last executing test programs:

16.962307862s ago: executing program 4 (id=3124):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000300)="96", 0x1}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'pim6reg0\x00'})
getsockopt$inet_opts(r1, 0x0, 0x22, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
poll(&(0x7f0000000f00)=[{r3, 0x4004}], 0x1, 0xe2f)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1c634002}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x8c, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff94}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4090}, 0x40)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r7, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)={0x28, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
bind$bt_hci(r9, 0x0, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r13, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
write(r9, &(0x7f0000000340)='G\x00\x00', 0x3)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240400d1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

16.599355144s ago: executing program 4 (id=3128):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
close(0x3)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000140)="a1c0ffff000039a9029e2d34161c0000", 0xff69}, {0x0}], 0x2}}], 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)

4.733302547s ago: executing program 3 (id=3186):
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=@ipv6_newrule={0x58, 0x20, 0x100, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x4, 0x2, 0x0, 0x0, 0x3, 0x2}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x810)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r4, 0x0, 0x0, 0x44814, &(0x7f0000000000)={0xa, 0x4e22, 0x7fffeffb, @loopback, 0x81}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

4.385405229s ago: executing program 3 (id=3189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x40}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x68}}, 0x4000090)

4.046644241s ago: executing program 3 (id=3192):
unshare(0x8040600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="32edb92832", 0x5}, {&(0x7f0000000280)="6be09dd3b33c7e47a39468cffb4a1cc688799920830326a0d7c89a623062ce98ec9cb8fa88448b11f157c3ec40b5f69df0b0e5d812257aaea22b8d48c92fb1817ba100dad93970348b5a2c7689b67880d43021c446c26a9ba3c26b5b2194965be67ad5a7a8fe67a5eadfdc765d4d0fd95e63874d382058166c00e0fcc2f58f0e734ca2bbc9a7779f3c30635e2832af28fde93af74e3299f8cfbea2c6", 0x9c}], 0x2, 0xd)
r3 = socket$netlink(0x10, 0x3, 0x0)
splice(r1, 0x0, r3, 0x0, 0x4, 0xf)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r6=>0x0})
r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x2c}}, 0x0)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0xc2b58000)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11)
socket(0x37, 0x4, 0x2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r12, @ANYBLOB="01002abd7000ffdbdf2514000000180001801400020062617461647630000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000800)

3.412222081s ago: executing program 3 (id=3196):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000010018110000", @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100007e850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
close(r5)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r9, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r12, 0xffffffffffffffff, 0x500}, 0x57)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000000)={'lo\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)

2.923089311s ago: executing program 3 (id=3201):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

2.697829781s ago: executing program 2 (id=3205):
r0 = epoll_create1(0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000040c0), 0x0, 0x40)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
r7 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000100)={0x6000001d})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0xa0002001})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0)
epoll_wait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffc}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

2.629647782s ago: executing program 0 (id=3206):
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x80)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
writev(r3, 0x0, 0x0)
r5 = socket(0x2b, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getpeername$qrtr(r5, 0x0, &(0x7f00000002c0))
getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000180)=0x1e)
ioctl$PPPIOCDISCONN(r0, 0x7439)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000060000", @ANYRES64=r8, @ANYBLOB="00000000280012800b000100677265"], 0x48}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x7316c2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@mpls_getnetconf={0x1c, 0x52, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r12 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {}, 0x1})
ioctl$TUNSETLINK(r9, 0x400454cd, 0x307)

2.628597278s ago: executing program 3 (id=3207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f0000000280)=0x28)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x20004054)
recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x60}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/252, 0xfc}], 0x4, &(0x7f0000000500)=""/39, 0x27}, 0x37}], 0x3, 0x10000, 0x0)
unshare(0x62040200)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce)
unshare(0x60060280)

2.423218226s ago: executing program 0 (id=3208):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0xee020000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

2.191521165s ago: executing program 4 (id=3130):
r0 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)={0x77359400})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)

2.168384194s ago: executing program 0 (id=3209):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000040)=ANY=[], 0x1618}], 0x1}, 0x0)

2.128479578s ago: executing program 1 (id=3210):
unshare(0x20000400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="be171e2b", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x3}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100))
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0xb, @mcast2, 0x3}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e24, 0x2, @private2, 0x2}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x53}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x80)
socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000002900003f50000000b04847aa00000000373b4d5f6270cd8799bcf4f8442550623860af1f9b992eb2ec014c96c7f9c06329b09b6b1d2926ee660b2423631e7fdf4c3c819c983dabb5fa4067ef638a3cfa09da9e143f3a6a2b35943e"], 0x18}}], 0x1, 0x4000880)
getpeername$packet(r7, 0x0, &(0x7f0000000040)=0x31)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060001080006046071ebbac35d87be0002aaaaaaaaaa36ac1e0001bbbbbbbbbbbbe0000002"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.958865058s ago: executing program 0 (id=3211):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010025bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB='w'], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044080) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r6 = socket$unix(0x1, 0x1, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1cbd7000fcdbdf25020000402ab30fb753bab1200000000000000000"], 0x1c}}, 0x0) (async)
unshare(0x20040600) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1c, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="1100"/12, @ANYRES32=r10, @ANYBLOB="730da7287fe777f343f021066532583b9fd70e3f26b1cf17c57c66f222ae4a90b0287e09a53f755cb7fc1705ee215d4d2f4f724cb57ef0ba84583d2e81656893789bcc1f7d156115c241e968617f30fefef2c2c63c27f7bfa1d6d688588cf97713", @ANYRES64=0x0], 0x20) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040801}, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@delchain={0x24, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xa, 0x5}, {0x5, 0xfff3}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async)
setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001600)={r12, r3, 0x8, 0x1000, &(0x7f0000000600)="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", 0xb2, 0xff, 0x6, 0x74e9, 0x0, 0x1, 0x3ff, 'syz0\x00'}) (async)
socket$inet_icmp(0x2, 0x2, 0x1)

1.944772602s ago: executing program 1 (id=3212):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140))
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006e61740014000280080001"], 0x78}}, 0x0) (async)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, 0x0, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf251800000008000300", @ANYRES32=r7, @ANYBLOB="400030803c0001800800010000000000300003"], 0x5c}}, 0x20000000) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)

1.860420898s ago: executing program 4 (id=3213):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x6, 0xb2, 0x0, 0x0, 0x9331edcee4785739, 0x14}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x881)
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
socket$netlink(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x6, 0xb2, 0x0, 0x0, 0x9331edcee4785739, 0x14}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x881) (async)
unshare(0x6a040000) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

1.646087291s ago: executing program 1 (id=3214):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100060000000900020073797a3200000000050004000000000016000300686173683a6e65742c706f72742c6e6574c100000500050007000000"], 0x50}}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
syz_emit_ethernet(0xde, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@remote, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c944a6b21f22109ee302a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="18005e800c000100ffffff020000000008000200"], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="080028bd70000900000002000000050059000500000008006a0005000000080040000300000008000a01a4070000080026006c09000008000b010101000005003e0080000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000fdffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r7, @ANYRESDEC=r7, @ANYBLOB="adeada59d459ad982cf57cc5411e864ea5670b6eb999540cc43a3510883d80a03ec08ca3e9638359ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x7fff, 0x50, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x4004044) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c4}, 0xbceee088a484c5cb) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0xfffff000) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r9, 0x73)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.635632515s ago: executing program 0 (id=3215):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @mcast1, 0xfffffdf8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @tcp_ip6_spec={@mcast2, @remote, 0x4e20, 0x4e22, 0x7b}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
r1 = socket$kcm(0x10, 0x2, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)={r4}, &(0x7f0000000240)=0x8)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.633976696s ago: executing program 2 (id=3216):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)
r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x800)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)=0xffffffffffffffff)
socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000))
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x218}}], 0x1, 0x4004890)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r7, &(0x7f00000001c0)={&(0x7f0000000080), 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="425e05e6a25e9918eccdbabb8dea8b43a6239b39448bc1a0c5be29d518f989f346bb549fb1c3d2bb53453791049bb2970317f3ec05089ce9d5a203e88de2facb7265a9d5091aeac84e982bed961ae252f3650915f506e93daa9af0b0a15a14d9ff99cf94fd5d62fb7f755edcbc9be1b3d7ec36ed2451c6c917c8f7ea78dbb08d", 0x80}, 0x1, 0x0, 0x0, 0x4044081}, 0x4800)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="000000000400"/28], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) (async)
accept4$x25(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x800) (async)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) (async)
socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async)
sendmmsg$inet(r5, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x218}}], 0x1, 0x4004890) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
sendmsg$802154_dgram(r7, &(0x7f00000001c0)={&(0x7f0000000080), 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="425e05e6a25e9918eccdbabb8dea8b43a6239b39448bc1a0c5be29d518f989f346bb549fb1c3d2bb53453791049bb2970317f3ec05089ce9d5a203e88de2facb7265a9d5091aeac84e982bed961ae252f3650915f506e93daa9af0b0a15a14d9ff99cf94fd5d62fb7f755edcbc9be1b3d7ec36ed2451c6c917c8f7ea78dbb08d", 0x80}, 0x1, 0x0, 0x0, 0x4044081}, 0x4800) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="000000000400"/28], 0x48) (async)

1.510243627s ago: executing program 2 (id=3217):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000100006900000014000400766972745f7769666930000000000000040017800800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000010c0)=0x7, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000040000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = accept$unix(r7, &(0x7f0000000100), &(0x7f0000000040)=0x6e)
sendto$unix(r8, &(0x7f0000000180)="c271fa8235fb4c4b73076083", 0xc, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.347117212s ago: executing program 1 (id=3218):
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
unshare(0x62040200) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9) (async)
r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xfffffffffffffd33) (async)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)

1.277689603s ago: executing program 0 (id=3219):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000001}, 0x4004484f)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x7ff, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x48, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x20}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xce}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x339}]}]}, 0x48}}, 0x4000800)
write$rfkill(r3, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf", @ANYBLOB="e77d855235b0bdc39d8e330fe93aabe94add95e5f67db5d5ed37368c4ac52521f6bdaa686068a2f5fe7a9a1b97ab89b6d421372fbdcf30fa899091be99cb3d20cbfe01e7aedf0bb8518fde96eb2a724f8ed21fa1e0f700c368368f0d250e17633f8efc0d0ddb2fad7392da90920b342c232861975c769cbd81a313bc7dc1152ac2d526958d079e9b1e70eed8ab71472c42db5c04f77ca7b5c5", @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRES64, @ANYBLOB="ecbb4f98553864bcc4c635574b159a191b104bc749f1ac2c81862d7fc1ae5cafcad15ed1b8f5e70384ea382630411a12532414cc083c80fbbd618cd72eeac369d8de46e586ddf1c4692f53b34cbff672c5b0fdebcb2794b4a71d736ae02ed85c45569e748d9004a1b81310f40baf19ffd0f6c52a3eab4e5d04f6dc26feb819b11be15dfd27ecd32e64ddc4e889d1d00602d9d4e7402a024256f850be211f75788384103c1dfb8af377782681296cbf340c1ac58cb268443247c5125474d46ed25ae2c107f2b5b3c36a040c677797c50147892ae742b24e65bf210dbe3f62ea375b40daf8f2"], 0xfc}}, 0x0)

1.136531053s ago: executing program 2 (id=3220):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040))
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000240), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c30000000000000b5030000000000008500000076000000b70000000000000095", @ANYBLOB="a324d0e8e6b555aa451144b1af835849fa979f5362d8ca02e80ce80c3c3637cb2e704d1e21caf0869109c7ca815223b712aea6e4a36c978d270a15e24fab8154eb", @ANYRESDEC, @ANYRESOCT=r0, @ANYBLOB, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

966.83342ms ago: executing program 1 (id=3221):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="cd4dcd283c5f1109efdf983e1bd971f2f45ace16bd58afb48c1e537cb4c9c7e423eb07aa7ce029666e3fa7c2c5892b24e1a6bb0858dc9587d5a9a946c561526dc2fe109d9527a077dc24771805c22769c04eea2aedd951117bb0e6c75012f13115faab4baa454980cbfe61d7cc27966a88644ff55b163d2709c46fc1f2fd30a4c5f82f3a0f46149762ac60ba8389268108632728bcd64786c105fbf847eb89d9b33659a2139e8b46eba128ce3e403289d09570381bf849f0cee9331776c07a1f18cbe23a5f8976e65a1922244ae0ce31086e3ffb2e1c935a368c3bb1cb534e4e", 0xe0}, {&(0x7f0000001880)="ad6ab2bedf1c63e2b2d13422fb7c23582bc3ec8417c563df29943c8caab778c15aa68c0371a35f2e0e6a8748067f6ab27fdc1e64001b9169a687a0ee29a53bbd43962f319edaa6d50242c7f703ccb58e13fc143257a2c88fe32081010d9e5b8fd93d8c0d23d0f1348edbc002c59a69f3b06bbb46825fab013224b353e4df21940eabf2dd819b8287a82687872d6f1d1a06136d880bde29692481997910efb895a04fde3c7caa4da75868ea8dcc16338b3da49a39e49787bdde100729e082208facaa6ca3cb88085d13", 0xc9}, {&(0x7f0000001380)="32fcf79ea2b0591260a296bee19ef9", 0xf}, {&(0x7f00000013c0)="64af50bf01a75096f1fff725716147f57f392355797293fbd66c6fffca3c3509b90ff1eda4d9f6164726f3b7d5ecedff9523dfa389da1f60581dad48ddac980afe177fe1d7cb47cd5eeb4c6e27d6e4ed4834aef0d993752dc58e6b097c54", 0x5e}, {&(0x7f0000001740)="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", 0x10c}, {&(0x7f00000016c0)="19a7487ed4b46ea2308ca5a1cf1368912f107dc43661f8ea1c0b95a5473ead3751665aa66aa0eeff3b72ed6caa1977c897e73cd3f64b86ec2faeacbd5bb7aac1ed7c", 0x42}, {&(0x7f0000001500)="2653946dbabb5750ca26d12164441215080f", 0x12}, {&(0x7f0000001540)="3771ea2e6c4b7d86fc7d1e7c6ed0ad262dc9252ca74348e7f9d9dd5f046e8a083563eab3ae5a0b67fd28b01505b3f1f45515273f25b9496a6a10d5405c91eff9254b459931e2ccc81d2a9afb123f6ede41ae9f245937377e2ed0c6c088265bee7b667c05000000782ac799300076620ce847efb0cf82933867bfee8f4fe9d84cd7adad27e62a7e2166343fa5ca2b8ca75c4fd34798c97f1a9cd954328a28f3b5d2", 0xa1}], 0x9}, 0x4008850)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001980)={{0x0, 0x5, 0x2, 0x0, 0x9, 0x7, 0x19, 0x56, 0x9, 0x1, 0x0, 0x7, 0x3, 0x8, 0x2}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="08000600"], 0x24}}, 0x4000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98)
write$bt_hci(r12, &(0x7f0000000080)={0x1, @read_stored_link_key={{0xc0d, 0x7}, {@none, 0x4}}}, 0xb)
write(r10, 0x0, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0xff45, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r5, 0x511, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x101, 0x1c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}}, 0x20040010)

