last executing test programs:

8.258304594s ago: executing program 2 (id=2926):
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="055200"/26, @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff070000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="055200"/26, @ANYRES32=0x0, @ANYBLOB="0d0202000000000008000400ff070000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a3}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)

6.733025741s ago: executing program 2 (id=2927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0xa}, {0x0, 0x15}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x2400c840)

6.391941247s ago: executing program 2 (id=2933):
socket$inet6(0xa, 0x80000, 0x19a6)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0xc044)

6.214584144s ago: executing program 2 (id=2934):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x525}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x6c010101}, {0x8, 0x2, @loopback}}}]}]}, 0x38}}, 0x0) (async)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000080)={@remote, @loopback}, 0x8) (async)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8, @none}, 0xe)

6.123698972s ago: executing program 2 (id=2935):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)

5.914483208s ago: executing program 2 (id=2937):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r5, 0x0, 0x81}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={<r7=>0x0, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x4}}, [0x4e00000000000000, 0x9, 0x7ff, 0xddfa, 0x7594c29c, 0x1, 0xff, 0x0, 0x7, 0xff, 0x5, 0x9, 0x287a, 0x1, 0xe]}, &(0x7f0000000340)=0x100)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000440)={r7, @in={{0x2, 0x4e21, @loopback}}}, 0x84)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0xee00}, 0xc)

4.235453594s ago: executing program 4 (id=2947):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="59c058da5711aa373ecc61dfc077591ddeeffa57bc1d0a4250d15928575e21fe657ad0c3ab4ba43669f3914e81706a07854221be51606579fd7625cd27c025ce33492519eee6b0f28bc2ee55c94f3b2e112854d6dc2d4da5643c49057cb3b35e6b8cc0482328debb", 0x68, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000, @local, 0x13}, 0x1c) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x1b0, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x581}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc1e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd3e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@remote, @loopback}, &(0x7f0000000180)=0xc) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x5}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
sendmsg$802154_dgram(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x63cb5c79aeba8561}}}, 0x7c}}, 0x4000)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4)
accept4$rose(r6, &(0x7f00000004c0)=@full={0xb, @dev, @netrom, 0x0, [@netrom, @default, @remote, @default, @remote, @bcast]}, &(0x7f0000000740)=0x40, 0x0) (async)
r8 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendto$inet6(r9, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async)
sendmsg$inet6(r9, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x20) (async)
shutdown(r9, 0x1) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18)

3.35602143s ago: executing program 4 (id=2953):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r3=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r1}, 0x10) (async)
getuid()

3.086560672s ago: executing program 3 (id=2955):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x1, 0xe)
ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x1, @remote}) (async)
ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000040)={0x1, @remote})
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r5, 0x8008743f, 0xf0ff1f00000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c000180080001006475700008000340000001"], 0xc8}}, 0x20050800)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r6)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) (async)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r8 = accept4(r0, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r6)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sulogin_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10001}, 0x800)
sendmmsg$alg(r8, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="ec2a3dc932d4c453d37d6d7ebf2e04cfd13b5d58ebfc03555b73850fde00a119f421fda21a580ac3ae5d3d5d56cb37f283e3591dbfcedeff018a4832f5749b25355bae116e507167620354c4d6775ad21160933488643619fe9d614ce584130343b7518d38d68e1ca2f9f2331bfa9c3840429b3da7e400000000"}, {&(0x7f0000000300)="325378d1bf7d144d70cfab6bc5de5c35a86e1df7f81bc276b854d6a75c5aec97873d372ccd936bdee9325cc24341ce44cf0849b3ff86bce20eab1e690df64b0fcb2433652ffdc1840f095ca95a67069559702027aab9ba63658d760c44a47d87b0a0dfbf7bd5c4ee805a0ae67ff180bc48e9213850573bd62f61b34898c640603ae759cf3b63199d7ef2f4920670d130d38b29ffe33ef6fe0f7e0ae5"}, {&(0x7f00000003c0)="acbfae866b1a3a49cd713af44522af31ce360e7773234b850dae99b2e3a43e9bacf5bf6780e6b9e22cf4ebbbb8c6d15ba4e1fc65cb307d8b50cafa4b33a2cc4eb5012da1a9eaf094651d54ea55779eb38871d345779c0d007e0b99285d9f84e165d106d7e3373f2d1ac0e4376f992df24f8e47ebc859749997642ee42a27e478bf3d2cc2851e4699e8e57c4242e24f7390ba88bc18b52235dd722d7db18d9d8c6037"}, {&(0x7f0000000500)="60d6b3356c76cc7cc41d"}, {&(0x7f0000000700)="188cd36b7a68f84df3ff09563bc334f22fe429232ccdf3aefd33cfbecf7db6011358cb046d2b338f0ce1b2fcff1bee773302cfa39f8576571dc392d679c2c96f418cefb8efb320"}, {&(0x7f00000005c0)="86029d354ab869b9bc08cf780c5734d9065cbf4778068ef85fc5a58680d5eedcab0b8f38b0b360184d0e26d0ddaaec84c3774253660cd0ce1c19ff3314aec17e7464a186c3b75be99009fab05f151ecdc8a1218c7cb9d1ffdc0742dc906873af5edb867db3298bc767743e285988ce48869a0c8b81682e5ca21b29c21074dda3064e982e7d97c03d60637ea9f545769c359b8f477c14020239dff057fa7c1904a679fc4d11f207"}], 0x1000001d, 0x0, 0xf}], 0x1, 0x4000801) (async)
sendmmsg$alg(r8, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="ec2a3dc932d4c453d37d6d7ebf2e04cfd13b5d58ebfc03555b73850fde00a119f421fda21a580ac3ae5d3d5d56cb37f283e3591dbfcedeff018a4832f5749b25355bae116e507167620354c4d6775ad21160933488643619fe9d614ce584130343b7518d38d68e1ca2f9f2331bfa9c3840429b3da7e400000000"}, {&(0x7f0000000300)="325378d1bf7d144d70cfab6bc5de5c35a86e1df7f81bc276b854d6a75c5aec97873d372ccd936bdee9325cc24341ce44cf0849b3ff86bce20eab1e690df64b0fcb2433652ffdc1840f095ca95a67069559702027aab9ba63658d760c44a47d87b0a0dfbf7bd5c4ee805a0ae67ff180bc48e9213850573bd62f61b34898c640603ae759cf3b63199d7ef2f4920670d130d38b29ffe33ef6fe0f7e0ae5"}, {&(0x7f00000003c0)="acbfae866b1a3a49cd713af44522af31ce360e7773234b850dae99b2e3a43e9bacf5bf6780e6b9e22cf4ebbbb8c6d15ba4e1fc65cb307d8b50cafa4b33a2cc4eb5012da1a9eaf094651d54ea55779eb38871d345779c0d007e0b99285d9f84e165d106d7e3373f2d1ac0e4376f992df24f8e47ebc859749997642ee42a27e478bf3d2cc2851e4699e8e57c4242e24f7390ba88bc18b52235dd722d7db18d9d8c6037"}, {&(0x7f0000000500)="60d6b3356c76cc7cc41d"}, {&(0x7f0000000700)="188cd36b7a68f84df3ff09563bc334f22fe429232ccdf3aefd33cfbecf7db6011358cb046d2b338f0ce1b2fcff1bee773302cfa39f8576571dc392d679c2c96f418cefb8efb320"}, {&(0x7f00000005c0)="86029d354ab869b9bc08cf780c5734d9065cbf4778068ef85fc5a58680d5eedcab0b8f38b0b360184d0e26d0ddaaec84c3774253660cd0ce1c19ff3314aec17e7464a186c3b75be99009fab05f151ecdc8a1218c7cb9d1ffdc0742dc906873af5edb867db3298bc767743e285988ce48869a0c8b81682e5ca21b29c21074dda3064e982e7d97c03d60637ea9f545769c359b8f477c14020239dff057fa7c1904a679fc4d11f207"}], 0x1000001d, 0x0, 0xf}], 0x1, 0x4000801)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

2.614544801s ago: executing program 0 (id=2958):
socket(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911079000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1a}, 0x94)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
epoll_wait(r4, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0xfe7e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100)
openat$tun(0xffffffffffffff9c, &(0x7f0000007a00), 0x82000, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e7ff00"/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000010018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100007e850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.693617231s ago: executing program 4 (id=2960):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socketpair(0x1, 0x2, 0x2f4, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110ad000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xca, &(0x7f0000000800)=""/202, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4d103fc3}, 0x10}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdf258ca5"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
close(r8)
socket$vsock_stream(0x28, 0x1, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x5, 0x4)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r9, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r9, &(0x7f0000000200)="280112873958ca306e71ac52ad2b1ca9f3fc9602ad85728a4419597fcc0ab88ecc619be2f1eb379f02bb34d38741ae4de6f64891a31cd6d9efe71a6fdedfbf4f7b16bacbad08efa2", 0x48, 0x805, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00', @local})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000427bd7000ffdbdf255e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000e0258a2d8a20000000c000cff000008009f0000000000050018010d00000008009f00060000000800a100ca960000b50027"], 0x50}, 0x1, 0x0, 0x0, 0x44040}, 0x40080)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="070082003e093ee8b34cf35f86d2b3d0400b2a52b1cca6e06ab325d5e4d52e33fe7eb5fa12d0feb93ed6066a87cff991bb135bab306d73dd540547e1a93195ba5de0fa15080821954e680f3590f100f11e048bcf67371ba05a2d9bebb634d619db61e20233c63570956522e801202de2b467e4b7c0979c6e1b3750fabcd86c4945342de49a07526e9a51573e08f08dbba2da980d3bd14a2b46c4a584ecaba1", @ANYRES16=r6, @ANYBLOB="010028bd7000ffff00005300000008000300", @ANYRES32=r0, @ANYBLOB="bf8c12b69668094ca55fc8eba7112f5a76f75698683c02e22a8551226dab09627ed75989c55821d2c1f7f69f5f2a658c854d73cb658cfa270b49a49734066a80754a08d15b9b005f4c07c5b583ddf11b8fa813467b4d1822d8f6c25d73f3123acf6ab5072c4a1b8b5eeccefe4b12d7512d1fb07a9900"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0)

1.530489432s ago: executing program 3 (id=2961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0x5}, {0x6, 0x80, 0x4f, 0xffffffff}]})
write$ppp(r3, &(0x7f00000001c0)="0000599928cbd3", 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r2, 0x21, 0x70bd2f, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffb, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x48095)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r12, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
getsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)

1.458759476s ago: executing program 4 (id=2962):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x70bd28, 0xffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.29854431s ago: executing program 1 (id=2964):
r0 = epoll_create1(0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x14})
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x28, 0x11, 0x1, @private0, @mcast2, {[], {0x4e22, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x2, 0x3, "c1ec20295ad01efe923f724ddb2e065d"}}}}}}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
connect$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2, 0xf0}}, 0x18)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000012000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="04000000"], 0xc4}}, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaabb0000080003000000000008000500", @ANYRES32=r9, @ANYBLOB="d0e0d27dcd8d2d5cf49810a0b9944fa3df9abdddd957e7910b8ce304ffc8f3c9d0089751145cc14c447af4d40f84e9829aa34e307121a39cfaa2b321c2ba9c57d5c29388923216cd0cb6669f76e5017db5bc169e8ed438eab9469dff"], 0x58}}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r10, 0x84, 0x8, &(0x7f0000000040)=0xfffffff7, 0x4)
setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x5}, 0x8)

1.170877738s ago: executing program 4 (id=2965):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000bc0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000170000009500000000"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000019c0)=0x1ff, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r3, 0x3, {0x1, 0x1, 0x3}, 0x2}, 0x18, &(0x7f00000001c0)={&(0x7f0000000400)="fda57409d524ba0bd7b660a5311953930fa716dee3e67e559d7eee438f8b8716dc97ae5616cc485dfb3b497161ba624b87009c38c4d7cf25f94532b3b27cd0d58d2313fdaa728f587c633e1009850eedf9bcd73e17e82e1a370c7a0e6115ac422d628cfaf6db19849aadf137f2791ab9e4004cc3a2ab1e845fca0651de93d45eafd63383129cd30de23ebf55b83e252de4b2f0d792f9ee15b3c8935ee17f673bd2386248d75eca63fed04569781611dd0fc933780fdb8f3ddb9b417b75", 0xbd}, 0x1, 0x0, 0x0, 0x8435}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r10, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x80d4)
sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)}, 0x4040810)
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))

1.158876319s ago: executing program 1 (id=2966):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x15, 0x1, 0x3, 0xfffffff8}, {0x60, 0x8}, {}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0xe}, 0x94)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800) (async)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)

1.140960494s ago: executing program 0 (id=2967):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500010000000800124000020000050004000000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x20}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000380)={0x283, 0x2})

1.034006627s ago: executing program 3 (id=2968):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x805)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x6c}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
socket$inet6(0xa, 0x2, 0x0) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x805) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x6c}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}}) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) (async)

766.42625ms ago: executing program 3 (id=2969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000005004000000000000000000000ffff7f00000100000400000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x90, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x62a1}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x4044000)

760.727263ms ago: executing program 0 (id=2970):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) (async)
recvfrom(r1, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fe4a5fca3, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000a1000100ffffffff00000000020020000000000000000000080002000a01010108000b00020000003ae2e0173751c78f5fba0ec8acdeeb850caffbffcdfa8df64d20c15c424dedd91517f52a058bec9b5f019a26e936b1dd3a53617af08f79d936ac84706a7bfbfe74aae4efbc5612123e42f58d1a986faf7610573e36b6fa5385dbb83d568fd06f05ce34cbb98b015ee3df286d10e13dd0b938b2bbebc69f4090153478083a3c8d269b39c453741605d303bee7988cdb37806a0fd69b24d7292a5eca32dee3d5e1a17a2247f4d54c96fc421908a21fa851"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40054) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0)

725.267371ms ago: executing program 1 (id=2971):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfffffffd)
r1 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x80}, &(0x7f00000000c0)=0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc018}, 0x4000080)
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4, 0x3ff, @local, 0xfffffffe}, 0x1c)
setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4)
getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000080)=0x2, &(0x7f0000000140)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000d3000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

