last executing test programs:

3.395925548s ago: executing program 2 (id=1652):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async)
recvfrom(r1, 0x0, 0x0, 0x2001, 0x0, 0x0) (async)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="3c06040306300900000000150000ff02005cd251a8000000000000000001fe8000000000000000000000000000aa"], 0x38) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000001050101000000000000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8884) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x88000) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, 0x0, 0x0) (async)
setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000040)=0x6, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'})

2.612210896s ago: executing program 0 (id=1665):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev}, 0x18, 0x0}, 0x20000804)

2.546744234s ago: executing program 0 (id=1666):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="3600000000000000000000000000001263bb8993f56023d5db6f62d2f2cf492086c698b76817ff176721c1393bbde5e524d8d51506d591b8671e9a84b02a5b3b67412e977f1d84752ad1aca5371ca95cd2cf0ce546ab99dd85bc12ede4b58619a66933b55f083b3cfa08013c1802a7a545bc88f279d34df41192515e17a2879af5b8389d9e3c2b80e3eae3c151e86200eae5de8c371deadb3675505deec89c85a32d26a2a405b0a47b4d1b6976fab6a2eeebb67d2a5bf1134a80dd1cf4234e260bc6dd32a3e92746533ad13cec1c1441bc008dad847958b5de34e4457459d740287be8c6347523330d7f2b57"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async)
sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="9a8aa489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f9c4d6bfa8c2a0c2e1abf3f3ee6a0b3", 0x10}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x2000c085)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r7}, 0x14)
bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0xb, r7, 0x8, r1}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x81, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000200)={&(0x7f0000000080)=""/29, 0x1d, 0x4, 0x7}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4fd0000000071101e00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)=ANY=[@ANYRES16, @ANYRESHEX=r9, @ANYBLOB="14000000130001ffffff7f8cd913e90002", @ANYRES64=r3, @ANYRESDEC=r10, @ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB="47322b8b34c76aa945bfcad30b7306f23ef2cac09a7d3d2ebfcf9942a7e9861d752ff2c64d9aa7078c663c1c0c1bb394c07855a9f4c350236c7b18b83f907afadac6e2e20e696b9a06918e0010d0f403f3929f0a3a8c2b39754453f56a16a99440046e093c44a5b7eff5742f7760e4f2034d70e5359fd650abea7ec3929060dae8d5da85b0d1247ea7b0e7f419da9bca4ee3602813e624dc3155b5cabdcba495bb1e9c42549846e84c8849b4d8245a22922670", @ANYRES64=0x0], 0x14}, {&(0x7f0000000e00)=ANY=[@ANYBLOB="50010000410020082dbd7000fddbdf2536012d80c1cd18e0451dc1a2ca978285d0185cd49ecb75d31c46d642a1e3f3c5ca18fb76f4f521cb93aaf52c2c880be964dd535c2b8c6f4f207f279ab6979d14fc0c16ef3aa365152af02a6352f616498a2699b63babf7967daf8d6df8acf00c51f0d9bc8ce8600f212822015d57a52f63cacc2f20d15e5765087245e03f645a4ca8aa2b3249c207c006772e0ed6379c04f627d4d56564cf71ea23d6ce55c58e988af82b086a224a0498bc1a6a87ede792ace7af3aeabd1dd8a5bdd1d40d1d23ce985bb796d434174f35d5edb628eaa0bdfdd592b3efcd1557e57375e7ba1ceb729b41040b767ef63ccb6d8bb6473f569d5f30f4d0120dee3517d3468f3b522152e977f6f8d23578fd4e975b0514eaa734995f545daa4fbf5697aaf87dabb1d62c59c1493f5722ce4269e1ae3401070f14adfb5c7f26000008000800ac1414bb0506ce8496cc20c2c8c9438caef015623d06bfe6df8cf2d9b514147f5dfeac3f12a9350249e89fd5480c9632e3260928c4ba"], 0x150}, {&(0x7f0000000c40)=ANY=[@ANYBLOB="b40100002c00200f2bbd7000fddbdf25080024007f00000108008700", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08006900ac1e010105004e0000000000000000"], 0x1b4}], 0x3, 0x0, 0x0, 0x20}, 0x0)

2.469967085s ago: executing program 0 (id=1667):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x88e5}, @void, @llc={@llc={0xe, 0x6, "65ef", "eb95338c6cc7743eb5808d0224600398d8153bb7df3bda520ed2fcf43214157fa783"}}}, 0x2a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0xb4807000)
listen(r1, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x8, 0x1, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x14, 0xf4, 0x0, 0xc, [0x8, 0x5, 0xb, 0x191]}]}}, @info_reply={0x10, 0x0, 0x0, 0xfc00, 0x6}}}}}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/52, 0x3000, 0x1000, 0x407, 0x2}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)

2.320225179s ago: executing program 0 (id=1669):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000300008c4871ef28ff"], 0xffdd)

2.017813192s ago: executing program 2 (id=1670):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x20, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf3, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7ffffeff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x8, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x7, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x10001, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0xb}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0x8001, 0xfff, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0xc2ea, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x8001, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x2, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x4, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x344, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x2, 0x8, 0x800, 0x3}, {0x4, 0xed22, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0xb, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x0, 0x8, 0xe, 0x7}, {0x10010, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0x8, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x45a, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x5, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x4, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18b, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0x4f2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x80, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x45, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0x0, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x2, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3}, {0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x2}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001380)={<r7=>0xffffffffffffffff})
recvmmsg$unix(r7, &(0x7f0000005b80)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000800)}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000940)}}, {{&(0x7f0000000b00), 0x6e, 0x0, 0x0, &(0x7f0000000f00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001780)}}], 0x6, 0x1, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x10000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x40000)
syz_genetlink_get_family_id$fou(&(0x7f0000000400), r7)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1f8, 0x0, r9, 0x1, '\x00', 0x0, r10, 0x3, 0x1, 0x3}, 0x50)

700.240692ms ago: executing program 2 (id=1671):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfffffffc)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
listen(r2, 0xb)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x7e, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value=0xf6}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000800)
write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36)

698.570417ms ago: executing program 0 (id=1672):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
write(r1, &(0x7f0000000000)="9882e70131b512e63686ac1bbdd3a351e8247a1dd5d23b46bd2d3693c93c8482b998977f64868edc9c6c9dab0db4ea64a176f96e0f15fc4365969b0bfc85c0516060c1bdd5e0a8230406c3b2a637577ffe3607fcb7ac7cdb8f642361249819d1c0c24464960b41c80b604ed619922900000000000000", 0x76) (async, rerun: 32)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x1828, 0x4) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={@empty, @broadcast}) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x4004010) (async, rerun: 32)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)

520.312076ms ago: executing program 0 (id=1673):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x2404c001)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x2, 0x8001, 0x9, 0x0, 0x9]}, &(0x7f0000000040)=0x54)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000a03000000000000000200000d030000000a000000040000000000080003000000020000000000000c02000000000061"], 0x0, 0x50}, 0x28)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd5400fedbdf255300000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r10, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080)

519.617031ms ago: executing program 2 (id=1674):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x23, 0x14, 0x66, 0x0, 0xfc, 0x6, 0x0, @loopback, @multicast1}}}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x24044800)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x1, 0xff, 0x0, 0x6, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xfce)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYBLOB], 0x38}}, 0xc012)
sendmsg$NFT_BATCH(r8, 0x0, 0x40)
close(0xffffffffffffffff)
ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'})

376.845157ms ago: executing program 1 (id=1677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="16d2cfabfe9068c9ca68d4ff8643a3684c692f80a33c3c9814b95b11c5cf467d96f1b44b55850eeb62d3848364a20d0bf5ffcbb77d1fe27cd69bf7572fcda3180555eb460494c878195c4cdd3d6ea496ee171b2ee365217f3c90f5a65b111b", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="0500380000000000"], 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0) (async)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000540)) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r14 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r13, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0xfce)

371.296381ms ago: executing program 2 (id=1678):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xffff97de}, {0x6, 0x0, 0x8, 0x4}]}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc3fc84150da0d1787cc10d211447da94cb715e462e27318612235a604082c42", 0x36}], 0x3)
unshare(0x40300)
unshare(0x200)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0)

269.49161ms ago: executing program 1 (id=1679):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x200000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

268.185352ms ago: executing program 1 (id=1680):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x40000000015, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffd1f}, 0x300068c5)
close(r1)

200.002052ms ago: executing program 2 (id=1681):
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r2, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0xfffffffc}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) (async)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x40000008, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2, 0x2}, 0xc)
getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000040)) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4)

199.460951ms ago: executing program 1 (id=1682):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffcc4}, 0x1, 0x0, 0x0, 0x20048048}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000080))

147.52413ms ago: executing program 1 (id=1683):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="bbad8b030a000200bb"], 0x28}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r13 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r13, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)="7f86c5c502cadf", 0x7}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)
getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)