860.112917ms ago: executing program 2 (id=3223):
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="0104000000000000000000000000000007000003"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) (async, rerun: 32)
r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async, rerun: 64)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) (async, rerun: 64)
r1 = socket$tipc(0x1e, 0x2, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)=ANY=[@ANYBLOB="14000000010205"], 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="a7", @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r10) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r11}, 0x18)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x2c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x101}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'dummy0\x00', <r13=>0x0}) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000010100000000000000000000000007090002007379125a92f53765602c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r13], 0x20}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x10)

842.405943ms ago: executing program 4 (id=3224):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="7e5c15d17c739f926c1f8867661b206b0bf72733a3cd62e18d1cef1bfefe4f3773a74fe0a84af18c1b3914866f06b9d0bb9768d1f0bab1539c6e20bbdac59a60335dd3177758de5ea56ec04beed7b73ec697a7799afc48887b798efab44dff9732cdf270f69a75399c9b43c3c11cc6173de59e263f1a07aeef84803e9f3abd35922b827e69457863993e0b892a6becfc95f70e3f79311eaa31a1156407a8cd5704b02d39a499782c1bc0b87d35c9138a89336154af0cfe5b693632672e42d9", 0xbf}], 0x1, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r0, 0x0)
close(0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

547.25394ms ago: executing program 4 (id=3225):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

498.243343ms ago: executing program 2 (id=3226):
syz_emit_ethernet(0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffff6511b6301900ffff88a8100081"], 0x0) (async)
syz_emit_ethernet(0x19, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ffff6511b6301900ffff88a8100081"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r0=>0x0})
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0003"], 0xac}}, 0x4000)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xce0, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4)

