last executing test programs:

1.737195189s ago: executing program 2 (id=1456):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff9500000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="0a000000010001", 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x28)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x138, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x95e4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa5b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc80}, 0x800)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
socket$inet6(0xa, 0x80000, 0xff)
sendmsg$nl_route(r6, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0a07000000000000000002000000040004800900010073797a30000000000900020073797a32000000001400000011000104ffff0000000000000000000acca3b7cdba5a5c0014cdf1db4173618783f3679e9015ce041234d609695a519a5d93cbebbb96484dafe7dce9d53510b733e03090ce36d43db1f27eb858f6"], 0x58}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x0, 'veth0_to_bond\x00', {0x1}, 0xd})
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400ff8d3300733730f206cf8d76df25067f000000"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004)

1.651638367s ago: executing program 0 (id=1457):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001000000000000000080000008500000007000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x4}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a00340001a68debcb07c071f9024da269ae6e1c7a010101010100002800508009000100408922a0bd000000080003"], 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1e8, r3, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x190, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x8d, 0x1, "10ae061680cf7f9580d1946112dc5983c20656f9134db554963cd949065607102167cbc4c9f99278f87f60491d781fc4fb8fa987f61497066040d3dc38ea0bbe50abf68d9f32d4b7635705c621a96dc7544c3a369b7e0935ca1eec58375ec3326d3df42431872b8aab645472b26c21d0745bfba49829e5275e9ea80fe791097e34d58176423ba73e22"}}, {0xf8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf2, 0x1, "142e4a865d942947485ee8a305332f8fa19c8772553b41867a508a3974399a75f466a7a5306692201e16ba6ff8e9ad74a1acb1b50c54fbd7c0dbc056cdd5f20ce001acc6ece02ed6d25c493defd188477e8de60c53aede0e5250e1114ccef3f324d863fa3599605e26c23e31db2065511c133785e30f964f70be39a7f12a322f6e309ee33a99524742bfb8dead50fdc0d0e4de3671a0ae1b7fb37d88c70145a43ac15d9e677de5f7a03dca98b2efa6e0ffeede94ee33e834f0f8c68649c1022514b5a3f835e20d1da742a406cc991216a69c26de49138f69264e08c4e64e347d9cbeaa12b7ddc2b40fb09bc013d6"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

1.647933253s ago: executing program 2 (id=1458):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000208500000004000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1c0}], 0x1, 0x9)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) (async)
r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000480)={0x9, {{0x2, 0x4e21, @local}}}, 0x88)
r2 = socket$inet6(0xa, 0x3, 0x3c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000005c0)=0x7fff)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r5}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r5, 0x0, 0x5}, 0x18)
socket$kcm(0x21, 0x2, 0xa) (async)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)

1.647348426s ago: executing program 0 (id=1459):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r4, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x20008001)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(echainiv(aegis128))\x00'}, 0x58)
close(0x3)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x40)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01010000000000000800000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x130, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x11)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x3, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000)

1.423167919s ago: executing program 0 (id=1461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r4, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, &(0x7f0000000080))
r10 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, "1a1e18bc906892a0", "78e004b1e771881e994eb8c971383247", "58f4f648", "16cce272cc7fa976"}, 0x28)

1.292977501s ago: executing program 0 (id=1463):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x700, 0x1, 0x101, 0x5, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x65, 0x0, 0x6, 0x4, 0x0, @multicast1, @empty, {[@generic={0x44, 0x6, "ad19ac6b"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xeb, [@private=0xa010101, @private=0xa010101]}, @rr={0x7, 0x17, 0xe2, [@multicast1, @multicast2, @local, @rand_addr=0x64010100, @broadcast]}, @noop]}}}}})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r3, &(0x7f0000000080)=0x7ffffffffffffffd, r2, 0x0, 0x10000000064e7, 0x8) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x20) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x10000, 0x2, 0x6, 0x800, 0x1, 0xfffffc21, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xe}, 0x50)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003480)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x6}}}]}]}]}}]}, 0x54}}, 0x20040054) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x9, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x55}, @printk={@lx}], &(0x7f0000000080)='GPL\x00', 0x9, 0x4b, &(0x7f00000000c0)=""/75, 0x41100, 0x11, '\x00', r1, @fallback=0x2, r2, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x3, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1, r4, r5, r6, r10, r11, 0xffffffffffffffff], 0x0, 0x10, 0x40}, 0x94)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, 0x0, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) (async)
recvfrom$packet(r3, &(0x7f0000000540)=""/43, 0x2b, 0x80010001, 0x0, 0x0)

1.291588888s ago: executing program 2 (id=1465):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='p']}]}, 0x34}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r2, &(0x7f0000000240)="3f6dc38a8d4e715114c3888479ec", 0xe, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r5, 0x1, 0xa2}, 0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000fff0200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00'], 0x20}}, 0x4008001) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000fff0200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00'], 0x20}}, 0x4008001)

1.231349704s ago: executing program 0 (id=1466):
socket(0x28, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x20, 0xe7, 0x2}})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r8, 0x8)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)

1.229072204s ago: executing program 2 (id=1468):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={<r6=>0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r6, 0x29, 0x0, 0x4d, 0xffffffff, 0xf, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x10, 0x5, 0x8}})
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
getsockopt$inet_int(r9, 0x0, 0xe, 0x0, &(0x7f0000000080))

