last executing test programs:

2.119884946s ago: executing program 2 (id=1711):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8c4, 0x0, 0x0)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80)
r1 = socket$kcm(0x1e, 0x4, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0xfffffffe, 0x7}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x3, 0x3}, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="3102001c", @ANYRES16=r8, @ANYBLOB="01000000000000000000070000000c0001800500020001000000"], 0x20}}, 0x0)

2.005242506s ago: executing program 2 (id=1713):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4)
sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @broadcast}})

1.988145251s ago: executing program 2 (id=1714):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}})
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000380))
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000001c0)=0xc) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000e0000000000000013de2d06171184a906f30cd99b261a0cb0d7a748dd6ba801e0bf8e05554f492b7bba15f6b358aace9176e17acf8aef61e434d12ee024b50307560686be35c8370e25453e6d4156318cc00e1b154c0c", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000080000000e0000000000000013de2d06171184a906f30cd99b261a0cb0d7a748dd6ba801e0bf8e05554f492b7bba15f6b358aace9176e17acf8aef61e434d12ee024b50307560686be35c8370e25453e6d4156318cc00e1b154c0c", @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x54)
ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000040)={0x8000, 0x80000000})
sendmsg$netlink(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x10, 0x28, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@generic]}, 0x10}, {&(0x7f0000000940)={0x10, 0x31, 0x400, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x2, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r8, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100d0c100000100", @ANYRES32, @ANYBLOB="f6edb82a63cb5c881c807cdc32c80c01d1d6640ff26f866baf57bed5acbcb009a98cf6a83d248c", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x40}, 0x4000044)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e20, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r4}, {0x2e6, 0x0, 0x1, 0x0, 0x100000000000, 0x1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf800000, 0x4000}}, 0xe8)
listen(r0, 0x0) (async)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000684c029a91e1ae9801b19c151300069008248a7a9916e1468c097cbba3e4220795e354accc798e4a4cacd52a229c27fcc5af8f67d406cdfc45ed8fe44044f6380dd0b797c4bbf7b6c13969b50e74e3b6ded9c8f28cd1398acde068da24e4f11e295f0b24a3460174a8a3ba94e34604d896292dec0600e2efe86bc55b92c2b67eb5f8ce77634fc059856ff4b9aba5f674885a6b9cc890674eeafd12bfca54f6ea352c48d9945549528f01eb492ebab0101ea411485f07979978d63b99fe2e8bc038fa6c6c59cfa662de0c669a5e56fd5f04e0c9034f837b3ed61f6774d4346977cb6b11b2c279224fe678d0b1ad410b344d0aa0da906d603818ad53a4f3952a4809bc20f34d6f6e86b35ea4da7c7662abe9f87ad2cf32", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0)

1.85172742s ago: executing program 2 (id=1715):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket(0x10, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$nl_netfilter(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000300), 0x4)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000000), 0x10)

1.652036298s ago: executing program 1 (id=1717):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc)
listen(r1, 0x8)
close(r0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0)

1.64648222s ago: executing program 1 (id=1719):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="f8080000d0ff4000fefc69a77c81a9a9f9e2eadc68530000000000000000851000600400000018000004", @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xb}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}}, 0x18)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @l2={0x1f, 0x2, @none, 0x7, 0x2}, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @can={0x1d, r2}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='pim6reg0\x00', 0x2, 0x927b, 0xa})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f00000006c0)=[{&(0x7f00000002c0)="4be6191f827f05e4931dee5a5afe14ad6c18cde360e6e81e8d88c78fd57e5ac4846dbcccb21d342f1119fb9201a369a384d262ddf650ec2baacc9fb78728e5b7b6ffeed83cdce02e6d8c16badd4e07ebe21495b8a91c07bfc9fced8c398a78f9a8", 0x61}, {&(0x7f0000000680)="451ad6056342ec6ce78fb82561f2f34a90e334843e50bdf6233a4d102602909e7b47940859bd95e5d3", 0x29}], 0x2)
shutdown(r3, 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000180)=0x30)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x20008090}, 0x4d010)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000dc0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58)
socketpair(0x1e, 0x2, 0x6, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000002cabca4324eeba0b9ce9c5365f54a0c3339dcd9c", @ANYBLOB="f003cd87a8a78b12f5182f8f1a2275898692ba3cbd970fd0def7ce4e745801c3e8198c814459e1cd70fa90ef332dd1a62e8a58aa37a907fd16dee541c1adee13b4cc450cbb20f34ac1afc8bae494f3181c79ec466dfff18fc075a938778cf6289ffca7c7eeabd9d3142bd10480f0b0e43489b8cc98638c0aac5615f4c2a49e4daa4641176671eb2355b34a9fff929ca51fe9dd18ffe50e5f3679beac08913185b3a871dbc4188533a4950642ad60d80f763e1232c559002ff8eba47f6fffbb3a4540eefbd8c0c44887166942788e5df34119cf7db5b72d164614", @ANYRES64=r8, @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYRESDEC, @ANYRES32=r7, @ANYBLOB="0c00018005000100", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000814)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0)
sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00'}, 0x1c, 0x0}, 0x4080)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, 0x0, 0x800)
setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000500)=0x10000, 0x4)
socket$key(0xf, 0x3, 0x2)

1.529596649s ago: executing program 1 (id=1721):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000280)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
socket$vsock_stream(0x28, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2508000000180004801300010062726f61646361d5e6ca337342e4cf"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
pipe(0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_ifreq(r5, 0x891d, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_addrs=@can})
r6 = accept4(r4, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x2, 0xe)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000652582500f00"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r6)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r10 = socket$netlink(0x10, 0x3, 0x4)
write(r10, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x44, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000a0a010200000000ff03000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x0, {[@window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0)

1.529206163s ago: executing program 0 (id=1722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r1], &(0x7f0000000500)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
write(r5, &(0x7f0000000440)="2400000011005f0414f9f40700090400810000000f0000000000000008000f0001000000edeb4ecf61e3d502b8fb32082a3a5a0e131cf2ac96fbc3cb6ac4", 0x3e)
listen(r4, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000007060100000000000000000007000004"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close(r1)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000c9209f76799c43373a03fbd6a67e6d5166b45e3cdfa8ed5fba00000000000000", @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b0000000000"], 0x28}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c2}, 0x80c0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x30, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x30}}, 0x0)

1.431483548s ago: executing program 0 (id=1723):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
listen(0xffffffffffffffff, 0xfffffffc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02060000000083351b9e0000010000000000000000e0bb5ea688a34dd68d4c0f273e317e02889b0cc8ce3647832467716d0861105ead6938b0b0d5ca5a23c6ef0b26a06e9ef2a582f3dfb8a12ff18404c7d19b810512c76aa452b55bf0daec3a7ff9c2bf3c56ca7a2869631437781c42013d1a6addf3271219cd9e6322db9201e2b75175f0e6f30107c705d159215fd28328d3", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) (async)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pK    \x00'}, 0x20)
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) (async)
sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040)
close(0x3)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x80000, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4) (async)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x10001}, 0xc) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (async)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r11)
close(r11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x1, 0x6, 0xb, 0xa, 0x1, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x200}, @exit, @alu={0x4, 0x1, 0x4, 0x7, 0x9, 0xffffffffffffffe0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe2a8, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x43, &(0x7f0000000300)=""/67, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x8, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r3, 0x1, r6, 0xffffffffffffffff, r7, r8, r9, r10, r0, r11], 0x0, 0x10, 0x5}, 0x94) (async)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000880)}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)={0x14, r13, 0x1, 0x0, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.431114111s ago: executing program 0 (id=1724):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xfffffffb, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50) (async)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async)
listen(r4, 0xfffffffc) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close(r0) (async)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c2}, 0x80c0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000f7e447848e0c077855000000110001000a98df895ff4fd09192a4fe8"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async)
socket$inet(0x2, 0x1, 0x100)

1.341774564s ago: executing program 0 (id=1725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async)
r2 = socket$netlink(0x10, 0x3, 0xf)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x20000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000740)="8bf9c333442d145a6a694ddaf5187a9516cf6edf46a03edb22e95f7475bc09b09d936ec8c043218bf958243462042a21fef9de75ff8be922de6b1d40c4e32d58b428d928a37bd87ad1dcce46e0ddf1a88adcebb47ae1", 0x56}], 0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r9) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000030500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1b1002da0a99478a9dfb37696715c6f38cb3bac3b58fb2664b3411ade22452d40d4e71aba052601697cd72c3ac5781fa1024ce136767f6e2048228fd753bd168a31437e34545d02a928ba7314b6267f72e637796090086a7665cc68e748e4e66dba459f59d458a560dda2c04c7f68fbfb1ebba0147b3e77e319289a281eaef17b202d39e554acecb2d4e475a868c6d932dc0f14b245b27317cfb2a0601915ebcc372f481cc18335babfff2430003d06520f47cfce67bd9bfd6d4d0", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf25090000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40044080}, 0x4000000)

981.189458ms ago: executing program 2 (id=1726):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000009000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702dfff07000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e98b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x3, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
listen(r4, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close(r0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c2}, 0x80c0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000700000aa8d85dc244cb3e585e"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r7, 0x1, 0x9, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8015}, 0x4c011)
socket$inet(0x2, 0x1, 0x100)

618.330725ms ago: executing program 1 (id=1727):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'perf_event'}, {0x2d, 'hugetlb'}, {0x0, 'io'}]}, 0x19)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000fc000063018d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800ae46770000101420002dbd7000fedbdf2508004b0013000000080001000100000008004a000100000008004f0004000000080003000400000008004a000000000008004c0000"], 0x48}, 0x1, 0x0, 0x0, 0xb629bd2d366cbc61}, 0x80)
pwrite64(r1, &(0x7f0000000380)='k', 0x1, 0xc)

559.190095ms ago: executing program 1 (id=1728):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0xb}, {0x30, 0x88, 0x0, "5b5ce75c07cb0cd5317ec5044336b4c196d0e710434fb3697e0000"}], 0x40}, 0x4000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e2c, @remote}, 0x10)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000980)=""/4096, &(0x7f00000000c0)=0x1000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="43ffffac3dd6cc74c2ef7544b72e067c", 0x10)

102.026486ms ago: executing program 2 (id=1729):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0xffffffff, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

97.76032ms ago: executing program 0 (id=1730):
socket$vsock_stream(0x28, 0x1, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
pipe(0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2, 0xe)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000100000000000000000000000000000000bdaeb6165623ee3f7df7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000a0a010200000000ff03000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x0, {[@window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0)

88.433725ms ago: executing program 1 (id=1731):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @local, 0x9}, 0xfffffffffffffd6c, &(0x7f0000000240)=[{&(0x7f0000000780)="c2", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @empty, 0x40}, 0x12, &(0x7f0000000280)=[{&(0x7f0000000580)="18098ae1f5", 0x5}], 0x1, 0x0, 0xffffffffffffff6f}}], 0x400000000000044, 0x41)
shutdown(r0, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)={0x4c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, {0xb, 0xa3, 0x4, 0x9b, {0x4e20, 0x4e1f, [0x7, 0x0, 0x40000000, 0x7], [0xd, 0x4, 0x6, 0xbd6], 0x0, [0x4, 0x3]}, 0x4, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20008000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)
accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'pimreg0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010100000000000000075ec2ab13bba5da000a0000000900020073797a300000000005000100"], 0x30}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r4, 0xcfad5000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10)
write$tun(r5, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x5, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x2f, 0x1, @local, @local}}}}, 0x3e)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a402, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x2c}, 0x10)