0s ago: executing program 1 (id=3227):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r1) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x657, 0x4) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0xb8ff, 0x2000c000, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ing attributes in process `syz.0.1536'.
[  231.530939][T11766] netlink: 'syz.1.1537': attribute type 23 has an invalid length.
[  231.646702][T11770] netlink: 'syz.1.1541': attribute type 8 has an invalid length.
[  231.847836][T11772] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  231.877581][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'.
[  231.898179][T11782] Unsupported xt match
[  231.898202][T11782] unable to load match
[  231.916109][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1544'.
[  232.161834][T11801] veth1_to_bond: entered allmulticast mode
[  232.185109][T11801] bond_slave_1: entered promiscuous mode
[  232.201885][T11800] bond_slave_1: left promiscuous mode
[  232.208672][T11800] veth1_to_bond: left allmulticast mode
[  232.291347][T11805] netlink: 'syz.0.1550': attribute type 7 has an invalid length.
[  232.315759][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'.
[  232.388167][T11813] netlink: 'syz.2.1551': attribute type 11 has an invalid length.
[  232.451610][T11809] vlan2: entered allmulticast mode
[  232.456792][T11809] veth1: entered allmulticast mode
[  233.061728][T11849] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1563'.
[  233.187051][T11858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1563'.
[  233.196241][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'.
[  233.458367][T11871] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1567'.
[  233.482630][T11871] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  233.546791][T11871] openvswitch: netlink: Message has 8454 unknown bytes.
[  233.723312][T11882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  233.791564][T11881] lo speed is unknown, defaulting to 1000
[  233.808186][T11881] wg1 speed is unknown, defaulting to 1000
[  234.103220][T11901] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.543924][T11938] IPv6: NLM_F_REPLACE set, but no existing node found!
[  234.771085][T11951] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  234.781391][T11951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  235.144426][T11977] bridge_slave_1: left allmulticast mode
[  235.168882][T11977] bridge_slave_1: left promiscuous mode
[  235.178268][T11977] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.194058][T11977] bridge_slave_0: left allmulticast mode
[  235.202445][T11977] bridge_slave_0: left promiscuous mode
[  235.208694][T11977] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.772573][T12016] macvlan0: entered allmulticast mode
[  235.793099][T12016] veth1_vlan: entered allmulticast mode
[  235.804910][T12016] team0: Port device macvlan0 added
[  235.973387][T12032] vlan3: entered allmulticast mode
[  235.978583][T12032] bridge_slave_0: entered allmulticast mode
[  236.079991][T12030] syzkaller0: entered promiscuous mode
[  236.085705][T12030] syzkaller0: entered allmulticast mode
[  236.327102][T12048] lo speed is unknown, defaulting to 1000
[  236.354584][T12058] IPv6: Can't replace route, no match found
[  236.385909][T12048] wg1 speed is unknown, defaulting to 1000
[  236.475128][T12060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  236.674013][T12079] __nla_validate_parse: 12 callbacks suppressed
[  236.674033][T12079] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1626'.
[  236.729376][T12047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.916853][T12094] ieee802154 phy0 wpan0: encryption failed: -22
[  236.967061][T12089] lo speed is unknown, defaulting to 1000
[  237.016548][T12089] wg1 speed is unknown, defaulting to 1000
[  237.475203][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'.
[  237.507729][T12118] lo speed is unknown, defaulting to 1000
[  237.519883][T12118] wg1 speed is unknown, defaulting to 1000
[  237.526979][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'.
[  237.604419][T12108] gtp0: entered promiscuous mode
[  237.624708][T12108] gtp0: entered allmulticast mode
[  237.719102][T12121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1637'.
[  237.794177][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1638'.
[  237.853054][T12124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'.
[  237.876354][T12124] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1637'.
[  237.890476][T12125] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.115534][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'.
[  238.149458][T12133] ip6tnl0: Master is either lo or non-ether device
[  238.421266][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'.
[  238.480769][T12138] lo speed is unknown, defaulting to 1000
[  238.500731][T12138] wg1 speed is unknown, defaulting to 1000
[  238.564734][T12142] netlink: 'syz.3.1642': attribute type 1 has an invalid length.
[  238.884929][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'.
[  239.392883][T12181] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  239.811955][T12213] RDS: rds_bind could not find a transport for ::ffff:172.20.20.61, load rds_tcp or rds_rdma?
[  240.197682][T12240] lo speed is unknown, defaulting to 1000
[  240.295480][T12240] wg1 speed is unknown, defaulting to 1000
[  240.407966][T12250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.446772][T12250] syzkaller0: entered promiscuous mode
[  240.452540][T12250] syzkaller0: entered allmulticast mode
[  240.485890][T12252] netlink: 'syz.1.1672': attribute type 13 has an invalid length.
[  240.534955][T12250] tipc: Resetting bearer <eth:syzkaller0>
[  240.550694][T12252] netlink: 'syz.1.1672': attribute type 17 has an invalid length.
[  240.563365][T12249] tipc: Resetting bearer <eth:syzkaller0>
[  240.666323][T12249] tipc: Disabling bearer <eth:syzkaller0>
[  240.703428][T12252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.740796][T12259] lo speed is unknown, defaulting to 1000
[  240.748508][T12259] wg1 speed is unknown, defaulting to 1000
[  240.901948][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.968332][T12277] siw: device registration error -23
[  241.088468][T12282] 8021q: VLANs not supported on sit0
[  241.217521][T12287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.225138][T12288] syzkaller0: entered promiscuous mode
[  241.231005][T12288] syzkaller0: entered allmulticast mode
[  241.257480][T12287] bridge0: port 1(vlan4) entered blocking state
[  241.264866][T12287] bridge0: port 1(vlan4) entered disabled state
[  241.271485][T12287] vlan4: entered allmulticast mode
[  241.276734][T12287] bridge0: entered allmulticast mode
[  241.285410][T12287] vlan4: left allmulticast mode
[  241.291379][T12287] bridge0: left allmulticast mode
[  241.346410][T12286] tipc: Resetting bearer <eth:syzkaller0>
[  241.383488][T12286] tipc: Disabling bearer <eth:syzkaller0>
[  242.022688][T12315] netlink: 'syz.1.1689': attribute type 3 has an invalid length.
[  242.077565][T12322] __nla_validate_parse: 11 callbacks suppressed
[  242.077585][T12322] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1690'.
[  242.120936][T12322] pim6reg1: entered promiscuous mode
[  242.126293][T12322] pim6reg1: entered allmulticast mode
[  242.384764][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'.
[  242.417096][T12348] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1697'.
[  242.420682][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'.
[  242.439871][T12344] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1696'.
[  242.567909][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'.
[  242.595547][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'.
[  242.835324][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'.
[  242.873962][T12373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1703'.
[  242.906106][T12375] 8021q: VLANs not supported on caif0
[  243.219644][T12389] netlink: 'syz.4.1706': attribute type 1 has an invalid length.
[  243.242302][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'.
[  243.455762][T12389] 8021q: adding VLAN 0 to HW filter on device bond2
[  243.514113][T12390] bond2: (slave gretap2): making interface the new active one
[  243.528100][T12390] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  243.729705][T12410] bond0: (slave bond_slave_0): Releasing backup interface
[  243.753776][T12410] team0: Port device team_slave_0 removed
[  243.764163][T12410] team0: Port device team_slave_1 removed
[  243.781370][T12410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.817220][T12410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.868550][T12410] bond1: (slave batadv1): Releasing backup interface
[  243.910129][T12410] bond4: (slave ip6gretap1): Removing an active aggregator
[  243.920107][T12410] bond4: (slave ip6gretap1): Releasing backup interface
[  243.927231][T12410] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 12:fd:61:99:a2:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  243.955824][T12410] bond4: (slave veth3): Releasing backup interface
[  243.975093][T12410] team0: Port device bridge2 removed
[  243.992683][T12417] team0: Mode changed to "broadcast"
[  243.998560][T12420] vlan0: entered promiscuous mode
[  244.010174][ T5923] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  244.103314][T12424] tipc: Enabled bearer <eth:team0>, priority 0
[  244.105315][T12394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.183898][T12419] lo speed is unknown, defaulting to 1000
[  244.208607][T12419] wg1 speed is unknown, defaulting to 1000
[  244.599062][ T5923] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  244.945799][T12469] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.975952][T12466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.393726][T12491] netlink: 'syz.0.1731': attribute type 10 has an invalid length.
[  245.436470][T12485] lo speed is unknown, defaulting to 1000
[  245.456928][T12491] A link change request failed with some changes committed already. Interface 
0!
 may have been left with an inconsistent configuration, please check.
[  245.533289][T12485] wg1 speed is unknown, defaulting to 1000
[  245.785342][T12508] netlink: 'syz.2.1736': attribute type 4 has an invalid length.
[  246.074926][T12525] batman_adv: batadv0: Adding interface: ip6gretap1
[  246.096274][T12525] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.129275][T12525] batman_adv: batadv0: Interface activated: ip6gretap1
[  246.173926][T12525] netlink: 'syz.2.1740': attribute type 2 has an invalid length.
[  246.193610][T12525] netlink: 'syz.2.1740': attribute type 1 has an invalid length.
[  246.444269][T12547] batman_adv: batadv0: Adding interface: ip6gretap1
[  246.454323][T12547] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.488428][T12547] batman_adv: batadv0: Interface activated: ip6gretap1
[  246.625335][T12555] netlink: 'syz.3.1748': attribute type 21 has an invalid length.
[  246.731601][T12554] lo speed is unknown, defaulting to 1000
[  246.758436][T12563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.776951][T12563] syzkaller0: entered promiscuous mode
[  246.789322][T12563] syzkaller0: entered allmulticast mode
[  246.796582][T12554] wg1 speed is unknown, defaulting to 1000
[  246.837864][T12563] tipc: Resetting bearer <eth:syzkaller0>
[  246.895557][T12562] tipc: Resetting bearer <eth:syzkaller0>
[  246.938979][T12562] tipc: Disabling bearer <eth:syzkaller0>
[  247.268990][T12581] netlink: 'syz.4.1756': attribute type 3 has an invalid length.
[  247.303094][T12581] dvmrp8: left allmulticast mode
[  247.320590][T12585] netlink: 'syz.2.1757': attribute type 1 has an invalid length.
[  247.364236][T12585] __nla_validate_parse: 19 callbacks suppressed
[  247.364257][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'.
[  247.400597][T12590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.406206][T12588] siw: device registration error -23
[  247.517434][T12585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1757'.
[  247.540341][T12588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.844911][T12599] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  248.231520][T12614] lo speed is unknown, defaulting to 1000
[  248.258561][T12614] wg1 speed is unknown, defaulting to 1000
[  248.281855][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'.
[  248.398458][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'.
[  248.409294][T12628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1768'.
[  248.443653][T12620] veth1_vlan (unregistering): left allmulticast mode
[  248.445583][T12629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1769'.
[  248.475635][T12620] team0: Port device macvlan0 removed
[  248.923664][T12651] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1774'.
[  248.934660][T12651] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1774'.
[  248.994973][T12657] netlink: 'syz.3.1776': attribute type 83 has an invalid length.
[  249.009265][T12659] netlink: 'syz.3.1776': attribute type 83 has an invalid length.
[  249.125391][T12663] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1777'.
[  249.149017][T12663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1777'.
[  249.498740][T12685] sctp: [Deprecated]: syz.3.1783 (pid 12685) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.498740][T12685] Use struct sctp_sack_info instead
[  250.453424][T12735] netlink: 'syz.1.1798': attribute type 3 has an invalid length.
[  251.115583][T12758] netlink: 'syz.4.1800': attribute type 13 has an invalid length.
[  251.135404][T12758] netlink: 'syz.4.1800': attribute type 17 has an invalid length.
[  251.277794][T12758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.378952][T12758] lo speed is unknown, defaulting to 1000
[  251.395959][T12758] wg1 speed is unknown, defaulting to 1000
[  251.505553][T12761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.917743][T12789] lo speed is unknown, defaulting to 1000
[  251.927626][T12789] wg1 speed is unknown, defaulting to 1000
[  251.935928][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  251.943672][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  251.951348][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  251.958992][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  251.966603][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  251.974264][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  251.981926][T12786] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  252.617608][T12819] __nla_validate_parse: 137 callbacks suppressed
[  252.617632][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'.
[  252.929933][T12819] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  252.946302][T12819] netlink: 'syz.0.1818': attribute type 2 has an invalid length.
[  253.092297][T12850] netlink: 'syz.1.1827': attribute type 39 has an invalid length.
[  253.155907][T12846] bond0: entered promiscuous mode
[  253.177670][T12846] bond_slave_0: entered promiscuous mode
[  253.194560][T12846] bond_slave_1: entered promiscuous mode
[  253.204257][T12846] batadv0: entered promiscuous mode
[  253.214494][T12846] bond0: left promiscuous mode
[  253.219698][T12846] bond_slave_0: left promiscuous mode
[  253.226434][T12846] bond_slave_1: left promiscuous mode
[  253.233332][T12846] batadv0: left promiscuous mode
[  253.246514][T12852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.255737][T12842] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.271795][T12860] net_ratelimit: 3313 callbacks suppressed
[  253.271814][T12860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.275160][T12853] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  253.378548][T12856] netlink: zone id is out of range
[  253.385733][T12856] netlink: zone id is out of range
[  253.391671][T12856] netlink: zone id is out of range
[  253.397410][T12856] netlink: zone id is out of range
[  253.455463][T12856] netlink: zone id is out of range
[  253.474553][T12856] netlink: zone id is out of range
[  253.480337][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  253.489882][T12856] netlink: zone id is out of range
[  253.509515][T12842] tipc: Disabling bearer <eth:syzkaller0>
[  253.544788][T12856] netlink: zone id is out of range
[  253.618551][T12856] netlink: zone id is out of range
[  253.650664][T12866] vlan2: entered allmulticast mode
[  253.655856][T12866] veth1: entered allmulticast mode
[  253.711737][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'.
[  253.739358][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1832'.
[  253.848466][T12885] sctp: [Deprecated]: syz.2.1834 (pid 12885) Use of struct sctp_assoc_value in delayed_ack socket option.
[  253.848466][T12885] Use struct sctp_sack_info instead
[  254.333730][T12908] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1839'.
[  254.421133][T12914] lo speed is unknown, defaulting to 1000
[  254.439181][T12914] wg1 speed is unknown, defaulting to 1000
[  254.630097][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  254.838310][T12925] 8021q: adding VLAN 0 to HW filter on device bond4
[  254.857530][T12926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.867022][T12921] lo speed is unknown, defaulting to 1000
[  255.007559][T12938] netlink: 'syz.0.1843': attribute type 1 has an invalid length.
[  255.034622][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'.
[  255.057017][T12921] wg1 speed is unknown, defaulting to 1000
[  255.063574][T12931] lo speed is unknown, defaulting to 1000
[  255.172551][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'.
[  255.198949][T12945] netlink: 'syz.2.1847': attribute type 1 has an invalid length.
[  255.306095][T12937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1846'.
[  255.535375][T12950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1848'.
[  255.545811][T12931] wg1 speed is unknown, defaulting to 1000
[  255.854931][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.441503][T12979] vlan0: entered promiscuous mode
[  256.487260][T12983] netlink: 'syz.3.1857': attribute type 32 has an invalid length.
[  256.536972][T12983] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  256.902127][T12998] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  257.442836][T13029] netlink: 'syz.4.1871': attribute type 58 has an invalid length.
[  257.681337][T13040] IPVS: set_ctl: invalid protocol: 103 172.20.20.42:20003
[  257.695769][T13038] __nla_validate_parse: 8 callbacks suppressed
[  257.695789][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'.
[  257.704966][T13041] IPVS: set_ctl: invalid protocol: 103 172.20.20.42:20003
[  257.928013][T13055] lo speed is unknown, defaulting to 1000
[  257.945778][T13055] wg1 speed is unknown, defaulting to 1000
[  258.354627][T13078] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1883'.
[  258.450945][T13083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1883'.
[  258.863912][T13101] xt_socket: unknown flags 0x50
[  258.882080][T13104] netlink: 'syz.0.1893': attribute type 1 has an invalid length.
[  258.988674][T13115] netlink: 'syz.0.1894': attribute type 32 has an invalid length.
[  258.997397][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  259.041320][T13115] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  259.164148][T13122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.225054][T13129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1898'.
[  259.252312][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'.
[  259.262466][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'.
[  259.315847][T13137] netlink: 'syz.4.1899': attribute type 1 has an invalid length.