1.030870939s ago: executing program 2 (id=1470):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r4, &(0x7f0000000140)="c4a6768bc14a26c30bfd411b7c4bb942ec8d53e44cdd74d60fcc511dae72c9a4", 0x20, 0x0, &(0x7f00000001c0)={0xa, 0x2, 0x10005, @loopback, 0x22b5}, 0xfffffffffffffdbe)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async, rerun: 64)
shutdown(r4, 0x1) (async, rerun: 64)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async, rerun: 32)
r5 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc) (rerun: 32)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r9, 0x100) (async, rerun: 32)
accept4(r9, 0x0, 0x0, 0x0) (async, rerun: 32)
shutdown(r9, 0x0)

851.587578ms ago: executing program 2 (id=1471):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r12, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async, rerun: 32)
connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x40) (rerun: 32)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x4, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

462.068057ms ago: executing program 1 (id=1475):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
socket(0x10, 0x80002, 0x0) (async)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x30, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x30, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r8, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r8, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7)

393.109667ms ago: executing program 1 (id=1476):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x100, 0x4)
sendto$inet6(r5, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r5, 0x1)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r4, &(0x7f0000000800)=ANY=[@ANYRES8=r5, @ANYRESDEC=r3], 0x24e2)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r7, 0x0, 0x47, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x44, 0x4a, 0x800, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0xff6e, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

323.182956ms ago: executing program 0 (id=1477):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000000000000700000082"], 0x18}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x4, 0x8, 0xd}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000240100e20100000000000000000000000600030000000000"], 0x1c}}, 0x8004)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/17, 0x11}, 0xfffffffe}], 0x1, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0x0, 0x1, 0xd, 0x5, 0x75, 0x8, 0x0, 0xdc, 0xa, 0x100, 0x80000002, 0x6, 0xd, 0x8, 0xaed, [0x3, 0x7]}})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4)
sendto$inet(r7, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0))
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

213.091753ms ago: executing program 1 (id=1478):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7585, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13ff, 0x2}, 0x20) (async)
shutdown(r4, 0x1) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r7, 0x0, 0x47, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