0s ago: executing program 0 (id=1732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000580)={'ip6gre0\x00', <r1=>0x0, 0x4, 0x3, 0xf, 0x9, 0x10, @loopback, @mcast2, 0x7, 0xee9ee8c7646676ad, 0xfffffffe, 0xa2c2}})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x401, 0x800, 0x88a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x88a8}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0xe48, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x20010001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwrite64(r7, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693)
setsockopt$inet6_mreq(r9, 0x29, 0x6, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r11, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r10], 0x68}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x248, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x248}}, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x68, r13, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4000ee}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x68}}, 0x880)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a0247fc9f0c15b7b9260278a3eddd2ec3cf3759b9f6818233e5716b1d0e6a14fa74c0749c6b3c81d0b0", @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49909' (ED25519) to the list of known hosts.
syzkaller login: [   49.264378][ T5780] cgroup: Unknown subsys name 'net'
[   49.353295][ T5780] cgroup: Unknown subsys name 'cpuset'
[   49.357561][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.260790][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.158299][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.162907][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.166914][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.171666][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.175104][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.176399][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.183134][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.186118][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.196594][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.201043][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.206309][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.209466][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.213123][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.218459][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.225639][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.534690][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   56.639169][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.701969][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.704902][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.707297][ T5852] bridge_slave_0: entered allmulticast mode
[   56.710798][ T5852] bridge_slave_0: entered promiscuous mode
[   56.728362][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   56.747565][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.750767][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.753055][ T5852] bridge_slave_1: entered allmulticast mode
[   56.755902][ T5852] bridge_slave_1: entered promiscuous mode
[   56.793996][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.803922][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.806671][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.808997][ T5848] bridge_slave_0: entered allmulticast mode
[   56.812786][ T5848] bridge_slave_0: entered promiscuous mode
[   56.818662][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.857437][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.860475][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.863462][ T5848] bridge_slave_1: entered allmulticast mode
[   56.867455][ T5848] bridge_slave_1: entered promiscuous mode
[   56.905166][ T5852] team0: Port device team_slave_0 added
[   56.917614][ T5852] team0: Port device team_slave_1 added
[   56.921745][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.958466][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.976985][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.980320][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.982735][ T5856] bridge_slave_0: entered allmulticast mode
[   56.986475][ T5856] bridge_slave_0: entered promiscuous mode
[   57.013134][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.015811][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.025759][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.031446][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.034438][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.037387][ T5856] bridge_slave_1: entered allmulticast mode
[   57.041675][ T5856] bridge_slave_1: entered promiscuous mode
[   57.059515][ T5848] team0: Port device team_slave_0 added
[   57.064308][ T5848] team0: Port device team_slave_1 added
[   57.078310][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.081232][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.089474][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.106430][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.128934][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.144040][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.146646][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.157076][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.195831][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.198208][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.206354][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.214053][ T5852] hsr_slave_0: entered promiscuous mode
[   57.216574][ T5852] hsr_slave_1: entered promiscuous mode
[   57.221253][ T5856] team0: Port device team_slave_0 added
[   57.243339][ T5856] team0: Port device team_slave_1 added
[   57.293467][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.295610][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.304258][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.313236][ T5848] hsr_slave_0: entered promiscuous mode
[   57.316396][ T5848] hsr_slave_1: entered promiscuous mode
[   57.319892][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.322066][ T5848] Cannot create hsr debugfs directory
[   57.338041][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.341337][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.353411][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.448121][ T5856] hsr_slave_0: entered promiscuous mode
[   57.451360][ T5856] hsr_slave_1: entered promiscuous mode
[   57.454477][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   57.456779][ T5856] Cannot create hsr debugfs directory
[   57.684777][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.700448][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.706407][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.726344][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.748602][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.763086][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.772108][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.799607][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.843919][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.855521][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.866305][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.872703][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.947123][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.984580][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   58.022693][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.025808][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.033897][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.036801][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.073687][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.126221][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.144976][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.147911][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.171365][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.174320][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.192488][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.229696][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   58.241167][ T5236] Bluetooth: hci0: command tx timeout
[   58.243142][ T5851] Bluetooth: hci1: command tx timeout
[   58.252415][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.255203][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.283088][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.285994][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.320651][ T5851] Bluetooth: hci2: command tx timeout
[   58.342755][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.391828][ T5852] veth0_vlan: entered promiscuous mode
[   58.405703][ T5852] veth1_vlan: entered promiscuous mode
[   58.456889][ T5852] veth0_macvtap: entered promiscuous mode
[   58.463849][ T5852] veth1_macvtap: entered promiscuous mode
[   58.479378][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.488338][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.501422][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.505246][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.509370][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.515259][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.549370][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.554651][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.664469][  T628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.667779][  T628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.719598][ T5848] veth0_vlan: entered promiscuous mode
[   58.737159][ T5856] veth0_vlan: entered promiscuous mode
[   58.749060][ T5848] veth1_vlan: entered promiscuous mode
[   58.753214][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.756665][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.773496][ T5856] veth1_vlan: entered promiscuous mode
[   58.818224][ T5848] veth0_macvtap: entered promiscuous mode
[   58.822457][ T5856] veth0_macvtap: entered promiscuous mode
[   58.825826][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.826429][ T5856] veth1_macvtap: entered promiscuous mode
[   58.839318][ T5848] veth1_macvtap: entered promiscuous mode
[   58.858437][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.867567][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.894952][ T5678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.900262][ T5678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.903903][ T5678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.910246][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.916752][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.921794][ T5678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.932067][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.964378][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.973343][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.976660][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.981215][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.016150][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.022742][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.104335][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.108350][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.155295][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.158254][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.208677][ T5927] ieee802154 phy0 wpan0: encryption failed: -22
[   59.211747][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.214380][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.348763][ T5933] wg1 speed is unknown, defaulting to 1000
[   59.372595][ T5933] wg1 speed is unknown, defaulting to 1000
[   59.382881][ T5933] wg1 speed is unknown, defaulting to 1000
[   59.393891][ T5933] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   59.406960][ T5929] wg1 speed is unknown, defaulting to 1000
[   59.420727][ T5933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   59.449223][ T5933] wg1 speed is unknown, defaulting to 1000
[   59.449587][ T5938] netlink: 'syz.1.8': attribute type 3 has an invalid length.
[   59.454469][ T5933] wg1 speed is unknown, defaulting to 1000
[   59.457931][ T5933] wg1 speed is unknown, defaulting to 1000
[   59.587153][ T5945] wg1 speed is unknown, defaulting to 1000
[   59.763245][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.766266][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.843723][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.851570][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.952211][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.956861][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.983195][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.991077][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.020630][ T5953] wg1 speed is unknown, defaulting to 1000
[   60.068394][ T5967] netlink: 'syz.1.13': attribute type 6 has an invalid length.
[   60.198279][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'.
[   60.203886][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16'.
[   60.245742][ T5981] wg1 speed is unknown, defaulting to 1000
[   60.251856][ T5980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.256227][ T5976] syz.0.17 uses old SIOCAX25GETINFO
[   60.304399][ T5980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.307239][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.312715][ T5980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.316418][ T5980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.320584][ T5851] Bluetooth: hci1: command tx timeout
[   60.322899][ T5236] Bluetooth: hci0: command tx timeout
[   60.402868][ T5851] Bluetooth: hci2: command tx timeout
[   60.440043][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.554801][ T5997] netlink: 'syz.1.24': attribute type 10 has an invalid length.
[   60.562479][ T5997] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   60.566877][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   60.576428][ T5997] bridge_slave_1: left allmulticast mode