610.197221ms ago: executing program 3 (id=2972):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) (async)
r1 = socket$netlink(0x10, 0x3, 0xf) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
socket(0x25, 0x5, 0x0) (async)
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r4, @ANYBLOB="8000000000829bff00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x18c, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd127}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2aa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa37e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff058a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff4af9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc00}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x15}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x140000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={0x31c, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30634abc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x609f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x257}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa2, 0x3, "20063356e9b9462c76eb77fe28496e769a62a02bc153b36e22dd29883794006370c8f1787fca832a3c3fbda8dd59453723566b2a079013e355c6c74f2e29eaf5ef24b0cb75f5cecbde34826331923524fac0ef2c7172200fad7eaee2bc755ec700d301ed8de246efdd7bc97d3cb8f9986254a74c28f756443cc2a270332eeaabe217685dae95a8c2056d754d6f9032f14c5203091ebafb32827da3dea37e"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3475edcc7737aa15bb902c53687a3c5df25d977935a747fdd9f3"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "4bbbc62576f101484419b8c6bed47a976b88da08f90fe0ff57effa52338d27ceda"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ad329c33646a6e80d43b6e83679cd0807acdb9197acd0d59d6d76f98"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd39}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0xc0}, 0x44) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x81}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000}, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x20000020}, 0x4000011) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

548.771036ms ago: executing program 0 (id=2973):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={<r1=>0x0, @in6={{0xa, 0x4e22, 0x0, @loopback, 0xc26}}, 0x3, 0x1, 0x0, 0xc72, 0x9}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={<r2=>r1, 0xd}, &(0x7f0000000140)=0x8)
r3 = socket$inet6_sctp(0xa, 0x2, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={<r4=>r2, 0x6, 0x487, 0x900000}, &(0x7f00000001c0)=0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
getpeername(r5, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000280)=0x80)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg(r0, &(0x7f00000005c0)={&(0x7f00000002c0)=@isdn={0x22, 0x9, 0x4, 0x5, 0xa}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="bca491ba838405e6fd66599f88ffdd", 0xf}, {&(0x7f0000000380)="a18e1379d3ee6865c31bcb29d1b997b4197a86100c2c62764d6296940510631bef08ed51541cdf29bc3d9ae027f4b39f3fca11bbaaed038402fdc0dd3c85a7a4aa748ee8907511c8f6a8a89471db3d58c43b6b9c1d0b1e2f91b0f3865c8740feb45f1a8b70bbac20f3f36060419a0f448bfcdc4159050144fd157d6c3b8554b9694545736eda36afba8e26ee8cce8b3851c4e90c11a6280aa4d6db125d80bcb3ccbc4185351fc2e8cb6d4f5573327c089ac73e0f3706dd7f61d06a813ec3dce0259406315a18138d00c408ce047e5c935109da1a316b30ba8aa9e4cc6e", 0xdd}], 0x2, &(0x7f00000004c0)=[{0x100, 0x29, 0x401, "386f3a803880842060b39712664ed9720e4444d91ee054502f8707aa7c094d140fcd29c16fa6f92fb74daf31089244962beed167f948a618700047244f6b63b683a7a63964594c4775de064192131022de4fe341e6157b195f91dc4a8aca8bdd4fe9413db16ddef35b70547b2644c2bf32b31bf451272b8da3af3898a738adf488e881a2427e7b1bc069d0002b124943135751a43a01515e6ec14d69522cdf49065bd31cb42cdf76f2620032246ad9d49963b26622e06c3575a8e7677e4902430d789442a75e750b3f9f3e5103f19af4444654bf89c25c8f95c4f9f9cb044d1341b14fe8c9e9e30754243774"}], 0x100}, 0x4000010)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000600)={0x1f, 0x6, @none, 0x7fff, 0x2}, 0xe)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000680)={0x0, 'tunl0\x00', {0x1}, 0xfffd})
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000006c0)={r2, 0xfffffff8, 0x9, 0x2, 0x8, 0x23, 0x2, 0x5, {<r8=>r4, @in6={{0xa, 0x4e22, 0x20000000, @mcast2, 0xbc9}}, 0x3c19, 0x80000, 0xc82, 0x0, 0x7fffffff}}, &(0x7f0000000780)=0xb0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000007c0)={r8, 0x7}, &(0x7f0000000800)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000840)={r8, 0x8}, 0x8)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='task_newtask\x00', r6}, 0x18)
r10 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r10, &(0x7f0000000900)={0x11, 0x5, r7, 0x1, 0x9, 0x6, @random="322162b565b8"}, 0x14)
syz_emit_ethernet(0x5e, &(0x7f0000000940)={@broadcast, @random="88f396d07e4b", @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x30, 0x3, 0x0, 0x0, "f49eff91f6deaadb889a814a31617d14f0a838012a75f05ef4505aaa2568cbf77746ae3fe1259f4ee8d2c01b08dea6eb651c8d28bbd11af2ef5a0510ebb1ec6f"}}}}, &(0x7f00000009c0)={0x0, 0x2, [0x97f, 0xf9a, 0xd07, 0xf57]})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000a40)=<r11=>0x0)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000a80)=<r12=>0x0)
r13 = gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000cc0)=0xe8)
r15 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00)={<r16=>0x0}, &(0x7f0000000d40)=0xc)
r17 = getuid()
r18 = getgid()
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000d80)={<r19=>0x0}, &(0x7f0000000dc0)=0xc)
sendmsg$netlink(r5, &(0x7f0000001180)={&(0x7f0000000a00)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)=[{&(0x7f0000000ac0)={0xb8, 0x35, 0x200, 0x70bd25, 0x25dfdbfe, "", [@generic="2b23bc56f9ac0cd7002ecaf25947903a0a61d607d781ce34d117989063d02d2dce5e7c4d5dc8addcce9e8b40b1329a0f46eab37c46e0587d50be04689ba4951612916f56e72e3d9a0be00dfdaf1616042add5dfe42b7f796f7efa62c60bae5a35c2c115eef2a3a1883da043ea16b6b4d7f5be2557c5ab07afeecf74ab26e4d658ed5775badb74ced", @typed={0x8, 0x63, 0x0, 0x0, @pid=r11}, @typed={0x8, 0xf0, 0x0, 0x0, @pid=r12}, @typed={0x4, 0xf1}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x8}]}, 0xb8}], 0x1, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19}}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r5, r3, r5, r9, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r9, r6, 0xffffffffffffffff, r5, r6]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r6, r10, r3]}}, @cred={{0x1c}}], 0x120, 0x84}, 0x1000)

546.523508ms ago: executing program 1 (id=2974):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xffdd)

442.130892ms ago: executing program 3 (id=2975):
unshare(0x4020400)
r0 = socket(0x23, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000008000000ff0f000002"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000340), 0x7, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x0}, 0x20)
bind$vsock_stream(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000001f80)=@device_b, &(0x7f0000001fc0)=ANY=[@ANYRES64=0x0], 0x94)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="b400060008020a000000ffffffffffff"], 0x10)

382.594025ms ago: executing program 4 (id=2976):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r2, 0x29, 0xcf, 0xffffffffffffffff, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xff9f0007}, {0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20}, {0x0, 0x2}, {0x6, 0x9}]})

286.505278ms ago: executing program 0 (id=2977):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x0, 'syz1\x00'})

199.054633ms ago: executing program 1 (id=2978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ec0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='7\x00\x00\x00x'], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0xfffffffffffffef8}}, 0x28}}, 0x4000040)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500294c41"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r4, @ANYRES8=r4], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000003c0)=""/221, 0x40f00, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c)

58.486395ms ago: executing program 0 (id=2979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'geneve1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'geneve1\x00', <r3=>0x0})
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x400, 0x7, 0x5, 0xe]}, &(0x7f0000000180)=0x54) (async)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x400, 0x7, 0x5, 0xe]}, &(0x7f0000000180)=0x54)
sendto$packet(r1, &(0x7f00000003c0)="02030e00d3fc02000000ab5d86dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYRES32=r1], 0x104}}, 0x0)