[  259.329928][T13122] syzkaller0: entered promiscuous mode
[  259.335680][T13122] syzkaller0: entered allmulticast mode
[  259.347714][T13135] tipc: Resetting bearer <eth:syzkaller0>
[  259.389758][T13137] 8021q: adding VLAN 0 to HW filter on device bond3
[  259.397558][T13121] tipc: Resetting bearer <eth:syzkaller0>
[  260.333202][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  261.215275][T13121] tipc: Disabling bearer <eth:syzkaller0>
[  261.490768][T13176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1910'.
[  261.509385][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'.
[  261.635426][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'.
[  261.714105][T13188] net_ratelimit: 101 callbacks suppressed
[  261.714126][T13188] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  262.035558][T13199] lo speed is unknown, defaulting to 1000
[  262.065139][T13199] wg1 speed is unknown, defaulting to 1000
[  262.075280][T13212] can: request_module (can-proto-0) failed.
[  262.431072][T13225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.664999][T13246] netlink: 'syz.1.1930': attribute type 10 has an invalid length.
[  262.707106][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.724014][T13246] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  262.859239][T13254] geneve3: entered allmulticast mode
[  262.882824][T13257] netlink: 'syz.2.1933': attribute type 1 has an invalid length.
[  262.924832][T13263] __nla_validate_parse: 4 callbacks suppressed
[  262.924853][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1935'.
[  262.994557][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  263.008101][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1937'.
[  263.228077][T13282] batadv_slave_1: entered promiscuous mode
[  263.304537][T13279] batadv_slave_1: left promiscuous mode
[  263.425437][T13269] netlink: 'syz.3.1938': attribute type 21 has an invalid length.
[  263.467862][T13290] netlink: 'syz.0.1944': attribute type 4 has an invalid length.
[  263.598241][T13295] netlink: 'syz.2.1946': attribute type 10 has an invalid length.
[  263.666543][T13295] 8021q: adding VLAN 0 to HW filter on device team0
[  263.681219][T13295] team0: entered promiscuous mode
[  263.700328][T13295] bond0: (slave team0): Enslaving as an active interface with an up link
[  263.965923][T13310] netlink: 'syz.3.1950': attribute type 1 has an invalid length.
[  264.377022][T13317] netlink: 'syz.3.1952': attribute type 2 has an invalid length.
[  264.558392][T13331] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1957'.
[  264.621463][T13329] lo speed is unknown, defaulting to 1000
[  264.637038][T13329] wg1 speed is unknown, defaulting to 1000
[  264.846735][T13352] netlink: 'syz.2.1960': attribute type 6 has an invalid length.
[  264.886479][T13352] bond5: entered promiscuous mode
[  264.895735][T13352] netlink: 'syz.2.1960': attribute type 5 has an invalid length.
[  264.903757][T13352] netlink: 'syz.2.1960': attribute type 7 has an invalid length.
[  264.922805][T13352] : entered promiscuous mode
[  265.105425][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  265.312271][T13370] lo: entered allmulticast mode
[  265.328034][T13370] lo: left allmulticast mode
[  265.766675][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'.
[  265.995025][T13411] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1976'.
[  266.243073][T13421] 8021q: adding VLAN 0 to HW filter on device bond5
[  266.322912][T13424] bond5: (slave gretap1): making interface the new active one
[  266.339627][T13424] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  266.391637][T13429] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1981'.
[  266.401943][T13429] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1981'.
[  266.462184][T13429] rdma_rxe: rxe_newlink: failed to add lo
[  266.493780][T13434] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1983'.
[  267.063478][T13467] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  268.369127][T13518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.499027][T13523] validate_nla: 4 callbacks suppressed
[  268.499049][T13523] netlink: 'syz.0.2009': attribute type 1 has an invalid length.
[  268.895621][T13541] nft_compat: unsupported protocol 5
[  269.123429][T13563] __nla_validate_parse: 3 callbacks suppressed
[  269.123447][T13563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2021'.
[  269.213677][T13566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.429820][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'.
[  269.550629][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2026'.
[  269.560537][T13582] openvswitch: netlink: Flow actions attr not present in new flow.
[  269.711513][T13588] lo speed is unknown, defaulting to 1000
[  269.724380][T13588] wg1 speed is unknown, defaulting to 1000
[  270.054494][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'.
[  270.327890][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.341410][T13623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.374793][T13621] : entered promiscuous mode
[  270.380859][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.390652][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.406927][T13623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.427068][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.438192][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.448293][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.467352][T13623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.488295][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.505867][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.520492][T13621] netlink: 'syz.1.2039': attribute type 2 has an invalid length.
[  270.536800][T13623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.655637][ T7006] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.719766][ T7006] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.736535][ T7006] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.761473][ T7006] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.072196][T13646] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2050'.
[  271.424976][T13664] IPv6: sit3: Disabled Multicast RS
[  271.468705][T13673] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2055'.
[  272.324243][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'.
[  272.486658][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'.
[  272.562194][T13735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2074'.
[  272.791031][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'.
[  272.925307][T13767] C: renamed from team_slave_0
[  272.933955][T13767] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  273.126467][T13777] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  273.267285][T13787] ip6gre1: entered allmulticast mode
[  273.538138][T13806] validate_nla: 58 callbacks suppressed
[  273.538158][T13806] netlink: 'syz.0.2090': attribute type 9 has an invalid length.
[  273.556651][T13806] netlink: 'syz.0.2090': attribute type 6 has an invalid length.
[  274.063618][T13816] netlink: 'syz.4.2095': attribute type 13 has an invalid length.
[  274.089936][T13816] netlink: 'syz.4.2095': attribute type 17 has an invalid length.
[  274.128584][T13816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.283665][T13816] lo speed is unknown, defaulting to 1000
[  274.303803][T13816] wg1 speed is unknown, defaulting to 1000
[  274.420661][T13829] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  274.450943][T13829] __nla_validate_parse: 7 callbacks suppressed
[  274.450966][T13829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'.
[  274.608055][T13841] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  274.889139][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2102'.
[  275.258550][T13839] lo speed is unknown, defaulting to 1000
[  275.270614][T13839] wg1 speed is unknown, defaulting to 1000
[  275.404712][T13857] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2103'.
[  275.577468][T13866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2107'.
[  275.717588][T13873] netlink: 'syz.1.2109': attribute type 8 has an invalid length.
[  275.726842][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'.
[  275.938187][T13886] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.994342][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2114'.
[  276.017271][T13887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2114'.
[  276.061023][T13887] bond6: entered promiscuous mode
[  276.061075][T13892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2115'.
[  276.066236][T13887] bond6: entered allmulticast mode
[  276.081134][T13887] 8021q: adding VLAN 0 to HW filter on device bond6
[  276.144243][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'.
[  276.155784][T13894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'.
[  276.203925][T13896] netlink: 'syz.1.2116': attribute type 21 has an invalid length.
[  276.214767][T13896] netlink: 'syz.1.2116': attribute type 4 has an invalid length.
[  276.225127][T13896] netlink: 'syz.1.2116': attribute type 5 has an invalid length.
[  276.238338][T13896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.347298][T13905] tun0: tun_chr_ioctl cmd 1074025672
[  276.374735][T13905] tun0: ignored: set checksum disabled
[  277.435554][T13940] pim6reg1: entered promiscuous mode
[  277.441120][T13940] pim6reg1: entered allmulticast mode
[  278.256159][T13972] lo speed is unknown, defaulting to 1000
[  278.307547][T13972] wg1 speed is unknown, defaulting to 1000
[  278.623081][T13976] netlink: zone id is out of range
[  278.628533][T13976] netlink: zone id is out of range
[  278.635567][T13976] netlink: zone id is out of range
[  278.672962][T13976] netlink: zone id is out of range
[  278.705979][T13976] netlink: zone id is out of range
[  278.729026][T13976] netlink: zone id is out of range
[  278.734880][T13976] netlink: zone id is out of range
[  278.818425][T13976] netlink: zone id is out of range
[  278.856042][T13976] netlink: zone id is out of range
[  278.891029][T13976] netlink: zone id is out of range
[  278.908236][T13988] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  278.925814][T13990] IPVS: length: 56 != 24
[  279.105990][T13997] syzkaller0: entered promiscuous mode
[  279.111678][T13997] syzkaller0: entered allmulticast mode
[  279.295935][T14005] lo speed is unknown, defaulting to 1000
[  279.321302][T14005] wg1 speed is unknown, defaulting to 1000
[  279.483028][T14008] syzkaller0: entered promiscuous mode
[  279.491242][T14008] syzkaller0: entered allmulticast mode
[  279.893215][T14021] __nla_validate_parse: 12 callbacks suppressed
[  279.893237][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'.
[  280.043339][T14005] netlink: 'syz.0.2150': attribute type 13 has an invalid length.
[  280.075406][T14005] netlink: 'syz.0.2150': attribute type 17 has an invalid length.
[  280.570547][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2160'.
[  280.665536][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2160'.
[  280.830556][T14034] lo speed is unknown, defaulting to 1000
[  280.838197][T14034] wg1 speed is unknown, defaulting to 1000
[  280.907238][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'.
[  280.971141][T14057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2166'.
[  281.031871][T14057] hsr_slave_0: left promiscuous mode
[  281.038140][T14057] hsr_slave_1: left promiscuous mode
[  281.313786][T14071] netlink: 'syz.1.2168': attribute type 10 has an invalid length.
[  281.582488][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2171'.
[  281.858276][T14090] netlink: 'syz.0.2173': attribute type 12 has an invalid length.
[  281.883496][T14096] netlink: 'syz.0.2173': attribute type 12 has an invalid length.
[  281.959317][T14099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2174'.
[  281.968420][T14099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'.
[  281.977731][T14099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2174'.
[  282.431334][T14122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2182'.
[  282.984338][T14148] netlink: 'syz.3.2189': attribute type 1 has an invalid length.
[  283.189831][T14157] bond6: (slave veth3): Enslaving as an active interface with a down link
[  283.420298][T14172] : entered promiscuous mode
[  283.533723][T14179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.677303][T14180] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.392400][T14201] block nbd2: NBD_DISCONNECT
[  284.397099][T14201] block nbd2: Send disconnect failed -32
[  284.404062][T14201] block nbd2: shutting down sockets
[  285.144182][T14205] tipc: Resetting bearer <eth:team0>
[  285.241182][T14205] vlan0: left promiscuous mode
[  285.306900][T14205] bond3: left promiscuous mode
[  285.318898][T14205] bond3: left allmulticast mode
[  285.332953][T14205] tipc: Resetting bearer <eth:syzkaller0>
[  285.350754][T14205] syzkaller0: left promiscuous mode
[  285.356176][T14205] syzkaller0: left allmulticast mode
[  285.378216][T14205] veth3: left promiscuous mode
[  285.405692][T14205] bridge2: left promiscuous mode
[  285.419749][T14205] bridge2: left allmulticast mode
[  285.455160][T14205] geneve2: left allmulticast mode
[  285.515794][T14205] vlan2: left allmulticast mode
[  285.535870][T14205] veth1: left allmulticast mode
[  285.570427][   T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.583813][   T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  285.596066][   T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.607251][T14239] netlink: 'syz.4.2213': attribute type 1 has an invalid length.
[  285.617217][   T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  285.627764][   T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.636788][   T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  285.728564][   T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  285.739013][   T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  285.755392][T14235] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  285.766053][T14235] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  285.779305][T14235] bond4: (slave vti0): making interface the new active one
[  285.787617][T14235] bond4: (slave vti0): Enslaving as an active interface with an up link
[  285.832797][T14248] netlink: 'syz.2.2217': attribute type 13 has an invalid length.
[  286.453507][T14281] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  286.466193][T14281] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  287.764625][T14248] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  287.892321][ T7198] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.932172][ T7198] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  288.040874][ T7198] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.065135][ T7198] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  288.103199][ T7198] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.124345][ T7198] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  288.145645][ T7198] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.155148][ T7198] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  288.242679][T14321] __nla_validate_parse: 9 callbacks suppressed
[  288.242699][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'.
[  288.298200][T14325] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2231'.
[  288.665111][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'.
[  288.708536][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'.
[  288.747346][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'.
[  288.810406][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2236'.
[  289.084129][T14365] netlink: 'syz.2.2242': attribute type 1 has an invalid length.
[  289.146077][T14368] netlink: 'syz.0.2243': attribute type 12 has an invalid length.
[  289.154360][T14368] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2243'.
[  289.224549][T14368] pim6reg: entered allmulticast mode
[  289.285726][T14365] 8021q: adding VLAN 0 to HW filter on device bond7
[  289.311807][T14371] bond7: entered promiscuous mode
[  289.347845][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'.
[  289.348658][T14370] syz_tun: entered allmulticast mode
[  289.389214][T14367] pim6reg: left allmulticast mode
[  289.391126][T14383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2246'.
[  289.451596][T14370] siw: device registration error -23
[  289.489958][T14369] syz_tun: left allmulticast mode
[  289.501946][T14380] netlink: 'syz.3.2247': attribute type 1 has an invalid length.
[  289.594988][T14380] netlink: 'syz.3.2247': attribute type 1 has an invalid length.
[  289.711832][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'.
[  289.716868][T14394] lo speed is unknown, defaulting to 1000
[  289.736623][T14394] wg1 speed is unknown, defaulting to 1000
[  289.899593][T14404] net_ratelimit: 9 callbacks suppressed
[  289.899612][T14404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.494204][T14427] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  290.652246][T14434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  290.963258][T14446] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  291.655024][T14484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.942022][T14481] lo speed is unknown, defaulting to 1000
[  291.949584][T14484] tipc: Disabling bearer <eth:syzkaller0>
[  291.998435][T14481] wg1 speed is unknown, defaulting to 1000
[  292.164922][T14512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  292.254615][T14512] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  292.409519][T14528] ieee802154 phy0 wpan0: encryption failed: -126
[  292.917806][T14558] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  293.705038][T14595] netlink: 'syz.2.2305': attribute type 1 has an invalid length.
[  293.722357][T14595] netlink: 'syz.2.2305': attribute type 4 has an invalid length.
[  293.731282][T14595] __nla_validate_parse: 8 callbacks suppressed
[  293.731300][T14595] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2305'.
[  293.759342][T14595] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2305'.
[  293.911696][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2308'.
[  293.923929][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2308'.
[  293.988136][T14606] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  294.100325][T14608] lo speed is unknown, defaulting to 1000
[  294.108843][T14608] wg1 speed is unknown, defaulting to 1000
[  294.126090][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'.
[  294.158324][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'.
[  294.421910][T14632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2317'.
[  294.435633][T14630] bridge0: port 1(gretap0) entered blocking state
[  294.442702][T14630] bridge0: port 1(gretap0) entered disabled state
[  294.450748][T14630] gretap0: entered allmulticast mode
[  294.461920][T14630] gretap0: entered promiscuous mode
[  294.591276][   T30] audit: type=1800 audit(1755407809.366:6): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2318" name=CB dev="tmpfs" ino=2321 res=0 errno=0
[  294.629075][T14608] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2309'.
[  295.077199][T14655] vti0: entered promiscuous mode
[  295.194054][T14662] 8021q: adding VLAN 0 to HW filter on device bond7
[  295.324017][T14670] ip6tnl4: entered promiscuous mode
[  295.354050][T14670] ip6tnl4: entered allmulticast mode
[  295.406856][T14676] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2327'.
[  295.983187][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'.
[  297.113606][T14731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.143947][T14731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.400911][T14731] ip6tnl3: left promiscuous mode