0s ago: executing program 1 (id=1684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x114, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0xd8, 0x16, 0x0, 0x1, [{0xd4, 0x14, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0xfffffffffffffeea}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x4, 0x7}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x400, 0x401, 0x800, 0x88a8}}, {0x14, 0x1, {0x2, 0x55c, 0x4, 0x88a8}}, {0x14, 0x1, {0x4f, 0xe6, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0xe48, 0x6, 0x88a8}}, {0x14, 0x1, {0x80, 0x6db, 0x2, 0x8100}}, {0x14, 0x1, {0x28d, 0xb67, 0x10001, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x99}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x1}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000010a48f10000000000000000000000000000000000000000000000ffff000000000000000000000000000096fd00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414280000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff000000000000000096070000000000000000000000000000be0000000000000000000000b1a00100"], 0xf8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r7 = socket(0x2c, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r7}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r8, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r7}, 0x20)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwrite64(r6, &(0x7f0000000240)="34cae745095fe9930bf8e82827ab20595169f5afccca76983062d6d293c70b18acbf5a82def30384d198986e94c0a30a12538cbe4baced8b9db662954854da4db6c85e7bc3e962306e75b6cf89439464709bc9ab778045f55323eb3f51cd4f3cd920b160e667ba4ade7ac24a8634ea2c3156531be7833a4ec7373aed2ffcdc28831cd1f03702c32b031c89f89c55e3ab2f848c98cff0de7d661be1e07f8736d882fe075a23f81ea8d7", 0xa9, 0x693)
setsockopt$inet6_mreq(r11, 0x29, 0x6, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'ip6gre0\x00', 0x7})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000bef2594e2e81f968a27bb5a937531e9f7422a359cd08040795105898739139be8e350a0247fc9f0c15b7b9260278a3eddd2ec3cf3759b9f6818233e5716b1d0e6a14fa74c0749c6b3c81d0b0", @ANYRES16=r10, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b00020000000500050000000000"], 0x3c}}, 0x20000034)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4065' (ED25519) to the list of known hosts.
syzkaller login: [   48.723981][ T5771] cgroup: Unknown subsys name 'net'
[   48.840589][ T5771] cgroup: Unknown subsys name 'cpuset'
[   48.848887][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.046249][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.207803][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.216646][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.221168][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.224801][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.227137][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.231154][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.235240][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.237953][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.241758][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.244280][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.266239][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.269596][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.272544][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.277731][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.281155][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.604679][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   56.694973][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.838208][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.846570][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.851973][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.854818][ T5844] bridge_slave_0: entered allmulticast mode
[   56.859065][ T5844] bridge_slave_0: entered promiscuous mode
[   56.884647][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.887660][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.890351][ T5844] bridge_slave_1: entered allmulticast mode
[   56.893943][ T5844] bridge_slave_1: entered promiscuous mode
[   56.965129][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.971144][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.040932][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.044173][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.047975][ T5850] bridge_slave_0: entered allmulticast mode
[   57.052297][ T5850] bridge_slave_0: entered promiscuous mode
[   57.093574][ T5844] team0: Port device team_slave_0 added
[   57.097289][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.100306][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.103505][ T5850] bridge_slave_1: entered allmulticast mode
[   57.108759][ T5850] bridge_slave_1: entered promiscuous mode
[   57.128290][ T5844] team0: Port device team_slave_1 added
[   57.131073][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.135003][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.140050][ T5841] bridge_slave_0: entered allmulticast mode
[   57.144179][ T5841] bridge_slave_0: entered promiscuous mode
[   57.187905][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.190877][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.193841][ T5841] bridge_slave_1: entered allmulticast mode
[   57.198504][ T5841] bridge_slave_1: entered promiscuous mode
[   57.210828][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.215832][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.219560][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.229936][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.249706][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.254039][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.257066][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.267600][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.273933][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.279538][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.334754][ T5850] team0: Port device team_slave_0 added
[   57.339593][ T5841] team0: Port device team_slave_0 added
[   57.345256][ T5850] team0: Port device team_slave_1 added
[   57.349736][ T5841] team0: Port device team_slave_1 added
[   57.428342][ T5844] hsr_slave_0: entered promiscuous mode
[   57.431837][ T5844] hsr_slave_1: entered promiscuous mode
[   57.451085][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.453992][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.464834][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.471648][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.474415][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.485092][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.490918][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.493672][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.504693][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.518020][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.520846][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.531238][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.590296][ T5850] hsr_slave_0: entered promiscuous mode
[   57.592809][ T5850] hsr_slave_1: entered promiscuous mode
[   57.595172][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.598180][ T5850] Cannot create hsr debugfs directory
[   57.663320][ T5841] hsr_slave_0: entered promiscuous mode
[   57.666599][ T5841] hsr_slave_1: entered promiscuous mode
[   57.670494][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   57.672862][ T5841] Cannot create hsr debugfs directory
[   57.968936][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.980513][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.001114][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.005690][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.053707][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.072685][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.093632][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.108300][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.150996][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.156435][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.169713][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.174701][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.209247][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.261658][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   58.272585][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.275618][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.307910][ T5843] Bluetooth: hci2: command tx timeout
[   58.310506][ T5851] Bluetooth: hci1: command tx timeout
[   58.310517][ T5843] Bluetooth: hci0: command tx timeout
[   58.324982][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.328354][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.364210][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.409075][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   58.414651][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.424974][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.427604][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.433137][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.435641][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.466286][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.476290][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.478706][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.492607][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.504002][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.506294][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.562607][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.592733][ T5844] veth0_vlan: entered promiscuous mode
[   58.600917][ T5844] veth1_vlan: entered promiscuous mode
[   58.622397][ T5844] veth0_macvtap: entered promiscuous mode
[   58.626472][ T5844] veth1_macvtap: entered promiscuous mode
[   58.639782][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.650770][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.669748][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.673702][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.684869][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.688970][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.705239][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.762459][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.836609][ T5850] veth0_vlan: entered promiscuous mode
[   58.849045][ T5850] veth1_vlan: entered promiscuous mode
[   58.858087][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.861338][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.895152][ T5841] veth0_vlan: entered promiscuous mode
[   58.900721][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.904081][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.912537][ T5841] veth1_vlan: entered promiscuous mode
[   58.923805][ T5850] veth0_macvtap: entered promiscuous mode
[   58.940274][ T5850] veth1_macvtap: entered promiscuous mode
[   58.961955][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.972333][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.974801][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.977896][ T5841] veth0_macvtap: entered promiscuous mode
[   59.002902][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.006468][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.020812][ T5841] veth1_macvtap: entered promiscuous mode
[   59.023760][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.028291][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.056487][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.064868][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.088618][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.106710][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.116512][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.128447][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.137290][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.139904][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.213652][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.220543][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.220922][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.226600][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.253753][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.256593][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.305452][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.317270][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.334709][ T5918] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.410516][ T5927] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   59.414570][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   59.691184][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'.
[   59.896005][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.900523][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.911003][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.914661][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.919941][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.923496][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.928292][ T5960] Zero length message leads to an empty skb
[   60.124230][ T5977] netlink: 'syz.0.16': attribute type 10 has an invalid length.
[   60.133345][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.136196][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.146502][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.149134][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.151966][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.154443][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.161253][ T5977] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   60.172314][ T5977] bridge_slave_1: left allmulticast mode
[   60.174231][ T5977] bridge_slave_1: left promiscuous mode
[   60.176220][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.182561][ T5977] bridge_slave_0: left allmulticast mode
[   60.184841][ T5977] bridge_slave_0: left promiscuous mode
[   60.188171][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.213292][ T5977] bond0: (slave bridge0): Releasing backup interface
[   60.229703][ T5979] netlink: 'syz.2.17': attribute type 4 has an invalid length.
[   60.377503][ T5843] Bluetooth: hci0: command tx timeout
[   60.392115][ T5236] Bluetooth: hci2: command tx timeout
[   60.394399][ T5843] Bluetooth: hci1: command tx timeout
[   60.449300][ T5980] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   60.461991][ T5980] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   60.473099][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.485680][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.622746][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.627740][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.635108][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.639374][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.886985][   T10] cfg80211: failed to load regulatory.db
[   61.898563][ T6025] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   61.903794][ T6025] nbd: error processing sock list
[   61.913141][ T6025] block nbd0: shutting down sockets
[   62.457125][ T5236] Bluetooth: hci2: command tx timeout
[   62.459164][ T5236] Bluetooth: hci0: command tx timeout
[   62.461541][ T5843] Bluetooth: hci1: command tx timeout
[   62.817218][ T6059] team0: No ports can be present during mode change
[   62.873799][ T6062] syzkaller1: entered promiscuous mode
[   62.876306][ T6062] syzkaller1: entered allmulticast mode
[   63.010877][ T6064] netlink: 'syz.2.42': attribute type 13 has an invalid length.
[   63.013581][ T6064] netlink: 'syz.2.42': attribute type 17 has an invalid length.
[   63.084170][ T6064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.388671][ T6087] netlink: 'syz.2.47': attribute type 10 has an invalid length.
[   63.392210][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.396359][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.409026][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.411990][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.415159][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.418212][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.426219][ T6087] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   63.431637][ T6087] bridge_slave_1: left allmulticast mode