0s ago: executing program 1 (id=2980):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311ff"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0xe03049f6fe505b83)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000002000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000323cb6abf242e758859ed2232785bdd5c7fb079675dc270444d70c4c1c2e85354d7ce5f9c0860bbe2909fb5a2f34ff16816f99937be445ad21540ad110421ce9f1f1c69b44acaa9fa4401552806b006b8c94c0f3cf7d06811f4656a0f04ff66f60a347372c54f80df26b9a6a6958b999f448730036bb07edeb9273432cb95909b36e08a7047036b886f7874aaa155a2d88a66457345b88df9be8124fd64f9826ba855a6d8b49b334bf61460bafac39ec0d7981ea0768950b8a705a43d1f0390c5d00"/225, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000340), &(0x7f0000000540)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bind$rds(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000280)=0x8001, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004844)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.0.1278'.
[  274.999435][T11419] syz.4.1282 (11419) used obsolete PPPIOCDETACH ioctl
[  275.226775][T11422] syzkaller1: entered promiscuous mode
[  275.232305][T11422] syzkaller1: entered allmulticast mode
[  275.254184][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'.
[  275.305824][T11399] wlan1 speed is unknown, defaulting to 1000
[  275.463112][T11425] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1284'.
[  275.474441][T11425] netlink: 'syz.4.1284': attribute type 10 has an invalid length.
[  275.697187][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'.
[  275.707022][T11434] netlink: 'syz.3.1287': attribute type 29 has an invalid length.
[  275.729784][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'.
[  275.751608][T11434] veth1: mtu greater than device maximum
[  276.484608][T11438] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.492392][T11438] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.547981][T11438] bond0: left promiscuous mode
[  276.566673][T11438] bond_slave_0: left promiscuous mode
[  276.572502][T11438] bond_slave_1: left promiscuous mode
[  276.596780][T11438] batadv0: left promiscuous mode
[  276.602041][T11438] bond4: left promiscuous mode
[  276.639436][T11470] nbd: must specify an index to disconnect
[  276.920579][T11438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.938079][T11438] batman_adv: batadv0: Interface deactivated: 
2
6±ÿ
[  277.098456][T11438] veth3: left promiscuous mode
[  277.104138][T11438] bond1: left promiscuous mode
[  277.123967][T11438] veth5: left promiscuous mode
[  277.131662][T11438] veth7: left promiscuous mode
[  277.156708][T11399] lo speed is unknown, defaulting to 1000
[  277.215001][T11481] vlan4: entered promiscuous mode
[  277.239421][T11481] team0: entered promiscuous mode
[  277.330079][T10662] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.330152][ T5953] geneve0 speed is unknown, defaulting to 1000
[  277.352832][T10662] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.383318][T11469] wlan1 speed is unknown, defaulting to 1000
[  277.408409][ T5953] syz0: Port: 1 Link DOWN
[  277.414193][T11469] syz2: Port: 1 Link DOWN
[  277.433016][T10662] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.465534][ T5943] geneve0 speed is unknown, defaulting to 1000
[  277.466333][T10662] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.516786][T11469] wlan1 speed is unknown, defaulting to 1000
[  277.697047][T11495] syzkaller1: entered promiscuous mode
[  277.702746][T11495] syzkaller1: entered allmulticast mode
[  277.731585][T11504] macvtap1: entered allmulticast mode
[  277.754016][T11504] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  277.870772][T11512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.950485][T11504] syzkaller0: entered promiscuous mode
[  277.957670][T11504] syzkaller0: entered allmulticast mode
[  278.204784][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  278.499483][T11527] pim6reg1: entered promiscuous mode
[  278.509599][T11527] pim6reg1: entered allmulticast mode
[  279.058751][T11552] __nla_validate_parse: 11 callbacks suppressed
[  279.058775][T11552] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1314'.
[  279.161437][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'.
[  279.182356][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1315'.
[  279.393255][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'.
[  279.471804][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'.
[  280.421982][T11603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1328'.
[  280.436598][T11603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1328'.
[  280.499838][T11609] netlink: 'syz.3.1327': attribute type 21 has an invalid length.
[  280.569873][T11609] netlink: 'syz.3.1327': attribute type 6 has an invalid length.
[  280.628284][T11609] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1327'.
[  280.628819][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'.
[  280.692910][T11606] geneve0 speed is unknown, defaulting to 1000
[  280.791950][T11626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1333'.
[  281.073114][T11606] wlan1 speed is unknown, defaulting to 1000
[  281.367183][T11606] lo speed is unknown, defaulting to 1000
[  281.457135][T11642] geneve0 speed is unknown, defaulting to 1000
[  281.905131][T11660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.910227][T11663] Set syz0 is full, maxelem 0 reached
[  281.912428][T11660] IPv6: NLM_F_CREATE should be set when creating new route
[  281.925348][T11660] IPv6: NLM_F_CREATE should be set when creating new route
[  281.932579][T11660] IPv6: NLM_F_CREATE should be set when creating new route
[  281.977967][T11661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.002789][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.016086][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.021779][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.034482][T11642] wlan1 speed is unknown, defaulting to 1000
[  282.041338][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.055783][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.101162][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.116630][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.122356][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.128197][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.145342][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.151143][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.169834][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.232470][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.255323][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.268001][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.339408][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.365600][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.377071][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.394393][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.403787][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.412820][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.434276][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.442169][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.458630][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.464380][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.480331][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.517165][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.534857][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.540787][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.558701][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.577523][T11685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.601186][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.617042][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.635016][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.654858][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.682882][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.713792][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.720189][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.814134][T11690] batadv_slave_1: entered promiscuous mode
[  282.820712][T11642] lo speed is unknown, defaulting to 1000
[  282.826666][T11667] pimreg: tun_chr_ioctl cmd 2147767506
[  282.833052][T11665] pimreg: tun_chr_ioctl cmd 1074025673
[  282.913088][T11692] bridge_slave_1: left allmulticast mode
[  282.922036][T11692] bridge_slave_1: left promiscuous mode
[  282.959391][T11692] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.970933][T11692] bridge_slave_0: left allmulticast mode
[  282.983551][T11692] bridge_slave_0: left promiscuous mode
[  282.989948][T11692] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.146951][T11687] batadv_slave_1: left promiscuous mode
[  283.415637][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  283.664344][T11713] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  284.468221][T11726] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  284.513451][T11731] netlink: 'syz.4.1361': attribute type 1 has an invalid length.
[  284.549057][T11731] __nla_validate_parse: 13 callbacks suppressed
[  284.549078][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'.
[  285.010947][T11751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.043700][T11751] syzkaller0: entered promiscuous mode
[  285.065322][T11751] syzkaller0: entered allmulticast mode
[  285.124010][T11751] tipc: Resetting bearer <eth:syzkaller0>
[  285.139921][T11751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.185366][T11765] sctp: [Deprecated]: syz.2.1371 (pid 11765) Use of int in max_burst socket option deprecated.
[  285.185366][T11765] Use struct sctp_assoc_value instead
[  285.201416][T11766] sctp: [Deprecated]: syz.2.1371 (pid 11766) Use of int in max_burst socket option deprecated.
[  285.201416][T11766] Use struct sctp_assoc_value instead
[  285.217848][T11745] tipc: Resetting bearer <eth:syzkaller0>
[  285.232362][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'.
[  285.272846][T11766] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1371'.
[  285.299948][T11745] tipc: Disabling bearer <eth:syzkaller0>
[  285.446790][T11782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'.
[  285.457245][T11779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1376'.
[  285.484110][T11478] IPVS: starting estimator thread 0...
[  285.572936][T11791] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  285.585443][T11785] IPVS: using max 25 ests per chain, 60000 per kthread
[  285.614375][T11791] C: left promiscuous mode
[  285.619570][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.676449][T11791] team0: Port device C removed
[  285.682507][T11791] team_slave_1: left promiscuous mode
[  285.691950][T11796] netlink: 'syz.1.1378': attribute type 10 has an invalid length.
[  285.714163][T11791] team0: Port device team_slave_1 removed
[  285.734222][T11791] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.080934][T11791] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.200979][T11791] geneve0: left promiscuous mode
[  286.230275][T11791] team0: Port device geneve0 removed
[  286.236247][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  286.246043][T11791] batman_adv: batadv0: Removing interface: ip6gretap1
[  286.259808][T11791] bond2: (slave gretap1): Releasing active interface
[  286.273168][T11796] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  286.316463][T10662] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.331726][T10662] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.359344][T10662] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.460062][T10662] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.674214][T11831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.703620][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'.
[  286.722752][T11829] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1389'.
[  286.812415][T11837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1390'.
[  286.824269][T11831] geneve0 speed is unknown, defaulting to 1000
[  286.893606][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1390'.
[  287.018264][T11846] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1393'.
[  287.238155][T11831] wlan1 speed is unknown, defaulting to 1000
[  287.238207][T11848] geneve0 speed is unknown, defaulting to 1000
[  287.603330][T11864] pimreg: left allmulticast mode
[  287.671192][T11866] netlink: 'syz.1.1400': attribute type 4 has an invalid length.
[  287.813830][T11848] wlan1 speed is unknown, defaulting to 1000
[  287.886416][T11831] lo speed is unknown, defaulting to 1000
[  288.183158][T11882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.212760][T11882] sctp: [Deprecated]: syz.1.1405 (pid 11882) Use of int in max_burst socket option.
[  288.212760][T11882] Use struct sctp_assoc_value instead
[  288.217631][T11848] lo speed is unknown, defaulting to 1000
[  288.352647][T11880] geneve0 speed is unknown, defaulting to 1000
[  288.356383][T11882] syzkaller0: entered promiscuous mode
[  288.398700][T11882] syzkaller0: entered allmulticast mode
[  288.684132][T11896] netlink: 'syz.0.1406': attribute type 4 has an invalid length.
[  288.697018][T11896] netlink: 'syz.0.1406': attribute type 4 has an invalid length.
[  288.970653][T11881] tipc: Resetting bearer <eth:syzkaller0>
[  289.035995][T11881] tipc: Disabling bearer <eth:syzkaller0>
[  289.140030][T11880] wlan1 speed is unknown, defaulting to 1000
[  289.550599][T11910] netlink: 'syz.0.1410': attribute type 1 has an invalid length.
[  289.628180][T11910] 8021q: adding VLAN 0 to HW filter on device bond6
[  289.834826][T11911] 8021q: adding VLAN 0 to HW filter on device bond6
[  289.842035][T11911] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  289.896681][T11911] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  289.960392][T11880] lo speed is unknown, defaulting to 1000
[  290.060916][T11928] netlink: 'syz.0.1413': attribute type 11 has an invalid length.
[  290.283435][T11934] bridge0: port 1(macvlan2) entered blocking state
[  290.307600][T11934] bridge0: port 1(macvlan2) entered disabled state
[  290.334354][T11934] macvlan2: entered allmulticast mode
[  290.370571][T11934] bridge0: entered allmulticast mode
[  290.398289][T11934] macvlan2: left allmulticast mode
[  290.419431][T11934] bridge0: left allmulticast mode
[  290.612929][T11947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.627750][T11945] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  290.646062][T11945] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  290.769296][T11943] tipc: Resetting bearer <eth:syzkaller0>
[  290.916238][T11955] __nla_validate_parse: 5 callbacks suppressed
[  290.916256][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1419'.
[  290.981804][T11957] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1421'.
[  291.114160][T11960] macsec2: entered allmulticast mode
[  291.134365][T11960] macsec0: entered allmulticast mode
[  291.429792][T11973] netlink: 'syz.0.1426': attribute type 16 has an invalid length.
[  291.443940][T11973] netlink: 'syz.0.1426': attribute type 17 has an invalid length.
[  291.543746][T11973] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.562040][T11973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.752505][T11982] tap0: tun_chr_ioctl cmd 1074025677
[  291.766079][T11982] tap0: linktype set to 0
[  291.912356][T11989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'.
[  292.003617][T11992] geneve3: entered promiscuous mode
[  292.010795][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'.
[  292.035435][T10654] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.048431][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'.
[  292.061720][T10654] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.081205][T10654] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.099224][T10654] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.147458][T11997] nft_compat: unsupported protocol 0
[  292.301317][T12000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.360788][T12004] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  292.949340][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'.
[  293.019600][T12033] geneve0 speed is unknown, defaulting to 1000
[  293.040152][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'.
[  293.122435][T12035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1445'.
[  293.143572][T12035] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1445'.
[  293.222389][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1449'.
[  293.247612][T12047] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  293.256297][T12047] sock: sock_timestamping_bind_phc: sock not bind to device
[  293.314266][T12033] wlan1 speed is unknown, defaulting to 1000
[  293.339783][T12049] ip6tnl2: entered promiscuous mode
[  293.346896][T12049] ip6tnl2: entered allmulticast mode
[  293.583365][T12033] lo speed is unknown, defaulting to 1000
[  294.546664][T12085] syzkaller0: entered promiscuous mode
[  294.560115][T12085] syzkaller0: entered allmulticast mode
[  294.684548][T12085] syzkaller0: left promiscuous mode
[  294.703707][T12085] syzkaller0: left allmulticast mode
[  295.484843][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.175321][T12115] syzkaller0: entered promiscuous mode
[  296.184758][T12115] syzkaller0: entered allmulticast mode
[  296.214235][T12154] __nla_validate_parse: 4 callbacks suppressed
[  296.214255][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'.
[  296.269383][T12151] geneve2: entered promiscuous mode
[  296.276177][T12154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.278364][T10665] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.314071][T10665] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.739757][T12180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1480'.
[  297.954402][T10665] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.970131][T10665] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.182562][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'.
[  298.267764][T12196] atomic_op ffff888052075198 conn xmit_atomic 0000000000000000
[  298.372323][T12207] netlink: 'syz.1.1485': attribute type 4 has an invalid length.
[  298.427575][T12207] netlink: 'syz.1.1485': attribute type 4 has an invalid length.
[  298.436020][T12211] geneve0 speed is unknown, defaulting to 1000
[  298.497452][T12208] netlink: 'syz.0.1488': attribute type 4 has an invalid length.
[  298.518860][T12207] syzkaller1: entered promiscuous mode
[  298.537985][T12207] syzkaller1: entered allmulticast mode
[  298.628501][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'.
[  298.638623][T12216] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1490'.
[  298.662092][T12216] vlan4: entered allmulticast mode
[  298.668036][T12216] veth1: entered allmulticast mode
[  298.792336][T12220] netlink: 'syz.3.1492': attribute type 4 has an invalid length.
[  298.830991][T12211] wlan1 speed is unknown, defaulting to 1000
[  298.923572][T12226] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  299.127830][T12211] lo speed is unknown, defaulting to 1000
[  299.292746][T12240] netlink: 'syz.4.1494': attribute type 2 has an invalid length.
[  299.496634][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'.
[  299.538764][T12241] geneve0 speed is unknown, defaulting to 1000
[  300.038370][T12271] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1502'.
[  300.157727][T12276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.178274][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'.
[  300.185755][T12278] netlink: 'syz.4.1505': attribute type 1 has an invalid length.
[  300.206336][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1504'.