212.397154ms ago: executing program 1 (id=1479):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x1b, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x24, &(0x7f0000000140)=""/36, 0x41100, 0x14, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r0, 0xffffffffffffffff], &(0x7f0000000200)=[{0x1, 0x3, 0x4, 0xc}], 0x10, 0x3e000000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
bind(r0, &(0x7f0000000340)=@ax25={{0x3, @bcast, 0x5}, [@null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x1, 0x5, 0x5a, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x7, 0x70}})
sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)="df942e255fce422b5c1071fb4f957c2ec6638416925acc08", 0x18}, {&(0x7f00000004c0)="4a5bbcc724e360e267e7b51aa369fee63604cdc70542889d44ec49011da6ed1e18a2713d8fbaf573eb8ce14a23ec7024ff7b999cb923e742125f09e9f9776dc5d6bf29ecde9fcc8fb2a36711d436e5bfec9aa04d0873bf7953c6e57a468a4a499fbb2b2c4bb70817257b6ee75383f9b3", 0x70}, {&(0x7f0000000540)="33e8efb4e9812889d882c02e5d4191b42a5c7620be69cd001f50c9323f7541a0e007cf3376f897a03eb5717ec0ae2fc9a521cd018a3caa9306760900e190f163b42677896fc96cecaa86146f80cd0574b65150aef8992e92d185b327eb8bd5edb4e78deb6f45892a3136459443ef5136adb545c2bc1148bf5418b9185aba2977c8b6e7622ca4966439afa570329dce578bf2458e2238", 0x96}, {&(0x7f0000000600)="0f0f987617b94a9c82d2086d46a24c2bc8908cce817521692b66cbb362bd0d4eeee0d5c721269ce8d06532b02aa91a1c7f5c23daba399ffbd3f52abdf813a710b28009671819e7919d8cef72ff", 0x4d}, {&(0x7f0000000680)="22500e8a9f752d", 0x7}, {&(0x7f00000006c0)="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", 0xfa}, {&(0x7f00000007c0)="0c74fd6e5659b5af97702137458f6c3d334c9a9880dab9055725642f13f7fe5d17bed2c700aaf7c333a697db1086d785d5fedcc1b3753f31fdc014c2d4afb7e9aebbae42c22e8c20bd70f7466459cd1971934ea1bd5b12cbf7b4aa59150045dcef7617f5365f133f9b1911677de8173b1b59ac4ac7dd7ea229eab5f8d625f466057cef97ed61bcf68758bcc73716c700eec32d446be28927cc167d08cf1b8b9cc0eb22e7c3dbe51bca847efb87e3607d0583aa1a474ada32f4d17582ccbe1786dab496c9d8d5e89ffd7a4b7d07e7e25c40c2a34091cc4247b4c44ea8394698d0", 0xe0}], 0x7, &(0x7f0000000940)}, 0x4001)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f00000009c0)={@broadcast, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000b40)={0x2, 0x8000000000000001, 0xfd, &(0x7f0000000a40)=""/253})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={r1, <r3=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e40)={&(0x7f0000000b80)="174efa3de707f337fa2b503994e62d7cf082f1a9c513438fca72954926d359ca2899b9c61d4fe47ec97bdbed9748863aab2142572294430e7f82e5da87d62c6bce3c10c095914207aeffe7358849b9428b350aaf6ece67512b1da46603f2309af9c2810ee2c64926e8a485d2f51049b78c7abcfc4af6070fcf7cf30380e78e162dc371bc93b387dc8cc22380be49ac9efb078c1b237b347db3e2", &(0x7f0000000c40)=""/22, &(0x7f0000000c80)="c85f0f11f104b88f6509c209671d56b3382a85af0d7729853c20a427ced6560e35ef287ae3e746fce5396a30e5b5f25337bb56b5b6946109a616775f55fa61001a087ec05c313a9ceaa2653c76e4c47852f8af7f7070c4803ba44ab066422a342bbf83cb76249b", &(0x7f0000000d00)="52dcfc1d9eb12831a88914de13121347a1c9d749ae920f4892eb950b8bd35eea9ce5fff4958f4469e90ca5cd49c26f1e3eb0cea4bd83a9027bf706b9056446c5115217bb22c7034e17c9c6edb7a737c1f7e693a0088b098be00173a175ff2c3ca37cecd8f10d5bad38c03fe0875ee9bc543cbba3cbf8fa4fa9481d0867fe5534d6c01df27addb8ea1f83878a683236a2c2695caec0c3933166a05bbf9546e530cb94ca312422b18f3d8db31aee6d873b2fb7706c9a454a268c41a594cfe64c73376b28bc9a8353a0d1b2a2b0fdc305b455f5cda5a0153afa973cd18018df042df9d7dd5b7d0c1a625259f25102af1fb7617c", 0x7, r3, 0x4}, 0x38)
setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r4, 0x58ee4000)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000e80)={<r5=>0x0, 0x80000000}, &(0x7f0000000ec0)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000f00)={r5, 0x3e, 0x7, [0x3, 0x3, 0x0, 0xa, 0xc, 0x6, 0x7]}, 0x16)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000f40)=0x2, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000f80)={<r7=>0x0, @broadcast, @loopback}, &(0x7f0000000fc0)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, r7})
getpeername(0xffffffffffffffff, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000010c0)=0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r8)
sendmsg$nl_generic(r8, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x1f4, 0x3e, 0x200, 0x70bd27, 0x25dfdbfd, {0xb}, [@typed={0x7, 0x6f, 0x0, 0x0, @str='&\b\x00'}, @nested={0x1d5, 0x106, 0x0, 0x1, [@generic="d1037214c8806228918e4d65aef9732a7144745a52f4a7dd7ddfc6317e6bbe88a0dde5cc38f97450d2d47b532c419fe7cab1a08a90290ea885bee5d5e7839021192359e6cf6e1875788f41c588789434ad84e2c55dac928d2519ba116297319371a2cd70c9d828036cebbba1fad7d99f5377e4c23dfc", @generic, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x16}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r2}, @generic="91c2ff3dd7cd826772794d4be3fc8d158641c67573d6a9b7265d4c1967a4e9993135345e4ef811098070de2f3f9a670d93179de608da8f4fd91faa1d2d8178e4a8c441b480007c484eca70ae126248dae76d0778486133fbfbe43a08ec9a7878c99f9be06186ad2e953fed81130c0b8f3438921cd96b85383e9c2d5ddffd2d928a6faef0e746fe81f5a56c1d58e2b6045b00", @nested={0x4, 0x12d}, @nested={0x4, 0x1c}, @typed={0x8, 0x65, 