[   63.433916][ T6087] bridge_slave_1: left promiscuous mode
[   63.435903][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.442308][ T6087] bridge_slave_0: left allmulticast mode
[   63.445108][ T6087] bridge_slave_0: left promiscuous mode
[   63.448534][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.465920][ T6087] bond0: (slave bridge0): Releasing backup interface
[   63.570474][ T6088] lo: entered promiscuous mode
[   63.584182][ T6088] tunl0: entered promiscuous mode
[   63.591473][ T6088] gre0: entered promiscuous mode
[   63.600404][ T6088] gretap0: entered promiscuous mode
[   63.605740][ T6088] erspan0: entered promiscuous mode
[   63.614587][ T6088] ip_vti0: entered promiscuous mode
[   63.619616][ T6088] ip6_vti0: entered promiscuous mode
[   63.624094][ T6088] sit0: entered promiscuous mode
[   63.634794][ T6088] ip6tnl0: entered promiscuous mode
[   63.638869][ T6088] ip6gre0: entered promiscuous mode
[   63.642251][ T6088] syz_tun: entered promiscuous mode
[   63.645898][ T6088] ip6gretap0: entered promiscuous mode
[   63.650594][ T6088] vcan0: entered promiscuous mode
[   63.653157][ T6088] bond0: entered promiscuous mode
[   63.654956][ T6088] bond_slave_0: entered promiscuous mode
[   63.660139][ T6088] bond_slave_1: entered promiscuous mode
[   63.664919][ T6088] team0: entered promiscuous mode
[   63.667096][ T6088] team_slave_0: entered promiscuous mode
[   63.669329][ T6088] team_slave_1: entered promiscuous mode
[   63.674213][ T6088] dummy0: entered promiscuous mode
[   63.679213][ T6088] nlmon0: entered promiscuous mode
[   63.682546][ T6088] caif0: entered promiscuous mode
[   63.685100][ T6088] batadv0: entered promiscuous mode
[   63.691070][ T6088] vxcan0: entered promiscuous mode
[   63.693697][ T6088] vxcan1: entered promiscuous mode
[   63.697474][ T6088] veth0: entered promiscuous mode
[   63.703579][ T6088] veth1: entered promiscuous mode
[   63.711373][ T6088] wg0: entered promiscuous mode
[   63.716560][ T6088] wg1: entered promiscuous mode
[   63.722121][ T6088] wg2: entered promiscuous mode
[   63.727615][ T6088] veth0_to_bridge: entered promiscuous mode
[   63.733342][ T6088] bridge_slave_0: entered promiscuous mode
[   63.740152][ T6088] veth1_to_bridge: entered promiscuous mode
[   63.744491][ T6088] bridge_slave_1: entered promiscuous mode
[   63.755538][ T6088] veth0_to_bond: entered promiscuous mode
[   63.761208][ T6088] veth1_to_bond: entered promiscuous mode
[   63.766241][ T6088] veth0_to_team: entered promiscuous mode
[   63.772455][ T6088] veth1_to_team: entered promiscuous mode
[   63.778489][ T6088] veth0_to_batadv: entered promiscuous mode
[   63.782388][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.785292][ T6088] batadv_slave_0: entered promiscuous mode
[   63.790280][ T6088] veth1_to_batadv: entered promiscuous mode
[   63.794420][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.797434][ T6088] batadv_slave_1: entered promiscuous mode
[   63.802116][ T6088] xfrm0: entered promiscuous mode
[   63.805950][ T6088] veth0_to_hsr: entered promiscuous mode
[   63.812969][ T6088] veth1_to_hsr: entered promiscuous mode
[   63.821708][ T6088] hsr0: entered promiscuous mode
[   63.825228][ T6088] veth1_virt_wifi: entered promiscuous mode
[   63.829997][ T6088] veth0_virt_wifi: entered promiscuous mode
[   63.833826][ T6088] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   63.845362][ T6088] vlan0: entered promiscuous mode
[   63.848035][ T6088] vlan1: entered promiscuous mode
[   63.850849][ T6088] macvlan0: entered promiscuous mode
[   63.856093][ T6088] macvlan1: entered promiscuous mode
[   63.859993][ T6088] ipvlan0: entered promiscuous mode
[   63.861717][ T6088] ipvlan1: entered promiscuous mode
[   63.871277][ T6088] macvtap0: entered promiscuous mode
[   63.875278][ T6088] macsec0: entered promiscuous mode
[   63.879706][ T6088] geneve0: entered promiscuous mode
[   63.884171][ T6088] geneve1: entered promiscuous mode
[   63.892390][ T6088] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   63.900570][ T6088] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[   63.905537][ T6088] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[   63.910886][ T6088] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[   63.921857][ T6088] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   63.931352][ T6088] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   63.950101][ T5876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.955853][ T5876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.961950][ T5876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.965576][ T5876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.033806][ T6099] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[   64.188785][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.193122][ T6106] 8021q: adding VLAN 0 to HW filter on device team0
[   64.200805][ T6106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.217374][    C0] Illegal XDP return value 16128 on prog  (id 21) dev lo, expect packet loss!
[   64.221111][ T6110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.236558][ T6112] netlink: 'syz.2.52': attribute type 4 has an invalid length.
[   64.331068][ T6116] __nla_validate_parse: 13 callbacks suppressed
[   64.331090][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   64.337633][ T6116] netlink: 'syz.2.52': attribute type 29 has an invalid length.
[   64.340999][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'.
[   64.348547][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   64.537395][ T5236] Bluetooth: hci0: command tx timeout
[   64.539288][ T5851] Bluetooth: hci2: command tx timeout
[   64.541431][ T5843] Bluetooth: hci1: command tx timeout
[   64.931168][ T6122] netlink: 'syz.1.54': attribute type 4 has an invalid length.
[   65.136394][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   65.301856][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   65.307210][ T6124] block nbd0: shutting down sockets
[   65.915987][ T6145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.924822][ T6145] warning: `syz.1.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.321499][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.324330][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.327337][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.330188][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.2.65'.
[   66.674820][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'.
[   67.839079][   T57] block nbd0: Receive control failed (result -104)
[   67.853099][ T6267] netlink: 'syz.2.92': attribute type 10 has an invalid length.
[   68.252148][ T6293] netlink: 'syz.1.99': attribute type 1 has an invalid length.
[   68.255386][ T6293] netlink: 'syz.1.99': attribute type 3 has an invalid length.
[   68.377702][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.380345][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.509123][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.529888][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.696754][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.701894][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.704863][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.708092][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.855366][ T6298] netlink: 'syz.2.100': attribute type 10 has an invalid length.
[   69.059619][ T6304] netlink: 'syz.2.102': attribute type 1 has an invalid length.
[   69.227887][ T6304] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[   69.337846][ T6319] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[   69.341047][ T6319] __nla_validate_parse: 14 callbacks suppressed
[   69.341057][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[   69.391648][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'.
[   69.394622][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'.
[   69.398036][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'.
[   69.403554][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'.
[   69.472540][ T6326] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   69.475497][ T6326] netlink: 'syz.1.108': attribute type 2 has an invalid length.
[   69.479764][ T6326] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   69.482538][ T6326] netlink: 'syz.1.108': attribute type 2 has an invalid length.
[   69.524183][ T6330] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   69.534013][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[   69.537568][ T6330] bridge_slave_1: left allmulticast mode
[   69.539630][ T6330] bridge_slave_1: left promiscuous mode
[   69.541682][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.545506][ T6330] bridge_slave_0: left allmulticast mode
[   69.551239][ T6330] bridge_slave_0: left promiscuous mode
[   69.552428][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[   69.553726][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.560822][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[   69.577436][ T6330] bond0: (slave bridge0): Releasing backup interface
[   70.372718][ T6345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.113'.
[   70.521873][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'.
[   70.583735][ T6363] tipc: Started in network mode
[   70.586043][ T6363] tipc: Node identity ac14142f, cluster identity 4711
[   70.591152][ T6363] tipc: New replicast peer: 0.0.0.0
[   70.593963][ T6363] tipc: Enabled bearer <udp:syz2>, priority 10
[   70.598478][ T6363] tipc: New replicast peer: 255.255.255.255
[   70.782830][ T6374] lo: left promiscuous mode
[   70.784639][ T6374] tunl0: left promiscuous mode
[   70.786338][ T6374] gre0: left promiscuous mode
[   70.790347][ T6374] gretap0: left promiscuous mode
[   70.792193][ T6374] erspan0: left promiscuous mode
[   70.793870][ T6374] ip_vti0: left promiscuous mode
[   70.795853][ T6374] ip6_vti0: left promiscuous mode
[   70.798326][ T6374] sit0: left promiscuous mode
[   70.800016][ T6374] ip6tnl0: left promiscuous mode
[   70.802221][ T6374] ip6gre0: left promiscuous mode
[   70.804509][ T6374] syz_tun: left promiscuous mode
[   70.806412][ T6374] ip6gretap0: left promiscuous mode
[   70.808825][ T6374] vcan0: left promiscuous mode
[   70.810605][ T6374] bond0: left promiscuous mode
[   70.812767][ T6374] team0: left promiscuous mode
[   70.816724][ T6374] dummy0: left promiscuous mode
[   70.818837][ T6374] nlmon0: left promiscuous mode
[   70.820760][ T6374] caif0: left promiscuous mode
[   70.822845][ T6374] batadv0: left promiscuous mode
[   70.825025][ T6374] vxcan0: left promiscuous mode
[   70.828037][ T6374] vxcan1: left promiscuous mode
[   70.830613][ T6374] veth0: left promiscuous mode
[   70.833115][ T6374] veth1: left promiscuous mode
[   70.836207][ T6374] wg0: left promiscuous mode
[   70.839284][ T6374] wg1: left promiscuous mode
[   70.841213][ T6374] wg2: left promiscuous mode
[   70.842910][ T6374] veth0_to_bridge: left promiscuous mode
[   70.844937][ T6374] bridge_slave_0: left promiscuous mode
[   70.847569][ T6374] veth1_to_bridge: left promiscuous mode
[   70.849856][ T6374] bridge_slave_1: left promiscuous mode
[   70.851993][ T6374] veth0_to_bond: left promiscuous mode
[   70.854018][ T6374] bond_slave_0: left promiscuous mode
[   70.855890][ T6374] veth1_to_bond: left promiscuous mode
[   70.858624][ T6374] bond_slave_1: left promiscuous mode
[   70.860785][ T6374] veth0_to_team: left promiscuous mode
[   70.862815][ T6374] team_slave_0: left promiscuous mode
[   70.864854][ T6374] veth1_to_team: left promiscuous mode
[   70.867307][ T6374] team_slave_1: left promiscuous mode
[   70.869464][ T6374] veth0_to_batadv: left promiscuous mode
[   70.872096][ T6374] batadv_slave_0: left promiscuous mode
[   70.874344][ T6374] veth1_to_batadv: left promiscuous mode
[   70.876459][ T6374] batadv_slave_1: left promiscuous mode
[   70.880892][ T6374] xfrm0: left promiscuous mode
[   70.882833][ T6374] veth0_to_hsr: left promiscuous mode
[   70.884810][ T6374] veth1_to_hsr: left promiscuous mode
[   70.886752][ T6374] hsr0: left promiscuous mode
[   70.889453][ T6374] veth1_virt_wifi: left promiscuous mode
[   70.891545][ T6374] veth0_virt_wifi: left promiscuous mode
[   70.893851][ T6374] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[   70.896617][ T6374] vlan0: left promiscuous mode
[   70.898931][ T6374] vlan1: left promiscuous mode
[   70.900788][ T6374] macvlan0: left promiscuous mode
[   70.902735][ T6374] macvlan1: left promiscuous mode
[   70.904872][ T6374] ipvlan0: left promiscuous mode
[   70.907500][ T6374] ipvlan1: left promiscuous mode
[   70.909601][ T6374] macvtap0: left promiscuous mode
[   70.911457][ T6374] macsec0: left promiscuous mode
[   70.913382][ T6374] geneve0: left promiscuous mode
[   70.915708][ T6374] geneve1: left promiscuous mode
[   70.918468][ T6374] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   70.921663][ T6374] netdevsim netdevsim2 netdevsim1: left promiscuous mode
[   70.924702][ T6374] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[   70.928138][ T6374] netdevsim netdevsim2 netdevsim3: left promiscuous mode
[   70.931269][ T6374] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   70.934322][ T6374] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   70.977875][ T6387] Bluetooth: MGMT ver 1.23
[   71.004990][ T6387] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   71.009405][ T6387] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   71.063855][ T6389] gretap2: entered promiscuous mode
[   71.073286][ T6389] bond1: (slave gretap2): making interface the new active one
[   71.080673][ T6389] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   71.181422][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.615536][ T2304] tipc: Node number set to 2886997039
[   72.755156][ T6442] dvmrp8: entered allmulticast mode
[   72.766368][ T6441] dvmrp8: left allmulticast mode
[   73.574977][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.579412][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.583953][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.594454][ T6466] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.610753][ T6466] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   73.635963][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.639722][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.642822][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.645902][ T6466] wg1 speed is unknown, defaulting to 1000
[   73.752191][ T6476] can: request_module (can-proto-3) failed.
[   73.874149][ T6483] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   73.878193][ T6483] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   74.162479][ T6499] validate_nla: 6 callbacks suppressed
[   74.162523][ T6499] netlink: 'syz.2.158': attribute type 4 has an invalid length.
[   74.172839][ T6497] wg1 speed is unknown, defaulting to 1000
[   74.198193][ T6499] netlink: 'syz.2.158': attribute type 4 has an invalid length.
[   74.198589][ T6500] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.480662][ T6506] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   74.483316][ T6506] __nla_validate_parse: 15 callbacks suppressed
[   74.483332][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[   74.484517][ T6508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.160'.
[   74.514257][ T6509] netlink: 44 bytes leftover after parsing attributes in process `syz.1.160'.
[   74.581943][ T6520] netlink: 'syz.1.164': attribute type 21 has an invalid length.
[   74.584686][ T6520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.164'.
[   74.588939][ T6520] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   74.791167][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'.
[   75.009708][ T6542] vlan2: entered promiscuous mode
[   75.012053][ T6542] geneve1: entered promiscuous mode
[   75.014512][ T6542] vlan2: entered allmulticast mode
[   75.017321][ T6542] geneve1: entered allmulticast mode
[   75.069746][ T6542] trusted_key: syz.1.172 sent an empty control message without MSG_MORE.
[   75.173006][ T6558] pimreg: entered allmulticast mode
