #0: ffffffff8f59e450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  438.475893][   T31]  #1: ffffffff8e4186c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  438.486246][   T31] 2 locks held by syz.0.2711/14872:
[  438.491681][   T31]  #0: ffffffff8f52bdd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  438.501512][   T31]  #1: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800
[  438.511302][   T31] 2 locks held by syz.0.2711/14876:
[  438.516691][   T31]  #0: ffffffff8f52bdd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  438.526404][   T31]  #1: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  438.537475][   T31] 6 locks held by syz.7.2713/14878:
[  438.542963][   T31]  #0: ffffffff8f59e450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  438.551573][   T31]  #1: ffff8880301710e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0
[  438.562276][   T31]  #2: ffff888030177250 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0
[  438.577380][   T31]  #3: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670
[  438.586467][   T31]  #4: ffff88807942cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xdf5/0x1ff0
[  438.599166][   T31]  #5: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  438.610500][   T31] 1 lock held by syz.7.2713/14887:
[  438.615708][   T31]  #0: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  438.624793][   T31] 1 lock held by syz.7.2713/14890:
[  438.630165][   T31]  #0: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  438.639449][   T31] 2 locks held by syz.5.2714/14879:
[  438.644870][   T31]  #0: ffffffff8f52bdd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  438.656160][   T31]  #1: ffffffff8f538c88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  438.675649][   T31] 
[  438.678137][   T31] =============================================
[  438.678137][   T31] 
[  438.682617][T14878] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.693564][   T31] NMI backtrace for cpu 0
[  438.693593][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  438.693612][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.693622][   T31] Call Trace:
[  438.693629][   T31]  <TASK>
[  438.693638][   T31]  dump_stack_lvl+0x189/0x250
[  438.693664][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.693683][   T31]  ? __pfx__printk+0x10/0x10
[  438.693717][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  438.693741][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  438.693764][   T31]  ? __pfx__printk+0x10/0x10
[  438.693789][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  438.693814][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  438.693838][   T31]  watchdog+0xf93/0xfe0
[  438.693864][   T31]  ? watchdog+0x1de/0xfe0
[  438.693891][   T31]  kthread+0x70e/0x8a0
[  438.693913][   T31]  ? __pfx_watchdog+0x10/0x10
[  438.693932][   T31]  ? __pfx_kthread+0x10/0x10
[  438.693952][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.693974][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.693987][   T31]  ? __pfx_kthread+0x10/0x10
[  438.694007][   T31]  ret_from_fork+0x3f9/0x770
[  438.694027][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  438.694049][   T31]  ? __switch_to_asm+0x39/0x70
[  438.694067][   T31]  ? __switch_to_asm+0x33/0x70
[  438.694084][   T31]  ? __pfx_kthread+0x10/0x10
[  438.694104][   T31]  ret_from_fork_asm+0x1a/0x30
[  438.694138][   T31]  </TASK>
[  438.694144][   T31] Sending NMI from CPU 0 to CPUs 1:
[  438.843321][    C1] NMI backtrace for cpu 1
[  438.843339][    C1] CPU: 1 UID: 0 PID: 14889 Comm: syz.5.2714 Not tainted syzkaller #0 PREEMPT(full) 
[  438.843356][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.843365][    C1] RIP: 0010:__lock_acquire+0x43e/0xd20
[  438.843391][    C1] Code: c5 00 00 00 84 c9 0f b6 d3 44 0f b6 e9 44 0f 44 ea 44 8b a7 e8 0a 00 00 41 8d 4c 24 ff 83 f9 ff bd ff ff ff ff 0f 4c e9 ff c5 <45> 8d 7c 24 01 49 ff cc 44 89 f9 83 c1 fe 78 44 44 89 e3 81 e3 ff
[  438.843404][    C1] RSP: 0018:ffffc9000b9b7430 EFLAGS: 00000056
[  438.843418][    C1] RAX: 00000000000401d6 RBX: 0000000000000004 RCX: 00000000ffffffff
[  438.843428][    C1] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff888042f30000
[  438.843438][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8a7fb395
[  438.843448][    C1] R10: ffffc9000b9b7660 R11: fffff52001736ed1 R12: 0000000000000000
[  438.843464][    C1] R13: 0000000000000004 R14: ffff888042f30af0 R15: ffff888042f30af0
[  438.843475][    C1] FS:  00007f12337b56c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000