[  300.208753][T12278] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1505'.
[  300.419580][T12241] wlan1 speed is unknown, defaulting to 1000
[  301.111192][T12284] geneve0 speed is unknown, defaulting to 1000
[  301.127904][T12241] lo speed is unknown, defaulting to 1000
[  301.242663][T12325] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1518'.
[  301.315435][T12321] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.340620][T12321] bond0: (slave bond1): Enslaving as an active interface with an up link
[  301.555325][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'.
[  301.573929][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'.
[  301.632187][T12329] netlink: 'syz.3.1519': attribute type 5 has an invalid length.
[  301.922703][T10658] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  301.965452][T10658] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.017532][T10658] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.044071][T10658] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.146482][T12284] wlan1 speed is unknown, defaulting to 1000
[  302.408615][T12345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1522'.
[  302.659795][T12284] lo speed is unknown, defaulting to 1000
[  302.851683][T12355] netlink: 'syz.2.1526': attribute type 2 has an invalid length.
[  302.880770][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'.
[  303.190498][T12364] geneve0 speed is unknown, defaulting to 1000
[  303.863059][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'.
[  304.074085][T12364] wlan1 speed is unknown, defaulting to 1000
[  304.794170][T12364] lo speed is unknown, defaulting to 1000
[  305.146174][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'.
[  305.207017][T12434] bridge3: entered allmulticast mode
[  305.640132][T12441] geneve0 speed is unknown, defaulting to 1000
[  305.877058][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'.
[  306.036331][T12456] bridge0: entered promiscuous mode
[  306.064103][T12456] macvtap1: entered promiscuous mode
[  306.103727][T12456] macvtap1: entered allmulticast mode
[  306.135468][T12456] bridge0: entered allmulticast mode
[  306.489602][T12441] wlan1 speed is unknown, defaulting to 1000
[  306.549985][T12466] netlink: 'syz.0.1554': attribute type 4 has an invalid length.
[  306.602228][T12469] netlink: 'syz.0.1554': attribute type 4 has an invalid length.
[  306.843721][T12473] pim6reg: entered allmulticast mode
[  306.893284][T12477] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1559'.
[  306.904800][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'.
[  306.913810][T12475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1558'.
[  306.938506][T12477] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1559'.
[  306.990543][ T5158] block nbd6: Receive control failed (result -107)
[  307.033676][T12441] lo speed is unknown, defaulting to 1000
[  307.036293][T12475] nbd6: detected capacity change from 0 to 32
[  307.041213][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'.
[  307.330034][T12493] netlink: 'syz.3.1565': attribute type 10 has an invalid length.
[  307.522221][T12493] batman_adv: batadv0: Adding interface: team0
[  307.538935][T12493] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.594709][T12493] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  307.874678][T12497] geneve0 speed is unknown, defaulting to 1000
[  308.055425][T12508] block nbd1: server does not support multiple connections per device.
[  308.064146][T12508] block nbd1: shutting down sockets
[  308.356852][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'.
[  309.842885][T12530] Bluetooth: MGMT ver 1.23
[  310.243130][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'.
[  310.822173][T12497] wlan1 speed is unknown, defaulting to 1000
[  310.828642][T12498] geneve0 speed is unknown, defaulting to 1000
[  310.967606][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1576'.
[  311.032983][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1576'.
[  311.105397][T12548] vlan2: entered promiscuous mode
[  311.110484][T12548] bridge0: entered promiscuous mode
[  311.141317][T12548] vlan2: entered allmulticast mode
[  311.156948][T12548] bridge0: entered allmulticast mode
[  311.712425][T12546] geneve0 speed is unknown, defaulting to 1000
[  311.746625][T12497] lo speed is unknown, defaulting to 1000
[  311.774497][T12498] wlan1 speed is unknown, defaulting to 1000
[  312.297416][ T5158] Bluetooth: hci1: link tx timeout
[  312.302685][ T5158] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  312.557548][T12546] wlan1 speed is unknown, defaulting to 1000
[  312.661209][T12593] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1588'.
[  312.936863][T12546] lo speed is unknown, defaulting to 1000
[  312.963132][T12498] lo speed is unknown, defaulting to 1000
[  314.099435][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'.
[  314.374713][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  314.519706][T12627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.527872][T12627] syzkaller0: entered promiscuous mode
[  314.533387][T12627] syzkaller0: entered allmulticast mode
[  314.600225][T12627] tipc: Resetting bearer <eth:syzkaller0>
[  314.640315][T12626] tipc: Resetting bearer <eth:syzkaller0>
[  314.715795][T12626] tipc: Disabling bearer <eth:syzkaller0>
[  314.726130][T12629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.306829][T12647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1606'.
[  315.354813][T12649] batman_adv: batadv0: Removing interface: team0
[  315.779333][T12666] geneve0 speed is unknown, defaulting to 1000
[  315.980372][T12678] bridge4: the hash_elasticity option has been deprecated and is always 16
[  316.245822][T12694] sctp: [Deprecated]: syz.0.1617 (pid 12694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.245822][T12694] Use struct sctp_sack_info instead
[  316.352597][T12694] sctp: [Deprecated]: syz.0.1617 (pid 12694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.352597][T12694] Use struct sctp_sack_info instead
[  316.453237][T12666] wlan1 speed is unknown, defaulting to 1000
[  316.672828][T12705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.969198][T12666] lo speed is unknown, defaulting to 1000
[  317.066191][T12712] netlink: 'syz.3.1624': attribute type 1 has an invalid length.
[  317.129865][T12712] 8021q: adding VLAN 0 to HW filter on device bond2
[  317.298065][T12716] bond2: (slave veth7): Enslaving as an active interface with a down link
[  317.315405][T12711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.931306][T12735] netlink: 'syz.0.1629': attribute type 3 has an invalid length.
[  317.983024][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1629'.
[  318.013321][T12724] geneve0 speed is unknown, defaulting to 1000
[  318.300324][T12743] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1632'.
[  318.587357][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'.
[  318.730765][T12724] wlan1 speed is unknown, defaulting to 1000
[  318.731946][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'.
[  318.797226][T12760] netlink: 'syz.4.1635': attribute type 2 has an invalid length.
[  319.351350][T12724] lo speed is unknown, defaulting to 1000
[  319.426057][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'.
[  319.515732][T12789] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  319.539524][T12789] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  319.656852][T12798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  319.676966][T12796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1647'.
[  319.691746][T12798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  320.009772][T12811] bond0: entered promiscuous mode
[  320.058895][T12811] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  320.085059][T12811] bond1: entered promiscuous mode
[  320.163206][T12811] bond0: left promiscuous mode
[  320.183613][T12811] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  320.233756][T12811] bond1: left promiscuous mode
[  320.294444][T12805] geneve0 speed is unknown, defaulting to 1000
[  320.314347][T12820] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  321.250849][T12805] wlan1 speed is unknown, defaulting to 1000
[  321.266450][T12829] geneve0 speed is unknown, defaulting to 1000
[  321.477394][T12849] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.523993][T12849] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  321.686051][T12851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.800872][T12851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.908783][T12851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.081536][T12851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.143206][T12805] lo speed is unknown, defaulting to 1000
[  322.396653][T10658] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.454726][T10658] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.524423][T12829] wlan1 speed is unknown, defaulting to 1000
[  322.549468][T10665] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.582145][T10665] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.274948][T12829] lo speed is unknown, defaulting to 1000
[  324.027065][T12896] __nla_validate_parse: 5 callbacks suppressed
[  324.027085][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1670'.
[  324.601878][T12918] geneve0 speed is unknown, defaulting to 1000
[  325.070025][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  325.101230][T12919] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  325.109289][T12919] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  325.310593][T12935] netlink: 'syz.3.1680': attribute type 9 has an invalid length.
[  325.349033][T12935] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1680'.
[  325.475809][T12940] netlink: 'syz.1.1681': attribute type 1 has an invalid length.
[  325.476441][T12921] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  325.598858][T12940] 8021q: adding VLAN 0 to HW filter on device bond5
[  325.671584][T12943] 8021q: adding VLAN 0 to HW filter on device bond5
[  325.681865][T12943] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  325.694227][T12943] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  325.728171][T12940] ÿ: renamed from bond_slave_0
[  325.741493][T12918] wlan1 speed is unknown, defaulting to 1000
[  325.749490][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'.
[  325.831944][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1684'.
[  325.960664][T12959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1685'.
[  326.179837][T12918] lo speed is unknown, defaulting to 1000
[  326.191985][T12955] geneve0 speed is unknown, defaulting to 1000
[  326.493657][T12955] wlan1 speed is unknown, defaulting to 1000
[  326.767376][T12980] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.819096][T12980] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.096182][T12980] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.124708][T12980] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.185869][T12955] lo speed is unknown, defaulting to 1000
[  327.192488][T12990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1692'.
[  327.216445][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1694'.
[  327.246172][T12980] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.275586][T12980] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.423050][T12980] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.449112][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'.
[  327.450603][T12980] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.486352][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  327.734148][T10666] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.752455][T10666] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.814909][T10666] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.835145][T10666] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.879355][T10666] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.895151][T10666] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.941702][T12980] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.959640][T12980] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.056838][T13004] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1697'.
[  328.073040][T13004] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  328.081671][T12980] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.081707][T12980] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.115176][T13004] openvswitch: netlink: Duplicate key (type 0).
[  328.204518][T12980] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.274907][T12980] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.724815][T13024] smc: net device bond0 applied user defined pnetid SYZ
[  329.110473][T13037] netlink: 'syz.2.1707': attribute type 32 has an invalid length.
[  329.140681][T13037] __nla_validate_parse: 2 callbacks suppressed
[  329.140702][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'.
[  329.157506][T13037] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  329.404776][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  329.901151][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1716'.
[  330.211623][T13090] netlink: 1360 bytes leftover after parsing attributes in process `syz.1.1719'.
[  330.271771][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  330.310320][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'.
[  330.320882][T13084] syzkaller0: entered promiscuous mode
[  330.331669][T13084] syzkaller0: entered allmulticast mode
[  330.494158][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1723'.
[  330.550205][T13104] geneve0 speed is unknown, defaulting to 1000
[  330.563952][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'.
[  330.821828][T13122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.081414][T13120] tipc: Disabling bearer <eth:syzkaller0>
[  331.154160][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  331.503785][T13156] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1739'.
[  331.656464][   T30] audit: type=1800 audit(1754238277.843:3): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1737" name="cgroup.controllers" dev="tmpfs" ino=1897 res=0 errno=0
[  331.855486][T13104] wlan1 speed is unknown, defaulting to 1000
[  331.919983][T13168] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1742'.
[  332.615184][T13199] geneve0 speed is unknown, defaulting to 1000
[  332.776217][T13104] lo speed is unknown, defaulting to 1000
[  333.386812][T13199] wlan1 speed is unknown, defaulting to 1000
[  333.551011][T13222] bond7: entered promiscuous mode
[  333.556281][T13222] bond7: entered allmulticast mode
[  333.561846][T13222] 8021q: adding VLAN 0 to HW filter on device bond7
[  334.100260][T13199] lo speed is unknown, defaulting to 1000
[  334.469667][T13265] openvswitch: netlink: IP tunnel dst address not specified
[  334.512101][T13266] openvswitch: netlink: IP tunnel dst address not specified
[  334.792782][T13278] __nla_validate_parse: 1 callbacks suppressed
[  334.792803][T13278] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1770'.
[  335.465521][T13301] netlink: 'syz.3.1777': attribute type 3 has an invalid length.
[  335.494061][T13301] syz_tun: entered allmulticast mode
[  335.524472][T13301] siw: device registration error -23
[  335.643552][T13301] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.661734][T13301] 8021q: adding VLAN 0 to HW filter on device team0
[  335.684724][T13301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  335.701313][T13305] syzkaller1: entered promiscuous mode
[  335.720392][T13305] syzkaller1: entered allmulticast mode
[  335.731123][T13300] syz_tun: left allmulticast mode
[  335.942309][T13320] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  336.079874][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'.
[  336.126848][T13323] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1786'.
[  336.155019][T13323] netlink: zone id is out of range
[  336.174684][T13323] netlink: zone id is out of range
[  336.191668][T13323] netlink: zone id is out of range
[  336.214905][T13323] netlink: zone id is out of range
[  336.217394][T13340] erspan0: left allmulticast mode
[  336.235792][T13323] netlink: get zone limit has 8 unknown bytes
[  336.256446][T13340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  336.326335][T11478] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  336.393270][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1792'.
[  336.492661][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'.
[  336.562670][T10658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  336.668133][T13359] gtp0: entered promiscuous mode
[  336.683922][T13359] gtp0: entered allmulticast mode
[  336.946693][T13379] netlink: 'syz.0.1802': attribute type 1 has an invalid length.
[  336.975027][T13379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1802'.
[  337.030632][T13379] xt_socket: unknown flags 0xd0
[  337.074314][T13384] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1803'.
[  337.145605][T13384] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1803'.
[  337.167157][T11477] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.442201][T13412] netlink: 'syz.0.1807': attribute type 13 has an invalid length.
[  337.458402][T13412] netlink: 'syz.0.1807': attribute type 17 has an invalid length.
[  337.693584][T13412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.716462][T11477] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.723682][T13420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.760418][T13430] netlink: 'syz.1.1810': attribute type 29 has an invalid length.
[  337.776789][T13420] tipc: Disabling bearer <eth:syzkaller0>
[  337.972672][T13442] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  337.986397][T10666] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  337.996753][T10666] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.025483][T11477] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.079621][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'.
[  338.079621][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'.
[  338.113440][T11477] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.217858][T10655] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.227657][T10655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  338.239435][T10655] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.250264][T10655] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  338.259472][T10655] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.272950][T10655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  338.411748][T13462] bridge0: left allmulticast mode
[  338.420648][T11483] IPVS: starting estimator thread 0...
[  338.514812][T13479] IPVS: using max 24 ests per chain, 57600 per kthread
[  338.580916][T10655] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  338.604833][T10655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  338.625259][T10655] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.633671][T10655] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.663319][T10655] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.678125][T10655] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.692051][T13486] netlink: 'syz.0.1821': attribute type 12 has an invalid length.
[  338.937917][T13501] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  339.301430][T13504] geneve0 speed is unknown, defaulting to 1000
[  339.449921][T13518] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  339.561417][T13522] net_ratelimit: 3 callbacks suppressed
[  339.561437][T13522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  339.625857][T11477] lo speed is unknown, defaulting to 1000
[  339.643809][T11477] syz1: Port: 1 Link DOWN