[   60.578285][ T5997] bridge_slave_1: left promiscuous mode
[   60.581524][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.587690][ T5997] bridge_slave_0: left allmulticast mode
[   60.589468][ T5997] bridge_slave_0: left promiscuous mode
[   60.591802][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.336079][ T5997] bond0: (slave bridge0): Releasing backup interface
[   61.707017][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.037299][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'.
[   62.117788][ T6029] wg1 speed is unknown, defaulting to 1000
[   62.399903][ T5236] Bluetooth: hci0: command tx timeout
[   62.401668][ T5851] Bluetooth: hci1: command tx timeout
[   62.481429][ T5851] Bluetooth: hci2: command tx timeout
[   62.648098][ T6053] Zero length message leads to an empty skb
[   62.738793][ T6058] wg1 speed is unknown, defaulting to 1000
[   62.774372][ T6061] syzkaller1: entered promiscuous mode
[   62.776286][ T6061] syzkaller1: entered allmulticast mode
[   62.885522][ T6065] netlink: 'syz.2.42': attribute type 1 has an invalid length.
[   62.902926][ T6065] veth3: entered promiscuous mode
[   64.019075][ T6111] __nla_validate_parse: 4 callbacks suppressed
[   64.019089][ T6111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.53'.
[   64.174295][ T6115] wg1 speed is unknown, defaulting to 1000
[   64.480161][ T5851] Bluetooth: hci1: command tx timeout
[   64.482359][ T5851] Bluetooth: hci0: command tx timeout
[   64.577968][ T5851] Bluetooth: hci2: command tx timeout
[   64.599084][ T6142] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   64.655812][ T6142] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.870421][ T6166] veth0_to_bond: entered allmulticast mode
[   64.913948][ T6145] netlink: 'syz.1.65': attribute type 1 has an invalid length.
[   64.917534][ T6145] nbd: error processing sock list
[   64.921086][ T6145] block nbd0: shutting down sockets
[   65.147378][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.151253][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.254054][ T6176] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   65.263455][ T6176] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   65.269174][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.284775][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.437469][ T5879] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.441237][ T5879] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.444205][ T5879] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.447067][ T5879] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.571478][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.574794][ T6190] 8021q: adding VLAN 0 to HW filter on device team0
[   65.580905][ T6190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.587382][ T6191] netlink: 'syz.1.75': attribute type 12 has an invalid length.
[   66.353614][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.82'.
[   66.932082][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'.
[   66.947495][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'.
[   67.046233][ T6230] syzkaller0: entered promiscuous mode
[   67.048528][ T6230] syzkaller0: entered allmulticast mode
[   67.430147][ T6239] syz.2.89 uses obsolete (PF_INET,SOCK_PACKET)
[   68.016169][ T6239] syzkaller1: entered promiscuous mode
[   68.020049][ T6239] syzkaller1: entered allmulticast mode
[   68.055490][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'.
[   68.081796][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.91'.
[   68.411689][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'.
[   68.791142][ T6292] veth0_to_bond: left allmulticast mode
[   68.915780][ T6299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.107'.
[   69.034870][ T6304] wg1 speed is unknown, defaulting to 1000
[   69.283354][ T6318] wg1 speed is unknown, defaulting to 1000
[   69.342973][ T6323] wg1 speed is unknown, defaulting to 1000
[   69.961500][ T6353] syzkaller1: entered promiscuous mode
[   69.963336][ T6353] syzkaller1: entered allmulticast mode
[   70.065877][ T6356] syzkaller1: entered promiscuous mode
[   70.067959][ T6356] syzkaller1: entered allmulticast mode
[   70.363476][ T6365] IPv6: NLM_F_REPLACE set, but no existing node found!
[   70.796494][ T6382] netlink: 84 bytes leftover after parsing attributes in process `syz.2.132'.
[   70.858676][ T6382] syzkaller1: entered promiscuous mode
[   70.860925][ T6382] syzkaller1: entered allmulticast mode
[   70.871746][   T24] IPVS: starting estimator thread 0...
[   70.979980][ T6386] IPVS: using max 63 ests per chain, 151200 per kthread
[   71.006186][ T6390] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   71.017364][ T6390] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.033091][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   71.055693][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.058624][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.097903][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[   71.272413][ T6397] syzkaller0: entered promiscuous mode
[   71.274412][ T6397] syzkaller0: entered allmulticast mode
[   72.022238][ T6400] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   72.096387][ T6402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'.
[   72.265865][ T6404] pim6reg1: entered promiscuous mode
[   72.268139][ T6404] pim6reg1: entered allmulticast mode
[   72.371789][ T6410] syzkaller1: entered promiscuous mode
[   72.374836][ T6410] syzkaller1: entered allmulticast mode
[   72.483267][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[   72.487344][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[   72.525291][ T6425] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   72.578916][ T6433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'.
[   72.800042][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[   72.934346][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.155'.
[   72.937215][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.155'.
[   72.940622][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.155'.
[   73.359702][ T6493] netlink: 'syz.0.164': attribute type 10 has an invalid length.
[   73.366142][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.368723][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.376066][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.378647][ T6493] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.381486][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.383808][ T6493] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.390256][ T6493] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   73.396976][ T6493] bridge_slave_1: left allmulticast mode
[   73.398969][ T6493] bridge_slave_1: left promiscuous mode
[   73.402107][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.412437][ T6493] bridge_slave_0: left allmulticast mode
[   73.414784][ T6493] bridge_slave_0: left promiscuous mode
[   73.417600][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.445895][ T6493] bond0: (slave bridge0): Releasing backup interface
[   73.554667][ T6501] netlink: 'syz.2.169': attribute type 10 has an invalid length.
[   73.564173][ T6501] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   73.568460][ T6501] bridge_slave_1: left allmulticast mode
[   73.571554][ T6501] bridge_slave_1: left promiscuous mode
[   73.574016][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.579087][ T6501] bridge_slave_0: left allmulticast mode
[   73.582289][ T6501] bridge_slave_0: left promiscuous mode
[   73.584790][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.609710][ T6501] bond0: (slave bridge0): Releasing backup interface
[   74.257434][ T6532] syzkaller1: entered promiscuous mode
[   74.259434][ T6532] syzkaller1: entered allmulticast mode
[   74.818747][ T6560] ieee802154 phy0 wpan0: encryption failed: -22
[   75.722098][ T6571] wg1 speed is unknown, defaulting to 1000
[   75.813587][ T6574] __nla_validate_parse: 16 callbacks suppressed
[   75.813599][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'.
[   76.162754][ T6576] netlink: 144 bytes leftover after parsing attributes in process `syz.0.188'.
[   76.373067][ T6585] wg1 speed is unknown, defaulting to 1000
[   76.460163][ T6596] netlink: 164 bytes leftover after parsing attributes in process `syz.0.195'.
[   76.588385][ T6604] wg1 speed is unknown, defaulting to 1000
[   76.810141][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'.
[   76.989253][ T6639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.004343][ T6639] Illegal XDP return value 16128 on prog  (id 82) dev syz_tun, expect packet loss!
[   77.074958][ T6641] netlink: 'syz.2.205': attribute type 10 has an invalid length.
[   77.111745][ T6639] syzkaller0: entered promiscuous mode
[   77.113616][ T6639] syzkaller0: entered allmulticast mode
[   77.117419][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'.
[   78.994227][ T6669] netlink: 164 bytes leftover after parsing attributes in process `syz.1.212'.
[   79.136968][ T6676] wg1 speed is unknown, defaulting to 1000
[   79.367566][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[   79.405092][ T6698] syzkaller0: entered promiscuous mode
[   79.407062][ T6698] syzkaller0: entered allmulticast mode
[   79.417888][ T6702] netlink: 'syz.1.222': attribute type 10 has an invalid length.
[   79.471133][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'.
[   80.383209][ T6714] wg1 speed is unknown, defaulting to 1000
[   80.517924][ T6726] netlink: 'syz.2.226': attribute type 6 has an invalid length.
[   80.581167][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.226'.
[   80.584070][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'.
[   81.259584][ T6740] netlink: 'syz.1.230': attribute type 1 has an invalid length.
[   81.285449][  T972] cfg80211: failed to load regulatory.db
[   81.336949][ T6745] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   81.359363][ T6745] __nla_validate_parse: 2 callbacks suppressed
[   81.359373][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   81.416066][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.429005][ T6754] netlink: 14 bytes leftover after parsing attributes in process `syz.1.234'.
[   81.432381][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'.
[   81.478051][ T6755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   82.358197][ T6788] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   82.405381][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'.
[   82.469084][ T6797] netlink: 'syz.0.240': attribute type 1 has an invalid length.
[   82.473786][ T6797] netlink: 224 bytes leftover after parsing attributes in process `syz.0.240'.
[   83.305253][ T6816] sctp: [Deprecated]: syz.0.246 (pid 6816) Use of int in maxseg socket option.
[   83.305253][ T6816] Use struct sctp_assoc_value instead
[   83.679329][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[   84.391898][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   84.763045][ T6877] wg1 speed is unknown, defaulting to 1000
[   84.875078][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'.
[   85.074218][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'.
[   85.077355][ T6889] netlink: 'syz.1.265': attribute type 7 has an invalid length.
[   85.080090][ T6889] netlink: 'syz.1.265': attribute type 8 has an invalid length.
[   85.354942][ T6900] sctp: [Deprecated]: syz.2.268 (pid 6900) Use of int in maxseg socket option.
[   85.354942][ T6900] Use struct sctp_assoc_value instead
[   85.474127][ T6907] wg1 speed is unknown, defaulting to 1000
[   85.773583][ T6919] wg1 speed is unknown, defaulting to 1000
[   86.098298][ T6927] wg1 speed is unknown, defaulting to 1000
[   86.440261][ T6938] __nla_validate_parse: 2 callbacks suppressed
[   86.440281][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.276'.
[   86.557559][ T6950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.281'.
[   86.563152][ T6950] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   86.602424][ T6950] bond2: (slave bridge1): making interface the new active one
[   86.606687][ T6950] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   86.776391][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[   86.787633][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[   87.153283][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.289'.
[   87.208354][ T6974] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   87.409397][ T6987] wg1 speed is unknown, defaulting to 1000
[   87.472274][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'.
[   87.908943][ T7002] tipc: Started in network mode
[   87.912677][ T7002] tipc: Node identity 4a2a0a164f92, cluster identity 4711
[   87.915183][ T7002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.917856][ T7003] syzkaller0: entered promiscuous mode
[   87.920101][ T7003] syzkaller0: entered allmulticast mode
[   87.937215][ T7003] tipc: Resetting bearer <eth:syzkaller0>
[   87.943144][ T7001] tipc: Resetting bearer <eth:syzkaller0>
[   87.952286][ T7001] tipc: Disabling bearer <eth:syzkaller0>
[   88.105721][ T7010] wg1 speed is unknown, defaulting to 1000
[   88.161638][ T7017] netlink: 'syz.2.299': attribute type 10 has an invalid length.
[   88.176877][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   88.176898][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[   88.756392][ T7042] syzkaller0: entered promiscuous mode
[   88.758796][ T7042] syzkaller0: entered allmulticast mode
[   89.292601][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'.
[   89.854136][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.307'.
[   91.123276][ T7106] wg1 speed is unknown, defaulting to 1000
[   91.174069][ T7113] xt_socket: unknown flags 0xfc
[   91.192651][ T7115] syzkaller1: entered promiscuous mode
[   91.194507][ T7115] syzkaller1: entered allmulticast mode
[   91.377503][ T7126] IPv6: NLM_F_REPLACE set, but no existing node found!
[   91.521900][ T7134] __nla_validate_parse: 2 callbacks suppressed
[   91.521919][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'.