0x0, 0x0, @uid}, @generic="6ff427602330642bc87f4451d4b4d02d08b4aff60b7fb40aa923340082d055c94a92af3b3e720301602b36ee3d52ce0ba709ca5b1c352ca1f6862d35e29798df0815ae545c1b5eae81e48ee0059445a7b24b3675ae58d6358a0dae6d935b9c810de45aa675c90b249e232b74b20e60ea595b1f551be8412d147e9280111f5f4aea642dcc37f4b403ac34a356b68c232208ddd14717370054c83c70931e587c3a2f4ee472d5"]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x48080}, 0x4008001)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001400)={0x2, 'pimreg\x00', {0x7}})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000001440)=0x2ce)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r1, 0x0, 0x54, 0xbf, &(0x7f0000001480)="b72741c27ab561702cf2e60fc1752811e5fa8186b8d9c23aaa357cd7ed5fe6e9c40e49f80079b8a2a7894c8134f64eddd5305595394d42a8078f3a9e32163f5d57965de72f9a4f63b6e110d02f825f90cab90e67", &(0x7f0000001500)=""/191, 0xffffff00, 0x0, 0xce, 0x69, &(0x7f00000015c0)="be2b1f4bbdb6e4717f0049ad220f1402d0baf8c80ab5731703148934ae769a53cae680c7b692bd7bd7f39c78d188a45cc8e1d90e51cb81a7c92cde761694151be4825f6f61ece9484e235fdfab53af89b14e9fac39fda9a59a42b0a3248d29fcd4a5c02c46ab678c764641f2657732e1fa1c0e72ae19c20a7c307df5a769c57b1590b5f27cf9b2801073df36b5523d13124973c603b335d2359541771c6a1578f11767b424a6932af0c9cfaca95983e9f715c3d586c1f0a5648502e82cfb604f8227df65b50654c51ae46cbe345e", &(0x7f00000016c0)="7a6650e230bdfda743a2f8a96ff5e3d0d86ab5944e6e113456075c0ffb642c044793e67735b3fc60f48c8616f6149df61ff382b2601578ad204717cbd1104cfa86ab639c916bb49e87b5f8a32e8ec90d79de2cc88d86c9e04ea7386fede99e542b12b6b6f4e48b867e", 0x0, 0x0, 0x9}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0)
sendto$phonet(r8, &(0x7f00000017c0)="ac85bf3c5c4d19cc594526a7260a4a9957342072c8eba0f8bac877d0a260478160740e0f9aa0f3c03922546795aac2df5d7a7ec1c459483285d5a31951b07ecc893e68da86e459220cb10d65e326eaf1e16e1fb6ba2a8380e7", 0x59, 0x4040, 0x0, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000022c0)=[{&(0x7f0000001840)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001880)="b2b064b38b6ec7c14847e861a6e26fb602ae28db0e1f7cd7cc45ed0b4bf5850da6fdb4951e96f287251c3e38f40120bcab478104bf1ea2b32b6f719515047f80bd78cd4480fc3c5bad0619abc69c57ae80c664b977df65139bc6073b136d763bef6bb3416e9ee9b124a434d8ff2f39ae92a5695c7c40b704", 0x78}], 0x1, &(0x7f0000001ac0)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x1, 0x8, 0x1, 0x8, 0x0, 0xf, 0x9}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xe63d}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xe, 0x2, 0xffffff00}}, @init={0x18, 0x84, 0x0, {0x8000, 0x1, 0x1}}], 0xb8}, {&(0x7f0000001b80)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001bc0)="52a10a480d28ddcb84f990b3842e8fafce1c0e7cfbec78779098c86f5d0b47640ad8a29fc9c79bf781d0dfbbb17d4c7f861a1e2e759411fc3c419192ae94c32e380b2597be25a5d5d007250b2e239b06022ceef616d4caa6274531bbc9177ec0b7b2ee555fa4575e151a2721a2f6c7a3f73caca6371cb5ceee384e2403b6367c2b8b970fa86dfa21293d197a8449e4be8cf46c68681089d86aba4360f87b712a8cec52e9222c6e9f2db20727756e415b8bbb569b952d7c6f688cee04eb97448f7ad4c5f3510baa", 0xc7}, {&(0x7f0000001cc0)="899e5b432bbf621807ea7f7da8da5d0a1e298652bd3a41821c1e9c42fb59b4685be3fd6510802b5c5f5deaae598871b665c590a485fa3db8b22df4cc7c4f", 0x3e}, {&(0x7f0000001d00)="99a29e29f047368e2c63ae625c49e26d217098770398bafb37d2e30964e40500cabe90e9f3a3e2d3e49ca8f9c23cb34bb4b4b4764884b47159ba7d1bd0de3f0938876b9ccbe24cf9dcab9e08a6abbb1484f87dab37b40a18cbd4ed71a335754ed56e835f7705ddfcf42cfdddf5b7fb", 0x6f}, {&(0x7f0000001d80)="72fe1538e74965314fffd554cfd97d040b0450c0542a05fa53b98260", 0x1c}, {&(0x7f0000001dc0)="e0557505cac042160999add1e2a347098cddd454289b64b01e200efb73c7652d56d6b28461f04e55349271e6c441c8cf3c8eb0a9aab7399a8bda63f2c431c2520a671ebb783e1250b20ea07abc17202ae4ae3082b11c84cbb66f2ac05590e84417b2f31740a75c9b5234faa73e81a0dc4d74d6d7ba72eb1b2413b04a43e1853445a38874b3b2b9cf79910653d0adcd68312a1395663f77d71e90d16a84b495ef9f4e509311922d988c", 0xa9}, {&(0x7f0000001e80)="4f0214b68a1c4cc59e356886d1a3d2bc5c1a87f785a232ee6ced94070488698c9f3c6f99b2872c7954c38713b74d65023bfde4abe1b6e86950a87cc6bcc7f45ec697b6db0969f2842f5616bffa424b3c17e6628711c8393c5ce6ebe82a9f298a8a85998ccd7c5b7831b8b758ebd440d517135e11210a9d8c0717", 0x7a}, {&(0x7f0000001f00)="767f23169ae808241e79a9c00d978672ea61601e1366cb85720bdb3542c6e20785fc8c2fdeab469bee25abb0e5a77b613be60b35007819a556d9bc6e0405a6f7240f57735cb85db2580e7fd29643f2c9cea363332c", 0x55}], 0x7, &(0x7f0000002000)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8207, 0xbaf, 0x2df, r5}}, @init={0x18, 0x84, 0x0, {0x8, 0xff, 0x4, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0x0, 0x6, 0xa840, r5}}], 0xf0, 0x40}, {&(0x7f0000002100)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000002200)=[{&(0x7f0000002140)="8b455d77754a66e9cd958082a369040b1dc1326b371e3f25057b2234b2910a73c8d571c0b62ff7916bd78ac2cc2f5f47c035c1085c1b8d878c9b11f4ef6bf2fbb1140e0dc8ae7d0905f779ab0257d2b523c70520821fd98a0f3364dd6f7021ec77843ab468a4fcfbc11a233baf08e51af1178ac122354b1f8a47962cdb29a00b4f47ed9c", 0x84}], 0x1, &(0x7f0000002240)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x6, 0x200, 0x3, 0x10000, 0x4, 0x6, 0xc}}], 0x50, 0x4008810}], 0x3, 0x20000000)