[  339.908947][T13534] __nla_validate_parse: 4 callbacks suppressed
[  339.908968][T13534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1835'.
[  339.953892][T13534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1835'.
[  340.054762][ T5943] tipc: Node number set to 1497886856
[  340.281396][T13504] wlan1 speed is unknown, defaulting to 1000
[  340.634356][T13504] lo speed is unknown, defaulting to 1000
[  341.076353][T13559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  341.455517][T13576] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1848'.
[  341.553325][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1849'.
[  341.795734][T13585] geneve0 speed is unknown, defaulting to 1000
[  341.861815][T13598] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  341.901194][T13598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1853'.
[  341.935714][T13598] !
: entered promiscuous mode
[  341.945538][T13598] !
: entered allmulticast mode
[  341.977302][T13598] bridge0: port 1(
0!
) entered blocking state
[  342.015501][T13598] bridge0: port 1(
0!
) entered disabled state
[  342.050905][T13598] bridge0: port 1(
0!
) entered blocking state
[  342.057264][T13598] bridge0: port 1(
0!
) entered forwarding state
[  342.190092][T13603] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1855'.
[  342.424030][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  342.694164][T13585] wlan1 speed is unknown, defaulting to 1000
[  342.936233][T13632] netlink: 'syz.3.1864': attribute type 10 has an invalid length.
[  342.952459][T13632] dummy0: entered promiscuous mode
[  342.982771][T13632] team0: Port device dummy0 added
[  343.138873][T13630] geneve0 speed is unknown, defaulting to 1000
[  343.145972][T13635] netlink: 'syz.3.1864': attribute type 1 has an invalid length.
[  343.153733][T13635] netlink: 'syz.3.1864': attribute type 1 has an invalid length.
[  343.215916][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'.
[  343.319095][T13585] lo speed is unknown, defaulting to 1000
[  343.329572][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1868'.
[  343.362128][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'.
[  343.398322][T13645] bond3: entered promiscuous mode
[  343.404010][T13645] 8021q: adding VLAN 0 to HW filter on device bond3
[  343.524086][T13645] bond3 (unregistering): Released all slaves
[  343.558431][T13634] geneve0 speed is unknown, defaulting to 1000
[  343.647469][T13630] wlan1 speed is unknown, defaulting to 1000
[  344.168146][T13662] netlink: 'syz.3.1873': attribute type 10 has an invalid length.
[  344.177917][T13662] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  344.359881][T13630] lo speed is unknown, defaulting to 1000
[  344.422911][T13670] bond0: entered promiscuous mode
[  344.452276][T13670] batadv0: entered promiscuous mode
[  344.468737][T13670] debugfs: 'hsr1' already exists in 'hsr'
[  344.500858][T13670] Cannot create hsr debugfs directory
[  344.507413][T13670] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  344.520542][T13670] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  344.597223][T13670] hsr1: entered allmulticast mode
[  344.620872][T13670] bond0: entered allmulticast mode
[  344.628888][T13670] batadv0: entered allmulticast mode
[  344.639504][T13670] 8021q: adding VLAN 0 to HW filter on device hsr1
[  344.654497][T13670] bond0: left promiscuous mode
[  344.670410][T13670] batadv0: left promiscuous mode
[  344.705281][T13634] wlan1 speed is unknown, defaulting to 1000
[  345.105394][T11475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.295659][T11475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.380987][T13634] lo speed is unknown, defaulting to 1000
[  345.427204][T13711] __nla_validate_parse: 2 callbacks suppressed
[  345.427225][T13711] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1888'.
[  345.721666][T13719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1890'.
[  345.992731][T13719] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1890'.
[  346.031687][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'.
[  346.152021][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'.
[  346.178429][T13728] IPVS: Unknown mcast interface: vcan0
[  346.208918][ T5158] Bluetooth: hci2: command 0x0406 tx timeout
[  346.771338][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'.
[  347.413609][T13779] syzkaller0: entered promiscuous mode
[  347.436081][T13779] syzkaller0: entered allmulticast mode
[  347.485748][T13784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1911'.
[  347.506968][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'.
[  347.540314][T13784] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1911'.
[  347.592230][T13784] netlink: 'syz.1.1911': attribute type 3 has an invalid length.
[  347.613586][T13784] netlink: 'syz.1.1911': attribute type 2 has an invalid length.
[  347.644941][T13784] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1911'.
[  347.658987][T13784] netlink: 'syz.1.1911': attribute type 2 has an invalid length.
[  349.111802][T13861] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  349.141443][T13865] netlink: 'syz.4.1935': attribute type 3 has an invalid length.
[  349.159234][T13861] vti1: entered promiscuous mode
[  349.164298][T13861] vti1: entered allmulticast mode
[  349.195179][T13862] sctp: [Deprecated]: syz.2.1932 (pid 13862) Use of struct sctp_assoc_value in delayed_ack socket option.
[  349.195179][T13862] Use struct sctp_sack_info instead
[  349.427465][T13879] netlink: 'syz.3.1937': attribute type 4 has an invalid length.
[  349.544145][T13882] geneve0 speed is unknown, defaulting to 1000
[  349.773372][T13903] netlink: 'syz.2.1945': attribute type 1 has an invalid length.
[  349.841753][T10655] syzkaller0: tun_net_xmit 76
[  349.849981][T13903] netlink: 'syz.2.1945': attribute type 11 has an invalid length.
[  349.859183][T10655] syzkaller0: tun_net_xmit 48
[  349.867978][T11477] syzkaller0: tun_net_xmit 76
[  349.872487][T13882] wlan1 speed is unknown, defaulting to 1000
[  349.874266][T13879] geneve0 speed is unknown, defaulting to 1000
[  349.887218][T13903] netlink: 'syz.2.1945': attribute type 12 has an invalid length.
[  349.897558][T13904] syzkaller0: tun_net_xmit 76
[  349.915340][T13903] netlink: 'syz.2.1945': attribute type 64 has an invalid length.
[  349.922056][T13904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.965606][T13904] tipc: Resetting bearer <eth:syzkaller0>
[  349.971704][T13904] syzkaller0: tun_net_xmit 76
[  349.998335][T13911] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  350.012714][T13904] tipc: Enabled bearer <eth:geneve1>, priority 10
[  350.104904][    C1] syzkaller0: tun_net_xmit 76
[  350.120937][T13901] tipc: Resetting bearer <eth:syzkaller0>
[  351.503854][T13901] tipc: Disabling bearer <eth:syzkaller0>
[  351.528575][T13882] lo speed is unknown, defaulting to 1000
[  351.534531][T13879] wlan1 speed is unknown, defaulting to 1000
[  351.740679][T13913] netlink: 'syz.0.1946': attribute type 16 has an invalid length.
[  351.749962][T13913] netlink: 'syz.0.1946': attribute type 17 has an invalid length.
[  351.830046][T13913] bridge0: left promiscuous mode
[  351.844073][T13913] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.855223][T11483] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  351.870989][T13913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.894238][T13925] C: renamed from team_slave_0
[  351.914282][T13925] __nla_validate_parse: 3 callbacks suppressed
[  351.914307][T13925] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1948'.
[  351.936579][T13925] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  352.040730][T10658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.060988][T10658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.069132][T13879] lo speed is unknown, defaulting to 1000
[  352.444908][T11483] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.559510][T13939] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1952'.
[  352.765563][T11483] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.862353][T13947] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1949'.
[  353.004164][T13955] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  353.014418][T13929] geneve0 speed is unknown, defaulting to 1000
[  353.466065][T13969] openvswitch: netlink: Duplicate or invalid key (type 0).
[  353.473383][T13969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.497969][T13972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1959'.
[  353.590679][T13974] validate_nla: 1 callbacks suppressed
[  353.590700][T13974] netlink: 'syz.4.1960': attribute type 29 has an invalid length.
[  353.747700][T13929] wlan1 speed is unknown, defaulting to 1000
[  353.749034][T13976] geneve0 speed is unknown, defaulting to 1000
[  354.493776][T14005] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  354.552530][T13929] lo speed is unknown, defaulting to 1000
[  354.830151][T13976] wlan1 speed is unknown, defaulting to 1000
[  355.388767][T14026] macsec0: left allmulticast mode
[  355.436459][T13976] lo speed is unknown, defaulting to 1000
[  355.752857][T14030] dummy0: left promiscuous mode
[  355.759910][T14032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'.
[  355.769501][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'.
[  355.804861][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  355.815858][T14030] team0: Port device dummy0 removed
[  355.849097][T14030] bond0: (slave bond1): Releasing backup interface
[  355.867795][T14030] bond2: (slave veth7): Releasing active interface
[  355.985916][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'.
[  356.159246][T14041] gtp1: entered promiscuous mode
[  356.412693][T14051] dvmrp8: entered allmulticast mode
[  356.465181][T14046] dvmrp8: left allmulticast mode
[  356.632039][T14055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1979'.
[  357.122576][T14076] netlink: 'syz.4.1984': attribute type 3 has an invalid length.
[  357.171282][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1984'.
[  357.174264][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  357.363746][T14086] netlink: 'syz.3.1987': attribute type 1 has an invalid length.
[  357.388735][T14086] netlink: 'syz.3.1987': attribute type 1 has an invalid length.
[  357.440069][T14089] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  357.644753][T14099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.694090][T14099] syzkaller0: entered promiscuous mode
[  357.702767][T14099] syzkaller0: entered allmulticast mode
[  357.727270][T14099] netlink: 'syz.4.1991': attribute type 7 has an invalid length.
[  357.811711][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'.
[  358.011663][T14098] tipc: Resetting bearer <eth:syzkaller0>
[  358.125773][T14098] tipc: Disabling bearer <eth:syzkaller0>
[  358.190265][T14118] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.226016][T14118] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  358.243046][T14118] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  358.343743][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'.
[  358.584251][T14142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.659133][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.693841][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.891126][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'.
[  358.924258][T14146] tipc: Disabling bearer <eth:syzkaller0>
[  358.969733][T14154] netlink: 'syz.3.2008': attribute type 23 has an invalid length.
[  358.979025][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'.
[  359.027694][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'.
[  359.103584][T14163] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  359.146568][T14167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2006'.
[  359.280829][T14179] netlink: 'syz.0.2013': attribute type 10 has an invalid length.
[  359.289433][T14180] netlink: 'syz.0.2013': attribute type 10 has an invalid length.
[  359.297625][T14179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2013'.
[  359.314704][T14180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2013'.
[  359.346261][T14177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.365825][T14179] !
: entered promiscuous mode
[  359.371466][T14179] bridge0: port 3(
0!
) entered blocking state
[  359.450235][T14179] bridge0: port 3(
0!
) entered disabled state
[  359.472309][T14194] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  359.484969][T14179] !
: entered allmulticast mode
[  359.512990][T14179] bridge0: port 3(
0!
) entered blocking state
[  359.519355][T14179] bridge0: port 3(
0!
) entered forwarding state
[  359.584704][T14177] syzkaller0: entered promiscuous mode
[  359.590422][T14177] syzkaller0: entered allmulticast mode
[  359.718952][T14201] syzkaller0: mtu less than device minimum
[  359.782108][T14176] tipc: Resetting bearer <eth:syzkaller0>
[  359.917092][T14176] tipc: Disabling bearer <eth:syzkaller0>
[  360.225136][T14194] geneve0 speed is unknown, defaulting to 1000
[  360.667065][T14243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.896292][T14194] wlan1 speed is unknown, defaulting to 1000
[  360.963857][T14253] netpci0: tun_chr_ioctl cmd 1074025681
[  361.531148][T14194] lo speed is unknown, defaulting to 1000
[  362.398801][T14303] syzkaller0: entered promiscuous mode
[  362.412874][T14311] __nla_validate_parse: 8 callbacks suppressed
[  362.412894][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'.
[  362.437976][T14303] syzkaller0: entered allmulticast mode
[  362.456314][T14281] netlink: 'syz.4.2032': attribute type 7 has an invalid length.
[  362.474256][T14311] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  362.493334][T14281] netlink: 'syz.4.2032': attribute type 3 has an invalid length.
[  362.509657][T14281] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2032'.
[  362.528920][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.547995][T14313] netlink: 'syz.0.2040': attribute type 10 has an invalid length.
[  362.562797][T14313] bridge0: port 3(
0!
) entered disabled state
[  362.577712][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'.
[  362.621529][T14313] !
: left allmulticast mode
[  362.637170][T14313] !
: left promiscuous mode
[  362.656497][T14313] bridge0: port 3(
0!
) entered disabled state
[  362.895433][T14320] geneve0 speed is unknown, defaulting to 1000
[  363.335179][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  363.355009][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'.
[  363.733035][T14321] netlink: 'syz.0.2042': attribute type 13 has an invalid length.
[  363.806325][T11475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  363.817437][T14321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  363.938671][T14320] wlan1 speed is unknown, defaulting to 1000
[  364.136348][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'.
[  364.353132][T14355] geneve0 speed is unknown, defaulting to 1000
[  364.401990][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'.
[  364.487956][T14320] lo speed is unknown, defaulting to 1000
[  364.711191][T14368] macvlan0: entered allmulticast mode
[  364.725102][T14368] veth1_vlan: entered allmulticast mode
[  364.766671][T14372] netlink: 'syz.2.2057': attribute type 2 has an invalid length.
[  364.805566][T11475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.833647][T14368] macvlan0: entered promiscuous mode
[  364.864616][T14368] team0: Port device macvlan0 added
[  365.137756][T14355] wlan1 speed is unknown, defaulting to 1000
[  365.146037][T14378] netlink: 'syz.2.2060': attribute type 13 has an invalid length.
[  365.255824][T14378] netlink: 'syz.2.2060': attribute type 17 has an invalid length.
[  365.332130][T14378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.356394][T11483] lo speed is unknown, defaulting to 1000
[  365.362369][T11483] syz1: Port: 1 Link ACTIVE
[  365.428633][T14390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2062'.
[  365.464281][T14396] netlink: 'syz.2.2064': attribute type 1 has an invalid length.
[  365.541295][T14390] can: request_module (can-proto-5) failed.
[  365.588977][T14355] lo speed is unknown, defaulting to 1000
[  365.636128][T14400] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2065'.
[  365.657944][T14399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2065'.
[  365.830179][T14408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.854007][T14404] geneve0 speed is unknown, defaulting to 1000
[  365.986208][T14408] tipc: Disabling bearer <eth:syzkaller0>
[  366.063726][T14416] IPv6: syztnl1: Disabled Multicast RS
[  366.403087][T14431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.463866][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2074'.
[  366.603682][T14404] wlan1 speed is unknown, defaulting to 1000
[  366.634845][T14437] ip_vti0: entered allmulticast mode
[  367.421867][T14462] netlink: 'syz.0.2082': attribute type 1 has an invalid length.
[  367.453581][T14404] lo speed is unknown, defaulting to 1000
[  367.869737][T14464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.990208][T14478] syzkaller0: entered promiscuous mode
[  367.997009][T14478] syzkaller0: entered allmulticast mode
[  368.146876][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'.
[  368.321292][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'.
[  369.546407][T14464] tipc: Resetting bearer <eth:syzkaller0>
[  369.662379][T14495] netlink: 'syz.0.2091': attribute type 11 has an invalid length.
[  369.682301][T14463] tipc: Resetting bearer <eth:syzkaller0>
[  369.698448][T14495] netlink: 'syz.0.2091': attribute type 4 has an invalid length.
[  369.708956][T14495] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2091'.
[  369.781913][T14463] tipc: Disabling bearer <eth:syzkaller0>
[  369.936622][T14503] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2093'.
[  370.230599][T14511] netlink: 'syz.3.2095': attribute type 13 has an invalid length.
[  370.249829][T14511] netlink: 'syz.3.2095': attribute type 17 has an invalid length.
[  370.347192][T14511] ip_vti0: left allmulticast mode
[  370.367146][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'.
[  370.423840][T14511] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.442399][T14511] 8021q: adding VLAN 0 to HW filter on device team0
[  370.451328][T11469] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.585919][T11469] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.659902][T14511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.697952][T10652] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.713885][T10652] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.788145][T14512] geneve0 speed is unknown, defaulting to 1000
[  370.893627][T11469] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.908962][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'.
[  370.930085][T14533] netlink: 'syz.0.2101': attribute type 1 has an invalid length.
[  370.958604][T14533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2101'.
[  371.267543][T14512] wlan1 speed is unknown, defaulting to 1000
[  371.403894][T14556] macsec3: entered promiscuous mode
[  371.418754][T14556] macsec3: entered allmulticast mode
[  371.432983][T14559] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.899748][T14512] lo speed is unknown, defaulting to 1000
[  372.117108][T10667] nci: nci_ntf_packet: unknown ntf opcode 0xc
[  372.996669][T14623] netlink: 'syz.3.2123': attribute type 1 has an invalid length.
[  373.028514][T14623] netlink: 'syz.3.2123': attribute type 10 has an invalid length.
[  373.059450][T14623] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2123'.
[  373.192821][T14636] netlink: 'syz.3.2123': attribute type 21 has an invalid length.