[   75.355246][ T6577] netlink: 80 bytes leftover after parsing attributes in process `syz.2.182'.
[   75.361607][ T6577] netlink: 80 bytes leftover after parsing attributes in process `syz.2.182'.
[   75.365089][ T6577] netlink: 80 bytes leftover after parsing attributes in process `syz.2.182'.
[   75.600446][ T6595] wg1 speed is unknown, defaulting to 1000
[   75.830499][ T6614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.855797][ T6612] wg1 speed is unknown, defaulting to 1000
[   75.915205][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[   75.919110][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[   76.178445][ T6626] wg1 speed is unknown, defaulting to 1000
[   77.046658][ T6652] wg1 speed is unknown, defaulting to 1000
[   77.205167][ T6668] wg1 speed is unknown, defaulting to 1000
[   77.434432][ T6675] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   77.698564][ T6706] team0: No ports can be present during mode change
[   78.044291][ T6733] netlink: 'syz.0.225': attribute type 1 has an invalid length.
[   78.216387][ T6748] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   78.413319][ T6770] netlink: 'syz.1.234': attribute type 1 has an invalid length.
[   78.432126][ T6770] gretap2: left promiscuous mode
[   78.440344][ T6770] vlan2: left promiscuous mode
[   78.442401][ T6770] geneve1: left promiscuous mode
[   78.444499][ T6770] vlan2: left allmulticast mode
[   78.446632][ T6770] geneve1: left allmulticast mode
[   78.760646][ T6807] pim6reg: entered allmulticast mode
[   79.176166][ T6852] wg1 speed is unknown, defaulting to 1000
[   79.538584][ T6883] __nla_validate_parse: 17 callbacks suppressed
[   79.538596][ T6883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'.
[   79.741581][ T6889] syz_tun: entered allmulticast mode
[   79.802839][ T6886] syz_tun: left allmulticast mode
[   80.007722][ T6897] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   80.010762][ T6897] nbd: error processing sock list
[   80.014072][ T6897] block nbd1: shutting down sockets
[   80.136787][ T6907] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   80.144127][ T2304] IPVS: starting estimator thread 0...
[   80.247187][ T6910] IPVS: using max 63 ests per chain, 151200 per kthread
[   80.356765][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'.
[   80.472754][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[   80.524302][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   80.582352][ T6930] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[   80.586184][ T6930] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.279'.
[   80.679450][ T6933] wg1 speed is unknown, defaulting to 1000
[   80.770962][ T6942] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20000
[   80.862758][ T6942] wg1 speed is unknown, defaulting to 1000
[   80.900199][ T6952] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (13)
[   80.932403][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'.
[   81.069851][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'.
[   81.073878][ T6942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.282'.
[   81.361848][ T6994] ieee802154 phy1 wpan1: encryption failed: -22
[   81.716140][ T7034] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003
[   81.827140][ T7044] wg1 speed is unknown, defaulting to 1000
[   81.945575][ T7056] wg1 speed is unknown, defaulting to 1000
[   82.115379][ T7070] dvmrp1: tun_chr_ioctl cmd 1074025677
[   82.118653][ T7070] dvmrp1: linktype set to 804
[   82.376535][ T7092] netlink: 84 bytes leftover after parsing attributes in process `syz.2.300'.
[   82.522447][ T7101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.303'.
[   82.609687][ T7109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.612308][ T7109] syzkaller0: entered promiscuous mode
[   82.614177][ T7109] syzkaller0: entered allmulticast mode
[   82.625433][ T7109] tipc: Resetting bearer <eth:syzkaller0>
[   82.631197][ T7108] tipc: Resetting bearer <eth:syzkaller0>
[   82.639171][ T7108] tipc: Disabling bearer <eth:syzkaller0>
[   83.266307][ T7135] netlink: 'syz.1.312': attribute type 10 has an invalid length.
[   83.497411][ T7153] netlink: 'syz.1.316': attribute type 10 has an invalid length.
[   83.526600][ T7158] netlink: 'syz.1.317': attribute type 16 has an invalid length.
[   83.529128][ T7158] netlink: 'syz.1.317': attribute type 17 has an invalid length.
[   83.532731][ T7158] IPv6: NLM_F_REPLACE set, but no existing node found!
[   83.732328][ T7174] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   83.735395][ T7174] netlink: 'syz.1.322': attribute type 4 has an invalid length.
[   83.871935][ T7200] syzkaller1: entered promiscuous mode
[   83.874099][ T7200] syzkaller1: entered allmulticast mode
[   83.922705][ T7204] wg1 speed is unknown, defaulting to 1000
[   85.100678][ T7243] __nla_validate_parse: 5 callbacks suppressed
[   85.100693][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.342'.
[   85.243026][ T7256] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.255886][ T7256] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   85.282102][ T7258] wg1 speed is unknown, defaulting to 1000
[   86.204292][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'.
[   86.646014][ T7301] wg1 speed is unknown, defaulting to 1000
[   86.686340][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'.
[   86.708853][ T7309] netlink: 11 bytes leftover after parsing attributes in process `syz.0.358'.
[   86.715931][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[   86.793615][ T7312] netlink: 'syz.2.359': attribute type 9 has an invalid length.
[   86.875179][ T7318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[   86.878997][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'.
[   86.881792][ T7318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[   86.884771][ T7318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.359'.
[   87.591963][ T7328] syzkaller0: entered promiscuous mode
[   87.594307][ T7328] syzkaller0: entered allmulticast mode
[   87.660603][ T7330] ieee802154 phy1 wpan1: encryption failed: -90
[   87.934914][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.369'.
[   88.958975][ T7396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.962489][ T7395] tipc: Disabling bearer <eth:syzkaller0>
[   89.097026][ T7398] netlink: 'syz.1.384': attribute type 1 has an invalid length.
[   89.099988][ T7398] nbd: error processing sock list
[   89.100971][ T7404] sock: sock_set_timeout: `syz.0.386' (pid 7404) tries to set negative timeout
[   89.103840][ T7398] block nbd1: shutting down sockets
[   89.179534][ T7407] wg1 speed is unknown, defaulting to 1000
[   89.448556][ T5876] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.452703][ T5876] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.456269][ T5876] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.462405][ T5876] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.507095][ T7423] netlink: 'syz.0.391': attribute type 16 has an invalid length.
[   89.510374][ T7423] netlink: 'syz.0.391': attribute type 17 has an invalid length.
[   89.517919][ T5876] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.521558][ T5876] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.525406][ T5876] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.529995][ T5876] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.533975][ T7423] IPv6: NLM_F_REPLACE set, but no existing node found!
[   89.921770][ T7427] wg1 speed is unknown, defaulting to 1000
[   90.219584][   T33] audit: type=1804 audit(1758973124.443:2): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.394" name="/newroot/145/cgroup.controllers" dev="tmpfs" ino=750 res=1 errno=0
[   90.228371][   T33] audit: type=1800 audit(1758973124.443:3): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.394" name="cgroup.controllers" dev="tmpfs" ino=750 res=0 errno=0
[   90.455056][ T7453] syzkaller1: entered promiscuous mode
[   90.458347][ T7453] syzkaller1: entered allmulticast mode
[   90.661065][ T7470] netlink: 'syz.0.405': attribute type 10 has an invalid length.
[   90.672524][ T7470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.676567][ T7470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.520098][ T7484] netlink: 'syz.0.408': attribute type 1 has an invalid length.
[   91.522675][ T7484] __nla_validate_parse: 14 callbacks suppressed
[   91.522683][ T7484] netlink: 92 bytes leftover after parsing attributes in process `syz.0.408'.
[   91.570785][ T7487] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   91.573900][ T7487] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   91.665248][ T7494] wg1 speed is unknown, defaulting to 1000
[   92.154834][ T7530] wg1 speed is unknown, defaulting to 1000
[   92.430783][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'.
[   93.235307][ T7553] netlink: 'syz.2.428': attribute type 10 has an invalid length.
[   93.238854][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'.
[   93.448204][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'.
[   93.701340][ T7604] netlink: 'syz.1.438': attribute type 16 has an invalid length.
[   93.704077][ T7604] netlink: 'syz.1.438': attribute type 17 has an invalid length.
[   93.709961][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'.
[   93.714485][ T7604] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.823639][ T7615] syzkaller1: entered promiscuous mode
[   93.825964][ T7615] syzkaller1: entered allmulticast mode
[   93.864806][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'.
[   93.872423][ T7619] IPv6: NLM_F_REPLACE set, but no existing node found!
[   94.005815][ T7634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.447'.
[   94.010390][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'.
[   94.013295][ T7634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.447'.
[   94.016646][ T7634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.447'.
[   94.024935][ T7634] syzkaller1: entered promiscuous mode
[   94.026909][ T7634] syzkaller1: entered allmulticast mode
[   94.199346][ T7642] bond2: entered promiscuous mode
[   94.201018][ T7642] bond2: entered allmulticast mode
[   94.202960][ T7642] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.248320][ T7645] wg1 speed is unknown, defaulting to 1000
[   94.556091][ T7660] wg1 speed is unknown, defaulting to 1000
[   95.063826][ T7677] wg1 speed is unknown, defaulting to 1000
[   95.278853][ T7700] wg1 speed is unknown, defaulting to 1000
[   96.622176][ T7733] __nla_validate_parse: 12 callbacks suppressed
[   96.622230][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.474'.
[   96.627939][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.474'.
[   96.637336][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.474'.
[   96.641247][ T7733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.474'.
[   96.699972][ T7733] netlink: 4572 bytes leftover after parsing attributes in process `syz.0.474'.
[   96.704034][ T7733] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.474'.
[   97.011094][ T7757] wg1 speed is unknown, defaulting to 1000
[   97.538804][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.542431][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.545377][ T7768] netlink: 'syz.2.483': attribute type 5 has an invalid length.
[   97.548108][ T7768] netlink: 'syz.2.483': attribute type 6 has an invalid length.
[   97.609662][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.613226][ T7769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.483'.
[   97.617475][ T7769] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   97.623674][ T7769] netlink: 'syz.2.483': attribute type 16 has an invalid length.
[   97.626266][ T7769] netlink: 'syz.2.483': attribute type 17 has an invalid length.
[   97.630237][ T7769] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.344612][ T7786] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[   98.410326][ T7796] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   98.843811][ T7809] wg1 speed is unknown, defaulting to 1000
[   99.211799][ T7829] netlink: 'syz.0.499': attribute type 39 has an invalid length.
[   99.868002][ T7844] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  100.073359][ T7855] wg1 speed is unknown, defaulting to 1000
[  100.200863][ T7869] tipc: Started in network mode
[  100.202609][ T7869] tipc: Node identity ac14140f, cluster identity 4711
[  100.205386][ T7869] tipc: New replicast peer: 255.255.255.255
[  100.209319][ T7869] tipc: Enabled bearer <udp:s>, priority 10
[  100.314876][ T7869] netlink: zone id is out of range
[  100.317250][ T7869] netlink: zone id is out of range
[  100.319393][ T7869] netlink: zone id is out of range
[  100.321676][ T7869] netlink: zone id is out of range
[  100.324372][ T7869] netlink: zone id is out of range
[  100.326552][ T7869] netlink: get zone limit has 8 unknown bytes
[  101.217232][ T5911] tipc: Node number set to 2886997007
[  101.243246][ T7926] xfrm1: entered allmulticast mode
[  101.300859][ T7935] netlink: 'syz.1.527': attribute type 16 has an invalid length.
[  101.303985][ T7935] netlink: 'syz.1.527': attribute type 17 has an invalid length.
[  101.413532][ T7946] wg1 speed is unknown, defaulting to 1000
[  101.936331][ T8004] dvmrp1: tun_chr_ioctl cmd 1074025677
[  101.938819][ T8004] dvmrp1: linktype set to 804
[  101.978973][ T8004] __nla_validate_parse: 31 callbacks suppressed
[  101.979012][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'.
[  102.124963][ T8023] syzkaller0: entered promiscuous mode
[  102.132907][ T8023] syzkaller0: entered allmulticast mode
[  102.310436][ T8030] netlink: 'syz.0.551': attribute type 10 has an invalid length.
[  102.421045][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'.
[  102.815892][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'.
[  102.861491][ T8038] syzkaller0: entered promiscuous mode
[  102.863460][ T8038] syzkaller0: entered allmulticast mode
[  102.965754][ T8043] netlink: 36 bytes leftover after parsing attributes in process `syz.2.556'.
[  102.989984][ T2304] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[  102.996452][ T2304] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[  103.822327][ T8054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.824789][ T8055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'.
[  103.827790][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'.
[  103.832018][ T8055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'.
[  103.835082][ T8055] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'.
[  103.850484][ T8056] tipc: Resetting bearer <eth:syzkaller0>
[  103.874748][ T8056] tipc: Disabling bearer <eth:syzkaller0>
[  103.893162][ T8061] openvswitch: netlink: Missing key (keys=40, expected=100)
[  103.951569][ T8065] geneve2: entered promiscuous mode
[  103.954605][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.956502][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'.
[  103.961519][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.964871][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.968173][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.060683][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.565'.
[  104.663244][ T8106] netlink: 'syz.1.574': attribute type 10 has an invalid length.
[  105.800064][ T8153] veth0: entered promiscuous mode
[  105.829525][ T8153] veth0 (unregistering): left promiscuous mode
[  105.996282][ T8163] wg1 speed is unknown, defaulting to 1000
[  106.239070][ T8169] netlink: 'syz.0.594': attribute type 1 has an invalid length.
[  106.242259][ T8169] nbd: error processing sock list
[  106.244567][ T8169] block nbd1: shutting down sockets
[  107.761270][ T8283] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  107.764855][ T8282] __nla_validate_parse: 17 callbacks suppressed
[  107.764873][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'.
[  107.848040][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.621'.
[  107.851896][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'.
[  107.855665][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.621'.
[  107.860672][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.621'.
[  107.913022][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.622'.
[  108.148117][ T8294] netlink: 'syz.2.624': attribute type 10 has an invalid length.