[   92.326427][ T7144] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   92.331298][ T7144] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   92.334504][ T7144] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   92.376008][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.337'.
[   92.379655][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.337'.
[   92.384191][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[   92.521955][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.526087][ T7153] 8021q: adding VLAN 0 to HW filter on device team0
[   92.531373][ T7153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.994384][ T7156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'.
[   93.085412][ T7162] netlink: 'syz.0.340': attribute type 7 has an invalid length.
[   93.366839][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'.
[   93.392430][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[   93.416557][ T7194] wg1 speed is unknown, defaulting to 1000
[   93.845826][ T7238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.361'.
[   93.893037][ T7243] netlink: 666 bytes leftover after parsing attributes in process `syz.2.363'.
[   93.935138][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'.
[   94.078517][ T7256] netlink: 'syz.2.368': attribute type 16 has an invalid length.
[   94.086791][ T7256] netlink: 'syz.2.368': attribute type 17 has an invalid length.
[   94.092256][ T7256] IPv6: NLM_F_REPLACE set, but no existing node found!
[   94.428279][ T7277] netlink: 'syz.2.375': attribute type 16 has an invalid length.
[   94.431628][ T7277] netlink: 'syz.2.375': attribute type 17 has an invalid length.
[   94.436043][ T7277] IPv6: NLM_F_REPLACE set, but no existing node found!
[   95.200203][ T7282] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[   95.208071][ T7282] nbd: error processing sock list
[   95.210721][ T7282] block nbd0: shutting down sockets
[   95.256333][ T7286] wg1 speed is unknown, defaulting to 1000
[   95.709584][ T7297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.916707][ T7302] netlink: 'syz.0.381': attribute type 10 has an invalid length.
[   95.958800][ T7306] wg1 speed is unknown, defaulting to 1000
[   96.593489][ T7331] wg1 speed is unknown, defaulting to 1000
[   96.657368][ T7333] wg1 speed is unknown, defaulting to 1000
[   96.990090][ T7337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.994176][ T7337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.997484][ T7337] bond0 (unregistering): Released all slaves
[   97.083483][ T7345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.128838][ T7350] __nla_validate_parse: 6 callbacks suppressed
[   97.128858][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[   97.146362][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.154333][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.165662][ T7350] netlink: 244 bytes leftover after parsing attributes in process `syz.1.393'.
[   97.177812][ T7350] tipc: New replicast peer: 0.0.0.0
[   97.181158][ T7350] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.444446][ T7366] netlink: 'syz.1.397': attribute type 1 has an invalid length.
[   97.448237][ T7366] netlink: 236 bytes leftover after parsing attributes in process `syz.1.397'.
[   97.488393][ T7366] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.697790][ T7380] netlink: 'syz.1.401': attribute type 10 has an invalid length.
[   97.704606][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'.
[   97.954214][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.403'.
[   97.957703][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'.
[   97.962739][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.403'.
[   97.966492][ T7391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.403'.
[   98.300564][ T5921] tipc: Node number set to 95947286
[   98.658189][ T7412] netlink: 36 bytes leftover after parsing attributes in process `syz.2.408'.
[   98.661846][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'.
[   99.022477][ T7429] syzkaller1: entered promiscuous mode
[   99.024344][ T7429] syzkaller1: entered allmulticast mode
[  100.421713][ T7484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.440364][ T7488] syzkaller1: entered promiscuous mode
[  100.442347][ T7488] syzkaller1: entered allmulticast mode
[  100.497464][ T7484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.582055][ T7484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.608213][ T7492] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  100.610810][ T7492] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  100.683737][ T7484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.752162][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.767149][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.782088][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.804000][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.891315][ T7511] syzkaller1: entered promiscuous mode
[  100.893340][ T7511] syzkaller1: entered allmulticast mode
[  100.905385][ T7507] netlink: 'syz.1.438': attribute type 2 has an invalid length.
[  100.907775][ T7507] netlink: 'syz.1.438': attribute type 1 has an invalid length.
[  100.966658][ T7507] syzkaller0: entered promiscuous mode
[  100.968429][ T7507] syzkaller0: entered allmulticast mode
[  101.952978][ T7529] netlink: 'syz.1.444': attribute type 10 has an invalid length.
[  102.175152][ T7553] syz.2.452: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  102.182985][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.2.452 Not tainted syzkaller #0 PREEMPT(full) 
[  102.183009][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.183019][ T7553] Call Trace:
[  102.183038][ T7553]  <TASK>
[  102.183047][ T7553]  dump_stack_lvl+0x189/0x250
[  102.183075][ T7553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.183092][ T7553]  ? __pfx__printk+0x10/0x10
[  102.183113][ T7553]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.183129][ T7553]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.183145][ T7553]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  102.183162][ T7553]  warn_alloc+0x214/0x310
[  102.183184][ T7553]  ? stack_depot_save_flags+0x40/0x860
[  102.183207][ T7553]  ? __pfx_warn_alloc+0x10/0x10
[  102.183229][ T7553]  ? kasan_save_track+0x4f/0x80
[  102.183247][ T7553]  ? xskq_create+0x56/0x170
[  102.183266][ T7553]  ? xsk_init_queue+0xb0/0x110
[  102.183283][ T7553]  ? xsk_setsockopt+0x4dc/0x8d0
[  102.183300][ T7553]  ? do_sock_setsockopt+0x17c/0x1b0
[  102.183315][ T7553]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  102.183330][ T7553]  ? do_syscall_64+0xfa/0x3b0
[  102.183343][ T7553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.183363][ T7553]  __vmalloc_node_range_noprof+0x125/0x12f0
[  102.183406][ T7553]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  102.183431][ T7553]  ? __kasan_kmalloc+0x93/0xb0
[  102.183451][ T7553]  vmalloc_user_noprof+0xad/0xf0
[  102.183471][ T7553]  ? xskq_create+0xbf/0x170
[  102.183491][ T7553]  xskq_create+0xbf/0x170
[  102.183513][ T7553]  xsk_init_queue+0xb0/0x110
[  102.183535][ T7553]  xsk_setsockopt+0x4dc/0x8d0
[  102.183556][ T7553]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.183575][ T7553]  ? __pfx_aa_sk_perm+0x10/0x10
[  102.183598][ T7553]  ? aa_sock_opt_perm+0xff/0x1b0
[  102.183614][ T7553]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  102.183628][ T7553]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.183647][ T7553]  do_sock_setsockopt+0x17c/0x1b0
[  102.183667][ T7553]  __x64_sys_setsockopt+0x13f/0x1b0
[  102.183688][ T7553]  do_syscall_64+0xfa/0x3b0
[  102.183701][ T7553]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.183721][ T7553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.183767][ T7553]  ? exc_page_fault+0x9f/0xf0
[  102.183790][ T7553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.183803][ T7553] RIP: 0033:0x7f0def38ec29
[  102.183818][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.183831][ T7553] RSP: 002b:00007f0df0169038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.183848][ T7553] RAX: ffffffffffffffda RBX: 00007f0def5d5fa0 RCX: 00007f0def38ec29
[  102.183858][ T7553] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  102.183868][ T7553] RBP: 00007f0def411e41 R08: 0000000000000004 R09: 0000000000000000
[  102.183877][ T7553] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.183887][ T7553] R13: 00007f0def5d6038 R14: 00007f0def5d5fa0 R15: 00007fff35ac4068
[  102.183912][ T7553]  </TASK>
[  102.183918][ T7553] Mem-Info:
[  102.360313][ T7553] active_anon:5315 inactive_anon:0 isolated_anon:0
[  102.360313][ T7553]  active_file:1356 inactive_file:38253 isolated_file:0
[  102.360313][ T7553]  unevictable:1768 dirty:51 writeback:0
[  102.360313][ T7553]  slab_reclaimable:10001 slab_unreclaimable:54012
[  102.360313][ T7553]  mapped:18185 shmem:2439 pagetables:986
[  102.360313][ T7553]  sec_pagetables:0 bounce:0
[  102.360313][ T7553]  kernel_misc_reclaimable:0
[  102.360313][ T7553]  free:293520 free_pcp:22296 free_cma:0
[  102.390315][ T7553] Node 0 active_anon:14552kB inactive_anon:0kB active_file:3884kB inactive_file:24016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48444kB dirty:132kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5980kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.407818][ T7553] Node 1 active_anon:6708kB inactive_anon:0kB active_file:1540kB inactive_file:128996kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24296kB dirty:72kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5848kB pagetables:1536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.415790][ T7565] __nla_validate_parse: 12 callbacks suppressed
[  102.415805][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'.
[  102.418906][ T7553] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  102.445211][ T7553] lowmem_reserve[]: 0 814 814 814 814
[  102.447517][ T7553] Node 0 DMA32 free:379700kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14620kB inactive_anon:0kB active_file:3884kB inactive_file:24016kB unevictable:3536kB writepending:132kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:40332kB local_pcp:19960kB free_cma:0kB
[  102.461980][ T7553] lowmem_reserve[]: 0 0 0 0 0
[  102.463936][ T7553] Node 1 DMA32 free:458492kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  102.474835][ T7553] lowmem_reserve[]: 0 0 854 854 854
[  102.476999][ T7553] Node 1 Normal free:327192kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6708kB inactive_anon:0kB active_file:1540kB inactive_file:128996kB unevictable:3536kB writepending:72kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47724kB local_pcp:18244kB free_cma:0kB
[  102.487749][ T7553] lowmem_reserve[]: 0 0 0 0 0
[  102.489515][ T7553] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  102.494187][ T7553] Node 0 DMA32: 160*4kB (UM) 156*8kB (ME) 112*16kB (UM) 234*32kB (UM) 27*64kB (UME) 6*128kB (UME) 6*256kB (UM) 10*512kB (UME) 5*1024kB (ME) 3*2048kB (U) 85*4096kB (M) = 379744kB
[  102.500594][ T7553] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  102.506115][ T7553] Node 1 Normal: 1215*4kB (UME) 546*8kB (UME) 267*16kB (UME) 81*32kB (UME) 39*64kB (UM) 19*128kB (UME) 20*256kB (UM) 12*512kB (UME) 8*1024kB (U) 4*2048kB (U) 68*4096kB (UM) = 327196kB
[  102.512340][ T7553] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.515538][ T7553] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.518663][ T7553] 42050 total pagecache pages
[  102.520424][ T7553] 0 pages in swap cache
[  102.522086][ T7553] Free swap  = 124996kB
[  102.523784][ T7553] Total swap = 124996kB
[  102.526001][ T7553] 786301 pages RAM
[  102.527815][ T7553] 0 pages HighMem/MovableOnly
[  102.529453][ T7553] 240658 pages reserved
[  102.531187][ T7553] 0 pages cma reserved
[  102.546621][ T7572] wg1 speed is unknown, defaulting to 1000
[  102.664776][ T7585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.458'.
[  102.804900][ T7597] wg1 speed is unknown, defaulting to 1000
[  102.927451][ T7605] ieee802154 phy0 wpan0: encryption failed: -22
[  102.955545][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  103.535713][ T7611] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[  103.580186][ T7611] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[  103.611293][ T7613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.466'.
[  104.578472][ T7631] netlink: 'syz.2.473': attribute type 1 has an invalid length.
[  104.583673][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'.
[  104.590633][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[  104.605199][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'.
[  105.122543][ T7661] netlink: 52 bytes leftover after parsing attributes in process `syz.1.478'.
[  105.882209][ T7678] syzkaller1: entered promiscuous mode
[  105.884059][ T7678] syzkaller1: entered allmulticast mode
[  106.012520][ T7686] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[  106.034132][ T7686] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.045374][ T7686] vlan2: entered promiscuous mode
[  106.047026][ T7686] bond1: entered promiscuous mode
[  106.049040][ T7686] vlan2: entered allmulticast mode
[  106.051840][ T7686] bond1: entered allmulticast mode
[  106.074365][ T7686] bond1: (slave gretap1): making interface the new active one
[  106.077321][ T7686] gretap1: entered promiscuous mode
[  106.079100][ T7686] gretap1: entered allmulticast mode
[  106.083587][ T7686] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  106.220688][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'.
[  106.223550][ T7702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.492'.
[  106.945122][ T7724] wg1 speed is unknown, defaulting to 1000
[  107.163462][ T7740] syz_tun: entered allmulticast mode
[  107.184150][ T7742] syz_tun: left allmulticast mode
[  107.453666][ T7769] tipc: Started in network mode
[  107.455404][ T7769] tipc: Node identity 12e451ef6015, cluster identity 4711
[  107.457853][ T7769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.466099][ T7770] syzkaller0: entered promiscuous mode
[  107.468313][ T7770] syzkaller0: entered allmulticast mode