[  373.208317][T14636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2123'.
[  373.229597][T14635] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  373.300157][T14635] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  373.716115][T14662] syzkaller1: entered promiscuous mode
[  373.746160][T14662] syzkaller1: entered allmulticast mode
[  373.787513][T14675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.834059][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2132'.
[  373.841142][T14663] syzkaller0: entered promiscuous mode
[  373.885167][T14663] syzkaller0: entered allmulticast mode
[  373.999901][T14663] tipc: Resetting bearer <eth:syzkaller0>
[  374.011674][T14661] tipc: Resetting bearer <eth:syzkaller0>
[  374.020285][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'.
[  374.082720][T14661] tipc: Disabling bearer <eth:syzkaller0>
[  374.365164][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  374.472779][T14707] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  374.490813][T10652] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.501971][T10652] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.517033][T10652] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.531680][T10652] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.690112][T14716] geneve2: entered promiscuous mode
[  374.708032][T10655] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.717611][T10655] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.732539][T10655] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.741407][T10655] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.235467][T14754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.251935][T14754] syzkaller0: entered promiscuous mode
[  375.270600][T14754] syzkaller0: entered allmulticast mode
[  375.315441][T14754] tipc: Resetting bearer <eth:syzkaller0>
[  375.458854][T14767] tipc: Resetting bearer <eth:syzkaller0>
[  375.466817][T14769] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2154'.
[  375.543907][T14767] tipc: Disabling bearer <eth:syzkaller0>
[  375.856392][T14794] netlink: 'syz.0.2163': attribute type 21 has an invalid length.
[  375.867894][T14794] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2163'.
[  375.878290][T14794] netlink: 'syz.0.2163': attribute type 4 has an invalid length.
[  375.895490][T14794] netlink: 'syz.0.2163': attribute type 5 has an invalid length.
[  375.915101][T14794] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2163'.
[  375.938154][T14797] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2163'.
[  375.968886][T14797] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  376.215066][T14815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2168'.
[  376.607909][T14833] bridge0: port 1(erspan0) entered blocking state
[  376.633141][T14833] bridge0: port 1(erspan0) entered disabled state
[  376.649854][T14833] erspan0: entered allmulticast mode
[  376.673755][T14833] erspan0: entered promiscuous mode
[  376.714315][T14842] erspan0: left allmulticast mode
[  376.739968][T14842] erspan0: left promiscuous mode
[  376.763715][T14842] bridge0: port 1(erspan0) entered disabled state
[  377.041610][T14846] geneve0 speed is unknown, defaulting to 1000
[  377.243053][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'.
[  377.280712][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'.
[  377.955764][T14892] delete_channel: no stack
[  378.044968][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  378.301086][T14907] bond0: Error: Cannot enslave bond to itself.
[  378.502844][T14846] wlan1 speed is unknown, defaulting to 1000
[  378.510066][T14856] geneve0 speed is unknown, defaulting to 1000
[  379.016516][T14915] __nla_validate_parse: 6 callbacks suppressed
[  379.016537][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'.
[  379.101689][T14919] Bluetooth: MGMT ver 1.23
[  379.306290][T14846] lo speed is unknown, defaulting to 1000
[  379.316403][T14856] wlan1 speed is unknown, defaulting to 1000
[  379.354962][T14929] IPVS: length: 4096 != 8
[  379.456657][T14934] bridge0: entered allmulticast mode
[  379.462797][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2194'.
[  379.472166][T14934] !
: left allmulticast mode
[  379.485970][T14934] !
: left promiscuous mode
[  379.490771][T14934] bridge0: port 1(
0!
) entered disabled state
[  379.527416][T14934] bridge0 (unregistering): left allmulticast mode
[  379.946824][T14856] lo speed is unknown, defaulting to 1000
[  380.235303][T14946] geneve0 speed is unknown, defaulting to 1000
[  380.558798][T14958] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2200'.
[  380.767041][T14962] TCP: TCP_TX_DELAY enabled
[  380.859635][T14946] wlan1 speed is unknown, defaulting to 1000
[  381.202032][T14946] lo speed is unknown, defaulting to 1000
[  381.884723][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  382.106030][T14998] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2210'.
[  382.560771][T15007] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2212'.
[  382.919364][T15011] geneve0 speed is unknown, defaulting to 1000
[  383.087001][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'.
[  383.441252][T15011] wlan1 speed is unknown, defaulting to 1000
[  383.442104][T15030] geneve0 speed is unknown, defaulting to 1000
[  383.940967][T15030] wlan1 speed is unknown, defaulting to 1000
[  383.948548][T15011] lo speed is unknown, defaulting to 1000
[  384.378066][T15030] lo speed is unknown, defaulting to 1000
[  385.507955][T15052] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.538509][T15052] sch_fq: defrate 257 ignored.
[  385.689217][T15056] macvtap1: entered allmulticast mode
[  385.695312][T15056] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  385.706021][T15056] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  385.762053][T15058] veth11: entered promiscuous mode
[  385.967088][T10652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.976228][T10652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.382180][T15079] 8021q: VLANs not supported on wg0
[  386.650146][T15094] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.762210][T15094] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.783289][T15066] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  386.823656][T15096] geneve0 speed is unknown, defaulting to 1000
[  386.873874][T15094] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.971950][T15094] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.097153][T10652] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  387.161956][T10652] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  387.202222][T10652] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  387.243433][T10659] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  387.382520][T15096] wlan1 speed is unknown, defaulting to 1000
[  387.693539][T15113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.721985][T15113] syzkaller0: entered promiscuous mode
[  387.732797][T15120] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003
[  387.744472][T15113] syzkaller0: entered allmulticast mode
[  387.763742][T15113] tipc: Resetting bearer <eth:syzkaller0>
[  387.778520][T15096] lo speed is unknown, defaulting to 1000
[  387.791897][T15111] tipc: Resetting bearer <eth:syzkaller0>
[  387.836412][T15111] tipc: Disabling bearer <eth:syzkaller0>
[  387.896203][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'.
[  388.367490][T15146] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2252'.
[  388.593698][T15161] sctp: [Deprecated]: syz.0.2255 (pid 15161) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.593698][T15161] Use struct sctp_sack_info instead
[  388.983947][T15173] smc: adding net device bond0 with user defined pnetid SYZ2
[  388.997539][T15173] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.137731][T15186] netlink: 'syz.4.2262': attribute type 12 has an invalid length.
[  389.232562][T15193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.249337][T15193] syzkaller0: entered promiscuous mode
[  389.267504][T15193] syzkaller0: entered allmulticast mode
[  389.312026][T15193] tipc: Resetting bearer <eth:syzkaller0>
[  389.390252][T15185] tipc: Resetting bearer <eth:syzkaller0>
[  389.428666][T15185] tipc: Disabling bearer <eth:syzkaller0>
[  389.651710][T15215] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  389.702921][T15217] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2270'.
[  390.037846][T15236] netlink: 'syz.4.2277': attribute type 2 has an invalid length.
[  390.120488][T15238] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2276'.
[  390.320130][T15244] geneve0 speed is unknown, defaulting to 1000
[  390.779071][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'.
[  390.809190][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'.
[  390.840725][T15264] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2283'.
[  390.861176][T15262] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  390.913310][T15263] geneve0 speed is unknown, defaulting to 1000
[  390.920313][T15244] wlan1 speed is unknown, defaulting to 1000
[  391.058958][T15271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2286'.
[  391.307177][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2288'.
[  391.466951][T15244] lo speed is unknown, defaulting to 1000
[  391.489671][T15263] wlan1 speed is unknown, defaulting to 1000
[  391.803735][T15289] geneve0 speed is unknown, defaulting to 1000
[  391.984953][T15296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2296'.
[  392.388767][T15308] GUP no longer grows the stack in syz.2.2301 (15308): 200000002000-20000000a000 (200000001000)
[  392.425793][T15308] CPU: 1 UID: 0 PID: 15308 Comm: syz.2.2301 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  392.425827][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  392.425847][T15308] Call Trace:
[  392.425857][T15308]  <TASK>
[  392.425870][T15308]  dump_stack_lvl+0x189/0x250
[  392.425904][T15308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.425928][T15308]  ? __pfx__printk+0x10/0x10
[  392.425951][T15308]  ? find_vma+0xe7/0x160
[  392.425999][T15308]  __get_user_pages+0x2a60/0x30b0
[  392.426069][T15308]  ? __pfx___get_user_pages+0x10/0x10
[  392.426108][T15308]  __gup_longterm_locked+0xd66/0x15b0
[  392.426143][T15308]  ? try_grab_folio_fast+0x35b/0x4f0
[  392.426180][T15308]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  392.426218][T15308]  gup_fast_fallback+0x1cd4/0x2260
[  392.426245][T15308]  ? is_bpf_text_address+0x26/0x2b0
[  392.426331][T15308]  ? __pfx_gup_fast_fallback+0x10/0x10
[  392.426355][T15308]  ? stack_trace_save+0x9c/0xe0
[  392.426380][T15308]  ? stack_depot_save_flags+0x40/0x900
[  392.426408][T15308]  ? pin_user_pages_fast+0x4d/0xb0
[  392.426439][T15308]  iov_iter_extract_pages+0x35a/0x5e0
[  392.426486][T15308]  extract_iter_to_sg+0xe46/0x24e0
[  392.426528][T15308]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  392.426574][T15308]  ? __asan_memset+0x22/0x50
[  392.426603][T15308]  af_alg_get_rsgl+0x436/0x810
[  392.426654][T15308]  aead_recvmsg+0x4cc/0x13f0
[  392.426701][T15308]  ? __pfx_aead_recvmsg+0x10/0x10
[  392.426720][T15308]  ? __schedule+0x1755/0x4d30
[  392.426750][T15308]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  392.426775][T15308]  ? __pfx_aead_recvmsg+0x10/0x10
[  392.426797][T15308]  sock_recvmsg_nosec+0x186/0x1c0
[  392.426829][T15308]  ____sys_recvmsg+0x3aa/0x460
[  392.426862][T15308]  ? __pfx_____sys_recvmsg+0x10/0x10
[  392.426901][T15308]  ? import_iovec+0x74/0xa0
[  392.426933][T15308]  ___sys_recvmsg+0x1b5/0x510
[  392.426981][T15308]  ? __pfx____sys_recvmsg+0x10/0x10
[  392.427043][T15308]  ? __might_fault+0xb0/0x130
[  392.427079][T15308]  do_recvmmsg+0x307/0x770
[  392.427114][T15308]  ? __pfx_do_recvmmsg+0x10/0x10
[  392.427135][T15308]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  392.427181][T15308]  ? __pfx_do_futex+0x10/0x10
[  392.427227][T15308]  __x64_sys_recvmmsg+0x190/0x240
[  392.427254][T15308]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  392.427276][T15308]  ? rcu_is_watching+0x15/0xb0
[  392.427315][T15308]  ? do_syscall_64+0xbe/0x3b0
[  392.427352][T15308]  do_syscall_64+0xfa/0x3b0
[  392.427382][T15308]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.427412][T15308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.427433][T15308]  ? clear_bhb_loop+0x60/0xb0
[  392.427468][T15308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.427489][T15308] RIP: 0033:0x7f94b238eb69
[  392.427508][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.427527][T15308] RSP: 002b:00007f94b32ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  392.427558][T15308] RAX: ffffffffffffffda RBX: 00007f94b25b5fa0 RCX: 00007f94b238eb69
[  392.427574][T15308] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000d
[  392.427587][T15308] RBP: 00007f94b2411df1 R08: 0000000000000000 R09: 0000000000000000
[  392.427600][T15308] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  392.427613][T15308] R13: 0000000000000000 R14: 00007f94b25b5fa0 R15: 00007ffd040e5368
[  392.427649][T15308]  </TASK>
[  392.536603][T15263] lo speed is unknown, defaulting to 1000
[  392.553678][T15289] wlan1 speed is unknown, defaulting to 1000
[  392.586014][T15315] pimreg: left allmulticast mode
[  392.704602][   T30] audit: type=1804 audit(1754238338.753:4): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2301" name="/newroot/478/x000000000000000400000000000000000000004" dev="tmpfs" ino=2453 res=1 errno=0
[  392.785566][T15315] lo: left allmulticast mode
[  392.897831][   T30] audit: type=1800 audit(1754238338.753:5): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2301" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=2453 res=0 errno=0
[  393.521133][T15344] __nla_validate_parse: 1 callbacks suppressed
[  393.521155][T15344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2306'.
[  393.688417][T15289] lo speed is unknown, defaulting to 1000
[  394.296463][T15347] geneve0 speed is unknown, defaulting to 1000
[  394.763641][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'.
[  394.913141][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'.
[  394.935742][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2314'.
[  395.107907][T15374] geneve3: entered promiscuous mode
[  395.134190][T15347] wlan1 speed is unknown, defaulting to 1000
[  395.135718][T10667] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  395.179540][T10667] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  395.319370][T10667] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  395.342327][T10667] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  395.386309][T15388] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2317'.
[  395.432426][T15387] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2317'.
[  395.706544][T15393] geneve0 speed is unknown, defaulting to 1000
[  395.788205][T15347] lo speed is unknown, defaulting to 1000
[  395.964747][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  396.232006][T15407] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2324'.
[  396.371912][T15393] wlan1 speed is unknown, defaulting to 1000
[  396.475459][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'.
[  396.508419][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2326'.
[  396.521670][T15417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2326'.
[  396.551868][T15414] tipc: Invalid UDP bearer configuration
[  396.551932][T15414] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  396.617664][T15419] netlink: 'syz.3.2328': attribute type 10 has an invalid length.
[  396.645624][T15419] dummy0: entered promiscuous mode
[  396.651734][T15419] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  396.717465][T15419] netlink: 'syz.3.2328': attribute type 3 has an invalid length.
[  396.798356][T15424] netlink: 'syz.0.2330': attribute type 1 has an invalid length.
[  396.832175][T15424] bond8: entered promiscuous mode
[  396.839729][T15424] 8021q: adding VLAN 0 to HW filter on device bond8
[  396.923873][T15424] bond8: (slave bridge3): making interface the new active one
[  396.955915][T15424] bridge3: entered promiscuous mode
[  396.982384][T15424] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  397.028139][T15393] lo speed is unknown, defaulting to 1000
[  397.046499][T15421] geneve0 speed is unknown, defaulting to 1000
[  397.336452][T15436] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  397.569857][T15439] vxlan0: entered promiscuous mode
[  397.603152][T15439] vxlan0: left promiscuous mode
[  398.538117][T15421] wlan1 speed is unknown, defaulting to 1000
[  399.077267][T15421] lo speed is unknown, defaulting to 1000
[  399.485971][T15477] __nla_validate_parse: 3 callbacks suppressed
[  399.485991][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2344'.
[  399.502192][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2345'.
[  400.023714][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'.
[  400.130783][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'.
[  400.141401][T15498] bridge0: entered allmulticast mode
[  400.310352][T15502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2350'.
[  400.762471][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2357'.
[  400.793878][T15521] netlink: 'syz.4.2357': attribute type 1 has an invalid length.
[  400.803395][T15521] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2357'.
[  400.817639][T15521] siw: device registration error -23
[  400.943565][T15527] geneve0 speed is unknown, defaulting to 1000
[  401.341129][T15538] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2364'.
[  401.550907][T15527] wlan1 speed is unknown, defaulting to 1000
[  401.707141][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'.
[  401.713782][T15550] geneve0 speed is unknown, defaulting to 1000
[  402.422518][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2371'.
[  402.569368][T15567] macvlan2: entered promiscuous mode
[  402.610358][T15567] macvlan2: entered allmulticast mode
[  402.622901][T15567] bond4: (slave macvlan2): Opening slave failed
[  402.670181][T15527] lo speed is unknown, defaulting to 1000
[  402.670295][T15550] wlan1 speed is unknown, defaulting to 1000
[  403.278217][T15550] lo speed is unknown, defaulting to 1000
[  403.292299][T15560] smc: removing ib device syz2
[  403.463733][T15584] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  403.472249][T15584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.336825][T15597] openvswitch: netlink: Key type 16144 is out of range max 32
[  405.626971][T15611] netlink: 'syz.3.2384': attribute type 30 has an invalid length.
[  406.753743][T15636] netlink: 'syz.4.2390': attribute type 3 has an invalid length.
[  406.762350][T15636] __nla_validate_parse: 3 callbacks suppressed
[  406.762367][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2390'.
[  406.780194][T15636] netlink: 'syz.4.2390': attribute type 3 has an invalid length.
[  406.795736][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2390'.
[  407.192568][T15654] geneve0 speed is unknown, defaulting to 1000
[  407.313342][T15659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2396'.
[  407.549512][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'.
[  408.052819][T15654] lo speed is unknown, defaulting to 1000
[  408.125534][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  408.721446][T15713] vlan0: entered promiscuous mode
[  409.289755][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'.
[  409.321917][T15742] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2419'.
[  409.570361][T15756] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2423'.
[  409.673750][T15763] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2425'.
[  409.772104][T15763] geneve2: left promiscuous mode
[  409.780008][T15763] gretap1: left promiscuous mode