[  108.151814][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[  108.755803][ T8309] netlink: 'syz.0.627': attribute type 10 has an invalid length.
[  108.811372][ T8313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.629'.
[  108.885335][ T8320] netlink: 'syz.0.629': attribute type 16 has an invalid length.
[  108.889159][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'.
[  108.892984][ T8320] IPv6: NLM_F_REPLACE set, but no existing node found!
[  108.917621][ T8322] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[  108.936459][ T8322] bond4: entered promiscuous mode
[  108.939884][ T8322] 8021q: adding VLAN 0 to HW filter on device bond4
[  108.964920][ T8322] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.970086][ T8322] bond4: (slave bond5): making interface the new active one
[  108.972520][ T8322] bond5: entered promiscuous mode
[  108.975071][ T8322] bond4: (slave bond5): Enslaving as an active interface with an up link
[  109.488737][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'.
[  109.729439][ T8371] wg1 speed is unknown, defaulting to 1000
[  110.112037][ T8403] syzkaller0: entered promiscuous mode
[  110.114375][ T8403] syzkaller0: entered allmulticast mode
[  111.149605][ T8408] wg1 speed is unknown, defaulting to 1000
[  111.393991][ T8429] wg1 speed is unknown, defaulting to 1000
[  111.564844][ T8442] netlink: 'syz.1.660': attribute type 16 has an invalid length.
[  111.573257][ T8442] netlink: 'syz.1.660': attribute type 17 has an invalid length.
[  112.027147][ T8459] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[  112.029886][ T8459] nbd: error processing sock list
[  112.033980][ T8459] block nbd1: shutting down sockets
[  112.088793][ T8475] wg1 speed is unknown, defaulting to 1000
[  112.122980][ T8473] wg1 speed is unknown, defaulting to 1000
[  112.302479][ T8480] wg1 speed is unknown, defaulting to 1000
[  112.375792][ T8484] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  112.824444][ T8499] Bluetooth: MGMT ver 1.23
[  112.827899][ T8499] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  112.836589][ T8490] __nla_validate_parse: 6 callbacks suppressed
[  112.836610][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'.
[  113.029546][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'.
[  113.344228][ T8529] wg1 speed is unknown, defaulting to 1000
[  113.433268][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'.
[  113.891650][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'.
[  113.995968][ T8546] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  114.041947][ T8552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.692'.
[  114.046392][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.692'.
[  114.051741][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[  114.134389][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.691'.
[  114.140174][ T8560] netlink: 'syz.1.694': attribute type 10 has an invalid length.
[  114.143875][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'.
[  114.150319][ T8560] lo: entered promiscuous mode
[  114.152445][ T8560] tunl0: entered promiscuous mode
[  114.154622][ T8560] gre0: entered promiscuous mode
[  114.156657][ T8560] gretap0: entered promiscuous mode
[  114.159927][ T8560] erspan0: entered promiscuous mode
[  114.162195][ T8560] ip_vti0: entered promiscuous mode
[  114.164487][ T8560] ip6_vti0: entered promiscuous mode
[  114.166747][ T8560] sit0: entered promiscuous mode
[  114.171992][ T8560] ip6tnl0: entered promiscuous mode
[  114.175003][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.691'.
[  114.180040][ T8560] ip6gre0: entered promiscuous mode
[  114.182309][ T8560] syz_tun: entered promiscuous mode
[  114.184547][ T8560] ip6gretap0: entered promiscuous mode
[  114.187285][ T8560] vcan0: entered promiscuous mode
[  114.189644][ T8560] bond0: entered promiscuous mode
[  114.191846][ T8560] bond_slave_0: entered promiscuous mode
[  114.194721][ T8560] bond_slave_1: entered promiscuous mode
[  114.199350][ T8560] team0: entered promiscuous mode
[  114.202801][ T8560] team_slave_0: entered promiscuous mode
[  114.205443][ T8560] team_slave_1: entered promiscuous mode
[  114.209530][ T8560] dummy0: entered promiscuous mode
[  114.212011][ T8560] nlmon0: entered promiscuous mode
[  114.214908][ T8560] caif0: entered promiscuous mode
[  114.218721][ T8560] batadv0: entered promiscuous mode
[  114.220935][ T8560] vxcan0: entered promiscuous mode
[  114.223289][ T8560] vxcan1: entered promiscuous mode
[  114.235539][ T8560] veth0: entered promiscuous mode
[  114.240040][ T8560] veth1: entered promiscuous mode
[  114.242284][ T8560] wg0: entered promiscuous mode
[  114.252262][ T8560] wg1: entered promiscuous mode
[  114.254911][ T8560] wg2: entered promiscuous mode
[  114.259666][ T8560] veth0_to_bridge: entered promiscuous mode
[  114.262480][ T8560] bridge_slave_0: entered promiscuous mode
[  114.265373][ T8560] veth1_to_bridge: entered promiscuous mode
[  114.270176][ T8560] bridge_slave_1: entered promiscuous mode
[  114.272890][ T8560] veth0_to_bond: entered promiscuous mode
[  114.275597][ T8560] veth1_to_bond: entered promiscuous mode
[  114.280571][ T8560] veth0_to_team: entered promiscuous mode
[  114.283329][ T8560] veth1_to_team: entered promiscuous mode
[  114.286529][ T8560] veth0_to_batadv: entered promiscuous mode
[  114.290614][ T8560] batadv_slave_0: entered promiscuous mode
[  114.293412][ T8560] veth1_to_batadv: entered promiscuous mode
[  114.297534][ T8560] batadv_slave_1: entered promiscuous mode
[  114.301869][ T8560] xfrm0: entered promiscuous mode
[  114.304440][ T8560] veth0_to_hsr: entered promiscuous mode
[  114.307607][ T8560] veth1_to_hsr: entered promiscuous mode
[  114.310458][ T8560] hsr0: entered promiscuous mode
[  114.312760][ T8560] veth1_virt_wifi: entered promiscuous mode
[  114.315493][ T8560] veth0_virt_wifi: entered promiscuous mode
[  114.318806][ T8560] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  114.322311][ T8560] macvtap0: entered promiscuous mode
[  114.324741][ T8560] macsec0: entered promiscuous mode
[  114.327943][ T8560] geneve0: entered promiscuous mode
[  114.330262][ T8560] geneve1: entered promiscuous mode
[  114.332678][ T8560] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  114.335780][ T8560] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  114.339554][ T8560] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  114.342846][ T8560] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  114.346010][ T8560] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  114.350147][ T8560] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  114.353259][ T8560] gretap1: entered promiscuous mode
[  114.355536][ T8560] bond_slave_0.4: entered promiscuous mode
[  114.358816][ T8560] bond1: entered promiscuous mode
[  114.360947][ T8560] gretap2: entered promiscuous mode
[  114.363562][ T8560] mac80211_hwsim hwsim8 wlan2: entered promiscuous mode
[  114.366479][ T8560] vlan2: entered promiscuous mode
[  114.369723][ T8560] pimreg: entered promiscuous mode
[  114.372024][ T8560] mac80211_hwsim hwsim9 wlan3: entered promiscuous mode
[  114.375187][ T8560] pim6reg: entered promiscuous mode
[  114.378014][ T8560] mac80211_hwsim hwsim10 wlan4: entered promiscuous mode
[  114.381005][ T8560] bond2: left allmulticast mode
[  114.383111][ T8560] bond3: entered promiscuous mode
[  114.385474][ T8560] syztnl0: entered promiscuous mode
[  114.388537][ T8560] mac80211_hwsim hwsim12 wlan5: entered promiscuous mode
[  114.391611][ T8560] xfrm1: entered promiscuous mode
[  114.393670][ T8560] xfrm1: left allmulticast mode
[  114.395933][ T8560] bridge0: entered promiscuous mode
[  114.398896][ T8560] gretap3: entered promiscuous mode
[  114.478058][ T8570] wg1 speed is unknown, defaulting to 1000
[  114.689671][ T8588] syzkaller1: entered promiscuous mode
[  114.691525][ T8588] syzkaller1: entered allmulticast mode
[  115.188400][ T8605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.191919][ T8605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.434370][ T8613] netlink: 'syz.2.711': attribute type 10 has an invalid length.
[  115.565034][ T8625] netlink: 'syz.2.714': attribute type 21 has an invalid length.
[  115.853488][ T8643] wg1 speed is unknown, defaulting to 1000
[  115.963716][ T8639] netlink: 'syz.2.718': attribute type 16 has an invalid length.
[  115.966398][ T8639] netlink: 'syz.2.718': attribute type 17 has an invalid length.
[  116.106269][ T8652] wg1 speed is unknown, defaulting to 1000
[  116.212887][ T8655] netlink: 'syz.2.721': attribute type 1 has an invalid length.
[  116.289030][ T8678] netlink: 'syz.2.725': attribute type 10 has an invalid length.
[  116.737272][ T8692] netlink: 'syz.2.728': attribute type 16 has an invalid length.
[  116.740428][ T8692] netlink: 'syz.2.728': attribute type 17 has an invalid length.
[  116.745283][ T8692] IPv6: NLM_F_REPLACE set, but no existing node found!
[  117.906321][ T8724] netlink: 'syz.0.740': attribute type 10 has an invalid length.
[  117.913011][ T8724] __nla_validate_parse: 14 callbacks suppressed
[  117.913027][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[  117.956150][ T8730] sctp: [Deprecated]: syz.1.742 (pid 8730) Use of int in max_burst socket option deprecated.
[  117.956150][ T8730] Use struct sctp_assoc_value instead
[  117.986051][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.990549][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'.
[  117.991291][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.994896][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'.
[  118.001443][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.005678][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.937238][ T8753] lo: left promiscuous mode
[  118.939327][ T8753] tunl0: left promiscuous mode
[  118.950523][ T8753] gre0: left promiscuous mode
[  118.957459][ T8753] gretap0: left promiscuous mode
[  118.961050][ T8753] erspan0: left promiscuous mode
[  118.968685][ T8753] ip_vti0: left promiscuous mode
[  118.972308][ T8753] ip6_vti0: left promiscuous mode
[  118.974618][ T8753] sit0: left promiscuous mode
[  118.977419][ T8753] ip6tnl0: left promiscuous mode
[  118.979770][ T8753] ip6gre0: left promiscuous mode
[  118.982138][ T8753] syz_tun: left promiscuous mode
[  118.984378][ T8753] ip6gretap0: left promiscuous mode
[  118.986714][ T8753] vcan0: left promiscuous mode
[  118.990559][ T8753] bond0: left promiscuous mode
[  118.992563][ T8753] team0: left promiscuous mode
[  118.994582][ T8753] dummy0: left promiscuous mode
[  118.996470][ T8753] nlmon0: left promiscuous mode
[  118.998716][ T8753] caif0: left promiscuous mode
[  119.000615][ T8753] batadv0: left promiscuous mode
[  119.002572][ T8753] vxcan0: left promiscuous mode
[  119.004472][ T8753] vxcan1: left promiscuous mode
[  119.006506][ T8753] veth0: left promiscuous mode
[  119.011047][ T8753] veth1: left promiscuous mode
[  119.013084][ T8753] wg0: left promiscuous mode
[  119.015009][ T8753] wg1: left promiscuous mode
[  119.017241][ T8753] wg2: left promiscuous mode
[  119.019111][ T8753] veth0_to_bridge: left promiscuous mode
[  119.021429][ T8753] bridge_slave_0: left promiscuous mode
[  119.023772][ T8753] veth1_to_bridge: left promiscuous mode
[  119.025858][ T8753] bridge_slave_1: left promiscuous mode
[  119.028899][ T8753] veth0_to_bond: left promiscuous mode
[  119.031143][ T8753] veth1_to_bond: left promiscuous mode
[  119.033278][ T8753] bond_slave_1: left promiscuous mode
[  119.035496][ T8753] veth0_to_team: left promiscuous mode
[  119.038281][ T8753] team_slave_0: left promiscuous mode
[  119.043425][ T8753] veth1_to_team: left promiscuous mode
[  119.045370][ T8753] team_slave_1: left promiscuous mode
[  119.047371][ T8753] veth0_to_batadv: left promiscuous mode
[  119.049419][ T8753] batadv_slave_0: left promiscuous mode
[  119.051874][ T8753] veth1_to_batadv: left promiscuous mode
[  119.053864][ T8753] batadv_slave_1: left promiscuous mode
[  119.056274][ T8753] xfrm0: left promiscuous mode
[  119.058646][ T8753] veth0_to_hsr: left promiscuous mode
[  119.061023][ T8753] veth1_to_hsr: left promiscuous mode
[  119.063513][ T8753] hsr0: left promiscuous mode
[  119.065296][ T8753] veth1_virt_wifi: left promiscuous mode
[  119.067826][ T8753] veth0_virt_wifi: left promiscuous mode
[  119.070126][ T8753] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  119.072957][ T8753] macvtap0: left promiscuous mode
[  119.075013][ T8753] macsec0: left promiscuous mode
[  119.077472][ T8753] geneve0: left promiscuous mode
[  119.079566][ T8753] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  119.082495][ T8753] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  119.085332][ T8753] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  119.088933][ T8753] netdevsim netdevsim1 netdevsim3: left promiscuous mode
[  119.091702][ T8753] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  119.094386][ T8753] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  119.101683][ T8753] gretap1: left promiscuous mode
[  119.103787][ T8753] bond_slave_0.4: left promiscuous mode
[  119.105884][ T8753] bond_slave_0: left promiscuous mode
[  119.108420][ T8753] bond1: left promiscuous mode
[  119.110446][ T8753] gretap2: left promiscuous mode
[  119.112561][ T8753] mac80211_hwsim hwsim8 wlan2: left promiscuous mode
[  119.115965][ T8753] vlan2: left promiscuous mode
[  119.118083][ T8753] geneve1: left promiscuous mode
[  119.119894][ T8753] pimreg: left promiscuous mode
[  119.121837][ T8753] mac80211_hwsim hwsim9 wlan3: left promiscuous mode
[  119.124214][ T8753] pim6reg: left promiscuous mode
[  119.125891][ T8753] mac80211_hwsim hwsim10 wlan4: left promiscuous mode
[  119.128664][ T8753] bond2: left promiscuous mode
[  119.130635][ T8753] bond3: left promiscuous mode
[  119.132469][ T8753] syztnl0: left promiscuous mode
[  119.134325][ T8753] mac80211_hwsim hwsim12 wlan5: left promiscuous mode
[  119.138312][ T8753] xfrm1: left promiscuous mode
[  119.140221][ T8753] bridge0: left promiscuous mode
[  119.141993][ T8753] gretap3: left promiscuous mode
[  119.143758][ T8753] bond4: left promiscuous mode
[  119.145652][ T8753] bond5: left promiscuous mode
[  119.230409][ T8762] wg1 speed is unknown, defaulting to 1000
[  119.461001][ T8780] wg1 speed is unknown, defaulting to 1000
[  119.764315][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'.
[  120.335962][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[  120.346512][ T8826] wg1 speed is unknown, defaulting to 1000
[  120.515858][ T8841] netlink: 'syz.2.770': attribute type 10 has an invalid length.
[  120.519158][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'.
[  120.742669][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.745659][ T8848] 8021q: adding VLAN 0 to HW filter on device team0
[  120.749797][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.757680][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.765776][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.774680][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.782653][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.793003][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.801891][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.811269][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.819684][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.828319][ T8848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.318111][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'.
[  121.321859][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'.
[  121.672316][ T8890] syzkaller1: entered promiscuous mode
[  121.674484][ T8890] syzkaller1: entered allmulticast mode
[  121.709418][ T8893] syzkaller1: entered promiscuous mode
[  121.711775][ T8893] syzkaller1: entered allmulticast mode
[  121.943812][ T8905] wg1 speed is unknown, defaulting to 1000
[  121.962882][ T8901] wg1 speed is unknown, defaulting to 1000
[  122.098080][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'.
[  122.238844][ T8917] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  122.944699][ T8937] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20001
[  123.084275][ T8943] wg1 speed is unknown, defaulting to 1000
[  123.232628][ T8955] wg1 speed is unknown, defaulting to 1000