132.178908ms ago: executing program 1 (id=1480):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="001000060090020000e80241424a440002d58838060000000000"], 0x4e)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r10=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000380)={r10, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r8, 0x0, 0x47, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=1481):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bc03000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0xf8ba, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c0004800800014000000000c8e97d51ccf8a49a2597651b87689dd10ca07eb5a9f327e2e8aefbe8f56e05bd3b09a8df43467141852933932bf368f810ed145b4a3014c21d1b079455e7916f6d0a46e5e03d"], 0x70}}, 0x4008000) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r5, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x102, 0xffff, @loopback, 0x3}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
shutdown(r5, 0x1)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
write$tun(r4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x24e2)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8) (async)
splice(r0, 0x0, r7, 0x0, 0x47, 0x0) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c001e0000af05000000000000000000010000080800034000001000319929e1084137251952827711255202e83bd9f8ee7a5f1f1fbef066604a68994fbfb870d492d125056c7bd170f570aae095e3da1965616e5c254abbfacd877af9c165b0b8b432b79f895535d355088deebac4dd3f4d01e5c33c6b9b7552287eec88b77c95a0bb61067f4b42ec988a27f3cc786e75e0275fc08f08e687b3255fdb39ee785d74ed944facca6f4139e2371ce1d04ab1014fdcab07aa5781f9774943b5fcb6560ba796796c32a382d4bd4920a3db32d68cdc73dc0537ad57dfd2e9270fec09e8e4cd982fca9aedd6ca9ac8a7f34e0f03e300adc16a4fb4b1387da61b9b543192d43e88608960db4a2fbce67a531548f07ef5b99e7400fed9d31f8c1925539c1cab80e116e98d0fe0769f3d7d0766c162980000000000000000000000001c000000fd72a52f361c0e4c38a33266f4c9b5c40f0093e0546e8aba82184cf702f85da3699dcc168c17700a7dddfffbca402d47c3d1e48a02db9d446176916cce8d34cbf827cbb82c9dad988a5c2c90abce6f15c59e086bc9b4aab99480a4d33f49c52f37c8a2ab44cab5696e7d73e88b7bbc915d7f4f35b73149c994a366fdac3de5bebcf5a9fda96e36328320"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25969' (ED25519) to the list of known hosts.
syzkaller login: [   48.037709][ T5772] cgroup: Unknown subsys name 'net'
[   48.156441][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.166565][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.974852][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.655681][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.660106][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.662994][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.666220][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.669263][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.687577][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.692390][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.695964][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.700980][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.704498][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.704532][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.710757][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.711606][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.718212][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.720732][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.948835][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   54.958489][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.990070][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.090698][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.094342][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.097542][ T5840] bridge_slave_0: entered allmulticast mode
[   55.101492][ T5840] bridge_slave_0: entered promiscuous mode
[   55.151562][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.155180][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.157938][ T5840] bridge_slave_1: entered allmulticast mode
[   55.161371][ T5840] bridge_slave_1: entered promiscuous mode
[   55.190882][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.194118][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.197395][ T5844] bridge_slave_0: entered allmulticast mode
[   55.201266][ T5844] bridge_slave_0: entered promiscuous mode
[   55.205457][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.208474][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.211577][ T5847] bridge_slave_0: entered allmulticast mode
[   55.217342][ T5847] bridge_slave_0: entered promiscuous mode
[   55.222093][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.225160][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.228293][ T5847] bridge_slave_1: entered allmulticast mode
[   55.233870][ T5847] bridge_slave_1: entered promiscuous mode
[   55.249596][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.252660][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.255655][ T5844] bridge_slave_1: entered allmulticast mode
[   55.259390][ T5844] bridge_slave_1: entered promiscuous mode
[   55.315114][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.324320][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.329822][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.336528][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.356078][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.374958][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.420275][ T5840] team0: Port device team_slave_0 added
[   55.425043][ T5844] team0: Port device team_slave_0 added
[   55.442527][ T5840] team0: Port device team_slave_1 added
[   55.446767][ T5844] team0: Port device team_slave_1 added
[   55.463954][ T5847] team0: Port device team_slave_0 added
[   55.491547][ T5847] team0: Port device team_slave_1 added
[   55.518417][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.521399][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.534263][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.553298][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.556294][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.566824][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.572313][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.575239][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.586537][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.592253][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.594944][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.604315][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.608443][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.610919][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.621048][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.630485][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.633121][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.642080][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.702848][ T5840] hsr_slave_0: entered promiscuous mode
[   55.706166][ T5840] hsr_slave_1: entered promiscuous mode
[   55.727623][ T5844] hsr_slave_0: entered promiscuous mode
[   55.730810][ T5844] hsr_slave_1: entered promiscuous mode
[   55.734341][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   55.736827][ T5844] Cannot create hsr debugfs directory
[   55.743197][ T5847] hsr_slave_0: entered promiscuous mode
[   55.745939][ T5847] hsr_slave_1: entered promiscuous mode
[   55.748178][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.750173][ T5847] Cannot create hsr debugfs directory
[   56.066347][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.078214][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.085779][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.098848][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.135590][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.142733][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.148479][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.153711][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.223080][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.231402][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.243424][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.258284][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.380299][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.404252][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.412970][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   56.430162][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.438123][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.441598][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.464621][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.467607][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.471563][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.474473][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.485777][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.490816][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.493653][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.521543][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.544649][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.547205][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.564922][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.567940][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.585970][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.590384][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.721860][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.750802][ T5847] veth0_vlan: entered promiscuous mode