[  409.799290][T15763] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  409.810618][T15775] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2428'.
[  409.827195][T15763] geneve3: left promiscuous mode
[  409.837588][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2427'.
[  410.223650][T15800] syzkaller1: tun_chr_ioctl cmd 1074025672
[  410.261531][T15800] syzkaller1: ignored: set checksum disabled
[  410.313691][T15800] syzkaller1: tun_chr_ioctl cmd 1074025680
[  410.842676][T15830] netlink: 'syz.0.2442': attribute type 23 has an invalid length.
[  411.548913][T15850] netlink: 'syz.4.2445': attribute type 1 has an invalid length.
[  411.728473][T15852] syzkaller0: entered promiscuous mode
[  411.742768][T15857] openvswitch: netlink: Key 6 has unexpected len 232 expected 2
[  411.761752][T15852] syzkaller0: entered allmulticast mode
[  411.806382][T15856] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  412.278686][T15882] geneve0 speed is unknown, defaulting to 1000
[  412.496128][T15894] __nla_validate_parse: 5 callbacks suppressed
[  412.496148][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'.
[  412.548838][T15896] netlink: 'syz.3.2459': attribute type 4 has an invalid length.
[  412.662676][T15894] netlink: 'syz.3.2459': attribute type 4 has an invalid length.
[  412.874271][T15903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2461'.
[  413.070136][T15882] lo speed is unknown, defaulting to 1000
[  413.164381][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'.
[  413.171439][T15915] netlink: 'syz.4.2467': attribute type 39 has an invalid length.
[  413.329983][T15920] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  413.338669][T15920] syzkaller0: entered allmulticast mode
[  413.487319][T15914] tipc: Disabling bearer <eth:syzkaller0>
[  413.924030][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'.
[  414.042166][T15955] bridge_slave_0: invalid flags given to default FDB implementation
[  414.374047][T15975] netlink: 'syz.3.2484': attribute type 1 has an invalid length.
[  415.311085][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'.
[  415.320668][T16015] IPVS: Unknown mcast interface: vcan0
[  415.996843][T16057] netlink: 'syz.3.2508': attribute type 1 has an invalid length.
[  416.059646][T16060] veth1_to_bond: entered allmulticast mode
[  416.076236][T16060] bond_slave_1: entered promiscuous mode
[  416.089293][T16058] bond_slave_1: left promiscuous mode
[  416.096810][T16058] veth1_to_bond: left allmulticast mode
[  416.240540][T16073] geneve0 speed is unknown, defaulting to 1000
[  416.564921][T16093] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2520'.
[  416.580228][T16093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2520'.
[  416.661736][T16095] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2519'.
[  416.782751][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'.
[  416.829367][T16097] geneve0 speed is unknown, defaulting to 1000
[  416.836143][T16099] netlink: 'syz.2.2522': attribute type 20 has an invalid length.
[  416.847996][T16073] lo speed is unknown, defaulting to 1000
[  416.854314][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'.
[  416.884995][T16099] netlink: 'syz.2.2522': attribute type 20 has an invalid length.
[  417.623362][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'.
[  417.656991][T16117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2526'.
[  417.682925][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'.
[  417.723225][T16117] sctp: [Deprecated]: syz.2.2526 (pid 16117) Use of struct sctp_assoc_value in delayed_ack socket option.
[  417.723225][T16117] Use struct sctp_sack_info instead
[  417.741785][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2526'.
[  417.761533][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2526'.
[  417.806929][T16097] lo speed is unknown, defaulting to 1000
[  417.960319][T16123] 8021q: adding VLAN 0 to HW filter on device ipvlan44
[  418.006045][T16123] bond0: (slave ipvlan44): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  418.157614][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'.
[  418.465488][T16137] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2533'.
[  418.613789][ T5851] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  418.749186][T16152] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2537'.
[  418.788198][T16152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2537'.
[  418.805852][T16149] netlink: 'syz.1.2536': attribute type 5 has an invalid length.
[  418.821939][T16150] netlink: 'syz.1.2536': attribute type 7 has an invalid length.
[  418.900134][T16159] tun0: tun_chr_ioctl cmd 35111
[  419.086385][T16167] macsec4: entered promiscuous mode
[  419.105373][T16167] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  419.112734][T16167] macsec4: entered allmulticast mode
[  419.113354][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'.
[  419.119315][T16167] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  419.797235][T16173] tipc: Resetting bearer <eth:ipvlan1>
[  419.876860][T11475] lo speed is unknown, defaulting to 1000
[  419.894512][T11475] syz1: Port: 1 Link DOWN
[  419.939927][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.957694][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  419.973405][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  419.982803][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  419.997885][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.008017][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  420.041903][T16190] geneve0 speed is unknown, defaulting to 1000
[  420.050492][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  420.075426][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.110005][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  420.132754][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  420.148648][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  420.157856][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  420.802961][T16190] lo speed is unknown, defaulting to 1000
[  421.693917][T16257] tipc: Invalid UDP bearer configuration
[  421.693973][T16257] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  421.763252][T16251] geneve0 speed is unknown, defaulting to 1000
[  423.062676][T16279] geneve0 speed is unknown, defaulting to 1000
[  423.070033][T16251] lo speed is unknown, defaulting to 1000
[  423.484743][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  423.536896][T16312] __nla_validate_parse: 2 callbacks suppressed
[  423.536916][T16312] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2571'.
[  423.760789][T16279] lo speed is unknown, defaulting to 1000
[  424.120455][T16324] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2575'.
[  424.446244][T16338] netlink: 'syz.0.2580': attribute type 4 has an invalid length.
[  424.467083][T16338] netlink: 'syz.0.2580': attribute type 10 has an invalid length.
[  424.778755][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2585'.
[  424.790886][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2585'.
[  424.925942][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2586'.
[  425.159128][T16364] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2590'.
[  425.697576][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'.
[  425.709568][T16389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2596'.
[  425.717274][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2597'.
[  425.770581][T16389] tap0: tun_chr_ioctl cmd 35108
[  426.101944][T16405] netlink: 'syz.3.2602': attribute type 10 has an invalid length.
[  426.159738][T16405] macvlan0: left promiscuous mode
[  426.185937][T11483] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.245448][T16405] veth1_vlan: left allmulticast mode
[  426.261452][T16405] team0: Port device macvlan0 removed
[  426.385432][T11483] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.427453][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2606'.
[  426.542621][T16429] !
: entered allmulticast mode
[  426.592675][T16427] !
: left allmulticast mode
[  426.760494][T16446] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  426.792275][   T30] audit: type=1800 audit(1754238372.973:6): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2611" name="cgroup.controllers" dev="tmpfs" ino=2414 res=0 errno=0
[  427.248953][T16471] 8021q: VLANs not supported on ip6_vti0
[  427.256703][T16474] netlink: 'syz.0.2622': attribute type 83 has an invalid length.
[  427.537571][T16482] team0 (unregistering): Port device batadv1 removed
[  427.638225][T16502] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  427.689471][T16505] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  427.725070][T16507] gtp0: entered promiscuous mode
[  428.588876][T16550] __nla_validate_parse: 17 callbacks suppressed
[  428.588897][T16550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2644'.
[  428.604483][T16548] IPv6: Can't replace route, no match found
[  429.034371][T16566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2645'.
[  429.095859][T16565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.146874][T16565] syzkaller1: entered promiscuous mode
[  429.152402][T16565] syzkaller1: entered allmulticast mode
[  429.167643][T16565] netlink: 'syz.4.2648': attribute type 1 has an invalid length.
[  429.409511][T16574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2652'.
[  429.491659][T16577] netlink: 'syz.4.2651': attribute type 10 has an invalid length.
[  429.584134][T16577] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2651'.
[  429.801627][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2657'.
[  429.949646][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2660'.
[  429.986183][T16603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2660'.
[  430.015633][T16602] geneve0 speed is unknown, defaulting to 1000
[  430.018268][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2659'.
[  430.124073][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2659'.
[  430.148337][T16609] bridge7: entered promiscuous mode
[  430.154075][T16609] macsec0: entered promiscuous mode
[  430.170587][T16609] macsec0: entered allmulticast mode
[  430.180597][T16609] bridge7: entered allmulticast mode
[  430.206716][T16609] bridge7: port 1(macsec0) entered blocking state
[  430.219327][T16609] bridge7: port 1(macsec0) entered disabled state
[  430.262979][T16609] bridge7: left allmulticast mode
[  430.275905][T16609] bridge7: left promiscuous mode
[  430.381253][T16620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2663'.
[  430.706490][T16602] lo speed is unknown, defaulting to 1000
[  431.117193][T16645] sit2: entered promiscuous mode
[  431.825742][T16680] 8021q: VLANs not supported on wg0
[  431.831870][T16679] 8021q: VLANs not supported on wg0
[  432.233851][T16709] syzkaller1: entered promiscuous mode
[  432.259060][T16709] syzkaller1: entered allmulticast mode
[  432.476747][T16722] sctp: [Deprecated]: syz.0.2692 (pid 16722) Use of struct sctp_assoc_value in delayed_ack socket option.
[  432.476747][T16722] Use struct sctp_sack_info instead
[  432.887214][T16749] gretap2: entered promiscuous mode
[  432.902950][T16749] gretap2: entered allmulticast mode
[  433.063524][T16754] vlan7: entered promiscuous mode
[  433.086312][T16754] bridge0: entered promiscuous mode
[  433.122032][T16758] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  433.708285][T16785] bond0: (slave bond3): Releasing active interface
[  433.729663][T16791] __nla_validate_parse: 14 callbacks suppressed
[  433.729685][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'.
[  433.752626][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2709'.
[  433.859217][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'.
[  433.898713][T16797] tipc: Resetting bearer <ib:ip6gre0>
[  433.946952][T16797] tipc: Resetting bearer <ib:ip6gre0>
[  434.019331][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'.
[  434.213839][T16812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2715'.
[  434.283830][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2715'.
[  434.384229][T16820] geneve0 speed is unknown, defaulting to 1000
[  434.443157][T16831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.518077][T16835] netlink: 'syz.1.2721': attribute type 39 has an invalid length.
[  434.691757][T16838] vlan2: entered promiscuous mode
[  434.715546][T16838] vlan2: entered allmulticast mode
[  434.724947][T16838] hsr_slave_1: entered allmulticast mode
[  434.876241][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'.
[  434.890918][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'.
[  434.901246][T16849] netlink: 'syz.4.2725': attribute type 1 has an invalid length.
[  434.909969][T16850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2726'.
[  434.997416][T16851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2725'.
[  435.056439][T16851] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  435.108559][T16820] lo speed is unknown, defaulting to 1000
[  435.125516][T16854] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  435.783940][T16891] netlink: 'syz.2.2739': attribute type 12 has an invalid length.
[  436.089589][T16898] bridge0: failed insert local address into bridge forwarding table
[  436.126313][T16903] netlink: 'syz.4.2744': attribute type 7 has an invalid length.
[  436.134100][T16903] netlink: 'syz.4.2744': attribute type 8 has an invalid length.
[  436.372235][T16916] geneve0 speed is unknown, defaulting to 1000
[  436.400651][T16919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  436.491084][T16920] syzkaller0: entered promiscuous mode
[  436.508676][T16920] syzkaller0: entered allmulticast mode
[  436.539666][T16924] macsec0: entered promiscuous mode
[  437.085770][T16916] lo speed is unknown, defaulting to 1000
[  437.248783][T16939] geneve0: entered allmulticast mode
[  437.418874][T16939] geneve0 speed is unknown, defaulting to 1000
[  437.707745][T16939] lo speed is unknown, defaulting to 1000
[  438.356905][T16982] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  438.367658][T16982] netlink: 'syz.2.2768': attribute type 1 has an invalid length.
[  438.378398][T16982] netlink: 'syz.2.2768': attribute type 32 has an invalid length.
[  438.673467][T17004] netlink: 'syz.3.2772': attribute type 13 has an invalid length.
[  438.809980][T17004] tipc: Resetting bearer <ib:ip6gre0>
[  439.190453][T17027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  439.207455][T17026] __nla_validate_parse: 18 callbacks suppressed
[  439.207492][T17026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2778'.
[  439.322370][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'.
[  439.398130][T17033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2777'.
[  439.412605][T17033] tipc: Resetting bearer <ib:ip6gre0>
[  439.489246][T17047] delete_channel: no stack
[  439.703674][T17056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.892433][T17063] syz_tun: entered allmulticast mode
[  439.913979][T17063] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  440.009866][T17066] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  440.054988][T17071] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  440.244436][T17082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2792'.
[  440.297717][T17084] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  440.355422][T17082] syzkaller0: entered promiscuous mode
[  440.361130][T17082] syzkaller0: entered allmulticast mode
[  440.378324][T17088] netlink: 'syz.0.2793': attribute type 21 has an invalid length.
[  440.888697][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2803'.
[  440.925828][T17121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2803'.
[  441.344243][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2805'.
[  441.931030][T17157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2808'.
[  443.389052][T17173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'.
[  443.414245][T17174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  443.448079][T17177] geneve0 speed is unknown, defaulting to 1000
[  443.512462][T17185] netlink: 'syz.1.2815': attribute type 1 has an invalid length.
[  443.529591][T17185] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2815'.
[  443.876282][T17177] lo speed is unknown, defaulting to 1000
[  443.876398][T17187] geneve0 speed is unknown, defaulting to 1000
[  443.962913][T17203] gretap0: Device is already in use.
[  444.198288][T17187] lo speed is unknown, defaulting to 1000
[  444.225464][T17201] siw: device registration error -23
[  444.282983][T17211] __nla_validate_parse: 1 callbacks suppressed
[  444.283005][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'.
[  445.100921][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'.
[  445.592494][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'.
[  445.696487][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2834'.
[  445.758302][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'.
[  445.800234][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2834'.
[  445.800306][T17252] syzkaller1: entered promiscuous mode
[  445.845616][T17252] syzkaller1: entered allmulticast mode
[  445.979964][T17261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2840'.
[  446.054124][T17261] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2840'.
[  446.119456][T17273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2842'.
[  446.156234][T17273] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2842'.
[  446.172287][T17273] netlink: 'syz.1.2842': attribute type 5 has an invalid length.
[  446.450218][T17269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  446.499698][T17286] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  446.548635][T17286] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  446.795361][T10666] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  446.835810][T10666] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  446.856653][T10666] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  446.881982][T10666] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.169773][T17322] geneve0 speed is unknown, defaulting to 1000
[  447.231723][T17328] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  447.279041][T17328] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  447.322475][T17328] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  447.910335][T17322] lo speed is unknown, defaulting to 1000
[  448.350512][T17366] netlink: 'syz.3.2865': attribute type 6 has an invalid length.
[  448.393038][T17364] geneve0 speed is unknown, defaulting to 1000
[  448.672380][T17364] lo speed is unknown, defaulting to 1000
[  448.717892][T17385] netlink: 'syz.1.2870': attribute type 2 has an invalid length.
[  448.790583][T17385] : entered promiscuous mode
[  449.787063][T17431] __nla_validate_parse: 12 callbacks suppressed
[  449.787083][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'.
[  450.081674][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  450.092645][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  450.106176][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  450.120206][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  450.121611][T17440] netlink: 'syz.4.2883': attribute type 8 has an invalid length.
[  450.133384][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  450.442799][T17441] geneve0 speed is unknown, defaulting to 1000
[  450.481149][T17459] netlink: 'syz.1.2888': attribute type 10 has an invalid length.
[  450.759178][T17465] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2892'.
[  450.841787][T17441] lo speed is unknown, defaulting to 1000
[  450.868720][T17467] netlink: 'syz.3.2893': attribute type 1 has an invalid length.
[  450.906538][T17467] netlink: 'syz.3.2893': attribute type 4 has an invalid length.