[  107.485291][ T7769] tipc: Resetting bearer <eth:syzkaller0>
[  107.496431][ T7768] tipc: Resetting bearer <eth:syzkaller0>
[  107.506583][ T7768] tipc: Disabling bearer <eth:syzkaller0>
[  107.607680][ T7773] __nla_validate_parse: 5 callbacks suppressed
[  107.607699][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'.
[  107.867901][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'.
[  107.871238][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.511'.
[  107.874988][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'.
[  107.878737][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.511'.
[  108.889334][ T7818] wg1 speed is unknown, defaulting to 1000
[  108.959268][ T7825] netlink: 'syz.0.524': attribute type 4 has an invalid length.
[  108.973414][ T7825] netlink: 'syz.0.524': attribute type 4 has an invalid length.
[  109.382558][ T7831] netlink: 60 bytes leftover after parsing attributes in process `syz.2.526'.
[  109.395324][ T7831] syzkaller1: entered promiscuous mode
[  109.397395][ T7831] syzkaller1: entered allmulticast mode
[  109.587998][ T7835] wg1 speed is unknown, defaulting to 1000
[  109.763228][ T7842] netlink: 'syz.1.529': attribute type 4 has an invalid length.
[  109.899248][ T7854] syzkaller1: entered promiscuous mode
[  109.902098][ T7854] syzkaller1: entered allmulticast mode
[  110.066886][ T7866] wg1 speed is unknown, defaulting to 1000
[  110.114004][ T7866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.536'.
[  111.095705][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'.
[  111.219413][ T7896] netlink: 'syz.1.543': attribute type 4 has an invalid length.
[  111.222523][ T7896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.543'.
[  111.250443][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.541'.
[  111.339439][ T7900] dvmrp1: tun_chr_ioctl cmd 1074025677
[  111.344118][ T7900] dvmrp1: linktype set to 773
[  111.348323][ T7900] dvmrp1: tun_chr_ioctl cmd 1074296322
[  111.555895][ T7910] wg1 speed is unknown, defaulting to 1000
[  112.065513][ T7920] syzkaller1: entered promiscuous mode
[  112.067526][ T7920] syzkaller1: entered allmulticast mode
[  112.370260][ T7922] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  112.373427][ T7922] nbd: error processing sock list
[  112.375961][ T7922] block nbd0: shutting down sockets
[  112.551286][ T7923] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  112.554154][ T7923] nbd: error processing sock list
[  112.556217][ T7923] block nbd0: shutting down sockets
[  112.638912][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'.
[  112.833202][ T7946] syzkaller1: entered promiscuous mode
[  112.835559][ T7946] syzkaller1: entered allmulticast mode
[  112.944803][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'.
[  113.035235][ T7951] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  113.215641][ T7962] Bluetooth: MGMT ver 1.23
[  113.311779][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  113.315727][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'.
[  113.540433][ T7984] netlink: 'syz.0.570': attribute type 1 has an invalid length.
[  113.592550][ T7984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'.
[  113.665352][ T7988] syzkaller1: entered promiscuous mode
[  113.667631][ T7988] syzkaller1: entered allmulticast mode
[  113.678103][ T7988] bridge: RTM_NEWNEIGH with invalid ether address
[  113.891858][ T8002] netlink: 'syz.1.578': attribute type 29 has an invalid length.
[  113.895085][ T8002] netlink: 'syz.1.578': attribute type 29 has an invalid length.
[  113.898300][ T8002] netlink: 500 bytes leftover after parsing attributes in process `syz.1.578'.
[  114.676268][ T8019] syzkaller1: entered promiscuous mode
[  114.678522][ T8019] syzkaller1: entered allmulticast mode
[  115.040215][ T8038] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  115.084278][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'.
[  115.544518][ T8061] wg1 speed is unknown, defaulting to 1000
[  115.639907][ T8064] netlink: 312 bytes leftover after parsing attributes in process `syz.1.598'.
[  115.974238][ T8084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.604'.
[  115.977891][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.604'.
[  117.002412][ T8105] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  117.007808][  T972] wg1 speed is unknown, defaulting to 1000
[  117.012611][  T972] syz0: Port: 1 Link DOWN
[  117.383244][ T8131] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  117.699076][ T8140] __nla_validate_parse: 4 callbacks suppressed
[  117.699091][ T8140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.617'.
[  117.704076][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'.
[  117.707050][ T8140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.617'.
[  117.709960][ T8140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.617'.
[  118.429215][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  118.434255][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'.
[  118.437321][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  118.441353][ T8152] netlink: 2 bytes leftover after parsing attributes in process `syz.1.622'.
[  118.446796][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'.
[  118.456342][ T8152] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  118.740459][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'.
[  118.997570][ T8184] syzkaller1: entered promiscuous mode
[  118.999418][ T8184] syzkaller1: entered allmulticast mode
[  119.439965][ T5236] Bluetooth: hci0: command tx timeout
[  120.352529][ T8230] netlink: 'syz.2.640': attribute type 30 has an invalid length.
[  120.369355][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.369443][ T8230] netlink: 'syz.2.640': attribute type 30 has an invalid length.
[  120.376310][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.379634][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.392854][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.586462][ T8239] wg1 speed is unknown, defaulting to 1000
[  120.668966][ T8249] syzkaller1: entered promiscuous mode
[  120.671344][ T8249] syzkaller1: entered allmulticast mode
[  120.856947][   T57] block nbd0: Receive control failed (result -11)
[  121.722499][ T8329] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  121.851855][ T8343] syzkaller1: entered promiscuous mode
[  121.854013][ T8343] syzkaller1: entered allmulticast mode
[  122.188621][ T8367] netlink: 'syz.2.675': attribute type 10 has an invalid length.
[  122.237782][ T8369] wg1 speed is unknown, defaulting to 1000
[  122.289079][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.294998][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.298372][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.308668][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.535356][ T8391] 8021q: adding VLAN 0 to HW filter on device bond1
[  122.768933][ T8417] __nla_validate_parse: 54 callbacks suppressed
[  122.768950][ T8417] netlink: 14 bytes leftover after parsing attributes in process `syz.1.691'.
[  122.774625][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'.
[  122.783407][ T8421] syzkaller1: entered promiscuous mode
[  122.785518][ T8421] syzkaller1: entered allmulticast mode
[  123.586267][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'.
[  123.651144][ T8438] netlink: 'syz.2.698': attribute type 13 has an invalid length.
[  123.708422][ T8436] wg1 speed is unknown, defaulting to 1000
[  123.783448][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'.
[  123.894669][ T8458] netlink: 'syz.0.704': attribute type 10 has an invalid length.
[  123.897548][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'.
[  123.979110][ T8459] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  123.993282][ T8459] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  124.003828][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.021556][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.174269][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.177083][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.181621][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.184716][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.634650][ T8468] ip6tnl1: entered promiscuous mode
[  124.706529][ T8472] wg1 speed is unknown, defaulting to 1000
[  124.877347][ T8495] wg1 speed is unknown, defaulting to 1000
[  124.905567][ T8493] wg1 speed is unknown, defaulting to 1000
[  124.912398][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.714'.
[  124.915446][ T8496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'.
[  124.918134][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.714'.
[  124.921633][ T8496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.714'.
[  125.146632][ T8516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.722'.
[  125.286778][ T8519] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  125.560264][ T8525] netlink: 'syz.1.726': attribute type 1 has an invalid length.
[  125.563532][ T8525] nbd: error processing sock list
[  125.565950][ T8525] block nbd1: shutting down sockets
[  126.050770][ T8533] wg1 speed is unknown, defaulting to 1000
[  126.100944][ T8533] trusted_key: syz.2.728 sent an empty control message without MSG_MORE.
[  126.313652][ T8546] wg1 speed is unknown, defaulting to 1000
[  126.523586][ T8555] wg1 speed is unknown, defaulting to 1000
[  127.366018][ T8582] syzkaller1: entered promiscuous mode
[  127.368386][ T8582] syzkaller1: entered allmulticast mode
[  127.550791][ T8586] netlink: 'syz.1.743': attribute type 1 has an invalid length.
[  127.573914][ T8586] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  127.577809][ T8586] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  127.629673][ T8588] bond2: (slave bridge2): Enslaving as an active interface with a down link
[  127.654620][ T8590] ieee802154 phy0 wpan0: encryption failed: -22
[  127.768192][ T8602] !: renamed from dummy0
[  127.778688][ T8597] wg1 speed is unknown, defaulting to 1000
[  127.805161][ T8602] wg1 speed is unknown, defaulting to 1000
[  127.856921][ T8605] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  127.936442][ T8605] __nla_validate_parse: 6 callbacks suppressed
[  127.936467][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  128.237349][ T8620] wg1 speed is unknown, defaulting to 1000
[  128.656093][ T8626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'.
[  128.659174][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.753'.
[  128.662116][ T8626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'.
[  128.665202][ T8626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.753'.
[  128.889372][ T8630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'.
[  129.237394][ T8645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'.
[  129.331305][ T8655] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  129.395699][ T8656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.761'.
[  129.399373][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'.
[  129.403488][ T8656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.761'.
[  129.524989][ T8663] syzkaller1: entered promiscuous mode
[  129.527410][ T8663] syzkaller1: entered allmulticast mode
[  129.722253][ T8667] netlink: 'syz.1.765': attribute type 10 has an invalid length.
[  130.281598][ T8678] wg1 speed is unknown, defaulting to 1000
[  130.586417][ T8689] syzkaller1: entered promiscuous mode
[  130.588828][ T8689] syzkaller1: entered allmulticast mode
[  131.197815][ T8701] wg1 speed is unknown, defaulting to 1000
[  131.367535][ T8711] wg1 speed is unknown, defaulting to 1000
[  132.124670][ T8731] macvlan0: entered promiscuous mode
[  132.127150][ T8731] batadv0: entered promiscuous mode
[  132.136398][ T8731] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  132.139879][ T8731] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  132.149367][ T8731] hsr1: entered allmulticast mode
[  132.152189][ T8731] macvlan0: entered allmulticast mode
[  132.153919][ T8731] batadv0: entered allmulticast mode
[  132.158412][ T8731] macvlan0: left promiscuous mode
[  132.164128][ T8731] batadv0: left promiscuous mode
[  132.229388][ T8732] syzkaller1: entered promiscuous mode
[  132.233151][ T8732] syzkaller1: entered allmulticast mode
[  132.482557][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.486161][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.496434][ T8759] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  132.597611][ T8768] syzkaller1: entered promiscuous mode
[  132.600133][ T8768] syzkaller1: entered allmulticast mode
[  132.629490][ T8765] wg1 speed is unknown, defaulting to 1000
[  132.763095][ T8772] IPVS: Error connecting to the multicast addr
[  132.992007][ T8788] syzkaller1: entered promiscuous mode
[  132.993920][ T8788] syzkaller1: entered allmulticast mode
[  133.149091][ T8790] __nla_validate_parse: 3 callbacks suppressed
[  133.149106][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'.
[  133.196238][ T8792] netlink: 'syz.2.804': attribute type 3 has an invalid length.
[  133.212497][ T8792] syz_tun: entered allmulticast mode
[  133.225762][ T8792] siw: device registration error -23
[  133.253088][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.257280][ T8792] 8021q: adding VLAN 0 to HW filter on device team0
[  133.262455][ T8792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.294125][ T8792] syz_tun: left allmulticast mode
[  133.384693][   T33] audit: type=1107 audit(1758970152.795:2): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  133.491740][ T8806] wg1 speed is unknown, defaulting to 1000
[  133.541330][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'.
[  133.570909][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[  134.273015][ T8822] bond0: (slave bond_slave_0): Releasing backup interface
[  134.278480][ T8822] bond0: (slave bond_slave_1): Releasing backup interface
[  134.285448][ T8822] team0: Port device team_slave_0 removed
[  134.290709][ T8822] team0: Port device team_slave_1 removed