[   56.753836][ T5848] Bluetooth: hci2: command tx timeout
[   56.754245][   T54] Bluetooth: hci1: command tx timeout
[   56.756453][ T5843] Bluetooth: hci0: command tx timeout
[   56.771315][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.777818][ T5847] veth1_vlan: entered promiscuous mode
[   56.808326][ T5847] veth0_macvtap: entered promiscuous mode
[   56.817331][ T5847] veth1_macvtap: entered promiscuous mode
[   56.829956][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.848034][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.853638][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.857534][ T5840] veth0_vlan: entered promiscuous mode
[   56.868945][ T5840] veth1_vlan: entered promiscuous mode
[   56.873157][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.879007][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.883599][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.889080][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.938213][ T5840] veth0_macvtap: entered promiscuous mode
[   56.948031][ T5840] veth1_macvtap: entered promiscuous mode
[   56.961132][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.965719][ T5844] veth0_vlan: entered promiscuous mode
[   56.968280][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.980068][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.992412][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.998820][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.004194][ T5844] veth1_vlan: entered promiscuous mode
[   57.011122][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.017209][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.020102][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.023713][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.026866][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.057485][ T5844] veth0_macvtap: entered promiscuous mode
[   57.064041][ T5844] veth1_macvtap: entered promiscuous mode
[   57.087523][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.103713][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.106110][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.129470][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.134294][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.164188][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.167951][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.188523][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.192127][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.264162][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.268476][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.298260][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.301577][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.334427][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.338367][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.407119][ T5911] Zero length message leads to an empty skb
[   57.428396][ T5911] batadv1: entered promiscuous mode
[   57.567782][ T5892] IPVS: starting estimator thread 0...
[   57.677774][ T5932] vlan2: entered allmulticast mode
[   57.680032][ T5932] hsr0: entered allmulticast mode
[   57.684747][ T5932] hsr_slave_0: entered allmulticast mode
[   57.687148][ T5932] hsr_slave_1: entered allmulticast mode
[   57.697951][ T5926] IPVS: using max 81 ests per chain, 194400 per kthread
[   57.745544][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   57.748817][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   57.753284][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   57.759879][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   57.768395][ T5937] netlink: 'syz.2.9': attribute type 15 has an invalid length.
[   57.773444][ T5938] netlink: 'syz.2.9': attribute type 15 has an invalid length.
[   57.796768][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.948427][ T5946] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   58.091284][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'.
[   58.158171][ T5963] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   58.172374][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'.
[   58.195176][ T5948] syzkaller0: entered promiscuous mode
[   58.197297][ T5948] syzkaller0: entered allmulticast mode
[   58.832983][ T5843] Bluetooth: hci0: command tx timeout
[   58.841969][ T5843] Bluetooth: hci2: command tx timeout
[   58.842207][ T5848] Bluetooth: hci1: command tx timeout
[   58.998030][ T5990] netlink: 'syz.2.22': attribute type 3 has an invalid length.
[   59.016335][ T5989] netlink: 'syz.2.22': attribute type 3 has an invalid length.
[   59.303285][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.475294][ T6018] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   59.487037][ T6018] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   59.552126][ T6024] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET)
[   59.695170][ T6033] netlink: 'syz.2.36': attribute type 10 has an invalid length.
[   59.847112][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.39'.
[   60.135496][ T6051] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   60.208302][ T6055] gretap1: entered promiscuous mode
[   60.251992][ T6051] netlink: 44 bytes leftover after parsing attributes in process `syz.0.43'.
[   60.255688][ T6072] netlink: 4616 bytes leftover after parsing attributes in process `syz.1.49'.
[   60.255697][ T6051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.837356][ T6119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.911850][ T5848] Bluetooth: hci2: command tx timeout
[   60.923323][ T5848] Bluetooth: hci1: command tx timeout
[   61.328989][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.332386][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.351872][ T6161] netlink: 'syz.1.74': attribute type 8 has an invalid length.
[   61.446068][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.453667][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.564493][ T5741] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.569289][ T5741] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.586297][ T5741] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.599701][ T5741] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.672724][ T6172] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   61.675803][ T6172] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   62.491056][ T6250] sock: sock_timestamping_bind_phc: sock not bind to device
[   62.666500][ T6273] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   62.710866][ T6273] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   62.717127][ T6273] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   62.994123][ T5848] Bluetooth: hci1: command tx timeout
[   62.994365][ T5843] Bluetooth: hci2: command tx timeout
[   63.203973][ T6314] __nla_validate_parse: 30 callbacks suppressed
[   63.203983][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'.
[   63.304512][ T6319] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   63.319441][ T6319] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.468846][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.474382][ T6326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.119'.
[   63.565676][ T6338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.122'.
[   63.644436][ T6341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.810829][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   64.011610][ T6363] bridge0: entered allmulticast mode
[   64.015716][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[   64.017974][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[   64.018993][ T6363] bridge_slave_1: left allmulticast mode