[  123.414739][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[  123.691027][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  123.878552][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.911300][ T8995] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  123.925794][ T8995] bond0: (slave bond_slave_0): Releasing backup interface
[  123.932372][ T8995] bond0: (slave bond_slave_1): Releasing backup interface
[  123.939616][ T8995] team0: Port device team_slave_0 removed
[  123.943979][ T8995] team0: Port device team_slave_1 removed
[  123.992779][ T8995] netlink: 'syz.2.814': attribute type 10 has an invalid length.
[  123.995986][ T8995] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  124.002768][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.011344][ T8995] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.019560][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'.
[  124.023653][ T8995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.027875][ T8995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.136908][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'.
[  124.950178][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'.
[  124.953330][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.957835][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.975904][ T9017] netlink: 348 bytes leftover after parsing attributes in process `syz.2.819'.
[  125.023562][ T9021] netlink: 'syz.2.821': attribute type 32 has an invalid length.
[  125.225467][ T9037] wg1 speed is unknown, defaulting to 1000
[  125.306486][ T9043] wg1 speed is unknown, defaulting to 1000
[  125.332575][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'.
[  126.135742][ T9060] Unsupported ieee802154 address type: 0
[  126.139108][ T9059] sit0: entered promiscuous mode
[  126.141291][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  126.381906][ T9074] wg1 speed is unknown, defaulting to 1000
[  126.391603][ T9076] netlink: 'syz.2.834': attribute type 7 has an invalid length.
[  126.401569][ T9076] netlink: 'syz.2.834': attribute type 8 has an invalid length.
[  126.404621][ T9076] netlink: 'syz.2.834': attribute type 4 has an invalid length.
[  126.427327][ T9076] netlink: 204 bytes leftover after parsing attributes in process `syz.2.834'.
[  127.179878][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  127.747151][ T9116] net_ratelimit: 56 callbacks suppressed
[  127.747184][ T9116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.756421][ T9115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.053805][ T9132] geneve2: left promiscuous mode
[  128.100564][ T9135] netlink: 'syz.2.854': attribute type 64 has an invalid length.
[  128.665569][ T9162] __nla_validate_parse: 8 callbacks suppressed
[  128.665581][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.864'.
[  128.917813][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  128.920605][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  129.002408][ T9182] netlink: 'syz.2.869': attribute type 10 has an invalid length.
[  129.005337][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'.
[  129.041833][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'.
[  129.200466][ T9190] wg1 speed is unknown, defaulting to 1000
[  129.321092][ T9213] netlink: 244 bytes leftover after parsing attributes in process `syz.1.877'.
[  129.390628][ T9213] tipc: New replicast peer: 0.0.0.0
[  129.392659][ T9213] tipc: Enabled bearer <udp:syz2>, priority 10
[  129.409849][ T9210] wg1 speed is unknown, defaulting to 1000
[  129.467347][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'.
[  129.471149][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'.
[  129.481069][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'.
[  129.487538][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'.
[  129.549590][ T9226] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  129.590488][ T9228] netlink: 'syz.0.876': attribute type 11 has an invalid length.
[  129.761893][ T9235] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[  130.284176][ T9256] wg1 speed is unknown, defaulting to 1000
[  131.232156][ T9290] netlink: 'syz.0.893': attribute type 1 has an invalid length.
[  131.246716][ T9286] wg1 speed is unknown, defaulting to 1000
[  131.285462][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.295798][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.471797][ T9302] wg1 speed is unknown, defaulting to 1000
[  131.574299][ T9308] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  131.591549][ T9308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  131.648625][ T9315] netlink: 'syz.2.903': attribute type 1 has an invalid length.
[  131.710531][ T9315] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.714765][ T9315] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  131.745124][ T9319] gretap1: entered promiscuous mode
[  131.752042][ T9319] bond2: (slave gretap1): making interface the new active one
[  131.755074][ T9319] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  131.762489][ T9319] macvlan4: entered promiscuous mode
[  131.764451][ T9319] macvlan4: entered allmulticast mode
[  131.768517][ T9319] bond2: entered promiscuous mode
[  131.772145][ T9319] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  131.779383][ T9319] bond2: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  131.786726][ T9319] bond2: left promiscuous mode
[  131.810710][ T9315] netlink: 'syz.2.903': attribute type 1 has an invalid length.
[  131.856073][ T9321] wg1 speed is unknown, defaulting to 1000
[  132.034213][ T9345] !: renamed from dummy0
[  132.099672][ T9345] wg1 speed is unknown, defaulting to 1000
[  132.553372][ T9378] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.558556][ T9378] 8021q: adding VLAN 0 to HW filter on device team0
[  132.564916][ T9378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.572023][ T9375] wg1 speed is unknown, defaulting to 1000
[  132.623205][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.160211][ T9383] bond6: entered promiscuous mode
[  133.162428][ T9383] bond6: entered allmulticast mode
[  133.165423][ T9383] 8021q: adding VLAN 0 to HW filter on device bond6
[  133.211682][ T9387] netlink: 'syz.1.920': attribute type 3 has an invalid length.
[  133.423726][ T9403] wg1 speed is unknown, defaulting to 1000
[  133.459653][ T9399] syzkaller0: entered promiscuous mode
[  133.461761][ T9399] syzkaller0: entered allmulticast mode
[  134.901670][ T9418] tap0: tun_chr_ioctl cmd 1074025681
[  135.141862][ T9423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.149236][ T9423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.153759][ T9423] bond0 (unregistering): Released all slaves
[  135.341473][ T9442] syzkaller1: entered promiscuous mode
[  135.343455][ T9442] syzkaller1: entered allmulticast mode
[  135.614498][ T5876] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  135.620796][ T9466] __nla_validate_parse: 19 callbacks suppressed
[  135.620816][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  136.470311][ T9474] !: renamed from dummy0 (while UP)
[  136.614003][ T9488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.945'.
[  136.632785][ T9488] netlink: 80 bytes leftover after parsing attributes in process `syz.1.945'.
[  136.641160][ T9488] netlink: 'syz.1.945': attribute type 1 has an invalid length.
[  136.647146][ T9488] netlink: 'syz.1.945': attribute type 4 has an invalid length.
[  136.651568][ T9488] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.945'.
[  136.655255][ T9488] netlink: 'syz.1.945': attribute type 1 has an invalid length.
[  136.661353][ T9488] netlink: 'syz.1.945': attribute type 4 has an invalid length.
[  136.666943][ T9488] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.945'.
[  136.674826][ T9495] wg1 speed is unknown, defaulting to 1000
[  136.852597][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'.
[  136.855530][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.950'.
[  136.858585][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'.
[  136.861405][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.950'.
[  136.912963][ T9509] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.950'.
[  137.319078][ T9557] netlink: 'syz.1.964': attribute type 1 has an invalid length.
[  137.631795][ T9591] wg1 speed is unknown, defaulting to 1000
[  137.750978][ T9519] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  137.858135][ T9599] gretap1: left promiscuous mode
[  138.105525][ T9620] wg1 speed is unknown, defaulting to 1000
[  138.863723][ T9655] wg1 speed is unknown, defaulting to 1000
[  139.099215][ T5843] Bluetooth: hci2: command 0x0401 tx timeout
[  139.104977][ T9662] wg1 speed is unknown, defaulting to 1000
[  139.152295][ T9667] wg1 speed is unknown, defaulting to 1000
[  139.523053][ T9694] sctp: [Deprecated]: syz.1.995 (pid 9694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.523053][ T9694] Use struct sctp_sack_info instead
[  139.780837][ T9706] wg1 speed is unknown, defaulting to 1000
[  140.663034][ T9724] __nla_validate_parse: 17 callbacks suppressed
[  140.663050][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'.
[  140.751319][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  140.875242][ T9736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1007'.
[  140.881225][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1007'.
[  140.884845][ T9736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1007'.
[  140.888984][ T9736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1007'.
[  140.992612][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'.
[  141.032235][ T9740] syzkaller1: entered promiscuous mode
[  141.034732][ T9740] syzkaller1: entered allmulticast mode
[  141.039253][   T12] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96
[  141.208687][ T9743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'.
[  141.211685][ T9743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'.
[  141.215774][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'.
[  141.289873][ T9745] syzkaller0: entered promiscuous mode
[  141.292192][ T9745] syzkaller0: entered allmulticast mode
[  142.594474][ T9779] veth1: entered promiscuous mode
[  142.596305][ T9779] veth1: entered allmulticast mode
[  142.748244][ T9789] sctp: [Deprecated]: syz.1.1018 (pid 9789) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.748244][ T9789] Use struct sctp_sack_info instead
[  142.761313][ T9795] netlink: 'syz.0.1021': attribute type 10 has an invalid length.
[  142.904307][ T9811] netlink: 'syz.1.1023': attribute type 10 has an invalid length.
[  143.592148][ T9895] wg1 speed is unknown, defaulting to 1000
[  143.850157][ T9923] wg1 speed is unknown, defaulting to 1000
[  143.880702][ T9931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.901382][ T9931] tipc: Disabling bearer <eth:syzkaller0>
[  144.356980][ T9951] netlink: 'syz.1.1053': attribute type 1 has an invalid length.
[  144.359560][ T9951] nbd: error processing sock list
[  144.361387][ T9951] block nbd1: shutting down sockets
[  144.874223][ T9995] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  145.032777][T10013] netlink: 'syz.1.1065': attribute type 10 has an invalid length.
[  145.035775][T10013] bond0: (slave wlan1): Opening slave failed
[  145.040740][T10010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.052315][T10016] netlink: 'syz.0.1066': attribute type 10 has an invalid length.
[  145.293523][T10034] netlink: 'syz.0.1067': attribute type 3 has an invalid length.
[  145.746617][T10050] __nla_validate_parse: 20 callbacks suppressed
[  145.746635][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1071'.
[  146.630080][T10069] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  146.840296][T10086] netlink: 'syz.1.1084': attribute type 21 has an invalid length.
[  146.845918][T10086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1084'.
[  147.040695][T10118] batadv_slave_1: entered promiscuous mode
[  147.044233][T10118] batadv_slave_1: left promiscuous mode
[  147.098675][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'.
[  147.102987][T10119] mac80211_hwsim hwsim4 ;: renamed from wlan0
[  147.432335][T10155] siw: device registration error -23
[  147.434516][T10156] siw: device registration error -23
[  147.444238][T10156] wg1 speed is unknown, defaulting to 1000
[  147.539566][T10161] syzkaller0: entered promiscuous mode
[  147.541865][T10161] syzkaller0: entered allmulticast mode
[  147.855355][T10164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'.
[  148.777664][T10164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.835041][T10174] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  148.873400][T10183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'.
[  148.880170][T10183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1110'.
[  148.890333][T10183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'.
[  148.893151][T10183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1110'.
[  148.915664][T10187] gtp0: entered promiscuous mode
[  148.994051][T10202] batadv_slave_0: entered promiscuous mode
[  149.002147][T10200] batadv_slave_0: left promiscuous mode
[  149.084091][T10207] wg1 speed is unknown, defaulting to 1000
[  149.390600][T10230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1121'.
[  150.117668][T10262] ieee802154 phy1 wpan1: encryption failed: -22
[  150.351516][T10275] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1131'.
[  151.408467][T10297] __nla_validate_parse: 6 callbacks suppressed
[  151.408482][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'.
[  151.662826][T10311] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1143'.
[  151.710042][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1144'.
[  151.850668][T10320] ieee802154 phy1 wpan1: encryption failed: -22
[  151.921865][T10327] netlink: 'syz.2.1148': attribute type 1 has an invalid length.
[  151.926467][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1149'.
[  151.929913][T10327] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1148'.
[  152.148484][T10336] netlink: 'syz.2.1152': attribute type 9 has an invalid length.
[  152.151414][T10336] netlink: 'syz.2.1152': attribute type 7 has an invalid length.
[  152.153986][T10336] netlink: 'syz.2.1152': attribute type 8 has an invalid length.
[  152.216721][T10340] bond3: entered promiscuous mode
[  152.221491][T10340] bond3: entered allmulticast mode
[  152.224120][T10340] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.253089][   T33] audit: type=1107 audit(1758973186.473:4): pid=10342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='?
[  152.253089][   T33] o݂LFa͸nկlQT0FVP.@6p^S	1upk穷jQh	n02) 
[  152.253089][   T33] dxMGl`'
[  152.293463][T10346] wg1 speed is unknown, defaulting to 1000
[  152.302156][T10345] wg1 speed is unknown, defaulting to 1000
[  152.758662][T10362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1160'.
[  152.764067][T10363] netlink: 'syz.2.1158': attribute type 16 has an invalid length.
[  152.767685][T10363] netlink: 'syz.2.1158': attribute type 17 has an invalid length.
[  152.775319][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'.
[  152.783198][T10363] IPv6: NLM_F_REPLACE set, but no existing node found!
[  152.890419][T10373] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  152.898253][T10376] wg1 speed is unknown, defaulting to 1000
[  153.089824][T10389] netlink: 'syz.1.1166': attribute type 1 has an invalid length.
[  153.216302][T10400] wg1 speed is unknown, defaulting to 1000
[  153.729704][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1174'.
[  153.733306][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'.
[  153.736786][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1174'.
[  153.743744][T10418] netlink: 'syz.2.1174': attribute type 1 has an invalid length.
[  154.187730][T10446] netlink: 'syz.1.1186': attribute type 13 has an invalid length.
[  154.464491][T10462] sit0: left promiscuous mode
[  154.477393][T10462] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  154.481581][T10462] bond6: left promiscuous mode
[  154.483204][T10462] bond6: left allmulticast mode
[  154.484981][T10462] gtp0: left promiscuous mode
[  154.609675][T10468] syzkaller1: entered promiscuous mode