[  134.293629][ T8822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.297779][ T8822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.301581][ T8822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  134.378440][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'.
[  134.382093][ T8823] netlink: 'syz.2.810': attribute type 10 has an invalid length.
[  134.390255][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.395228][ T8823] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  134.413145][ T8823] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.416482][ T8823] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.625520][ T8831] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  134.950044][ T8838] netlink: 'syz.0.814': attribute type 1 has an invalid length.
[  134.952596][ T8838] nbd: error processing sock list
[  134.954504][ T8838] block nbd1: shutting down sockets
[  135.500457][ T8848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.818'.
[  135.558540][ T8852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.820'.
[  135.565820][ T8852] netlink: 'syz.1.820': attribute type 11 has an invalid length.
[  135.601512][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.821'.
[  135.615599][ T8853] wg1 speed is unknown, defaulting to 1000
[  136.050214][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'.
[  136.053945][ T8870] openvswitch: netlink: Message has 12 unknown bytes.
[  136.054215][ T8871] syzkaller1: entered promiscuous mode
[  136.058431][ T8871] syzkaller1: entered allmulticast mode
[  136.186736][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  136.191003][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  136.243980][ T8879] netlink: 'syz.2.827': attribute type 10 has an invalid length.
[  136.458373][ T8889] netlink: 'syz.0.829': attribute type 10 has an invalid length.
[  137.459135][ T8954] netlink: 'syz.2.841': attribute type 13 has an invalid length.
[  137.606355][ T8964] bpq0: entered promiscuous mode
[  137.832744][ T8983] wg1 speed is unknown, defaulting to 1000
[  138.490044][ T9012] __nla_validate_parse: 1 callbacks suppressed
[  138.490063][ T9012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.858'.
[  138.726204][ T9018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.731589][ T9018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.737972][ T9018] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  138.742338][ T9018] bond0 (unregistering): Released all slaves
[  138.859529][ T9031] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  139.607446][ T9045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.867'.
[  139.717728][ T9049] wg1 speed is unknown, defaulting to 1000
[  139.778569][ T9057] wg1 speed is unknown, defaulting to 1000
[  140.757868][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'.
[  140.765117][ T9073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.874'.
[  140.852248][ T9080] wg1 speed is unknown, defaulting to 1000
[  140.895405][ T9084] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  140.899026][ T9084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  141.211720][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'.
[  141.215297][ T9091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'.
[  141.218813][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'.
[  141.223047][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'.
[  141.263017][ T9091] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.879'.
[  141.560793][ T9095] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[  141.563973][ T9095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.880'.
[  141.626340][ T9100] wg1 speed is unknown, defaulting to 1000
[  141.693375][   T47] IPVS: starting estimator thread 0...
[  141.799241][ T9106] IPVS: using max 63 ests per chain, 151200 per kthread
[  142.084481][ T9132] wg1 speed is unknown, defaulting to 1000
[  142.106902][ T9138] wg1 speed is unknown, defaulting to 1000
[  142.164738][ T9144] wg1 speed is unknown, defaulting to 1000
[  142.673911][ T9171] wg1 speed is unknown, defaulting to 1000
[  142.742573][ T9175] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  142.875345][ T9180] netlink: 'syz.0.904': attribute type 10 has an invalid length.
[  142.896987][ T9181] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  142.908797][ T9180] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  143.059308][ T9202] netlink: 'syz.0.910': attribute type 10 has an invalid length.
[  143.214491][ T9212] netlink: 'syz.0.913': attribute type 1 has an invalid length.
[  143.288262][ T9210] wg1 speed is unknown, defaulting to 1000
[  143.291776][ T9221] sch_fq: defrate 0 ignored.
[  144.125465][ T9240] __nla_validate_parse: 10 callbacks suppressed
[  144.125477][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'.
[  144.417811][ T9252] netlink: 'syz.1.923': attribute type 1 has an invalid length.
[  144.476618][ T9252] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.496854][ T9256] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.499529][ T9256] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  144.505022][ T9256] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  144.799877][ T5236] Bluetooth: hci0: command tx timeout
[  144.861113][ T9270] netlink: 'syz.1.925': attribute type 1 has an invalid length.
[  145.146235][ T9283] wg1 speed is unknown, defaulting to 1000
[  145.201076][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  145.203954][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'.
[  145.444739][ T9309] IPVS: Scheduler module ip_vs_ not found
[  145.448211][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  145.450852][ T9304] wg1 speed is unknown, defaulting to 1000
[  145.453333][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  145.509414][ T9311] wg1 speed is unknown, defaulting to 1000
[  145.565294][ T9314] tipc: Cannot configure node identity twice
[  145.573992][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  145.578887][ T9314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.681117][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'.
[  145.684276][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'.
[  145.687095][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'.
[  145.692763][ T9330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'.
[  147.039676][ T9392] netlink: 'syz.1.957': attribute type 7 has an invalid length.
[  147.044742][ T9392] netlink: 'syz.1.957': attribute type 8 has an invalid length.
[  147.614917][ T9410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.618415][ T9410] syzkaller0: entered promiscuous mode
[  147.622202][ T9410] syzkaller0: entered allmulticast mode
[  147.638696][ T9410] tipc: Resetting bearer <eth:syzkaller0>
[  147.826307][ T9412] netlink: 'syz.2.964': attribute type 11 has an invalid length.
[  147.912049][ T9418] tc_dump_action: action bad kind
[  147.986810][ T9421] pim6reg99999999: entered allmulticast mode
[  148.492014][ T9409] tipc: Resetting bearer <eth:syzkaller0>
[  148.501970][ T9409] tipc: Disabling bearer <eth:syzkaller0>
[  148.839939][ T9435] netlink: 'syz.0.972': attribute type 1 has an invalid length.
[  148.842527][ T9435] nbd: error processing sock list
[  148.844384][ T9435] block nbd1: shutting down sockets
[  149.387092][ T9467] __nla_validate_parse: 18 callbacks suppressed
[  149.387104][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'.
[  149.477496][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.986'.
[  149.882545][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  149.886221][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  150.251989][ T9494] wg1 speed is unknown, defaulting to 1000
[  150.461779][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'.
[  150.815423][ T9508] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  150.984560][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.988435][ T9518] 8021q: adding VLAN 0 to HW filter on device team0
[  150.992357][ T9518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.502319][ T9533] wg1 speed is unknown, defaulting to 1000
[  151.565629][ T9537] xt_l2tp: missing protocol rule (udp|l2tpip)
[  151.977425][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1011'.
[  151.985651][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'.
[  151.988611][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[  151.992170][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'.
[  151.995122][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'.
[  152.003317][ T9559] netlink: 'syz.1.1011': attribute type 1 has an invalid length.
[  152.423782][ T9571] wg1 speed is unknown, defaulting to 1000
[  152.739476][ T9584] netlink: 'syz.1.1018': attribute type 3 has an invalid length.
[  152.766520][ T9586] tipc: Started in network mode
[  152.768582][ T9586] tipc: Node identity ac14142f, cluster identity 4711
[  152.772125][ T9586] tipc: New replicast peer: 0.0.0.0
[  152.776560][ T9586] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.864396][ T9603] syzkaller1: entered promiscuous mode
[  152.866217][ T9603] syzkaller1: entered allmulticast mode
[  153.071347][ T9611] wg1 speed is unknown, defaulting to 1000
[  153.747225][ T9638] netlink: 'syz.0.1033': attribute type 10 has an invalid length.
[  153.910895][   T47] tipc: Node number set to 2886997039
[  154.010480][ T9659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.017447][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.025911][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.466012][ T9681] __nla_validate_parse: 22 callbacks suppressed
[  154.466032][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1047'.
[  154.562613][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'.
[  154.603013][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1049'.
[  154.689511][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'.
[  154.781056][ T9698] wg1 speed is unknown, defaulting to 1000
[  154.784005][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'.
[  154.787095][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'.
[  154.829179][ T9708] batadv_slave_0: entered promiscuous mode
[  154.834147][ T9708] netlink: 'syz.1.1055': attribute type 16 has an invalid length.
[  154.836546][ T9708] netlink: 'syz.1.1055': attribute type 17 has an invalid length.
[  154.842557][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'.
[  154.845795][ T9708] IPv6: NLM_F_REPLACE set, but no existing node found!
[  154.922869][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1058'.
[  154.928981][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1058'.
[  155.065134][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1062'.
[  155.406024][ T9769] netlink: 'syz.0.1069': attribute type 16 has an invalid length.
[  155.408781][ T9769] netlink: 'syz.0.1069': attribute type 17 has an invalid length.
[  155.423481][ T9769] IPv6: NLM_F_REPLACE set, but no existing node found!
[  155.442546][ T9767] wg1 speed is unknown, defaulting to 1000
[  156.197565][ T9784] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  156.201714][ T9784] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  156.279709][ T9788] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  156.295173][ T9787] syzkaller1: entered promiscuous mode
[  156.298588][ T9787] syzkaller1: entered allmulticast mode
[  156.382315][ T9793] wg1 speed is unknown, defaulting to 1000
[  156.837362][ T9812] wg1 speed is unknown, defaulting to 1000
[  157.056272][ T9822] wg1 speed is unknown, defaulting to 1000
[  157.358111][ T9851] syzkaller1: entered promiscuous mode
[  157.366084][ T9851] syzkaller1: entered allmulticast mode
[  157.453022][ T9855] wg1 speed is unknown, defaulting to 1000
[  157.684716][ T9867] wg1 speed is unknown, defaulting to 1000
[  157.723615][ T9866] wg1 speed is unknown, defaulting to 1000
[  158.329999][ T5236] Bluetooth: hci0: command tx timeout
[  158.529263][ T9892] syzkaller1: entered promiscuous mode
[  158.531618][ T9892] syzkaller1: entered allmulticast mode
[  159.192819][ T9907] wg1 speed is unknown, defaulting to 1000
[  159.466227][ T9918] wg1 speed is unknown, defaulting to 1000
[  159.598434][ T9931] __nla_validate_parse: 21 callbacks suppressed
[  159.598453][ T9931] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1118'.
[  159.605223][ T9931] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1118'.
[  159.650978][ T9935] batadv_slave_0: entered promiscuous mode
[  159.677166][ T9934] batadv_slave_0: left promiscuous mode
[  159.799207][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'.
[  159.908160][ T9960] netlink: 'syz.2.1126': attribute type 10 has an invalid length.
[  159.913255][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  160.805109][ T9978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  160.820655][ T9980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1132'.
[  160.965446][ T9985] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1133'.
[  160.969186][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'.
[  161.126273][ T9985] bond0 (unregistering): Released all slaves
[  161.142089][ T9997] netlink: 'syz.2.1134': attribute type 8 has an invalid length.
[  161.297618][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'.
[  161.365401][T10004] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  161.979994][T10015] netlink: 'syz.0.1139': attribute type 1 has an invalid length.
[  161.983130][T10015] nbd: error processing sock list
[  161.985275][T10015] block nbd1: shutting down sockets
[  162.423677][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1145'.
[  162.454882][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  162.787133][T10064] netlink: 'syz.0.1153': attribute type 16 has an invalid length.
[  162.790913][T10064] netlink: 'syz.0.1153': attribute type 17 has an invalid length.
[  162.795695][T10064] IPv6: NLM_F_REPLACE set, but no existing node found!
[  163.624023][T10081] wg1 speed is unknown, defaulting to 1000
[  163.777450][T10086] syzkaller1: entered promiscuous mode
[  163.787710][T10086] syzkaller1: entered allmulticast mode
[  164.776682][T10115] __nla_validate_parse: 4 callbacks suppressed
[  164.776693][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'.