[  450.923516][T17467] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2893'.
[  451.143839][T17471] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.187904][T17474] netlink: 'syz.2.2894': attribute type 1 has an invalid length.
[  451.198936][T17474] netlink: 'syz.2.2894': attribute type 3 has an invalid length.
[  451.207200][T17474] netlink: 'syz.2.2894': attribute type 1 has an invalid length.
[  451.215202][T17474] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2894'.
[  451.226400][T17474] NCSI netlink: No device for ifindex 0
[  451.299082][T17471] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.371890][T17479] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2896'.
[  451.412932][T17471] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.516397][T17441] chnl_net:caif_netlink_parms(): no params data found
[  451.544222][T17471] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  451.573559][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2897'.
[  451.966754][T17441] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.974138][T17441] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.991018][T17441] bridge_slave_0: entered allmulticast mode
[  452.000943][T17441] bridge_slave_0: entered promiscuous mode
[  452.017015][T10655] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.045896][T17441] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.053077][T17441] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.062661][T17441] bridge_slave_1: entered allmulticast mode
[  452.072022][T17441] bridge_slave_1: entered promiscuous mode
[  452.089340][T10655] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.172182][T10666] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.194225][T10666] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.205329][ T5158] Bluetooth: hci2: command tx timeout
[  452.264415][T17441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.273236][T17498] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  452.304281][T17495] geneve0 speed is unknown, defaulting to 1000
[  452.316215][T17441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.410743][T17441] team0: Port device team_slave_0 added
[  452.442470][T17441] team0: Port device team_slave_1 added
[  452.623460][T17495] lo speed is unknown, defaulting to 1000
[  452.667636][T17441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.675117][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.702139][T17441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.733100][T17441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.741120][T17441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.768081][T17441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.992306][T17441] hsr_slave_0: entered promiscuous mode
[  453.008092][T17441] hsr_slave_1: entered promiscuous mode
[  453.016575][T17441] debugfs: 'hsr0' already exists in 'hsr'
[  453.022361][T17441] Cannot create hsr debugfs directory
[  453.310290][T17513] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  453.421236][T17514] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2904'.
[  453.565825][T17505] geneve0 speed is unknown, defaulting to 1000
[  453.829325][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2905'.
[  454.171534][T17441] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.285936][ T5158] Bluetooth: hci2: command tx timeout
[  454.435645][T17441] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.542519][T17441] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.631875][T17441] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.004102][T17505] lo speed is unknown, defaulting to 1000
[  455.152454][T17441] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  455.173725][T17441] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  455.273206][T17441] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  455.302617][T17537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2909'.
[  455.306392][T17441] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  455.355884][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2909'.
[  455.371074][T17537] bond0: entered promiscuous mode
[  455.409532][T17537] bond0: left promiscuous mode
[  455.461647][T17538] bond0: entered promiscuous mode
[  455.473581][T17538] bond0: left promiscuous mode
[  455.639676][T17546] bridge0: port 1(erspan0) entered blocking state
[  455.670819][T17546] bridge0: port 1(erspan0) entered disabled state
[  455.732724][T17546] erspan0: entered allmulticast mode
[  455.767417][T17546] erspan0: entered promiscuous mode
[  455.815325][T17551] erspan0: left allmulticast mode
[  455.835530][T17551] erspan0: left promiscuous mode
[  455.851707][T17551] bridge0: port 1(erspan0) entered disabled state
[  455.969681][T17557] macvlan1: entered promiscuous mode
[  455.978714][T17557] macvlan1: left promiscuous mode
[  456.256840][T17441] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.310204][T17441] 8021q: adding VLAN 0 to HW filter on device team0
[  456.338756][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2914'.
[  456.369200][ T5158] Bluetooth: hci2: command tx timeout
[  456.384220][T10658] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.391448][T10658] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.435553][T17571] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  456.478308][T10658] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.485517][T10658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.532439][T17574] netlink: 1792 bytes leftover after parsing attributes in process `syz.3.2916'.
[  456.661170][T17441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  456.801059][T17586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2919'.
[  456.820911][T17586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.830466][T17586] syzkaller0: entered promiscuous mode
[  456.846590][T17586] syzkaller0: entered allmulticast mode
[  456.913045][T17586] tipc: Resetting bearer <eth:syzkaller0>
[  456.972915][T17581] tipc: Resetting bearer <eth:syzkaller0>
[  457.027714][T17581] tipc: Disabling bearer <eth:syzkaller0>
[  457.062985][T17599] netlink: 'syz.2.2923': attribute type 3 has an invalid length.
[  457.072418][T17599] netlink: 'syz.2.2923': attribute type 3 has an invalid length.
[  457.107394][T17583] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  457.144183][T17583] syzkaller0: entered promiscuous mode
[  457.150410][T17583] syzkaller0: entered allmulticast mode
[  457.299810][T17607] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2926'.
[  458.445421][ T5158] Bluetooth: hci2: command tx timeout
[  458.902437][T17441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.008763][T17622] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  459.228045][T17441] veth0_vlan: entered promiscuous mode
[  459.293072][T17441] veth1_vlan: entered promiscuous mode
[  459.428791][T17441] veth0_macvtap: entered promiscuous mode
[  459.469730][T17441] veth1_macvtap: entered promiscuous mode
[  459.532396][T17441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.558783][T17650] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2936'.
[  459.574845][T17441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.734630][T10658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.743408][T10658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.767181][T10658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.785138][T10658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.986862][T10667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.032574][T10667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.206567][T10655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.243899][T10655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.484485][T17663] gretap1: entered promiscuous mode
[  460.551141][T17663] gretap1: entered allmulticast mode
[  461.197731][T17680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2945'.
[  461.414453][T17684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2946'.
[  461.436323][T17684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  461.443629][T17684] IPv6: NLM_F_CREATE should be set when creating new route
[  461.753920][   T13] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.812643][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  461.823326][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  461.833122][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  461.850268][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  461.852386][   T13] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.870891][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  461.917566][   T13] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.954219][T17700] geneve0 speed is unknown, defaulting to 1000
[  461.980798][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  462.260665][T17710] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2951'.
[  462.280776][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'.
[  462.310775][T17712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2952'.
[  462.330005][T17715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2951'.
[  462.514262][T17724] sctp: [Deprecated]: syz.3.2955 (pid 17724) Use of int in max_burst socket option.
[  462.514262][T17724] Use struct sctp_assoc_value instead
[  463.449560][   T13] bond1 (unregistering): Released all slaves
[  463.471042][   T13] bond0 (unregistering): Released all slaves
[  463.584084][   T13] bond2 (unregistering): Released all slaves
[  463.690773][   T13] bond3 (unregistering): Released all slaves
[  463.706294][   T13] bond4 (unregistering): Released all slaves
[  463.722862][T17700] lo speed is unknown, defaulting to 1000
[  463.914924][   T13] k›*·]‘: left promiscuous mode
[  463.966094][ T5158] Bluetooth: hci1: command tx timeout
[  464.122465][T17749] netlink: 'syz.1.2963': attribute type 7 has an invalid length.
[  464.132574][T17749] netlink: 'syz.1.2963': attribute type 3 has an invalid length.
[  464.141044][T17749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2963'.
[  464.155581][   T13] tipc: Disabling bearer <udp:syz2>
[  464.167917][   T13] tipc: Disabling bearer <eth:ipvlan1>
[  464.190075][   T13] tipc: Left network mode
[  464.523845][T17767] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2968'.
[  464.661639][T17700] chnl_net:caif_netlink_parms(): no params data found
[  464.855325][T17779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.868352][T17778] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2970'.
[  465.268903][T17700] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.287159][T17700] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.325361][T17700] bridge_slave_0: entered allmulticast mode
[  465.337650][T17700] bridge_slave_0: entered promiscuous mode
[  465.396582][T17809] netlink: 'syz.1.2978': attribute type 1 has an invalid length.
[  465.404469][T17809] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2978'.
[  465.449253][T17700] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.472034][T17700] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.480950][T17700] bridge_slave_1: entered allmulticast mode
[  465.490424][T17700] bridge_slave_1: entered promiscuous mode
[  465.631051][T17817] openvswitch: netlink: Message has 5 unknown bytes.
[  465.636873][T17700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.701829][T17700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.045333][ T5158] Bluetooth: hci1: command tx timeout
[  466.063424][T17700] team0: Port device team_slave_0 added
[  466.079828][T17832] netlink: 'syz.4.2985': attribute type 4 has an invalid length.
[  466.129578][   T13] hsr_slave_0: left promiscuous mode
[  466.138019][   T13] hsr_slave_1: left promiscuous mode
[  466.172738][   T13] pim6reg (unregistering): left allmulticast mode
[  466.210018][T17839] IPVS: length: 96 != 8
[  466.233321][T17839] __nla_validate_parse: 4 callbacks suppressed
[  466.233341][T17839] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2986'.
[  466.338061][T17842] FAULT_INJECTION: forcing a failure.
[  466.338061][T17842] name failslab, interval 1, probability 0, space 0, times 1
[  466.351653][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.0.2988 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  466.351683][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  466.351697][T17842] Call Trace:
[  466.351705][T17842]  <TASK>
[  466.351714][T17842]  dump_stack_lvl+0x189/0x250
[  466.351742][T17842]  ? __pfx____ratelimit+0x10/0x10
[  466.351771][T17842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.351792][T17842]  ? __pfx__printk+0x10/0x10
[  466.351825][T17842]  ? __pfx___might_resched+0x10/0x10
[  466.351863][T17842]  should_fail_ex+0x414/0x560
[  466.351901][T17842]  should_failslab+0xa8/0x100
[  466.351922][T17842]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  466.351954][T17842]  ? __alloc_skb+0x112/0x2d0
[  466.351991][T17842]  __alloc_skb+0x112/0x2d0
[  466.352028][T17842]  netlink_sendmsg+0x5c6/0xb30
[  466.352070][T17842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.352106][T17842]  ? aa_sock_msg_perm+0x94/0x160
[  466.352136][T17842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.352159][T17842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.352190][T17842]  __sock_sendmsg+0x219/0x270
[  466.352218][T17842]  ____sys_sendmsg+0x505/0x830
[  466.352254][T17842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.352287][T17842]  ? import_iovec+0x74/0xa0
[  466.352320][T17842]  ___sys_sendmsg+0x21f/0x2a0
[  466.352345][T17842]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.352410][T17842]  ? __fget_files+0x2a/0x420
[  466.352430][T17842]  ? __fget_files+0x3a0/0x420
[  466.352462][T17842]  __x64_sys_sendmsg+0x19b/0x260
[  466.352488][T17842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  466.352520][T17842]  ? rcu_is_watching+0x15/0xb0
[  466.352557][T17842]  ? do_syscall_64+0xbe/0x3b0
[  466.352593][T17842]  do_syscall_64+0xfa/0x3b0
[  466.352622][T17842]  ? lockdep_hardirqs_on+0x9c/0x150
[  466.352652][T17842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.352672][T17842]  ? clear_bhb_loop+0x60/0xb0
[  466.352698][T17842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.352719][T17842] RIP: 0033:0x7f9a41d8eb69
[  466.352737][T17842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.352756][T17842] RSP: 002b:00007f9a42c54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.352780][T17842] RAX: ffffffffffffffda RBX: 00007f9a41fb5fa0 RCX: 00007f9a41d8eb69
[  466.352795][T17842] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004
[  466.352808][T17842] RBP: 00007f9a42c54090 R08: 0000000000000000 R09: 0000000000000000
[  466.352820][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.352832][T17842] R13: 0000000000000000 R14: 00007f9a41fb5fa0 R15: 00007ffe20131008
[  466.352865][T17842]  </TASK>
[  466.758673][   T13] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  466.770733][   T13] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  466.780287][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  466.791924][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  466.802011][   T13] Workqueue: netns cleanup_net
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  466.806793][   T13] RIP: 0010:ip6_mc_clear_src+0x18f/0x580
[  466.812433][   T13] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c
[  466.832053][   T13] RSP: 0018:ffffc90000127340 EFLAGS: 00010206
[  466.838132][   T13] RAX: 000000001fffe000 RBX: 1ffff1100acbbf02 RCX: ffff88801d290000
[  466.846109][   T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  466.854084][   T13] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  466.862065][   T13] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000
[  466.870048][   T13] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff8880565df810
[  466.878040][   T13] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  466.886974][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  466.893559][   T13] CR2: 00007ffc4bf44e28 CR3: 00000000570e8000 CR4: 00000000003526f0
[  466.901534][   T13] Call Trace:
[  466.904817][   T13]  <TASK>
[  466.907768][   T13]  mld_clear_delrec+0x160/0x660
[  466.912636][   T13]  ipv6_mc_destroy_dev+0x45/0x5a0
[  466.917671][   T13]  ? addrconf_ifdown+0x1396/0x1880
[  466.922796][   T13]  addrconf_ifdown+0x139e/0x1880
[  466.927748][   T13]  ? tls_dev_event+0x717/0xec0
[  466.932514][   T13]  ? __pfx_addrconf_ifdown+0x10/0x10
[  466.937809][   T13]  addrconf_notify+0x1bc/0x1010
[  466.942682][   T13]  notifier_call_chain+0x1b3/0x3e0
[  466.947800][   T13]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  466.954239][   T13]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  466.961015][   T13]  ? unregister_netdevice_queue+0x1b3/0x380
[  466.966922][   T13]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  466.973168][   T13]  ? batadv_meshif_destroy_netlink+0x1b0/0x250
[  466.979338][   T13]  default_device_exit_batch+0x819/0x890
[  466.984997][   T13]  ? __pfx___might_resched+0x10/0x10
[  466.990304][   T13]  ? __pfx_default_device_exit_batch+0x10/0x10
[  466.996474][   T13]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  467.001958][   T13]  ? net_generic+0x1e/0x240
[  467.006473][   T13]  ? __pfx_default_device_exit_batch+0x10/0x10
[  467.012642][   T13]  ops_undo_list+0x522/0x990
[  467.017253][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  467.022386][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  467.027598][   T13]  cleanup_net+0x4c5/0x800
[  467.032029][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  467.036982][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  467.042192][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  467.047930][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  467.053666][   T13]  process_scheduled_works+0xae1/0x17b0
[  467.059242][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  467.065250][   T13]  worker_thread+0x8a0/0xda0
[  467.069874][   T13]  kthread+0x70e/0x8a0
[  467.073953][   T13]  ? __pfx_worker_thread+0x10/0x10
[  467.079078][   T13]  ? __pfx_kthread+0x10/0x10
[  467.083674][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  467.088876][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  467.094085][   T13]  ? __pfx_kthread+0x10/0x10
[  467.098682][   T13]  ret_from_fork+0x3fc/0x770
[  467.103285][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  467.108411][   T13]  ? __switch_to_asm+0x39/0x70
[  467.113181][   T13]  ? __switch_to_asm+0x33/0x70
[  467.117954][   T13]  ? __pfx_kthread+0x10/0x10
[  467.122559][   T13]  ret_from_fork_asm+0x1a/0x30
[  467.127340][   T13]  </TASK>
[  467.130368][   T13] Modules linked in:
[  467.135955][   T13] ---[ end trace 0000000000000000 ]---
[  467.143859][   T13] RIP: 0010:ip6_mc_clear_src+0x18f/0x580
[  467.149642][   T13] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c
[  467.170289][   T13] RSP: 0018:ffffc90000127340 EFLAGS: 00010206
[  467.183224][   T13] RAX: 000000001fffe000 RBX: 1ffff1100acbbf02 RCX: ffff88801d290000
[  467.191693][   T13] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  467.203135][   T13] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  467.211315][   T13] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000
[  467.222678][   T13] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff8880565df810
[  467.232827][   T13] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  467.245023][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  467.318831][   T13] CR2: 0000555558c765c8 CR3: 0000000074cf0000 CR4: 00000000003526f0
[  467.345730][   T13] Kernel panic - not syncing: Fatal exception
[  467.352189][   T13] Kernel Offset: disabled
[  467.356550][   T13] Rebooting in 86400 seconds..