[  297.406179][T14731] ip6tnl3: left allmulticast mode
[  297.422051][T14731] geneve2: left promiscuous mode
[  297.432095][T14731] vlan2: left allmulticast mode
[  297.437315][T14731] erspan0: left allmulticast mode
[  297.443439][T14731] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  297.450955][T14731] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  297.528597][T14731] ip6gre1: left allmulticast mode
[  297.551720][T14731] vti0: left promiscuous mode
[  297.589184][    T9] wg1 speed is unknown, defaulting to 1000
[  297.595095][    T9] syz0: Port: 1 Link DOWN
[  297.602989][ T1148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.629922][ T1148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.668493][ T1148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.711507][ T1148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.335111][T14800] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.490595][T14800] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.646586][T14819] af_packet: tpacket_rcv: packet too big, clamped from 924 to 4294967272. macoff=96
[  298.671983][T14800] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.794265][T14800] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.974447][T14832] pim6reg1: entered promiscuous mode
[  299.023878][T14832] pim6reg1: entered allmulticast mode
[  299.063357][T14834] __nla_validate_parse: 8 callbacks suppressed
[  299.063377][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  299.137495][T14834] C (unregistering): left promiscuous mode
[  299.145718][T14834] team0: Port device C removed
[  299.158667][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.176938][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.253366][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.270510][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.446806][   T30] audit: type=1800 audit(1755407814.226:7): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2364" name="memory.events" dev="tmpfs" ino=2669 res=0 errno=0
[  299.549593][T14848] Bluetooth: MGMT ver 1.23
[  299.580436][T14848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  299.728435][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'.
[  300.033102][T14873] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2373'.
[  300.050495][T14873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  300.101694][T14878] netlink: 'syz.1.2375': attribute type 23 has an invalid length.
[  300.107099][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'.
[  300.112260][T14876] lo speed is unknown, defaulting to 1000
[  300.126470][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'.
[  300.152425][T14882] IPv6: addrconf: prefix option has invalid lifetime
[  300.176905][T14876] wg1 speed is unknown, defaulting to 1000
[  300.217887][T14881] netlink: 'syz.4.2377': attribute type 10 has an invalid length.
[  300.226144][T14881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2377'.
[  300.250229][T14881] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  300.460270][T14893] tun0: tun_chr_ioctl cmd 2148553947
[  300.765510][T14914] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2384'.
[  300.909541][T14921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.927206][T14921] syzkaller0: entered promiscuous mode
[  300.942275][T14921] syzkaller0: entered allmulticast mode
[  300.957787][T14923] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2386'.
[  300.997195][T14921] tipc: Resetting bearer <eth:syzkaller0>
[  301.021311][T14920] tipc: Resetting bearer <eth:syzkaller0>
[  301.041706][T14926] nbd: must specify at least one socket
[  301.053688][T14920] tipc: Disabling bearer <eth:syzkaller0>
[  301.188955][T14934] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  301.317663][T14941] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  301.335972][T14941] macsec0: entered promiscuous mode
[  301.346036][T14941] macsec0: left allmulticast mode
[  301.357194][T14941] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  301.550412][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  301.720495][T14974] netlink: 'syz.1.2402': attribute type 1 has an invalid length.
[  301.837652][T14974] bond6: (slave gretap2): making interface the new active one
[  301.884310][T14974] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  301.893513][T14981] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2403'.
[  301.994648][T14985] netlink: 'syz.2.2404': attribute type 8 has an invalid length.
[  302.005571][T14987] netlink: 'syz.4.2405': attribute type 12 has an invalid length.
[  302.293044][T15003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  302.300458][T15003] IPv6: NLM_F_CREATE should be set when creating new route
[  302.336284][T15003] netlink: 'syz.0.2410': attribute type 1 has an invalid length.
[  302.448721][T15007] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.459791][T15007] syzkaller0: entered promiscuous mode
[  302.472661][T15007] syzkaller0: entered allmulticast mode
[  302.632920][T15022] netlink: 'syz.1.2416': attribute type 21 has an invalid length.
[  303.164790][T15047] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  303.449554][T15058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.795191][T15129] netlink: 'syz.3.2446': attribute type 4 has an invalid length.
[  304.854013][T14228] lo speed is unknown, defaulting to 1000
[  304.868797][T14228] s�z1: Port: 1 Link DOWN
[  304.896650][T15129] netlink: 'syz.3.2446': attribute type 4 has an invalid length.
[  304.940618][T14228] lo speed is unknown, defaulting to 1000
[  304.954327][T14228] s�z1: Port: 1 Link ACTIVE
[  305.000323][T15139] netlink: 'syz.2.2449': attribute type 13 has an invalid length.
[  305.012869][T15141] IPVS: length: 209 != 24
[  305.042854][T15143] __nla_validate_parse: 13 callbacks suppressed
[  305.042877][T15143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2451'.
[  305.158179][T15138] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.168324][T15138] 8021q: adding VLAN 0 to HW filter on device team0
[  305.207284][T15151] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2453'.
[  305.365958][T15138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.395133][T15139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.779449][T15178] ieee802154 phy0 wpan0: encryption failed: -22
[  305.794120][T15177] lo speed is unknown, defaulting to 1000
[  305.801665][T15178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2459'.
[  305.815269][T15177] wg1 speed is unknown, defaulting to 1000
[  305.826809][T15180] validate_nla: 3 callbacks suppressed
[  305.826828][T15180] netlink: 'syz.1.2460': attribute type 2 has an invalid length.
[  305.876047][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'.
[  306.525548][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'.
[  306.645701][T15230] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  306.656789][T15230] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  306.664020][T15231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2472'.
[  306.738431][T15236] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  306.892682][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'.
[  307.037622][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'.
[  307.448919][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.535045][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'.
[  307.710545][T15302] sctp: [Deprecated]: syz.3.2492 (pid 15302) Use of int in maxseg socket option.
[  307.710545][T15302] Use struct sctp_assoc_value instead
[  307.915161][T15310] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.980194][T15312] lo speed is unknown, defaulting to 1000
[  308.012280][T15312] wg1 speed is unknown, defaulting to 1000
[  308.283298][T15322] lo speed is unknown, defaulting to 1000
[  308.304717][T15322] wg1 speed is unknown, defaulting to 1000
[  308.488796][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.691892][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'.
[  308.828636][T15352] pim6reg: entered allmulticast mode
[  308.870991][T15353] pim6reg: left allmulticast mode
[  308.876435][T15353] gretap0: left allmulticast mode
[  308.935453][T15357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.014741][T15357] tipc: Resetting bearer <eth:syzkaller0>
[  309.034122][T15356] tipc: Disabling bearer <eth:syzkaller0>
[  309.141872][T15377] tipc: Resetting bearer <eth:syzkaller0>
[  309.234891][T15377] tipc: Resetting bearer <eth:syzkaller0>
[  309.336514][T15381] IPv6: sit1: Disabled Multicast RS
[  309.918496][T15430] Bluetooth: MGMT ver 1.23
[  309.926904][T15429] lo speed is unknown, defaulting to 1000
[  309.934887][T15429] wg1 speed is unknown, defaulting to 1000
[  310.637917][T15460] __nla_validate_parse: 6 callbacks suppressed
[  310.637939][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'.
[  310.732254][T15466] pim6reg: entered allmulticast mode
[  310.815903][T15466] pim6reg: left allmulticast mode
[  311.151578][T15493] tipc: New replicast peer: 255.255.255.255
[  311.174590][T15493] tipc: Enabled bearer <udp:syz2>, priority 10
[  311.542499][T15508] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  312.004375][T15546] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  312.027449][T15547] bond0: option mode: unable to set because the bond device is up
[  312.240545][T15567] IPVS: length: 209 != 24
[  312.255572][T15564] netlink: 'syz.1.2562': attribute type 13 has an invalid length.
[  312.472764][T15572] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  312.541575][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'.
[  312.570018][T15579] nbd: illegal input index 1393229824
[  312.577044][T15579] block nbd0: NBD_DISCONNECT
[  312.581879][T15579] block nbd0: Send disconnect failed -32
[  312.587547][T15579] block nbd0: shutting down sockets
[  312.652851][T15572] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  312.685054][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'.
[  312.801097][T15572] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  312.900978][T15600] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2573'.
[  312.924914][T15603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'.
[  312.939879][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2574'.
[  312.949983][T15603] openvswitch: netlink: Flow key attr not present in new flow.
[  312.972736][T15572] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  312.997732][T15600] batadv0: entered promiscuous mode
[  313.007254][T15600] batadv0: entered allmulticast mode
[  313.084589][T15614] vlan0: entered promiscuous mode
[  313.122867][T15617] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2573'.
[  313.134964][T15610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.179587][T15608] netlink: 'syz.0.2577': attribute type 1 has an invalid length.
[  313.191959][ T7191] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  313.203235][T15608] nbd: error processing sock list
[  313.226711][T15608] block nbd0: shutting down sockets
[  313.252813][ T7197] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  313.306701][ T7191] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  313.373694][T15622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2579'.
[  313.407118][ T7200] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  313.408324][T15626] IPv6: Can't replace route, no match found
[  313.524997][T15630] netlink: 'syz.2.2582': attribute type 2 has an invalid length.
[  313.549307][T15622] lo speed is unknown, defaulting to 1000
[  313.576437][T15622] wg1 speed is unknown, defaulting to 1000
[  313.764813][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2585'.
[  313.808349][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'.
[  314.012566][T15642] 8021q: adding VLAN 0 to HW filter on device bond8
[  314.032610][T15637] lo speed is unknown, defaulting to 1000
[  314.041026][T15637] wg1 speed is unknown, defaulting to 1000
[  314.462916][T15658] 8021q: adding VLAN 0 to HW filter on device bond7
[  314.483425][T15664] lo speed is unknown, defaulting to 1000
[  314.491631][T15664] wg1 speed is unknown, defaulting to 1000
[  314.613897][T15658] 8021q: adding VLAN 0 to HW filter on device bond7
[  314.633781][T15658] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  314.654341][T15658] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  315.051654][T15698] nbd: must specify an index to disconnect
[  315.057749][T15690] can: request_module (can-proto-5) failed.
[  315.784123][T15731] lo speed is unknown, defaulting to 1000
[  315.860919][T15731] wg1 speed is unknown, defaulting to 1000
[  315.991631][T15745] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  316.031293][T15750] netlink: 'syz.2.2613': attribute type 13 has an invalid length.
[  316.949746][ T7193] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  316.988289][ T7193] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  317.006531][ T7193] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  317.133260][ T7193] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  317.157435][T15768] lo speed is unknown, defaulting to 1000
[  317.295748][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.321709][T15779] veth1_to_team: entered allmulticast mode
[  317.390356][T15780] syz_tun: entered allmulticast mode
[  317.400522][T15780] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  317.417271][T15782] __nla_validate_parse: 6 callbacks suppressed
[  317.417291][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'.
[  317.518911][T15780] lo speed is unknown, defaulting to 1000
[  317.546409][T15780] wg1 speed is unknown, defaulting to 1000
[  317.596834][T15785] batadv1: entered promiscuous mode
[  317.638949][T15795] netlink: 'syz.2.2623': attribute type 10 has an invalid length.
[  318.156288][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2633'.
[  318.671913][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'.
[  318.683269][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'.
[  319.415449][T15887] netlink: 'syz.1.2657': attribute type 1 has an invalid length.
[  319.423478][T15885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2656'.
[  319.427100][T15885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2656'.
[  319.476348][T15887] bond8: (slave bridge6): making interface the new active one
[  319.485458][T15887] bond8: (slave bridge6): Enslaving as an active interface with an up link
[  319.762357][T15909] netlink: 'syz.1.2663': attribute type 3 has an invalid length.
[  319.771294][T15909] netlink: 'syz.1.2663': attribute type 3 has an invalid length.
[  319.781990][T15914] netlink: 'syz.0.2662': attribute type 1 has an invalid length.
[  319.879265][T15914] 8021q: adding VLAN 0 to HW filter on device bond9
[  319.921893][T15926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2666'.
[  319.959867][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'.
[  319.983453][T15917] veth11: entered promiscuous mode
[  320.002311][T15917] bond9: (slave veth11): Enslaving as an active interface with a down link
[  320.038689][T15927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2665'.
[  320.100767][T15926] bond7: entered promiscuous mode
[  320.106811][T15926] bond7: entered allmulticast mode
[  320.113148][T15926] 8021q: adding VLAN 0 to HW filter on device bond7
[  320.198418][T15926] lo speed is unknown, defaulting to 1000
[  320.208548][T15926] wg1 speed is unknown, defaulting to 1000
[  320.325273][T15943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2670'.
[  321.039197][T15986] netlink: 'syz.1.2682': attribute type 1 has an invalid length.
[  321.057972][T15986] netlink: 'syz.1.2682': attribute type 2 has an invalid length.
[  321.238415][T15997] veth0_virt_wifi: entered promiscuous mode
[  321.268697][T15997] veth0_virt_wifi: entered allmulticast mode
[  321.593756][T16017] pim6reg: entered allmulticast mode
[  321.614422][T16016] pim6reg: left allmulticast mode
[  321.846356][T16025] netlink: 'syz.3.2691': attribute type 2 has an invalid length.
[  322.325466][T16030] syzkaller0: entered promiscuous mode
[  322.350057][T16043] netlink: 'syz.1.2695': attribute type 2 has an invalid length.
[  322.370747][T16030] syzkaller0: entered allmulticast mode
[  322.575659][T16053] __nla_validate_parse: 8 callbacks suppressed
[  322.575679][T16053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2697'.
[  324.184540][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'.
[  324.214430][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'.
[  324.333029][T16079] team0: entered promiscuous mode
[  324.349928][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'.
[  324.462317][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2708'.
[  324.482799][T16079] team0 (unregistering): left promiscuous mode
[  324.698104][T16106] veth0_to_bond: entered allmulticast mode
[  324.795487][T16111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  324.824806][T16114] bond1: (slave bridge6): Releasing active interface
[  324.866746][T16114] bond2: (slave gretap2): Releasing active interface
[  324.904063][T16114] bond4: (slave vti0): Releasing backup interface
[  324.997743][T16121] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2718'.
[  325.086682][T16127] nbd: must specify at least one socket
[  325.133831][T16127] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2720'.
[  325.163255][T16127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2720'.
[  325.181648][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'.
[  325.191786][T16128] lo speed is unknown, defaulting to 1000
[  325.225193][T16127] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.2720'.
[  325.232701][T16128] wg1 speed is unknown, defaulting to 1000
[  325.667360][T16155] netlink: 'syz.2.2728': attribute type 1 has an invalid length.
[  325.982113][T16173] netlink: 'syz.3.2734': attribute type 2 has an invalid length.
[  326.073084][T16173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  326.137596][T16179] lo: entered allmulticast mode
[  326.148127][T16179] lo: left allmulticast mode
[  326.268199][T16188] netem: invalid attributes len -16
[  326.279166][T16188] netem: change failed
[  326.320817][T16188] netlink: 'syz.0.2737': attribute type 1 has an invalid length.
[  326.609318][T16200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.619620][T16198] netlink: 'syz.2.2742': attribute type 10 has an invalid length.
[  326.648205][T16198] team0: Device bond0 is already an upper device of the team interface
[  326.724853][T16203] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.888961][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.897522][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.931486][   T30] audit: type=1107 audit(1755407841.716:8): pid=16213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%ì4´Ö›�Í�¥0�bûÕÖÁrèÐb8ºëŸð[ÎqéÖ†“–Z	èˆÄ¬²”õg±ûÖŠ"9º]ò£œ�¬]ÏMÞú1ÊÜð³¦ò}ݵ{æ>>5�\¸y8”ÌTaó^Ó^Ù¤´Ûµ3�
nú×ï-L^¡«®EzùÚÕp'
[  327.158589][T16224] lo speed is unknown, defaulting to 1000
[  327.251075][T16224] wg1 speed is unknown, defaulting to 1000
[  327.928825][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.937066][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.055849][T16255] netlink: 'syz.0.2757': attribute type 10 has an invalid length.
[  328.968885][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.008855][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.017070][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.108834][T16254] 8021q: VLANs not supported on sit0
[  330.318038][T16275] __nla_validate_parse: 9 callbacks suppressed
[  330.318058][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'.