[  164.821271][T10117] syzkaller1: entered promiscuous mode
[  164.823159][T10117] syzkaller1: entered allmulticast mode
[  165.095495][T10123] netlink: 'syz.1.1170': attribute type 1 has an invalid length.
[  165.213845][T10136] syzkaller1: entered promiscuous mode
[  165.215610][T10136] syzkaller1: entered allmulticast mode
[  165.501415][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.505332][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.508798][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.512753][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.516459][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.520497][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.530303][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.535416][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.538686][T10147] netlink: 'syz.0.1176': attribute type 29 has an invalid length.
[  165.588571][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  165.821768][T10169] wg1 speed is unknown, defaulting to 1000
[  166.279086][T10184] syzkaller1: entered promiscuous mode
[  166.281614][T10184] syzkaller1: entered allmulticast mode
[  166.408679][T10186] wg1 speed is unknown, defaulting to 1000
[  166.502340][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'.
[  166.538510][T10193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.597422][T10198] team0: Port device dummy0 added
[  166.602397][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'.
[  166.614014][T10192] delete_channel: no stack
[  166.693568][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'.
[  166.698327][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  166.702001][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  166.721292][T10200] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.790655][T10216] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1192'.
[  166.802798][T10216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'.
[  166.814133][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  166.818268][T10216] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.822239][T10216] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.894320][T10252] sctp: [Deprecated]: syz.2.1203 (pid 10252) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.894320][T10252] Use struct sctp_sack_info instead
[  169.600606][T10343] wg1 speed is unknown, defaulting to 1000
[  170.125220][T10348] validate_nla: 27 callbacks suppressed
[  170.125258][T10348] netlink: 'syz.0.1231': attribute type 10 has an invalid length.
[  170.131036][T10348] __nla_validate_parse: 5 callbacks suppressed
[  170.131051][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'.
[  170.221957][T10352] netlink: 'syz.0.1232': attribute type 16 has an invalid length.
[  170.224450][T10352] netlink: 'syz.0.1232': attribute type 17 has an invalid length.
[  170.229152][T10352] IPv6: NLM_F_REPLACE set, but no existing node found!
[  170.300435][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'.
[  170.304962][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'.
[  170.541225][T10377] block nbd1: shutting down sockets
[  170.626075][T10384] wg1 speed is unknown, defaulting to 1000
[  170.685209][T10388] wg1 speed is unknown, defaulting to 1000
[  170.744301][T10393] wg1 speed is unknown, defaulting to 1000
[  170.774250][T10402] wg1 speed is unknown, defaulting to 1000
[  170.937036][T10411] wg1 speed is unknown, defaulting to 1000
[  170.987550][T10411] wg1 speed is unknown, defaulting to 1000
[  171.183362][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'.
[  171.465884][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'.
[  171.469524][T10431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.518105][T10432] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1252'.
[  171.790378][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'.
[  171.855576][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1254'.
[  172.112834][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'.
[  172.118595][T10455] netlink: 'syz.1.1259': attribute type 4 has an invalid length.
[  172.157050][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'.
[  172.929130][T10477] wg1 speed is unknown, defaulting to 1000
[  172.982434][T10481] syzkaller1: entered promiscuous mode
[  172.984465][T10481] syzkaller1: entered allmulticast mode
[  173.169463][T10491] wg1 speed is unknown, defaulting to 1000
[  173.236277][T10498] netlink: 'syz.1.1271': attribute type 1 has an invalid length.
[  174.185283][T10546] wg1 speed is unknown, defaulting to 1000
[  174.919513][T10573] Set syz0 is full, maxelem 0 reached
[  175.099411][T10591] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  175.257254][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  176.109428][T10624] __nla_validate_parse: 7 callbacks suppressed
[  176.109447][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1309'.
[  176.153889][T10624] 8021q: adding VLAN 0 to HW filter on device bond4
[  176.172529][T10628] netlink: 'syz.1.1310': attribute type 10 has an invalid length.
[  176.181906][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'.
[  176.275952][T10635] wg1 speed is unknown, defaulting to 1000
[  176.404405][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'.
[  176.536501][T10657] netlink: 'syz.1.1318': attribute type 16 has an invalid length.
[  176.541813][T10657] netlink: 'syz.1.1318': attribute type 17 has an invalid length.
[  176.545548][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1317'.
[  176.560129][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'.
[  176.573230][T10658] wg1 speed is unknown, defaulting to 1000
[  176.637992][   T47] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  176.650707][   T47] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  176.685638][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'.
[  176.692857][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'.
[  176.699411][T10658] gtp0: entered promiscuous mode
[  176.704281][T10658] gtp0: entered allmulticast mode
[  176.714043][T10670] pimreg: entered allmulticast mode
[  176.773436][T10672] syzkaller0: entered promiscuous mode
[  176.775274][T10672] syzkaller0: entered allmulticast mode
[  176.779115][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'.
[  176.815357][T10678] netlink: 'syz.2.1323': attribute type 101 has an invalid length.
[  176.818920][T10678] netlink: 'syz.2.1323': attribute type 7 has an invalid length.
[  178.107732][T10697] wg1 speed is unknown, defaulting to 1000
[  178.202101][T10699] wg1 speed is unknown, defaulting to 1000
[  178.258448][T10704] IPVS: Error connecting to the multicast addr
[  178.628402][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'.
[  178.652253][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'.
[  178.825693][T10744] wg1 speed is unknown, defaulting to 1000
[  178.871073][T10751] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  180.650203][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  180.737310][T10870] syzkaller1: entered promiscuous mode
[  180.739336][T10870] syzkaller1: entered allmulticast mode
[  180.901173][T10871] syzkaller1: entered promiscuous mode
[  180.903208][T10871] syzkaller1: entered allmulticast mode
[  181.317119][T10893] __nla_validate_parse: 14 callbacks suppressed
[  181.317133][T10893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1380'.
[  181.447870][T10898] wg1 speed is unknown, defaulting to 1000
[  181.736262][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'.
[  181.992703][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'.
[  182.005271][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'.
[  182.009580][T10919] pimreg: entered allmulticast mode
[  182.281119][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1396'.
[  182.283964][T10941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1396'.
[  182.400454][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'.
[  182.406849][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'.
[  182.573631][T10966] wg1 speed is unknown, defaulting to 1000
[  182.645085][T10976] wg1 speed is unknown, defaulting to 1000
[  182.908685][T10995] netlink: 'syz.1.1410': attribute type 10 has an invalid length.
[  182.914003][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1410'.
[  183.078116][T10999] syzkaller0: entered promiscuous mode
[  183.081102][T10999] syzkaller0: entered allmulticast mode
[  183.156810][T11001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1412'.
[  183.274320][T11003] batadv_slave_0: left promiscuous mode
[  183.282548][T11003] ip6tnl1: left promiscuous mode
[  183.359631][T11009] syzkaller1: entered promiscuous mode
[  183.367751][T11009] syzkaller1: entered allmulticast mode
[  183.372688][T11011] netlink: 'syz.0.1414': attribute type 11 has an invalid length.
[  183.657839][T11017] wg1 speed is unknown, defaulting to 1000
[  184.261103][T11051] netlink: 'syz.0.1426': attribute type 10 has an invalid length.
[  184.298528][T11054] syzkaller1: entered promiscuous mode
[  184.301045][T11054] syzkaller1: entered allmulticast mode
[  184.878754][T11079] syzkaller1: entered promiscuous mode
[  184.884093][T11079] syzkaller1: entered allmulticast mode
[  185.418873][T11136] wg1 speed is unknown, defaulting to 1000
[  185.551114][T11142] wg1 speed is unknown, defaulting to 1000
[  185.591958][T11148] sctp: [Deprecated]: syz.2.1453 (pid 11148) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.591958][T11148] Use struct sctp_sack_info instead
[  186.235982][T11168] vlan2: left promiscuous mode
[  186.237808][T11168] bond1: left promiscuous mode
[  186.239427][T11168] gretap1: left promiscuous mode
[  186.242115][T11168] vlan2: left allmulticast mode
[  186.243790][T11168] bond1: left allmulticast mode
[  186.245408][T11168] gretap1: left allmulticast mode
[  186.311808][T11173] wg1 speed is unknown, defaulting to 1000
[  186.393998][T11176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.413968][T11176] syzkaller0: entered promiscuous mode
[  186.416215][T11176] syzkaller0: entered allmulticast mode
[  186.435267][T11176] tipc: Resetting bearer <eth:syzkaller0>
[  186.452554][T11175] tipc: Resetting bearer <eth:syzkaller0>
[  186.473764][T11175] tipc: Disabling bearer <eth:syzkaller0>
[  186.542854][T11182] __nla_validate_parse: 9 callbacks suppressed
[  186.542866][T11182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1463'.
[  186.618815][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'.
[  186.711251][T11189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1466'.
[  186.714955][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'.
[  186.718433][T11189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1466'.
[  186.722264][T11189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1466'.
[  186.802171][T11192] wg1 speed is unknown, defaulting to 1000
[  187.006592][T11204] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  187.212815][T11212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1472'.
[  187.290527][T11221] syzkaller1: entered promiscuous mode
[  187.292508][T11221] syzkaller1: entered allmulticast mode
[  187.334094][T11225] netlink: 'syz.0.1476': attribute type 4 has an invalid length.
[  187.571284][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'.
[  187.633396][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1482'.
[  187.708704][T11248] netlink: 'syz.2.1485': attribute type 10 has an invalid length.
[  187.713729][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'.
[  187.938353][T11264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  187.959647][T11265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  188.260298][T11286] syzkaller1: entered promiscuous mode
[  188.264832][T11286] syzkaller1: entered allmulticast mode
[  189.068695][T11343] netlink: 'syz.0.1505': attribute type 1 has an invalid length.
[  189.103220][T11343] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  189.107225][T11343] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  189.110853][T11343] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  189.142385][T11346] wg1 speed is unknown, defaulting to 1000
[  189.203653][T11352] netlink: 'syz.0.1507': attribute type 10 has an invalid length.
[  189.482545][T11362] netlink: 'syz.0.1510': attribute type 10 has an invalid length.
[  190.102713][T11397] delete_channel: no stack
[  190.430143][T11420] wg1 speed is unknown, defaulting to 1000
[  190.807914][T11430] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  190.974113][T11452] netlink: 'syz.2.1536': attribute type 10 has an invalid length.
[  191.057859][T11461] netlink: 'syz.2.1539': attribute type 1 has an invalid length.
[  191.152818][T11469] wg1 speed is unknown, defaulting to 1000
[  191.302759][T11481] netlink: 'syz.1.1545': attribute type 3 has an invalid length.
[  191.305438][T11482] netlink: 'syz.1.1545': attribute type 3 has an invalid length.
[  191.387299][T11487] netlink: 'syz.1.1547': attribute type 16 has an invalid length.
[  191.400208][T11487] netlink: 'syz.1.1547': attribute type 17 has an invalid length.
[  191.405148][T11487] IPv6: NLM_F_REPLACE set, but no existing node found!
[  191.476723][T11496] wg1 speed is unknown, defaulting to 1000
[  191.578945][T11500] wg1 speed is unknown, defaulting to 1000
[  191.942433][T11532] wg1 speed is unknown, defaulting to 1000
[  191.975349][T11536] ieee802154 phy0 wpan0: encryption failed: -90
[  191.991921][T11538] __nla_validate_parse: 28 callbacks suppressed
[  191.991933][T11538] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1561'.
[  192.183602][T11559] Unsupported ieee802154 address type: 0
[  192.187377][T11559] ieee802154 phy0 wpan0: encryption failed: -22
[  192.191033][T11554] veth0_to_bond: entered allmulticast mode
[  192.281347][T11563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1568'.
[  192.284395][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1568'.
[  192.287302][T11563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1568'.
[  192.290376][T11563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1568'.