[   64.026549][ T6363] bridge_slave_1: left promiscuous mode
[   64.028528][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.034352][ T6363] bridge_slave_0: left allmulticast mode
[   64.037507][ T6363] bridge_slave_0: left promiscuous mode
[   64.040405][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.051363][ T6363] bridge0 (unregistering): left allmulticast mode
[   64.301270][ T6381] Bluetooth: MGMT ver 1.23
[   64.650772][ T6410] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   64.678831][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   64.682473][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'.
[   64.691470][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'.
[   64.796166][ T6420] netlink: 'syz.1.147': attribute type 1 has an invalid length.
[   64.856217][ T6420] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.873022][ T6426] bond2: (slave wlan0): Enslaving as an active interface with a down link
[   64.896543][ T6420] vlan2: entered allmulticast mode
[   64.898238][ T6420] veth1: entered allmulticast mode
[   64.900612][ T6420] veth1: entered promiscuous mode
[   64.905978][ T6420] veth1: left promiscuous mode
[   64.908990][ T6420] bond2: (slave vlan2): making interface the new active one
[   64.915486][ T6420] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   64.923309][ T6420] veth1: entered promiscuous mode
[   64.925773][ T6420] vlan2: entered promiscuous mode
[   64.928376][ T6420] bond2: (slave vlan2): Enslaving as an active interface with an up link
[   65.042966][ T6435] bridge_slave_0: left allmulticast mode
[   65.059082][ T6435] bridge_slave_0: left promiscuous mode
[   65.065185][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.077612][ T6435] bridge_slave_1: left allmulticast mode
[   65.083342][ T6435] bridge_slave_1: left promiscuous mode
[   65.085918][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.097398][ T6435] bond0: (slave bond_slave_0): Releasing backup interface
[   65.106331][ T6435] bond0: (slave bond_slave_1): Releasing backup interface
[   65.129902][ T6435] team0: Port device team_slave_0 removed
[   65.136332][ T6435] team0: Port device team_slave_1 removed
[   65.139626][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.145484][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.150199][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.153335][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.323734][ T6471] geneve2: entered promiscuous mode
[   66.325533][ T6471] geneve2: entered allmulticast mode
[   66.370189][ T6480] tipc: Failed to remove unknown binding: 66,1,1/0:3619463410/3619463412
[   66.379606][ T6480] tipc: Failed to remove unknown binding: 66,1,1/0:3619463410/3619463412
[   66.394686][ T6482] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   66.499135][ T6494] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   66.503426][ T6482] bond2: entered promiscuous mode
[   66.506065][ T6482] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.531258][ T6494] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   66.567030][ T6482] bond0: (slave bridge0): Releasing backup interface
[   66.726088][ T6504] netlink: 'syz.0.167': attribute type 2 has an invalid length.
[   66.747136][ T6504] k*]: entered promiscuous mode
[   66.818356][ T6504] veth0_to_team: entered promiscuous mode
[   66.820330][ T6504] veth0_to_team: entered allmulticast mode
[   67.087140][ T6527] dvmrp1: tun_chr_ioctl cmd 1074025677
[   67.089122][ T6527] dvmrp1: linktype set to 805
[   68.008225][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.050955][ T6545] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   68.055898][ T6545] netlink: 'syz.2.182': attribute type 2 has an invalid length.
[   68.060056][ T6545] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   68.576699][ T6585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.605627][ T6590] __nla_validate_parse: 4 callbacks suppressed
[   68.605641][ T6590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.194'.
[   68.668556][ T6585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.734639][ T6595] netlink: 'syz.0.195': attribute type 6 has an invalid length.
[   68.764162][ T6585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.781540][ T6601] netlink: 72 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.784871][ T6601] netlink: 72 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.788560][ T6601] netlink: 'syz.2.196': attribute type 2 has an invalid length.
[   68.796152][ T6601] : entered promiscuous mode
[   68.951798][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.958415][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.978893][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.993302][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.080590][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'.
[   69.729935][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.212'.
[   69.866346][ T6665] syzkaller0: entered promiscuous mode
[   69.868816][ T6665] syzkaller0: entered allmulticast mode
[   70.230525][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'.
[   70.259397][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'.
[   70.272137][ T6688] netlink: 92 bytes leftover after parsing attributes in process `syz.0.220'.
[   70.277879][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'.
[   70.289847][ T6688] netlink: 92 bytes leftover after parsing attributes in process `syz.0.220'.
[   70.451071][ T6703] Driver unsupported XDP return value 0 on prog  (id 198) dev N/A, expect packet loss!
[   70.741382][ T6728] veth0_to_team: entered promiscuous mode
[   70.749950][ T6728] veth0_to_team: entered allmulticast mode
[   70.788948][ T6735] netlink: 'syz.2.235': attribute type 21 has an invalid length.
[   70.830362][ T6742] netlink: 'syz.2.237': attribute type 6 has an invalid length.
[   70.835282][   T10] IPVS: starting estimator thread 0...
[   70.848649][ T6742] netlink: 'syz.2.237': attribute type 6 has an invalid length.
[   70.932852][ T6743] IPVS: using max 79 ests per chain, 189600 per kthread
[   71.157618][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160146][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.165888][ T6779] netlink: 'syz.0.247': attribute type 5 has an invalid length.
[   71.579084][ T6818] can: request_module (can-proto-0) failed.
[   71.610807][ T6818] openvswitch: netlink: Flow key attr not present in new flow.
[   71.834813][ T6838] warning: `syz.0.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.917417][ T6848] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   71.943998][ T6848] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.963289][ T6848] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.966617][ T6848] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   71.972929][ T6848] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   72.014396][ T6850] veth3: entered promiscuous mode
[   72.019100][ T6850] bond3: (slave veth3): Enslaving as an active interface with a down link
[   72.027640][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.032405][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.061948][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[   72.182075][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   72.291960][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   72.403101][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   72.428263][ T6862] batman_adv: batadv0: Adding interface: ipvlan3
[   72.431063][ T6862] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.442401][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.447413][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.450667][ T6862] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[   72.514057][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   72.569671][ T6870] netlink: 'syz.2.273': attribute type 1 has an invalid length.
[   72.589998][ T6870] 8021q: adding VLAN 0 to HW filter on device bond2
[   72.602632][ T6870] ipvlan2: entered allmulticast mode
[   72.604589][ T6870] team0: entered allmulticast mode
[   72.606505][ T6870] team_slave_0: entered allmulticast mode
[   72.608958][ T6870] team_slave_1: entered allmulticast mode
[   72.628490][ T6870] bond2: (slave gretap1): making interface the new active one
[   72.632837][ T6870] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   72.664801][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[   72.712915][ T6886] unknown channel width for channel at 909000KHz?