[  330.327957][T16269] netlink: zone id is out of range
[  330.346231][T16269] netlink: zone id is out of range
[  330.446811][T16278] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2765'.
[  330.549387][T16285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2766'.
[  330.935991][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2771'.
[  331.034911][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'.
[  331.231667][T16323] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2777'.
[  332.093238][    C0] net_ratelimit: 107 callbacks suppressed
[  332.093264][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.107268][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.795039][ T7196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.839081][ T7193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.880285][ T7193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.919335][ T7193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.054488][T16335] lo speed is unknown, defaulting to 1000
[  333.079924][T16339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.097127][T16335] wg1 speed is unknown, defaulting to 1000
[  333.128888][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.137129][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.376243][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'.
[  333.761151][T16369] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2791'.
[  333.857966][T16379] lo speed is unknown, defaulting to 1000
[  333.869858][T16379] lo speed is unknown, defaulting to 1000
[  333.879175][T16379] lo speed is unknown, defaulting to 1000
[  333.949791][T16379] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  333.971053][T16382] netlink: 'syz.4.2793': attribute type 21 has an invalid length.
[  334.012634][T16379] lo speed is unknown, defaulting to 1000
[  334.031431][T16379] lo speed is unknown, defaulting to 1000
[  334.078113][T16389] veth8: entered promiscuous mode
[  334.088170][T16389] veth8: entered allmulticast mode
[  334.134766][T16379] lo speed is unknown, defaulting to 1000
[  334.156264][T16379] lo speed is unknown, defaulting to 1000
[  334.168844][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.178649][T16379] lo speed is unknown, defaulting to 1000
[  334.387058][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2802'.
[  334.424275][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2802'.
[  334.782186][T16430] netlink: 'syz.0.2812': attribute type 1 has an invalid length.
[  334.938603][T16437] openvswitch: netlink: Flow key attr not present in new flow.
[  334.963404][T16432] bond10: (slave gretap1): making interface the new active one
[  334.983700][T16432] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  335.200379][T16441] team0: Device is already in use.
[  335.208965][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.217178][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.321932][T16443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.426276][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  335.435648][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  335.445201][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  335.454362][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  335.462974][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  336.051999][T16474] __nla_validate_parse: 3 callbacks suppressed
[  336.052022][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'.
[  336.089238][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'.
[  336.181307][T16448] hsr0: left allmulticast mode
[  336.186321][T16448] hsr_slave_0: left allmulticast mode
[  336.239232][T16448] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  336.248815][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.322678][ T5930] lo speed is unknown, defaulting to 1000
[  336.330595][T16455] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2819'.
[  336.331273][ T5930] s�z1: Port: 1 Link DOWN
[  336.344353][T16455] netem: unknown loss type 0
[  336.352062][T16455] netem: change failed
[  336.470264][ T7193] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.482640][   T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.500195][T16480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2824'.
[  336.524253][   T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.556814][   T49] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.582989][T16449] lo speed is unknown, defaulting to 1000
[  336.611204][T16449] wg1 speed is unknown, defaulting to 1000
[  336.638289][T16449] lo speed is unknown, defaulting to 1000
[  336.965879][T16499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2828'.
[  336.990021][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2826'.
[  337.027669][T16502] gtp0: entered promiscuous mode
[  337.065805][T16449] chnl_net:caif_netlink_parms(): no params data found
[  337.277602][T16449] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.288898][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.297221][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.305904][T16449] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.314957][T16449] bridge_slave_0: entered allmulticast mode
[  337.333010][T16449] bridge_slave_0: entered promiscuous mode
[  337.364824][T16449] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.417216][T16449] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.459633][T16449] bridge_slave_1: entered allmulticast mode
[  337.482571][T16449] bridge_slave_1: entered promiscuous mode
[  337.531343][   T51] Bluetooth: hci2: command tx timeout
[  337.827028][T16449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.861979][T16449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.012410][T16449] team0: Port device team_slave_0 added
[  338.034404][T16449] team0: Port device team_slave_1 added
[  338.040941][T16540] netlink: 'syz.3.2835': attribute type 23 has an invalid length.
[  338.081707][T16539] lo speed is unknown, defaulting to 1000
[  338.198963][T16539] wg1 speed is unknown, defaulting to 1000
[  338.328914][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.337183][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.340147][T16539] lo speed is unknown, defaulting to 1000
[  338.348116][T16449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.361203][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2837'.
[  338.363273][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.455395][T16449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.546848][T16449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.561768][T16449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.623563][T16449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.928476][T16449] hsr_slave_0: entered promiscuous mode
[  338.948538][T16449] hsr_slave_1: entered promiscuous mode
[  338.962544][T16449] debugfs: 'hsr0' already exists in 'hsr'
[  338.975607][T16449] Cannot create hsr debugfs directory
[  339.368951][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.609953][   T51] Bluetooth: hci2: command tx timeout
[  340.253723][T16596] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2848'.
[  340.264613][T16449] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  340.277183][T16449] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  340.303375][T16595] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  340.323794][T16449] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  340.398193][ T1148] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.408868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.417034][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.418055][ T1148] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.464156][T16449] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  340.504620][ T1148] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.536387][ T1148] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.902686][T16449] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.980128][T16449] 8021q: adding VLAN 0 to HW filter on device team0
[  341.022158][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.029425][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.194359][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.201656][ T7193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.231463][T16621] netlink: 'syz.3.2854': attribute type 1 has an invalid length.
[  341.376653][T16623] bond8: (slave gretap2): making interface the new active one
[  341.439378][T16623] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  341.449414][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.556918][T16626] lo speed is unknown, defaulting to 1000
[  341.595211][T16626] wg1 speed is unknown, defaulting to 1000
[  341.621005][T16626] lo speed is unknown, defaulting to 1000
[  341.689319][   T51] Bluetooth: hci2: command tx timeout
[  341.866881][T16638] lo speed is unknown, defaulting to 1000
[  341.938505][T16638] wg1 speed is unknown, defaulting to 1000
[  341.978542][T16638] lo speed is unknown, defaulting to 1000
[  342.203817][T16650] netlink: 'syz.4.2860': attribute type 10 has an invalid length.
[  342.315370][T16449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.488980][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.497200][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.546526][T16449] veth0_vlan: entered promiscuous mode
[  342.592971][T16449] veth1_vlan: entered promiscuous mode
[  342.715438][T16449] veth0_macvtap: entered promiscuous mode
[  342.752961][T16449] veth1_macvtap: entered promiscuous mode
[  342.823511][T16449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.869819][T16449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.914084][ T7201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.933060][ T7201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.948510][ T7201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.983701][ T7201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.528915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.537164][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.703182][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.739531][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.779547][   T51] Bluetooth: hci2: command tx timeout
[  343.937784][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.968426][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.112462][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'.
[  344.151860][T16684] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2867'.
[  344.202988][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'.
[  344.434989][T16698] netlink: 'syz.0.2870': attribute type 1 has an invalid length.
[  344.448334][T16698] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2870'.
[  344.568904][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.713518][T16702] macvlan4: entered promiscuous mode
[  344.783485][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'.
[  344.807183][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'.
[  344.851109][T16709] veth0_virt_wifi: renamed from vlan0
[  345.017588][T16714] lo speed is unknown, defaulting to 1000
[  345.061836][T16714] wg1 speed is unknown, defaulting to 1000
[  345.071188][T16714] lo speed is unknown, defaulting to 1000
[  345.178951][T16722] netem: incorrect gi model size
[  345.224919][T16722] netem: change failed
[  345.363558][T16734] netlink: 'syz.1.2880': attribute type 1 has an invalid length.
[  345.394648][T16739] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  345.500504][T16745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.608832][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.617082][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.658278][T16748] lo speed is unknown, defaulting to 1000
[  345.677337][T16748] wg1 speed is unknown, defaulting to 1000
[  345.728148][T16748] lo speed is unknown, defaulting to 1000
[  345.907679][T16762] netlink: 'syz.0.2888': attribute type 4 has an invalid length.
[  346.648862][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.700043][T16777] lo speed is unknown, defaulting to 1000
[  346.726224][T16777] wg1 speed is unknown, defaulting to 1000
[  346.772941][T16777] lo speed is unknown, defaulting to 1000
[  346.784883][T16792] batadv_slave_0: entered promiscuous mode
[  346.817906][T16791] batadv_slave_0: left promiscuous mode
[  346.847668][T16794] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2896'.
[  346.895175][T16794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2896'.
[  346.954121][T16794] rdma_rxe: rxe_newlink: failed to add lo
[  346.990127][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2896'.
[  347.207740][T16811] netlink: 'syz.1.2901': attribute type 15 has an invalid length.
[  347.479809][T16821] netlink: 'syz.3.2905': attribute type 7 has an invalid length.
[  347.688824][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.697075][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.923400][T16840] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.964495][T16843] batadv_slave_1: entered promiscuous mode
[  348.144412][T16855] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2913'.
[  348.158589][T16855] unsupported nlmsg_type 40
[  348.185965][T16857] netlink: 'syz.2.2914': attribute type 2 has an invalid length.
[  348.651004][T16879] lo speed is unknown, defaulting to 1000
[  348.665186][T16887] sit1: entered promiscuous mode
[  348.683223][T16838] batadv_slave_1: left promiscuous mode
[  348.690950][T16879] wg1 speed is unknown, defaulting to 1000
[  348.716215][T16879] lo speed is unknown, defaulting to 1000
[  348.728813][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.737049][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.391248][T16922] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  349.404775][T16918] netlink: 'syz.0.2929': attribute type 1 has an invalid length.
[  349.412574][T16921] __nla_validate_parse: 3 callbacks suppressed
[  349.412598][T16921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'.
[  349.413008][T16918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2929'.
[  349.622022][T16931] netlink: 'syz.1.2932': attribute type 1 has an invalid length.
[  349.768873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.810678][T16935] netlink: 'syz.1.2933': attribute type 1 has an invalid length.
[  350.808848][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.817175][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.955403][T16926] vlan0: entered promiscuous mode
[  351.078441][T16935] 8021q: adding VLAN 0 to HW filter on device bond9
[  351.469013][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2941'.
[  351.560265][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'.
[  351.664135][T16966] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  351.848858][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.860980][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'.
[  351.908906][T16992] openvswitch: netlink: Missing key (keys=40, expected=100)
[  351.970335][T16998] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2950'.
[  352.145240][T17007] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2952'.
[  352.452326][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2956'.
[  352.523950][T17023] netlink: 'syz.4.2958': attribute type 9 has an invalid length.
[  352.727632][T17031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2960'.
[  352.794345][T17032] tipc: Resetting bearer <eth:syzkaller0>
[  352.830032][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2962'.
[  352.888815][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.897072][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.957146][T17036] pim6reg1: entered promiscuous mode
[  352.986521][T17036] pim6reg1: entered allmulticast mode
[  353.112164][T17049] IPVS: set_ctl: invalid protocol: 58 10.1.1.3:20131
[  353.170454][T17042] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  353.178014][T17042] team0: Device macvtap1 is already an upper device of the team interface
[  353.532246][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.550919][T17058] netlink: 'syz.3.2969': attribute type 1 has an invalid length.
[  353.753402][ T5868] syz_tun (unregistering): left promiscuous mode
[  353.796108][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  353.805946][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  353.814423][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  353.825663][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  353.834722][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  353.928840][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.937122][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.252416][T17072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.320200][T17075] syzkaller0: entered promiscuous mode
[  354.325849][T17075] syzkaller0: entered allmulticast mode
[  354.390425][T17083] netlink: 'syz.4.2974': attribute type 4 has an invalid length.
[  354.443314][T17084] netlink: 'syz.4.2974': attribute type 4 has an invalid length.
[  354.634313][T17093] __nla_validate_parse: 3 callbacks suppressed
[  354.634333][T17093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2976'.
[  354.968846][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.051660][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  355.872875][T17068] lo speed is unknown, defaulting to 1000
[  355.897155][T17068] wg1 speed is unknown, defaulting to 1000
[  355.910879][T17068] lo speed is unknown, defaulting to 1000
[  355.938428][ T5871] Bluetooth: hci4: command tx timeout
[  356.008872][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.017112][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.069613][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'.
[  356.286010][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'.
[  356.299705][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'.
[  356.505302][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'.
[  356.606016][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2985'.
[  356.638383][T17068] chnl_net:caif_netlink_parms(): no params data found
[  357.048850][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.090646][T17068] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.092243][T17151] netlink: 'syz.1.2987': attribute type 1 has an invalid length.
[  357.106576][T17068] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.124333][T17068] bridge_slave_0: entered allmulticast mode
[  357.141333][T17068] bridge_slave_0: entered promiscuous mode
[  357.187326][T17068] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.213980][T17068] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.234794][T17068] bridge_slave_1: entered allmulticast mode
[  357.248966][T17068] bridge_slave_1: entered promiscuous mode
[  357.257059][T17134] lo speed is unknown, defaulting to 1000
[  357.343010][T17134] wg1 speed is unknown, defaulting to 1000
[  357.349312][T17068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.367293][T17068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.379741][T17134] lo speed is unknown, defaulting to 1000
[  357.463654][T17068] team0: Port device team_slave_0 added
[  357.494654][T17068] team0: Port device team_slave_1 added
[  357.735309][T17068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.746826][T17068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.778573][T17068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.831971][T17068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.839492][T17068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.866193][T17068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.877966][T17170] lo speed is unknown, defaulting to 1000