[  438.843488][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.843498][    C1] CR2: 0000200000c6d030 CR3: 0000000036098000 CR4: 00000000003526f0
[  438.843512][    C1] Call Trace:
[  438.843517][    C1]  <TASK>
[  438.843529][    C1]  ? hci_mgmt_chan_find+0x25/0xb0
[  438.843547][    C1]  lock_acquire+0x120/0x360
[  438.843564][    C1]  ? hci_mgmt_chan_find+0x25/0xb0
[  438.843581][    C1]  ? _copy_to_iter+0x30e/0x1790
[  438.843600][    C1]  __mutex_lock+0x187/0x1350
[  438.843615][    C1]  ? hci_mgmt_chan_find+0x25/0xb0
[  438.843631][    C1]  ? __pfx__copy_to_iter+0x10/0x10
[  438.843644][    C1]  ? __skb_try_recv_from_queue+0x58f/0x730
[  438.843664][    C1]  ? hci_mgmt_chan_find+0x25/0xb0
[  438.843679][    C1]  ? __skb_try_recv_datagram+0x3da/0x4e0
[  438.843696][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  438.843711][    C1]  ? __skb_datagram_iter+0x61d/0x990
[  438.843734][    C1]  hci_mgmt_chan_find+0x25/0xb0
[  438.843750][    C1]  hci_sock_recvmsg+0x570/0x8f0
[  438.843769][    C1]  ? __pfx_hci_sock_recvmsg+0x10/0x10
[  438.843790][    C1]  ? __pfx_hci_sock_recvmsg+0x10/0x10
[  438.843806][    C1]  sock_recvmsg_nosec+0x183/0x1c0
[  438.843827][    C1]  ____sys_recvmsg+0x3aa/0x460
[  438.843847][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[  438.843869][    C1]  ? import_iovec+0x74/0xa0
[  438.843886][    C1]  ___sys_recvmsg+0x1b5/0x510
[  438.843904][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[  438.843933][    C1]  ? __might_fault+0xb0/0x130
[  438.843953][    C1]  do_recvmmsg+0x307/0x770
[  438.843972][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[  438.843993][    C1]  ? __pfx_do_futex+0x10/0x10
[  438.844016][    C1]  __x64_sys_recvmmsg+0x190/0x240
[  438.844033][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  438.844054][    C1]  ? rcu_is_watching+0x15/0xb0
[  438.844070][    C1]  ? do_syscall_64+0xbe/0x3b0
[  438.844087][    C1]  do_syscall_64+0xfa/0x3b0
[  438.844102][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.844115][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  438.844134][    C1]  ? clear_bhb_loop+0x60/0xb0
[  438.844150][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.844164][    C1] RIP: 0033:0x7f123298ebe9
[  438.844176][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.844189][    C1] RSP: 002b:00007f12337b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  438.844204][    C1] RAX: ffffffffffffffda RBX: 00007f1232bc6270 RCX: 00007f123298ebe9
[  438.844214][    C1] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 000000000000000b
[  438.844224][    C1] RBP: 00007f1232a11e19 R08: 0000000000000000 R09: 0000000000000000
[  438.844234][    C1] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000000
[  438.844243][    C1] R13: 00007f1232bc6308 R14: 00007f1232bc6270 R15: 00007fff825caa88
[  438.844262][    C1]  </TASK>
[  438.844406][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  439.226795][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  439.235892][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  439.245942][   T31] Call Trace:
[  439.249214][   T31]  <TASK>
[  439.252135][   T31]  dump_stack_lvl+0x99/0x250
[  439.256724][   T31]  ? __asan_memcpy+0x40/0x70
[  439.261324][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.266510][   T31]  ? __pfx__printk+0x10/0x10
[  439.271100][   T31]  vpanic+0x281/0x750
[  439.275075][   T31]  ? __pfx_vpanic+0x10/0x10
[  439.279566][   T31]  ? preempt_schedule+0xae/0xc0
[  439.284414][   T31]  ? preempt_schedule_common+0x83/0xd0
[  439.289971][   T31]  panic+0xb9/0xc0
[  439.293684][   T31]  ? __pfx_panic+0x10/0x10
[  439.298091][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  439.303457][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  439.309605][   T31]  watchdog+0xfd2/0xfe0
[  439.313757][   T31]  ? watchdog+0x1de/0xfe0
[  439.318084][   T31]  kthread+0x70e/0x8a0
[  439.322152][   T31]  ? __pfx_watchdog+0x10/0x10
[  439.326828][   T31]  ? __pfx_kthread+0x10/0x10
[  439.331409][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.336620][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.341805][   T31]  ? __pfx_kthread+0x10/0x10
[  439.346407][   T31]  ret_from_fork+0x3f9/0x770
[  439.350987][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  439.356093][   T31]  ? __switch_to_asm+0x39/0x70
[  439.360849][   T31]  ? __switch_to_asm+0x33/0x70
[  439.365619][   T31]  ? __pfx_kthread+0x10/0x10
[  439.370199][   T31]  ret_from_fork_asm+0x1a/0x30
[  439.374966][   T31]  </TASK>
[  439.378334][   T31] Kernel Offset: disabled
[  439.382674][   T31] Rebooting in 86400 seconds..