[  154.611695][T10468] syzkaller1: entered allmulticast mode
[  154.652832][T10470] netlink: 'syz.2.1193': attribute type 1 has an invalid length.
[  154.726162][T10471] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.729629][T10471] 8021q: adding VLAN 0 to HW filter on device team0
[  154.734160][T10471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.583581][T10491] wg1 speed is unknown, defaulting to 1000
[  156.568767][T10540] __nla_validate_parse: 10 callbacks suppressed
[  156.568788][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1209'.
[  157.610146][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'.
[  158.391522][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'.
[  158.394909][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'.
[  158.404031][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'.
[  158.417090][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'.
[  158.623212][T10614] wg1 speed is unknown, defaulting to 1000
[  158.930045][T10630] syz.1.1231 (10630) used obsolete PPPIOCDETACH ioctl
[  159.149133][T10641] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002
[  159.200325][T10645] netlink: 'syz.2.1236': attribute type 1 has an invalid length.
[  159.318864][T10655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1237'.
[  159.342789][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  159.576743][T10670] wg1 speed is unknown, defaulting to 1000
[  160.352556][T10683] wg1 speed is unknown, defaulting to 1000
[  160.368851][T10690] netlink: 'syz.2.1248': attribute type 32 has an invalid length.
[  161.170141][T10734] netlink: 'syz.1.1257': attribute type 3 has an invalid length.
[  161.174127][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'.
[  161.220358][T10736] netlink: 4264 bytes leftover after parsing attributes in process `syz.1.1258'.
[  161.227474][T10736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.261469][T10737] wg1 speed is unknown, defaulting to 1000
[  161.532493][T10757] wg1 speed is unknown, defaulting to 1000
[  161.861340][T10763] __nla_validate_parse: 1 callbacks suppressed
[  161.861355][T10763] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1266'.
[  161.945146][T10768] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  161.960553][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'.
[  162.123739][T10775] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1271'.
[  162.361614][T10780] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  162.450499][T10787] netlink: 'syz.1.1274': attribute type 10 has an invalid length.
[  162.453304][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'.
[  162.536684][T10792] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1275'.
[  162.541259][T10792] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  162.544739][T10792] tipc: New replicast peer: 255.255.255.255
[  162.578613][T10794] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  162.614633][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'.
[  162.715420][T10807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1280'.
[  162.857861][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'.
[  162.903290][T10822] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20000
[  162.980894][T10822] wg1 speed is unknown, defaulting to 1000
[  163.029472][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'.
[  163.041297][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1286'.
[  163.063116][T10836] netlink: 'syz.1.1288': attribute type 10 has an invalid length.
[  163.064335][T10832] bond0: entered promiscuous mode
[  163.069717][T10832] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.101694][T10832] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.104985][T10832] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  163.109928][T10832] bond0: (slave wireguard0): Error -95 calling set_mac_address
[  163.421405][T10871] wg1 speed is unknown, defaulting to 1000
[  163.467812][T10875] netlink: 'syz.2.1295': attribute type 4 has an invalid length.
[  164.244741][T10887] netlink: 'syz.0.1298': attribute type 1 has an invalid length.
[  164.484768][T10905] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  165.324850][T10949] netlink: 'syz.1.1318': attribute type 16 has an invalid length.
[  165.328432][T10949] netlink: 'syz.1.1318': attribute type 17 has an invalid length.
[  165.332570][T10949] netlink: 'syz.1.1318': attribute type 15 has an invalid length.
[  165.336746][T10949] IPv6: NLM_F_REPLACE set, but no existing node found!
[  165.687587][T10955] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  165.690721][T10955] nbd: error processing sock list
[  165.692970][T10955] block nbd1: shutting down sockets
[  166.330391][T10969] can: request_module (can-proto-0) failed.
[  166.355852][T10971] can: request_module (can-proto-0) failed.
[  166.376619][T10976] netlink: 'syz.2.1326': attribute type 83 has an invalid length.
[  166.453602][T10980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.456212][T10980] syzkaller0: entered promiscuous mode
[  166.458670][T10980] syzkaller0: entered allmulticast mode
[  166.474744][T10980] tipc: Resetting bearer <eth:syzkaller0>
[  166.481228][T10977] tipc: Resetting bearer <eth:syzkaller0>
[  166.490867][T10977] tipc: Disabling bearer <eth:syzkaller0>
[  166.578627][T10985] ieee802154 phy1 wpan1: encryption failed: -22
[  166.598622][T10985] bridge3: the hash_elasticity option has been deprecated and is always 16
[  166.602896][T10985] bridge3: entered allmulticast mode
[  166.852875][T11002] netlink: 'syz.0.1337': attribute type 10 has an invalid length.
[  166.911388][T11004] __nla_validate_parse: 30 callbacks suppressed
[  166.911405][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  167.031529][T11016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.085925][T11021] netlink: 'syz.1.1343': attribute type 10 has an invalid length.
[  167.091578][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'.
[  167.095459][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'.
[  167.101121][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  167.332546][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'.
[  167.336161][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1348'.
[  167.340142][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'.
[  167.343815][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'.
[  167.493630][T11044] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1350'.
[  167.636405][T11052] wg1 speed is unknown, defaulting to 1000
[  168.140281][T11069] netlink: 'syz.1.1358': attribute type 16 has an invalid length.
[  168.143088][T11069] netlink: 'syz.1.1358': attribute type 17 has an invalid length.
[  168.146433][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'.
[  168.152561][T11069] IPv6: NLM_F_REPLACE set, but no existing node found!
[  168.168141][T11066] wg1 speed is unknown, defaulting to 1000
[  169.066981][T11091] wg1 speed is unknown, defaulting to 1000
[  169.105828][T11093] wg1 speed is unknown, defaulting to 1000
[  170.185789][T11124] syzkaller0: entered promiscuous mode
[  170.188682][T11124] syzkaller0: entered allmulticast mode
[  171.753512][T11147] netlink: 'syz.2.1380': attribute type 3 has an invalid length.
[  171.805088][T11149] netlink: 'syz.1.1381': attribute type 10 has an invalid length.
[  172.621388][T11203] netlink: 'syz.2.1393': attribute type 12 has an invalid length.
[  172.788262][T11208] veth1: left promiscuous mode
[  172.790742][T11208] veth1: left allmulticast mode
[  172.805874][T11208] bridge3: left allmulticast mode
[  172.964339][T11219] __nla_validate_parse: 14 callbacks suppressed
[  172.964359][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1398'.
[  172.972925][T11219] openvswitch: netlink: Flow key attr not present in new flow.
[  172.988472][T11219] veth0: entered promiscuous mode
[  172.994282][T11218] veth0: left promiscuous mode
[  173.043344][T11224] syzkaller0: entered promiscuous mode
[  173.045594][T11224] syzkaller0: entered allmulticast mode
[  173.052071][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'.
[  173.126179][T11228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1401'.
[  173.255199][T11235] geneve3: entered promiscuous mode
[  173.325444][T11234] geneve3: entered promiscuous mode
[  173.335280][T11238] netlink: 'syz.2.1404': attribute type 4 has an invalid length.
[  173.340928][T11238] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1404'.
[  173.625755][T11251] wg1 speed is unknown, defaulting to 1000
[  173.712170][T11267] xt_limit: Overflow, try lower: 271964/0
[  173.860796][T11271] wg1 speed is unknown, defaulting to 1000
[  174.536608][T11281] wg1 speed is unknown, defaulting to 1000
[  174.623894][T11284] wg1 speed is unknown, defaulting to 1000
[  175.188392][T11304] wg1 speed is unknown, defaulting to 1000
[  175.500594][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'.
[  175.561905][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'.
[  175.566103][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'.
[  175.574678][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1422'.
[  175.579074][T11318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1422'.
[  175.582485][T11318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1422'.
[  175.627876][T11322] netlink: 'syz.0.1421': attribute type 21 has an invalid length.
[  175.635430][T11318] netlink: 'syz.1.1422': attribute type 1 has an invalid length.
[  175.647652][T11322] netlink: 'syz.0.1421': attribute type 5 has an invalid length.
[  175.650834][T11322] netlink: 'syz.0.1421': attribute type 6 has an invalid length.
[  175.872547][T11330] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004
[  175.938750][T11334] netlink: 'syz.1.1428': attribute type 1 has an invalid length.
[  175.941441][T11334] netlink: 'syz.1.1428': attribute type 4 has an invalid length.
[  176.100238][T11344] gretap0: entered promiscuous mode
[  176.110893][T11344] gretap0: left promiscuous mode
[  176.267733][T11351] wg1 speed is unknown, defaulting to 1000
[  176.595014][T11369] wg1 speed is unknown, defaulting to 1000
[  177.378594][T11383] validate_nla: 2 callbacks suppressed
[  177.378617][T11383] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  177.680609][T11403] wg1 speed is unknown, defaulting to 1000
[  177.697718][T11406] wg1 speed is unknown, defaulting to 1000
[  178.381301][T11432] netlink: 'syz.0.1452': attribute type 10 has an invalid length.
[  178.384938][T11432] __nla_validate_parse: 13 callbacks suppressed
[  178.384955][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'.
[  178.452014][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'.
[  178.855136][T11450] netlink: 'syz.2.1457': attribute type 10 has an invalid length.
[  178.859856][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.863875][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.868018][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.871559][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.875254][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.880283][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.885075][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  178.888373][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'.
[  179.660457][T11505] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  179.788869][T11514] netlink: 'syz.0.1475': attribute type 1 has an invalid length.
[  180.650371][T11535] netlink: 'syz.2.1481': attribute type 13 has an invalid length.
[  180.651536][T11537] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  180.656249][T11537] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  180.659812][T11537] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  180.662854][T11537] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  180.666286][T11537] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  180.776953][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  181.288979][T11581] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.299623][T11581] 8021q: adding VLAN 0 to HW filter on device team0
[  181.318455][T11581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.358050][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.627100][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.715403][T11619] vxcan1: entered allmulticast mode
[  181.759779][T11616] wg1 speed is unknown, defaulting to 1000
[  181.807718][T11627] team0: Port device dummy0 added
[  181.917576][T11635] wg1 speed is unknown, defaulting to 1000
[  182.057889][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.703902][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.707489][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.900141][T11652] wg1 speed is unknown, defaulting to 1000
[  182.985735][T11665] validate_nla: 63 callbacks suppressed
[  182.985751][T11665] netlink: 'syz.2.1521': attribute type 10 has an invalid length.
[  183.447575][T11691] syzkaller1: entered promiscuous mode
[  183.449566][T11691] syzkaller1: entered allmulticast mode
[  183.560597][T11698] ip_vti0: entered promiscuous mode
[  183.562815][T11698] __nla_validate_parse: 65 callbacks suppressed
[  183.562832][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'.
[  183.577177][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  184.370430][T11719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'.
[  184.374513][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'.
[  184.490577][T11733] netlink: 'syz.2.1535': attribute type 10 has an invalid length.
[  184.493621][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'.
[  184.591350][T11741] netlink: 'syz.2.1537': attribute type 16 has an invalid length.
[  184.594546][T11741] netlink: 'syz.2.1537': attribute type 17 has an invalid length.
[  184.599211][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'.
[  184.650155][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  184.665445][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'.
[  184.671479][T11743] tipc: Started in network mode
[  184.673468][T11743] tipc: Node identity ac14142f, cluster identity 4711
[  184.676245][T11743] tipc: New replicast peer: 0.0.0.0
[  184.680921][T11743] tipc: Enabled bearer <udp:syz2>, priority 10
[  184.686380][T11743] tipc: New replicast peer: 255.255.255.255
[  184.901106][T11763] wg1 speed is unknown, defaulting to 1000
[  185.052680][T11783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1549'.
[  185.110145][T11787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1551'.
[  185.139743][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1552'.
[  185.315395][T11799] syzkaller0: entered promiscuous mode
[  185.321141][T11799] syzkaller0: entered allmulticast mode
[  185.807094][  T791] tipc: Node number set to 2886997039
[  186.611927][T11826] netlink: 'syz.1.1561': attribute type 5 has an invalid length.
[  186.621922][T11826] netlink: zone id is out of range
[  186.670667][T11838] wg1 speed is unknown, defaulting to 1000
[  186.901135][T11855] netlink: 'syz.2.1569': attribute type 16 has an invalid length.
[  186.903757][T11855] netlink: 'syz.2.1569': attribute type 17 has an invalid length.
[  186.910070][T11855] IPv6: NLM_F_REPLACE set, but no existing node found!
[  187.107044][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.904550][T11901] netlink: 'syz.1.1581': attribute type 2 has an invalid length.
[  188.412888][T11937] wg1 speed is unknown, defaulting to 1000
[  188.610243][T11956] syzkaller1: entered promiscuous mode
[  188.612034][T11956] syzkaller1: entered allmulticast mode
[  188.682457][T11959] __nla_validate_parse: 9 callbacks suppressed
[  188.682467][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1596'.
[  188.762059][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1598'.
[  189.615237][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.632905][T11967] syzkaller0: entered promiscuous mode
[  189.635281][T11967] syzkaller0: entered allmulticast mode
[  190.059466][ T2304] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  190.697503][T11981] netlink: 'syz.0.1603': attribute type 1 has an invalid length.
[  190.699888][T11981] nbd: error processing sock list
[  190.702086][T11981] block nbd1: shutting down sockets
[  190.761510][T11985] wg1 speed is unknown, defaulting to 1000
[  190.995415][T11995] wg1 speed is unknown, defaulting to 1000