[  357.905658][T17170] wg1 speed is unknown, defaulting to 1000
[  357.916235][T17177] smc: net device bond0 applied user defined pnetid SYZ2
[  357.924605][T17177] smc: net device bond0 erased user defined pnetid SYZ2
[  357.934170][T17170] lo speed is unknown, defaulting to 1000
[  357.997395][T17175] lo speed is unknown, defaulting to 1000
[  358.011846][ T5871] Bluetooth: hci4: command tx timeout
[  358.059624][T17175] wg1 speed is unknown, defaulting to 1000
[  358.067029][T17068] hsr_slave_0: entered promiscuous mode
[  358.084946][T17068] hsr_slave_1: entered promiscuous mode
[  358.088865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.092853][T17068] debugfs: 'hsr0' already exists in 'hsr'
[  358.098688][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.114012][T17068] Cannot create hsr debugfs directory
[  358.134091][T17175] lo speed is unknown, defaulting to 1000
[  358.203594][T17184] gretap3: entered promiscuous mode
[  358.209854][T17184] gretap3: entered allmulticast mode
[  358.732956][T17197] netlink: 'syz.2.3002': attribute type 6 has an invalid length.
[  358.983480][T17068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.001326][T17068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.068504][T17213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3007'.
[  359.102357][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3007'.
[  359.128814][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.137031][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.154783][T17216] netlink: 7808 bytes leftover after parsing attributes in process `syz.4.3007'.
[  359.170194][T17213] !
: entered promiscuous mode
[  359.175559][T17213] macvtap1: entered promiscuous mode
[  359.183591][T17213] macvtap1: entered allmulticast mode
[  359.189204][T17213] !
: entered allmulticast mode
[  359.219253][T17068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.239483][T17068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.294850][T17219] syzkaller1: entered promiscuous mode
[  359.311874][T17219] syzkaller1: entered allmulticast mode
[  359.361912][T17222] nbd: must specify at least one socket
[  359.363077][T17068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.398785][T17068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.539424][T17068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.559288][T17068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.849831][T17068] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  359.874363][T17068] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  359.897370][T17068] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  359.935617][T17068] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  360.068374][T17248] smc: net device bond0 applied user defined pnetid SYZ2
[  360.087288][T17248] smc: net device bond0 erased user defined pnetid SYZ2
[  360.094716][T17250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'.
[  360.100543][ T5871] Bluetooth: hci4: command tx timeout
[  360.127824][T17250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'.
[  360.138128][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'.
[  360.147933][T17250] netlink: 'syz.1.3015': attribute type 5 has an invalid length.
[  360.168884][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.201929][T17248] bridge0: port 1(batadv1) entered blocking state
[  360.215164][T17248] bridge0: port 1(batadv1) entered disabled state
[  360.225223][T17248] batadv1: entered allmulticast mode
[  360.268853][T17248] batadv1: entered promiscuous mode
[  360.294985][T17068] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.344135][T17068] 8021q: adding VLAN 0 to HW filter on device team0
[  360.372917][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.380142][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.414557][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.421789][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.508611][T17068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  360.585365][T17255] can: request_module (can-proto-3) failed.
[  360.696221][ T7201] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  360.705979][ T7201] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  360.733023][T17260] lo speed is unknown, defaulting to 1000
[  360.742691][T17260] wg1 speed is unknown, defaulting to 1000
[  360.750611][T17260] lo speed is unknown, defaulting to 1000
[  360.965118][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'.
[  361.208908][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.217180][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.416686][T17068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.596936][T17068] veth0_vlan: entered promiscuous mode
[  361.643890][T17068] veth1_vlan: entered promiscuous mode
[  361.730599][T17068] veth0_macvtap: entered promiscuous mode
[  361.760373][T17068] veth1_macvtap: entered promiscuous mode
[  361.832820][T17068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.872071][T17068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.906285][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'.
[  361.926466][ T7191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.945481][ T7191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.997474][ T7191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.009777][ T7191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.073764][T17316] netlink: 'syz.2.3032': attribute type 2 has an invalid length.
[  362.169196][ T5871] Bluetooth: hci4: command tx timeout
[  362.248948][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.429866][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.437746][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.442237][T17326] netlink: 'syz.3.3034': attribute type 5 has an invalid length.
[  362.517771][ T7197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.546292][ T7197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.802735][T17338] syz_tun: entered allmulticast mode
[  362.822500][T17338] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  363.126930][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.225952][T17350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3040'.
[  363.288934][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.297168][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.316113][T17356] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  363.549501][T17365] netlink: 'syz.2.3045': attribute type 142 has an invalid length.
[  363.620216][T17365] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3045'.
[  363.670539][T17365] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  363.742556][ T7191] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  363.774340][ T7191] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.836187][ T7191] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  363.884848][ T7191] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  363.956162][T17372] lo speed is unknown, defaulting to 1000
[  363.994697][T17372] wg1 speed is unknown, defaulting to 1000
[  364.071272][T17388] sctp: [Deprecated]: syz.0.3050 (pid 17388) Use of int in max_burst socket option.
[  364.071272][T17388] Use struct sctp_assoc_value instead
[  364.087309][ T5866] syz_tun (unregistering): left allmulticast mode
[  364.102582][T17372] lo speed is unknown, defaulting to 1000
[  364.159960][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.171185][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.181757][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.197613][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.206059][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.280792][T17389] lo speed is unknown, defaulting to 1000
[  364.288362][T17389] wg1 speed is unknown, defaulting to 1000
[  364.328844][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.337080][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.347310][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3054'.
[  364.401376][T17389] lo speed is unknown, defaulting to 1000
[  364.406023][T17400] netlink: 'syz.3.3053': attribute type 10 has an invalid length.
[  364.653880][T17410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3055'.
[  364.869139][T17420] netlink: 'syz.4.3058': attribute type 2 has an invalid length.
[  364.964537][T17420] : entered promiscuous mode
[  365.008538][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3059'.
[  365.126283][T17389] chnl_net:caif_netlink_parms(): no params data found
[  365.264389][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'.
[  365.368860][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.380247][T17449] syzkaller0: entered promiscuous mode
[  365.397075][T17449] syzkaller0: entered allmulticast mode
[  365.410365][T17389] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.417612][T17389] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.425333][T17389] bridge_slave_0: entered allmulticast mode
[  365.437978][T17389] bridge_slave_0: entered promiscuous mode
[  365.449749][T17389] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.457171][T17389] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.464605][T17389] bridge_slave_1: entered allmulticast mode
[  365.473164][T17389] bridge_slave_1: entered promiscuous mode
[  365.531430][T17389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.546244][T17389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.732028][T17389] team0: Port device team_slave_0 added
[  365.755406][T17389] team0: Port device team_slave_1 added
[  365.903175][T17389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.914772][T17389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.947174][T17389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.052049][T17389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.071282][T17389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.147623][T17389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  366.249372][ T5871] Bluetooth: hci3: command tx timeout
[  366.402854][T17389] hsr_slave_0: entered promiscuous mode
[  366.408824][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.416993][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.450391][T17389] hsr_slave_1: entered promiscuous mode
[  366.456903][T17389] debugfs: 'hsr0' already exists in 'hsr'
[  366.469633][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3071'.
[  366.479292][T17389] Cannot create hsr debugfs directory
[  366.667965][T17493] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3074'.
[  366.821274][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  366.867125][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3079'.
[  366.880762][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  366.892570][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  366.907509][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  366.964987][T17501] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  367.058601][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'.
[  367.068281][T17509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'.
[  367.236214][T17510] syzkaller0: entered promiscuous mode
[  367.242957][T17510] syzkaller0: entered allmulticast mode
[  367.448809][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.790409][T17534] netlink: 'syz.2.3087': attribute type 7 has an invalid length.
[  368.329230][ T5871] Bluetooth: hci3: command tx timeout
[  368.489369][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.497671][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.209104][T17543] netem: incorrect ge model size
[  369.214504][T17543] netem: change failed
[  369.528813][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.537042][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.607234][T17389] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  369.647711][T17389] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  369.681333][T17389] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  369.708468][T17564] netlink: 'syz.3.3098': attribute type 13 has an invalid length.
[  369.724762][T17389] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  369.748441][T17560] lo speed is unknown, defaulting to 1000
[  369.821761][T17572] Bluetooth: MGMT ver 1.23
[  369.838886][T17560] wg1 speed is unknown, defaulting to 1000
[  369.846709][T17560] lo speed is unknown, defaulting to 1000
[  369.873191][T17574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  370.297386][T17603] netlink: 'syz.4.3106': attribute type 15 has an invalid length.
[  370.359466][T17603] __nla_validate_parse: 6 callbacks suppressed
[  370.359485][T17603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3106'.
[  370.441271][ T5871] Bluetooth: hci3: command tx timeout
[  370.475354][T17612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3108'.
[  370.546938][T17389] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.568922][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.580011][T17389] 8021q: adding VLAN 0 to HW filter on device team0
[  370.631901][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.640155][ T7197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.661617][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.668862][ T7197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.813474][T17618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3109'.
[  370.823260][T17618] netlink: 'syz.2.3109': attribute type 7 has an invalid length.
[  370.838368][T17618] netlink: 'syz.2.3109': attribute type 8 has an invalid length.
[  370.854447][T17618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'.
[  370.886013][T17618] syz_tun: entered promiscuous mode
[  370.895848][T17618] batadv_slave_1: entered promiscuous mode
[  370.909988][T17618] syz_tun: left promiscuous mode
[  370.925876][T17618] batadv_slave_1: left promiscuous mode
[  371.050878][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  371.407865][T17389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.583251][T17389] veth0_vlan: entered promiscuous mode
[  371.608829][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.617020][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.644724][T17389] veth1_vlan: entered promiscuous mode
[  371.783809][T17389] veth0_macvtap: entered promiscuous mode
[  371.818679][T17389] veth1_macvtap: entered promiscuous mode
[  371.846339][T17662] netlink: 'syz.4.3121': attribute type 2 has an invalid length.
[  371.887011][T17662] k›*·]‘: entered promiscuous mode
[  371.917649][T17662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.936208][T17389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.957553][T17389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.975625][T17662] veth0_to_team: entered promiscuous mode
[  371.981848][T17662] veth0_to_team: entered allmulticast mode
[  371.997310][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.036385][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.054632][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.074270][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.227999][T17675] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  372.420914][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.440048][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.489646][ T5871] Bluetooth: hci3: command tx timeout
[  372.550690][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.558568][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.648903][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.817157][T17700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  372.938912][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'.
[  373.021399][T17708] vlan0: entered promiscuous mode
[  373.046830][T17708] gretap0: entered promiscuous mode
[  373.688808][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.697005][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.736761][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.767236][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.782259][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.794972][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.813206][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.921375][T17735] lo speed is unknown, defaulting to 1000
[  373.962782][T17735] wg1 speed is unknown, defaulting to 1000
[  373.986844][T17735] lo speed is unknown, defaulting to 1000
[  374.024905][T17747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3139'.
[  374.138016][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'.
[  374.157138][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'.
[  374.214538][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3141'.
[  374.288206][T17762] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3142'.
[  374.596384][T17735] chnl_net:caif_netlink_parms(): no params data found
[  374.715830][T17782] bridge0: port 3(batadv1) entered blocking state
[  374.728828][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.730541][T17782] bridge0: port 3(batadv1) entered disabled state
[  374.737025][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.782832][T17782] batadv1: entered allmulticast mode
[  374.816389][T17782] batadv1: entered promiscuous mode
[  374.854939][T17785] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  374.951013][T17787] nbd0: detected capacity change from 0 to 127
[  374.959892][   T51] block nbd0: Receive control failed (result -32)
[  375.195190][ T7201] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  375.204811][ T7201] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  375.768929][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.856489][   T51] Bluetooth: hci0: command tx timeout
[  376.589835][ T7202] bond0 (unregistering): Released all slaves
[  376.606515][ T7202] bond1 (unregistering): Released all slaves
[  376.719624][ T7202] bond2 (unregistering): Released all slaves
[  376.810836][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.819057][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.843268][ T7202] bond3 (unregistering): Released all slaves
[  376.858428][ T7202] bond4 (unregistering): Released all slaves
[  376.896860][T17794] __nla_validate_parse: 6 callbacks suppressed
[  376.896881][T17794] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3149'.
[  376.912641][T17794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  377.093643][ T7202] : left promiscuous mode
[  377.232699][T17812] lo speed is unknown, defaulting to 1000
[  377.241504][T17812] wg1 speed is unknown, defaulting to 1000
[  377.249661][T17812] lo speed is unknown, defaulting to 1000
[  377.254962][ T7202] k›*·]‘: left promiscuous mode
[  377.264425][T17820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3154'.
[  377.356321][T17735] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.364519][T17735] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.372989][T17735] bridge_slave_0: entered allmulticast mode
[  377.385557][T17735] bridge_slave_0: entered promiscuous mode
[  377.399007][ T7202] tipc: Disabling bearer <eth:syzkaller0>
[  377.420241][ T7202] tipc: Left network mode
[  377.427353][T17735] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.438114][T17735] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.446854][T17735] bridge_slave_1: entered allmulticast mode
[  377.457173][T17735] bridge_slave_1: entered promiscuous mode
[  377.501065][ T7202] IPVS: stopping backup sync thread 11283 ...
[  377.755879][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.807820][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.839589][T17833] lo speed is unknown, defaulting to 1000
[  377.848833][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.863764][T17840] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  377.931750][   T51] Bluetooth: hci0: command tx timeout