[  192.863686][T11567] netlink: 'syz.2.1570': attribute type 7 has an invalid length.
[  192.866300][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'.
[  192.887505][T11567] 8021q: adding VLAN 0 to HW filter on device bond5
[  192.890328][T11567] bridge7: port 1(bond5) entered blocking state
[  192.892636][T11567] bridge7: port 1(bond5) entered disabled state
[  192.894840][T11567] bond5: entered allmulticast mode
[  192.900527][T11567] bridge7: port 1(bond5) entered blocking state
[  192.902917][T11567] bridge7: port 1(bond5) entered forwarding state
[  192.977366][T11572] wg1 speed is unknown, defaulting to 1000
[  193.306743][T11597] syzkaller1: entered promiscuous mode
[  193.319980][T11597] syzkaller1: entered allmulticast mode
[  193.605131][  T628] bridge7: port 1(bond5) entered disabled state
[  193.923681][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.996382][T11631] wg1 speed is unknown, defaulting to 1000
[  194.231858][T11646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1592'.
[  194.234959][T11646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'.
[  194.238060][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'.
[  194.430391][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'.
[  194.779439][T11670] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.784447][T11670] 8021q: adding VLAN 0 to HW filter on device team0
[  194.791894][T11670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.922673][T11682] sock: sock_timestamping_bind_phc: sock not bind to device
[  194.939656][T11682] wg1 speed is unknown, defaulting to 1000
[  195.397030][T11717] sit1: entered promiscuous mode
[  195.398756][T11717] sit1: entered allmulticast mode
[  195.669614][T11731] wg1 speed is unknown, defaulting to 1000
[  195.725779][T11735] dvmrp0: entered allmulticast mode
[  196.147439][T11760] raw_sendmsg: syz.0.1628 forgot to set AF_INET. Fix it!
[  196.173056][T11765] openvswitch: netlink: Duplicate or invalid key (type 0).
[  196.175460][T11765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.238029][T11774] ieee802154 phy0 wpan0: encryption failed: -22
[  196.745033][T11787] wg1 speed is unknown, defaulting to 1000
[  196.785000][T11790] netlink: 'syz.1.1637': attribute type 1 has an invalid length.
[  197.005609][T11797] syzkaller0: entered promiscuous mode
[  197.007552][T11797] syzkaller0: entered allmulticast mode
[  198.307179][T11826] __nla_validate_parse: 13 callbacks suppressed
[  198.307191][T11826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1646'.
[  198.313951][T11826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1646'.
[  198.316913][T11826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1646'.
[  198.320598][T11826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1646'.
[  198.386189][T11826] netlink: 'syz.2.1646': attribute type 1 has an invalid length.
[  198.477860][T11848] wg1 speed is unknown, defaulting to 1000
[  198.585310][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'.
[  198.615293][T11858] syzkaller0: entered promiscuous mode
[  198.617207][T11858] syzkaller0: entered allmulticast mode
[  199.675594][T11862] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1657'.
[  199.689605][T11862] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  199.698599][T11862] tipc: New replicast peer: 255.255.255.255
[  199.765153][T11865] syzkaller1: entered promiscuous mode
[  199.767204][T11865] syzkaller1: entered allmulticast mode
[  199.912962][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'.
[  199.955892][T11888] netlink: 'syz.2.1666': attribute type 21 has an invalid length.
[  199.958424][T11888] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1666'.
[  199.965328][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'.
[  199.968343][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'.
[  199.977785][T11888] netlink: 'syz.2.1666': attribute type 5 has an invalid length.
[  199.988911][T11888] netlink: 'syz.2.1666': attribute type 6 has an invalid length.
[  200.292986][T11923] sctp: [Deprecated]: syz.1.1677 (pid 11923) Use of int in maxseg socket option.
[  200.292986][T11923] Use struct sctp_assoc_value instead
[  200.459089][T11934] 8021q: VLANs not supported on sit0
[  200.473224][T11942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.507361][T11940] wg1 speed is unknown, defaulting to 1000
[  200.692987][T11962] netlink: 'syz.0.1688': attribute type 10 has an invalid length.
[  201.864386][T12001] wg1 speed is unknown, defaulting to 1000
[  202.202138][T12015] wg1 speed is unknown, defaulting to 1000
[  202.411726][T12030] wg1 speed is unknown, defaulting to 1000
[  202.459383][T12028] wg1 speed is unknown, defaulting to 1000
[  202.828644][T12053] netlink: 'syz.1.1712': attribute type 1 has an invalid length.
[  202.963808][T12062] bridge8: entered promiscuous mode
[  203.002212][T12068] !: renamed from dummy0
[  203.150013][T12069] bridge8: left promiscuous mode
[  203.334547][T12082] netlink: 'syz.1.1721': attribute type 4 has an invalid length.
[  203.337766][T12082] __nla_validate_parse: 30 callbacks suppressed
[  203.337778][T12082] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1721'.
[  203.386586][T12087] netlink: 'syz.0.1722': attribute type 10 has an invalid length.
[  203.390908][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'.
[  203.398134][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'.
[  203.477020][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  203.478321][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  203.532013][T12102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.564669][T12102] syzkaller0: entered promiscuous mode
[  203.566596][T12102] syzkaller0: entered allmulticast mode
[  203.568736][T12102] tipc: Resetting bearer <eth:syzkaller0>
[  203.582175][T12102] tipc: Resetting bearer <eth:syzkaller0>
[  203.938082][T12105] netlink: 'syz.2.1726': attribute type 10 has an invalid length.
[  203.985890][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'.
[  204.319588][T12114] netlink: 'syz.1.1728': attribute type 1 has an invalid length.
[  204.562617][  T972] tipc: Node number set to 1928417775
[  204.705645][T12102] tipc: Disabling bearer <eth:syzkaller0>
[  204.750206][T12116] gretap4: entered allmulticast mode
[  204.755740][T12116] bond0: (slave gretap4): making interface the new active one
[  204.759557][T12116] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  204.833519][T12120] wg1 speed is unknown, defaulting to 1000
[  204.856862][T12125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1731'.
[  204.914376][T12125] syzkaller1: entered promiscuous mode
[  204.916139][T12125] syzkaller1: entered allmulticast mode
[  204.933196][T12132] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  204.937480][T12132] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  204.941479][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.0.1732 Not tainted syzkaller #0 PREEMPT(full) 
[  204.945562][T12132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.949470][T12132] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  204.951659][T12132] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 66 90 ff f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 2f 91 ff f7 4d 89 3e
[  204.959100][T12132] RSP: 0018:ffffc90006cb70e0 EFLAGS: 00010246
[  204.961498][T12132] RAX: 0000000000000000 RBX: 1ffff110210a99b6 RCX: dffffc0000000000
[  204.964500][T12132] RDX: ffffc900085bb000 RSI: 00000000000001af RDI: 00000000000001b0
[  204.967508][T12132] RBP: ffffc90006cb7230 R08: ffff8880213c3980 R09: 0000000000000002
[  204.970530][T12132] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110210a99b6
[  204.973597][T12132] R13: ffff88810854cdb0 R14: 0000000000000000 R15: ffff88810854cda8
[  204.976675][T12132] FS:  00007fef639a26c0(0000) GS:ffff8881a3c3d000(0000) knlGS:0000000000000000
[  204.980069][T12132] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.982696][T12132] CR2: 00007fef639a1fc8 CR3: 000000002141a000 CR4: 00000000000006f0
[  204.985621][T12132] Call Trace:
[  204.986765][T12132]  <TASK>
[  204.987882][T12132]  ? xfrm_alloc_spi+0x2a0/0xf30
[  204.989889][T12132]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  204.991974][T12132]  ? xfrm_find_acq+0x87/0xa0
[  204.993846][T12132]  xfrm_alloc_userspi+0x70b/0xc90
[  204.995898][T12132]  ? apparmor_capable+0x137/0x1b0
[  204.997932][T12132]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  205.000138][T12132]  ? __nla_parse+0x40/0x60
[  205.001953][T12132]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.003926][T12132]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  205.006144][T12132]  ? __pfx___mutex_trylock_common+0x10/0x10
[  205.008527][T12132]  ? rcu_is_watching+0x15/0xb0
[  205.010479][T12132]  ? trace_contention_end+0x39/0x120
[  205.012636][T12132]  ? __mutex_lock+0x335/0x1350
[  205.014573][T12132]  netlink_rcv_skb+0x208/0x470
[  205.016502][T12132]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  205.018677][T12132]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  205.020794][T12132]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.022882][T12132]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.024599][T12132]  xfrm_netlink_rcv+0x79/0x90
[  205.026162][T12132]  netlink_unicast+0x82f/0x9e0
[  205.027758][T12132]  ? __pfx_netlink_unicast+0x10/0x10
[  205.029467][T12132]  ? netlink_sendmsg+0x642/0xb30
[  205.031156][T12132]  ? skb_put+0x11b/0x210
[  205.032617][T12132]  netlink_sendmsg+0x805/0xb30
[  205.034506][T12132]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.036626][T12132]  ? aa_sock_msg_perm+0xf1/0x1d0
[  205.038555][T12132]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  205.040301][T12132]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.042150][T12132]  __sock_sendmsg+0x21c/0x270
[  205.043885][T12132]  ____sys_sendmsg+0x505/0x830
[  205.045510][T12132]  ? __pfx_____sys_sendmsg+0x10/0x10
[  205.047239][T12132]  ? import_iovec+0x74/0xa0
[  205.048813][T12132]  ___sys_sendmsg+0x21f/0x2a0
[  205.050654][T12132]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.052780][T12132]  ? __fget_files+0x2a/0x420
[  205.054399][T12132]  ? __fget_files+0x3a0/0x420
[  205.055976][T12132]  __x64_sys_sendmsg+0x19b/0x260
[  205.057799][T12132]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.059766][T12132]  ? rcu_is_watching+0x15/0xb0
[  205.061488][T12132]  ? do_syscall_64+0xbe/0x3b0
[  205.063482][T12132]  do_syscall_64+0xfa/0x3b0
[  205.065166][T12132]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.066873][T12132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.068876][T12132]  ? exc_page_fault+0x9f/0xf0
[  205.070765][T12132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.072823][T12132] RIP: 0033:0x7fef62b8ec29
[  205.074335][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.080748][T12132] RSP: 002b:00007fef639a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.083430][T12132] RAX: ffffffffffffffda RBX: 00007fef62dd6090 RCX: 00007fef62b8ec29
[  205.085954][T12132] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000008
[  205.088876][T12132] RBP: 00007fef62c11e41 R08: 0000000000000000 R09: 0000000000000000
[  205.091533][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.094075][T12132] R13: 00007fef62dd6128 R14: 00007fef62dd6090 R15: 00007ffcefc88558
[  205.096762][T12132]  </TASK>
[  205.097783][T12132] Modules linked in:
[  205.099421][T12132] ---[ end trace 0000000000000000 ]---
[  205.101339][T12132] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  205.103179][T12132] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 66 90 ff f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 2f 91 ff f7 4d 89 3e
[  205.109487][T12132] RSP: 0018:ffffc90006cb70e0 EFLAGS: 00010246
[  205.111579][T12132] RAX: 0000000000000000 RBX: 1ffff110210a99b6 RCX: dffffc0000000000
[  205.114233][T12132] RDX: ffffc900085bb000 RSI: 00000000000001af RDI: 00000000000001b0
[  205.116978][T12132] RBP: ffffc90006cb7230 R08: ffff8880213c3980 R09: 0000000000000002
[  205.119470][T12132] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110210a99b6
[  205.121955][T12132] R13: ffff88810854cdb0 R14: 0000000000000000 R15: ffff88810854cda8
[  205.124430][T12132] FS:  00007fef639a26c0(0000) GS:ffff8881a3c3d000(0000) knlGS:0000000000000000
[  205.127129][T12132] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.129139][T12132] CR2: 00007fef639a1fc8 CR3: 000000002141a000 CR4: 00000000000006f0
[  205.131681][T12132] Kernel panic - not syncing: Fatal exception in interrupt
[  205.134605][T12132] Kernel Offset: disabled
[  205.136332][T12132] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:50:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff89772ef2 RBX=0000000000000000 RCX=0000000000080000 RDX=ffffc90006001000
RSI=000000000007df7a RDI=000000000007df7b RBP=0000000000000001 RSP=ffffc900064df1c0
R8 =ffffea00008c7377 R9 =1ffffd4000118e6e R10=dffffc0000000000 R11=fffff94000118e6f
R12=ffff8880359e4000 R13=0000000000000000 R14=ffffea00008c7340 R15=ffffea00008c7348
RIP=ffffffff81bfade8 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef639c36c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3e653e CR3=000000002141a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fef62c12e7b
XMM06=0000000000000000 00007fef62c12e75 XMM07=0000000000000000 00007fef62c12e89
XMM08=0000000000000000 00007fef62c12f0f XMM09=0000000000000000 00007fef62c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012e9 RDI=00000000000012ea RBP=00000000000003f8 RSP=ffffc90006cb6870
R8 =ffff8881076b8237 R9 =1ffff11020ed7046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78c5 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef639a26c0 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fef639a1fc8 CR3=000000002141a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fef62da7498 00007fef62da7470 XMM03=00007fef62da74a8 00007fef62da74a0
XMM04=00007fef6390d100 00007fef62da7460 XMM05=00007fef62da7478 00007fef62da74c0
XMM06=00007fef62da74b8 00007fef62da74b0 XMM07=00007fef62da74a8 00007fef62da74a0
XMM08=0000000000000000 00007fef62c12f0f XMM09=0000000000000000 00007fef62c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