[  191.155049][T12010] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1611'.
[  191.172692][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'.
[  191.193512][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'.
[  191.202379][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'.
[  191.375336][T12025] netlink: 'syz.0.1616': attribute type 5 has an invalid length.
[  191.379888][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'.
[  191.439852][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'.
[  191.631874][T12056] wg1 speed is unknown, defaulting to 1000
[  192.086107][T12088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.143771][T12091] tipc: Resetting bearer <eth:syzkaller0>
[  192.148777][T12087] tipc: Disabling bearer <eth:syzkaller0>
[  192.227307][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1635'.
[  192.240098][T12093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1635'.
[  192.470647][T12100] wg1 speed is unknown, defaulting to 1000
[  192.561213][T12101] wg1 speed is unknown, defaulting to 1000
[  193.543817][T12162] ieee802154 phy1 wpan1: encryption failed: -22
[  193.635892][T12166] wg1 speed is unknown, defaulting to 1000
[  193.968185][T12190] __nla_validate_parse: 76 callbacks suppressed
[  193.968202][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'.
[  194.060901][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.257828][T12206] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1665'.
[  194.331687][T12209] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1666'.
[  194.336500][T12209] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  194.575796][T12218] wg1 speed is unknown, defaulting to 1000
[  194.613514][T12216] wg1 speed is unknown, defaulting to 1000
[  194.673946][T12220] syzkaller0: entered promiscuous mode
[  194.675803][T12220] syzkaller0: entered allmulticast mode
[  195.980497][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.192033][T12232] syzkaller1: entered promiscuous mode
[  196.193906][T12232] syzkaller1: entered allmulticast mode
[  196.253495][T12234] ieee802154 phy1 wpan1: encryption failed: -90
[  196.256158][T12234] ieee802154 phy1 wpan1: encryption failed: -90
[  196.272207][T12234] ieee802154 phy1 wpan1: encryption failed: -90
[  196.275154][T12234] ieee802154 phy1 wpan1: encryption failed: -90
[  196.379050][T12245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1674'.
[  196.382160][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1674'.
[  196.392672][T12245] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  196.750568][T12273] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  196.858322][T12281] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  196.923675][T12285] ==================================================================
[  196.926911][T12285] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  196.929774][T12285] Read of size 4 at addr ffff8880300a1744 by task syz.1.1684/12285
[  196.934003][T12285] 
[  196.935100][T12285] CPU: 0 UID: 0 PID: 12285 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) 
[  196.935122][T12285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.935134][T12285] Call Trace:
[  196.935163][T12285]  <TASK>
[  196.935176][T12285]  dump_stack_lvl+0x189/0x250
[  196.935204][T12285]  ? __kasan_check_byte+0x12/0x40
[  196.935229][T12285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.935246][T12285]  ? lock_release+0x4b/0x3e0
[  196.935269][T12285]  ? __virt_addr_valid+0x4a5/0x5c0
[  196.935290][T12285]  print_report+0xca/0x240
[  196.935314][T12285]  ? xfrm_alloc_spi+0x570/0xf30
[  196.935335][T12285]  kasan_report+0x118/0x150
[  196.935354][T12285]  ? xfrm_alloc_spi+0x570/0xf30
[  196.935387][T12285]  xfrm_alloc_spi+0x570/0xf30
[  196.935411][T12285]  ? xfrm_alloc_spi+0x2a0/0xf30
[  196.935436][T12285]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  196.935456][T12285]  ? xfrm_find_acq+0x87/0xa0
[  196.935478][T12285]  xfrm_alloc_userspi+0x70b/0xc90
[  196.935501][T12285]  ? apparmor_capable+0x137/0x1b0
[  196.935519][T12285]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  196.935535][T12285]  ? __nla_parse+0x40/0x60
[  196.935553][T12285]  xfrm_user_rcv_msg+0x7a3/0xab0
[  196.935579][T12285]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  196.935612][T12285]  ? __pfx___mutex_trylock_common+0x10/0x10
[  196.935628][T12285]  ? rcu_is_watching+0x15/0xb0
[  196.935642][T12285]  ? trace_contention_end+0x39/0x120
[  196.935656][T12285]  ? __mutex_lock+0x335/0x1350
[  196.935673][T12285]  netlink_rcv_skb+0x208/0x470
[  196.935690][T12285]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  196.935713][T12285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  196.935734][T12285]  ? netlink_deliver_tap+0x2e/0x1b0
[  196.935751][T12285]  ? netlink_deliver_tap+0x2e/0x1b0
[  196.935766][T12285]  xfrm_netlink_rcv+0x79/0x90
[  196.935786][T12285]  netlink_unicast+0x82f/0x9e0
[  196.935803][T12285]  ? __pfx_netlink_unicast+0x10/0x10
[  196.935815][T12285]  ? netlink_sendmsg+0x642/0xb30
[  196.935831][T12285]  ? skb_put+0x11b/0x210
[  196.935847][T12285]  netlink_sendmsg+0x805/0xb30
[  196.935865][T12285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.935881][T12285]  ? aa_sock_msg_perm+0xf1/0x1d0
[  196.935902][T12285]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.935917][T12285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.935932][T12285]  __sock_sendmsg+0x21c/0x270
[  196.935954][T12285]  ____sys_sendmsg+0x505/0x830
[  196.935974][T12285]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.935991][T12285]  ? import_iovec+0x74/0xa0
[  196.936007][T12285]  ___sys_sendmsg+0x21f/0x2a0
[  196.936019][T12285]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.936041][T12285]  ? __fget_files+0x2a/0x420
[  196.936056][T12285]  ? __fget_files+0x3a0/0x420
[  196.936107][T12285]  __x64_sys_sendmsg+0x19b/0x260
[  196.936123][T12285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.936140][T12285]  ? rcu_is_watching+0x15/0xb0
[  196.936151][T12285]  ? do_syscall_64+0xbe/0x3b0
[  196.936164][T12285]  do_syscall_64+0xfa/0x3b0
[  196.936176][T12285]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.936195][T12285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.936207][T12285]  ? exc_page_fault+0x9f/0xf0
[  196.936225][T12285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.936240][T12285] RIP: 0033:0x7efff918ec29
[  196.936255][T12285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.936268][T12285] RSP: 002b:00007efff9fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.936285][T12285] RAX: ffffffffffffffda RBX: 00007efff93d6090 RCX: 00007efff918ec29
[  196.936294][T12285] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000008
[  196.936302][T12285] RBP: 00007efff9211e41 R08: 0000000000000000 R09: 0000000000000000
[  196.936310][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.936318][T12285] R13: 00007efff93d6128 R14: 00007efff93d6090 R15: 00007fff16d29c98
[  196.936337][T12285]  </TASK>
[  196.936342][T12285] 
[  197.083078][T12285] The buggy address belongs to the physical page:
[  197.085209][T12285] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x300a1
[  197.088848][T12285] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  197.091738][T12285] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000
[  197.095221][T12285] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000
[  197.098671][T12285] page dumped because: kasan: bad access detected
[  197.101202][T12285] page_owner tracks the page as freed
[  197.102992][T12285] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11647, tgid 11643 (syz.0.1515), ts 182818470166, free_ts 187080347405
[  197.110760][T12285]  post_alloc_hook+0x240/0x2a0
[  197.112762][T12285]  get_page_from_freelist+0x21e4/0x22c0
[  197.115051][T12285]  __alloc_frozen_pages_noprof+0x181/0x370
[  197.117476][T12285]  alloc_pages_mpol+0x232/0x4a0
[  197.119516][T12285]  allocate_slab+0x8a/0x370
[  197.121359][T12285]  ___slab_alloc+0xbeb/0x1420
[  197.123280][T12285]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  197.125733][T12285]  kmalloc_reserve+0xbd/0x290
[  197.127689][T12285]  __alloc_skb+0x142/0x2d0
[  197.129651][T12285]  __pskb_copy_fclone+0xa8/0xfb0
[  197.131714][T12285]  tipc_sk_mcast_rcv+0x596/0xeb0
[  197.133758][T12285]  tipc_mcast_xmit+0x123a/0x1850
[  197.135805][T12285]  tipc_send_group_bcast+0x79e/0xa70
[  197.137975][T12285]  __tipc_sendmsg+0x2d7/0x2960
[  197.139924][T12285]  tipc_sendmsg+0x55/0x70
[  197.141662][T12285]  __sock_sendmsg+0x21c/0x270
[  197.143722][T12285] page last free pid 11857 tgid 11856 stack trace:
[  197.145951][T12285]  __free_frozen_pages+0xbc4/0xd30
[  197.147577][T12285]  __put_partials+0x156/0x1a0
[  197.149233][T12285]  put_cpu_partial+0x17c/0x250
[  197.150863][T12285]  __slab_free+0x2d5/0x3c0
[  197.152348][T12285]  qlist_free_all+0x97/0x140
[  197.153812][T12285]  kasan_quarantine_reduce+0x148/0x160
[  197.155568][T12285]  __kasan_slab_alloc+0x22/0x80
[  197.157077][T12285]  __kmalloc_noprof+0x224/0x4f0
[  197.158582][T12285]  unregister_netdevice_many_notify+0x88e/0x1ff0
[  197.161006][T12285]  unregister_netdevice_queue+0x33c/0x380
[  197.163362][T12285]  __tun_detach+0xda4/0x1560
[  197.164913][T12285]  tun_chr_close+0x10a/0x1c0
[  197.166468][T12285]  __fput+0x44c/0xa70
[  197.167769][T12285]  task_work_run+0x1d4/0x260
[  197.169451][T12285]  do_exit+0x6b5/0x2300
[  197.170794][T12285]  do_group_exit+0x21c/0x2d0
[  197.172308][T12285] 
[  197.173089][T12285] Memory state around the buggy address:
[  197.174920][T12285]  ffff8880300a1600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  197.177839][T12285]  ffff8880300a1680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  197.180614][T12285] >ffff8880300a1700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  197.183265][T12285]                                            ^
[  197.185284][T12285]  ffff8880300a1780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  197.187933][T12285]  ffff8880300a1800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  197.190811][T12285] ==================================================================
[  197.193926][T12285] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  197.196386][T12285] CPU: 0 UID: 0 PID: 12285 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) 
[  197.199384][T12285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.202957][T12285] Call Trace:
[  197.204112][T12285]  <TASK>
[  197.205122][T12285]  dump_stack_lvl+0x99/0x250
[  197.206725][T12285]  ? __asan_memcpy+0x40/0x70
[  197.208480][T12285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.210370][T12285]  ? __pfx__printk+0x10/0x10
[  197.211940][T12285]  vpanic+0x281/0x750
[  197.213388][T12285]  ? __pfx_vpanic+0x10/0x10
[  197.215005][T12285]  ? irqentry_exit+0x74/0x90
[  197.216811][T12285]  panic+0xb9/0xc0
[  197.218180][T12285]  ? __pfx_panic+0x10/0x10
[  197.219908][T12285]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  197.222131][T12285]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  197.224041][T12285]  ? xfrm_alloc_spi+0x570/0xf30
[  197.225634][T12285]  check_panic_on_warn+0x89/0xb0
[  197.227294][T12285]  ? xfrm_alloc_spi+0x570/0xf30
[  197.228884][T12285]  end_report+0x78/0x160
[  197.230363][T12285]  kasan_report+0x129/0x150
[  197.231917][T12285]  ? xfrm_alloc_spi+0x570/0xf30
[  197.233571][T12285]  xfrm_alloc_spi+0x570/0xf30
[  197.235169][T12285]  ? xfrm_alloc_spi+0x2a0/0xf30
[  197.236822][T12285]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  197.238692][T12285]  ? xfrm_find_acq+0x87/0xa0
[  197.240435][T12285]  xfrm_alloc_userspi+0x70b/0xc90
[  197.242134][T12285]  ? apparmor_capable+0x137/0x1b0
[  197.243784][T12285]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  197.245556][T12285]  ? __nla_parse+0x40/0x60
[  197.247071][T12285]  xfrm_user_rcv_msg+0x7a3/0xab0
[  197.248695][T12285]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  197.250615][T12285]  ? __pfx___mutex_trylock_common+0x10/0x10
[  197.252726][T12285]  ? rcu_is_watching+0x15/0xb0
[  197.254290][T12285]  ? trace_contention_end+0x39/0x120
[  197.255988][T12285]  ? __mutex_lock+0x335/0x1350
[  197.257687][T12285]  netlink_rcv_skb+0x208/0x470
[  197.259345][T12285]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  197.261225][T12285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.262975][T12285]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.264710][T12285]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.266419][T12285]  xfrm_netlink_rcv+0x79/0x90
[  197.268008][T12285]  netlink_unicast+0x82f/0x9e0
[  197.269654][T12285]  ? __pfx_netlink_unicast+0x10/0x10
[  197.271471][T12285]  ? netlink_sendmsg+0x642/0xb30
[  197.273182][T12285]  ? skb_put+0x11b/0x210
[  197.274578][T12285]  netlink_sendmsg+0x805/0xb30
[  197.276209][T12285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.277927][T12285]  ? aa_sock_msg_perm+0xf1/0x1d0
[  197.279634][T12285]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.281433][T12285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.283264][T12285]  __sock_sendmsg+0x21c/0x270
[  197.284820][T12285]  ____sys_sendmsg+0x505/0x830
[  197.286432][T12285]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.288213][T12285]  ? import_iovec+0x74/0xa0
[  197.289765][T12285]  ___sys_sendmsg+0x21f/0x2a0
[  197.291396][T12285]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.293250][T12285]  ? __fget_files+0x2a/0x420
[  197.294865][T12285]  ? __fget_files+0x3a0/0x420
[  197.296457][T12285]  __x64_sys_sendmsg+0x19b/0x260
[  197.298201][T12285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.300096][T12285]  ? rcu_is_watching+0x15/0xb0
[  197.301706][T12285]  ? do_syscall_64+0xbe/0x3b0
[  197.303310][T12285]  do_syscall_64+0xfa/0x3b0
[  197.304894][T12285]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.306764][T12285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.309175][T12285]  ? exc_page_fault+0x9f/0xf0
[  197.311071][T12285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.313001][T12285] RIP: 0033:0x7efff918ec29
[  197.314641][T12285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.321220][T12285] RSP: 002b:00007efff9fbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.323963][T12285] RAX: ffffffffffffffda RBX: 00007efff93d6090 RCX: 00007efff918ec29
[  197.326580][T12285] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000008
[  197.329171][T12285] RBP: 00007efff9211e41 R08: 0000000000000000 R09: 0000000000000000
[  197.331862][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.334454][T12285] R13: 00007efff93d6128 R14: 00007efff93d6090 R15: 00007fff16d29c98
[  197.337167][T12285]  </TASK>
[  197.338944][T12285] Kernel Offset: disabled
[  197.340519][T12285] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:40:31  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001367 RDI=0000000000001368 RBP=00000000000003f8 RSP=ffffc90003b4e9f0
R8 =ffff888107be8237 R9 =1ffff11020f7d046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78fe R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efff9fbe6c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb53bb361b0 CR3=000000010e36c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efff93a7498 00007efff93a7470 XMM03=00007efff93a74a8 00007efff93a74a0
XMM04=00007efff9f0d100 00007efff93a7460 XMM05=00007efff93a7478 00007efff93a74c0
XMM06=00007efff93a74b8 00007efff93a74b0 XMM07=00007efff93a74a8 00007efff93a74a0
XMM08=0000000000000000 00007efff9212f0f XMM09=0000000000000000 00007efff9212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44e7b RBX=1ffff11009608349 RCX=0000000000080000 RDX=ffffc900083ea000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffc9000343f540 RSP=ffffc9000343f3c0
R8 =ffffffff8fa2ee37 R9 =1ffffffff1f45dc6 R10=dffffc0000000000 R11=fffffbfff1f45dc7
R12=ffff88804b041a48 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44e63 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efff9fdf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efff9fbed58 CR3=000000010e36c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007efff9212e7b
XMM06=0000000000000000 00007efff9212e75 XMM07=0000000000000000 00007efff9212e89
XMM08=0000000000000000 00007efff9212f0f XMM09=0000000000000000 00007efff9212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