[  377.968374][T17833] wg1 speed is unknown, defaulting to 1000
[  378.062026][T17833] lo speed is unknown, defaulting to 1000
[  378.127885][T17735] team0: Port device team_slave_0 added
[  378.177710][T17848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3158'.
[  378.195327][T17848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3158'.
[  378.246082][T17735] team0: Port device team_slave_1 added
[  378.277898][T17848] erspan0: entered promiscuous mode
[  378.285106][T17848] gretap0: entered promiscuous mode
[  378.291638][T17848] debugfs: 'hsr1' already exists in 'hsr'
[  378.297425][T17848] Cannot create hsr debugfs directory
[  378.464705][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.477789][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.527622][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.621434][T17864] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3163'.
[  378.696735][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.704304][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.742088][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  378.742144][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.853058][ T7202] hsr_slave_0: left promiscuous mode
[  378.877439][ T7202] hsr_slave_1: left promiscuous mode
[  378.888899][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.897052][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.932048][ T7202] !
: left allmulticast mode
[  379.627588][T17872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3165'.
[  379.928924][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.937218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.013652][   T51] Bluetooth: hci0: command tx timeout
[  380.051179][T17735] hsr_slave_0: entered promiscuous mode
[  380.065096][T17735] hsr_slave_1: entered promiscuous mode
[  380.090731][T17877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3167'.
[  380.156491][T17871] lo speed is unknown, defaulting to 1000
[  380.188855][T17877] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  380.197126][T17877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3167'.
[  380.199033][T17871] wg1 speed is unknown, defaulting to 1000
[  380.244168][T17871] lo speed is unknown, defaulting to 1000
[  380.577128][ T7202] IPVS: stop unused estimator thread 0...
[  380.596045][T17883] netlink: 'syz.0.3168': attribute type 49 has an invalid length.
[  380.622051][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'.
[  380.703421][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'.
[  380.838901][T17882] lo speed is unknown, defaulting to 1000
[  380.954315][T17882] wg1 speed is unknown, defaulting to 1000
[  380.968490][T17882] lo speed is unknown, defaulting to 1000
[  380.974459][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.050011][T17896] netlink: 'syz.0.3172': attribute type 13 has an invalid length.
[  381.068285][T17896] netlink: 'syz.0.3172': attribute type 17 has an invalid length.
[  381.167900][T17896] syz_tun: left allmulticast mode
[  381.184009][T17903] netlink: 'syz.3.3173': attribute type 21 has an invalid length.
[  381.250191][T17896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.351466][T17893] lo speed is unknown, defaulting to 1000
[  381.359788][T17893] wg1 speed is unknown, defaulting to 1000
[  381.367463][T17893] lo speed is unknown, defaulting to 1000
[  381.516793][T17903] netlink: 'syz.3.3173': attribute type 4 has an invalid length.
[  381.527048][T17896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.537924][T17903] netlink: 'syz.3.3173': attribute type 5 has an invalid length.
[  381.611056][T17898] lo speed is unknown, defaulting to 1000
[  381.658575][T17898] wg1 speed is unknown, defaulting to 1000
[  381.767067][T17904] lo speed is unknown, defaulting to 1000
[  381.881849][T17898] lo speed is unknown, defaulting to 1000
[  381.898067][T17904] wg1 speed is unknown, defaulting to 1000
[  381.953937][T17904] lo speed is unknown, defaulting to 1000
[  382.008903][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.017113][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.093077][   T51] Bluetooth: hci0: command tx timeout
[  382.176153][T17735] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  382.191387][T17735] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  382.215367][T17735] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  382.236826][T17735] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  382.392199][T17735] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.457837][T17735] 8021q: adding VLAN 0 to HW filter on device team0
[  382.685993][T17925] veth5: entered promiscuous mode
[  382.710214][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.717420][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.745620][T17927] !
: renamed from dummy0 (while UP)
[  382.770332][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.777555][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.048820][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.460068][T17936] lo speed is unknown, defaulting to 1000
[  383.467642][T17936] wg1 speed is unknown, defaulting to 1000
[  383.612715][T17936] lo speed is unknown, defaulting to 1000
[  383.770269][T17962] __nla_validate_parse: 3 callbacks suppressed
[  383.770289][T17962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3182'.
[  383.851674][T17965] tipc: Started in network mode
[  383.856716][T17965] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  383.885886][T17965] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  383.921181][T17965] tipc: Enabled bearer <udp:syz1>, priority 10
[  384.088799][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.097433][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.172118][T17976] netlink: 'syz.1.3184': attribute type 1 has an invalid length.
[  384.224868][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3184'.
[  384.273504][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3185'.
[  384.294645][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'.
[  384.376398][T17735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.580289][T17992] netlink: 'syz.2.3188': attribute type 1 has an invalid length.
[  384.695641][T17992] 8021q: adding VLAN 0 to HW filter on device bond1
[  384.823382][T18000] veth7: entered promiscuous mode
[  384.835552][T18000] bond1: (slave veth7): Enslaving as an active interface with a down link
[  385.038879][   T24] tipc: Node number set to 1
[  385.110884][T18010] netlink: 'syz.1.3191': attribute type 10 has an invalid length.
[  385.131154][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.139458][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.155145][T18010] team0: Port device dummy0 added
[  385.294254][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3193'.
[  385.340594][T14228] IPVS: starting estimator thread 0...
[  385.438894][T18020] IPVS: using max 24 ests per chain, 57600 per kthread
[  385.545650][T17735] veth0_vlan: entered promiscuous mode
[  385.583118][T17735] veth1_vlan: entered promiscuous mode
[  385.744661][T18025] netlink: 'syz.3.3196': attribute type 11 has an invalid length.
[  385.825990][T17735] veth0_macvtap: entered promiscuous mode
[  385.845909][T17735] veth1_macvtap: entered promiscuous mode
[  385.903411][T17735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.926408][T18024] syzkaller0: entered promiscuous mode
[  385.933395][T18024] syzkaller0: entered allmulticast mode
[  386.054386][T17735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.134407][ T7202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.168836][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.188966][ T7202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.209597][ T7202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.218494][ T7197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.468346][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.477399][T18054] netlink: 'syz.1.3204': attribute type 2 has an invalid length.
[  386.498293][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.540898][T18058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3206'.
[  386.633042][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.648410][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.730876][T18056] lo speed is unknown, defaulting to 1000
[  386.784108][T18056] wg1 speed is unknown, defaulting to 1000
[  386.873529][T18056] lo speed is unknown, defaulting to 1000
[  386.971808][T18066] lo speed is unknown, defaulting to 1000
[  387.036218][T18066] wg1 speed is unknown, defaulting to 1000
[  387.163169][T18066] lo speed is unknown, defaulting to 1000
[  387.208886][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.217143][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.650739][T18105] netlink: 'syz.0.3215': attribute type 29 has an invalid length.
[  387.672023][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'.
[  387.687178][T18096] lo speed is unknown, defaulting to 1000
[  387.711188][T18096] wg1 speed is unknown, defaulting to 1000
[  387.730757][T18096] lo speed is unknown, defaulting to 1000
[  387.952667][T18119] tipc: Resetting bearer <eth:syzkaller0>
[  388.003703][T18121] dvmrp8: entered allmulticast mode
[  388.033619][T18120] dvmrp8: left allmulticast mode
[  388.248801][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.436939][T18126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.625249][T18139] netlink: 'syz.4.3225': attribute type 11 has an invalid length.
[  388.657969][T18139] netlink: 'syz.4.3225': attribute type 4 has an invalid length.
[  388.678638][T18139] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3225'.
[  388.793862][T18119] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  388.815967][T18119] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  388.886280][T18119] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  388.896001][T18119] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  388.955977][T18119] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  388.970986][T18119] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  388.994753][T18119] ------------[ cut here ]------------
[  389.000736][T18119] refcount_t: underflow; use-after-free.
[  389.007061][T18119] WARNING: CPU: 1 PID: 18119 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  389.016834][T18119] Modules linked in:
[  389.021280][T18119] CPU: 1 UID: 0 PID: 18119 Comm: syz.0.3219 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[  389.033469][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  389.047034][T18119] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  389.054496][T18119] Code: 40 af e2 8b e8 67 72 bb fc 90 0f 0b 90 90 eb d7 e8 bb d3 f7 fc c6 05 65 99 c5 0a 01 90 48 c7 c7 a0 af e2 8b e8 47 72 bb fc 90 <0f> 0b 90 90 eb b7 e8 9b d3 f7 fc c6 05 42 99 c5 0a 01 90 48 c7 c7
[  389.076130][T18119] RSP: 0018:ffffc9000b5077b8 EFLAGS: 00010246
[  389.082373][T18119] RAX: d9f76493cc2c0e00 RBX: 0000000000000003 RCX: 0000000000080000
[  389.090464][T18119] RDX: ffffc90011c2d000 RSI: 000000000004d68e RDI: 000000000004d68f
[  389.098482][T18119] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  389.106682][T18119] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888053f33000
[  389.114795][T18119] R13: ffff888054fcb860 R14: ffff888054fcb878 R15: dffffc0000000000
[  389.123639][T18119] FS:  00007faa80d3c6c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000
[  389.133210][T18119] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  389.140066][T18119] CR2: 00007fc8116cc99b CR3: 000000002df08000 CR4: 00000000003526f0
[  389.148092][T18119] Call Trace:
[  389.151552][T18119]  <TASK>
[  389.154512][T18119]  klist_dec_and_del+0x3c7/0x3d0
[  389.159973][T18119]  klist_remove+0x1bd/0x340
[  389.164528][T18119]  ? __pfx_klist_children_put+0x10/0x10
[  389.170581][T18119]  ? __pfx_klist_remove+0x10/0x10
[  389.176647][T18119]  ? __pfx_kobject_move+0x10/0x10
[  389.181803][T18119]  ? get_device_parent+0x366/0x3a0
[  389.187054][T18119]  device_move+0x193/0x700
[  389.192383][T18119]  hci_conn_del_sysfs+0xb8/0x170
[  389.197384][T18119]  hci_conn_del+0x949/0xcf0
[  389.202071][T18119]  hci_conn_hash_flush+0x191/0x230
[  389.207241][T18119]  hci_dev_close_sync+0xaef/0x1330
[  389.212601][T18119]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  389.218211][T18119]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  389.224249][T18119]  hci_dev_do_close+0x2f/0x90
[  389.229100][T18119]  hci_rfkill_set_block+0x21d/0x2e0
[  389.234348][T18119]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  389.240601][T18119]  rfkill_set_block+0x1d2/0x440
[  389.245605][T18119]  rfkill_fop_write+0x44b/0x570
[  389.250561][T18119]  ? __pfx_rfkill_fop_write+0x10/0x10
[  389.255982][T18119]  ? security_kernfs_init_security+0x240/0x290
[  389.262713][T18119]  ? rw_verify_area+0x255/0x4d0
[  389.267624][T18119]  ? __lock_acquire+0xab9/0xd20
[  389.272973][T18119]  ? __pfx_rfkill_fop_write+0x10/0x10
[  389.278410][T18119]  vfs_write+0x27e/0xb30
[  389.282797][T18119]  ? __pfx_vfs_write+0x10/0x10
[  389.287616][T18119]  ? __fget_files+0x2a/0x420
[  389.288836][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.292399][T18119]  ? __fget_files+0x2a/0x420
[  389.300583][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.305083][T18119]  ? __fget_files+0x3a0/0x420
[  389.317919][T18119]  ? __fget_files+0x2a/0x420
[  389.322646][T18119]  ksys_write+0x145/0x250
[  389.327029][T18119]  ? __pfx_ksys_write+0x10/0x10
[  389.331989][T18119]  ? rcu_is_watching+0x15/0xb0
[  389.336795][T18119]  ? do_syscall_64+0xbe/0x3b0
[  389.341602][T18119]  do_syscall_64+0xfa/0x3b0
[  389.346150][T18119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.352335][T18119]  ? asm_sysvec_call_function_single+0x1a/0x20
[  389.358525][T18119]  ? clear_bhb_loop+0x60/0xb0
[  389.363749][T18119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.370231][T18119] RIP: 0033:0x7faa7ff8ebe9
[  389.374695][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.394607][T18119] RSP: 002b:00007faa80d3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  389.403126][T18119] RAX: ffffffffffffffda RBX: 00007faa801b5fa0 RCX: 00007faa7ff8ebe9
[  389.411218][T18119] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000007
[  389.419334][T18119] RBP: 00007faa80011e19 R08: 0000000000000000 R09: 0000000000000000
[  389.427337][T18119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.435380][T18119] R13: 00007faa801b6038 R14: 00007faa801b5fa0 R15: 00007fff63f89788
[  389.443490][T18119]  </TASK>
[  389.446543][T18119] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  389.453865][T18119] CPU: 1 UID: 0 PID: 18119 Comm: syz.0.3219 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) 
[  389.465947][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  389.476107][T18119] Call Trace:
[  389.479400][T18119]  <TASK>
[  389.482347][T18119]  dump_stack_lvl+0x99/0x250
[  389.486974][T18119]  ? __asan_memcpy+0x40/0x70
[  389.491593][T18119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.496820][T18119]  ? __pfx__printk+0x10/0x10
[  389.501443][T18119]  vpanic+0x281/0x750
[  389.505448][T18119]  ? __pfx__printk+0x10/0x10
[  389.510073][T18119]  ? __pfx_vpanic+0x10/0x10
[  389.514617][T18119]  ? is_bpf_text_address+0x292/0x2b0
[  389.519963][T18119]  panic+0xb9/0xc0
[  389.523726][T18119]  ? __pfx_panic+0x10/0x10
[  389.528173][T18119]  __warn+0x31b/0x4b0
[  389.532178][T18119]  ? refcount_warn_saturate+0x11a/0x1d0
[  389.537750][T18119]  ? refcount_warn_saturate+0x11a/0x1d0
[  389.543311][T18119]  report_bug+0x2be/0x4f0
[  389.547659][T18119]  ? refcount_warn_saturate+0x11a/0x1d0
[  389.553226][T18119]  ? refcount_warn_saturate+0x11a/0x1d0
[  389.558795][T18119]  ? refcount_warn_saturate+0x11c/0x1d0
[  389.564354][T18119]  handle_bug+0x84/0x160
[  389.568623][T18119]  exc_invalid_op+0x1a/0x50
[  389.573157][T18119]  asm_exc_invalid_op+0x1a/0x20
[  389.578059][T18119] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  389.584234][T18119] Code: 40 af e2 8b e8 67 72 bb fc 90 0f 0b 90 90 eb d7 e8 bb d3 f7 fc c6 05 65 99 c5 0a 01 90 48 c7 c7 a0 af e2 8b e8 47 72 bb fc 90 <0f> 0b 90 90 eb b7 e8 9b d3 f7 fc c6 05 42 99 c5 0a 01 90 48 c7 c7
[  389.603861][T18119] RSP: 0018:ffffc9000b5077b8 EFLAGS: 00010246
[  389.609956][T18119] RAX: d9f76493cc2c0e00 RBX: 0000000000000003 RCX: 0000000000080000
[  389.618043][T18119] RDX: ffffc90011c2d000 RSI: 000000000004d68e RDI: 000000000004d68f
[  389.626041][T18119] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  389.634035][T18119] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888053f33000
[  389.642027][T18119] R13: ffff888054fcb860 R14: ffff888054fcb878 R15: dffffc0000000000
[  389.650028][T18119]  ? refcount_warn_saturate+0x119/0x1d0
[  389.655606][T18119]  klist_dec_and_del+0x3c7/0x3d0
[  389.660565][T18119]  klist_remove+0x1bd/0x340
[  389.665102][T18119]  ? __pfx_klist_children_put+0x10/0x10
[  389.670670][T18119]  ? __pfx_klist_remove+0x10/0x10
[  389.675719][T18119]  ? __pfx_kobject_move+0x10/0x10
[  389.680766][T18119]  ? get_device_parent+0x366/0x3a0
[  389.685896][T18119]  device_move+0x193/0x700
[  389.690340][T18119]  hci_conn_del_sysfs+0xb8/0x170
[  389.695310][T18119]  hci_conn_del+0x949/0xcf0
[  389.699971][T18119]  hci_conn_hash_flush+0x191/0x230
[  389.705123][T18119]  hci_dev_close_sync+0xaef/0x1330
[  389.710275][T18119]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  389.715846][T18119]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  389.721759][T18119]  hci_dev_do_close+0x2f/0x90
[  389.726452][T18119]  hci_rfkill_set_block+0x21d/0x2e0
[  389.731669][T18119]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  389.737402][T18119]  rfkill_set_block+0x1d2/0x440
[  389.742379][T18119]  rfkill_fop_write+0x44b/0x570
[  389.747273][T18119]  ? __pfx_rfkill_fop_write+0x10/0x10
[  389.752778][T18119]  ? security_kernfs_init_security+0x240/0x290
[  389.758989][T18119]  ? rw_verify_area+0x255/0x4d0
[  389.763991][T18119]  ? __lock_acquire+0xab9/0xd20
[  389.768886][T18119]  ? __pfx_rfkill_fop_write+0x10/0x10
[  389.774313][T18119]  vfs_write+0x27e/0xb30
[  389.778602][T18119]  ? __pfx_vfs_write+0x10/0x10
[  389.783401][T18119]  ? __fget_files+0x2a/0x420
[  389.788022][T18119]  ? __fget_files+0x2a/0x420
[  389.792638][T18119]  ? __fget_files+0x3a0/0x420
[  389.797329][T18119]  ? __fget_files+0x2a/0x420
[  389.801945][T18119]  ksys_write+0x145/0x250
[  389.806306][T18119]  ? __pfx_ksys_write+0x10/0x10
[  389.811183][T18119]  ? rcu_is_watching+0x15/0xb0
[  389.815975][T18119]  ? do_syscall_64+0xbe/0x3b0
[  389.820711][T18119]  do_syscall_64+0xfa/0x3b0
[  389.825254][T18119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.831379][T18119]  ? asm_sysvec_call_function_single+0x1a/0x20
[  389.837573][T18119]  ? clear_bhb_loop+0x60/0xb0
[  389.842283][T18119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.848191][T18119] RIP: 0033:0x7faa7ff8ebe9
[  389.852617][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.872247][T18119] RSP: 002b:00007faa80d3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  389.880689][T18119] RAX: ffffffffffffffda RBX: 00007faa801b5fa0 RCX: 00007faa7ff8ebe9
[  389.888687][T18119] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000007
[  389.896689][T18119] RBP: 00007faa80011e19 R08: 0000000000000000 R09: 0000000000000000
[  389.904747][T18119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  389.912741][T18119] R13: 00007faa801b6038 R14: 00007faa801b5fa0 R15: 00007fff63f89788
[  389.920848][T18119]  </TASK>
[  389.924047][T18119] Kernel Offset: disabled
[  389.928377][T18119] Rebooting in 86400 seconds..