[   72.793385][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   72.902040][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   73.034476][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   73.544311][ T6947] bridge2: entered promiscuous mode
[   73.546387][ T6947] bridge2: entered allmulticast mode
[   73.550009][ T6947] team0: Port device bridge2 added
[   73.719765][ T6949] __nla_validate_parse: 79 callbacks suppressed
[   73.719780][ T6949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.295'.
[   74.764050][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.307'.
[   74.767109][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'.
[   74.810365][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.308'.
[   75.137261][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'.
[   75.336095][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'.
[   75.339556][ T7031] netlink: 'syz.0.320': attribute type 5 has an invalid length.
[   75.352012][ T7031] netlink: 48 bytes leftover after parsing attributes in process `syz.0.320'.
[   75.369364][ T7031] geneve2: entered promiscuous mode
[   75.371088][ T7031] geneve2: entered allmulticast mode
[   75.375147][ T5741] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   75.592997][ T7036] netlink: 'syz.1.321': attribute type 10 has an invalid length.
[   75.596160][ T7036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'.
[   75.645015][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[   75.963892][ T5741] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   75.987466][ T7040] gretap1: entered allmulticast mode
[   75.989926][ T5741] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   76.000126][ T5741] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   76.059347][ T7050] tipc: Started in network mode
[   76.061314][ T7050] tipc: Node identity ac1414aa, cluster identity 4711
[   76.082735][ T7050] tipc: Enabled bearer <udp:s>, priority 10
[   76.086278][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'.
[   76.108693][ T7050] dvmrp8: entered allmulticast mode
[   76.117454][ T7047] delete_channel: no stack
[   76.123354][ T7047] dvmrp8: left allmulticast mode
[   76.229878][ T7068] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   76.229900][ T7067] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   76.266197][ T7068] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.284118][ T7067] vlan4: entered allmulticast mode
[   76.286394][ T7067] batadv0: entered allmulticast mode
[   76.294603][ T7067] bond3: (slave vlan4): making interface the new active one
[   76.301637][ T7067] bond3: (slave vlan4): Enslaving as an active interface with an up link
[   76.374048][ T7074] netlink: 'syz.0.331': attribute type 58 has an invalid length.
[   76.473744][   T12] vlan2: left promiscuous mode
[   76.641767][    C0] net_ratelimit: 30 callbacks suppressed
[   76.641784][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   76.652573][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   76.763623][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   76.781819][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   76.872995][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   76.921823][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   76.990009][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   77.052477][ T7127] netlink: 'syz.1.344': attribute type 11 has an invalid length.
[   77.061882][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   77.066302][ T7129] netlink: 'syz.0.346': attribute type 1 has an invalid length.
[   77.082082][ T7129] 8021q: adding VLAN 0 to HW filter on device bond4
[   77.101224][ T7129] bond4: (slave geneve3): making interface the new active one
[   77.114659][ T7129] bond4: (slave geneve3): Enslaving as an active interface with an up link
[   77.141865][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   77.149062][ T7129] bond4: entered promiscuous mode
[   77.158857][ T7129] geneve3: entered promiscuous mode
[   77.203671][    T9] tipc: Node number set to 2886997162
[   77.252463][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   78.207842][ T7203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.211056][ T7203] syzkaller0: entered promiscuous mode
[   78.216226][ T7203] syzkaller0: entered allmulticast mode
[   78.234111][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[   78.252648][ T7202] tipc: Resetting bearer <eth:syzkaller0>
[   78.259845][ T7202] tipc: Disabling bearer <eth:syzkaller0>
[   78.439779][ T7218] netlink: 'syz.2.373': attribute type 21 has an invalid length.
[   78.443568][ T7218] netlink: 'syz.2.373': attribute type 22 has an invalid length.
[   78.446179][ T7218] netlink: 'syz.2.373': attribute type 23 has an invalid length.
[   78.448964][ T7218] netlink: 'syz.2.373': attribute type 25 has an invalid length.
[   78.613652][ T7239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.617129][ T7239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.706481][ T7239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.709930][ T7239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.776523][ T7239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.780979][ T7239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.835266][ T7239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.839660][ T7239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   78.920955][ T7255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.934688][ T7255] tipc: Resetting bearer <eth:syzkaller0>
[   78.946488][ T6167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   78.950785][ T6167] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   78.989991][ T7253] tipc: Disabling bearer <eth:syzkaller0>
[   78.996306][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   78.999209][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   79.010031][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   79.015499][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   79.025608][ T6167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   79.028304][ T6167] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   79.143716][ T7266] : entered promiscuous mode
[   79.172546][ T7278] __nla_validate_parse: 12 callbacks suppressed
[   79.172559][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'.
[   79.357037][ T7293] netlink: 264 bytes leftover after parsing attributes in process `syz.0.392'.
[   79.397138][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.394'.
[   79.418617][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.394'.
[   79.563147][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'.
[   79.627910][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'.
[   79.630929][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'.
[   79.637753][ T7322] bond0: entered promiscuous mode
[   79.639590][ T7322] bond_slave_0: entered promiscuous mode
[   79.642768][ T7322] bond_slave_1: entered promiscuous mode
[   79.646437][ T7322] bond0: left promiscuous mode
[   79.648846][ T7322] bond_slave_0: left promiscuous mode
[   79.650696][ T7322] bond_slave_1: left promiscuous mode
[   79.658689][ T7323] bond0: entered promiscuous mode
[   79.660363][ T7323] bond_slave_0: entered promiscuous mode
[   79.662482][ T7323] bond_slave_1: entered promiscuous mode
[   79.665393][ T7323] bond0: left promiscuous mode
[   79.667224][ T7323] bond_slave_0: left promiscuous mode
[   79.668985][ T7323] bond_slave_1: left promiscuous mode
[   79.841338][ T7333] vlan5: entered promiscuous mode
[   79.844841][ T7333] macvtap0: entered promiscuous mode
[   79.939678][ T7343] netlink: 104 bytes leftover after parsing attributes in process `syz.0.403'.
[   79.949125][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'.
[   79.960426][ T7345] batman_adv: batadv0: Adding interface: ipvlan3
[   79.963113][ T7345] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.971627][ T7345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.975454][ T7345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.979601][ T7345] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[   80.031611][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'.
[   80.968019][ T7428] validate_nla: 5 callbacks suppressed
[   80.968029][ T7428] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[   81.069305][ T7436] bond5: entered promiscuous mode
[   81.071452][ T7436] bond5: entered allmulticast mode
[   81.073578][ T7436] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.090972][ T7428] bridge5: entered promiscuous mode
[   81.093320][ T7428] bridge5: entered allmulticast mode
[   81.095925][ T7428] bond5: (slave bridge5): Enslaving as a backup interface with an up link
[   81.393620][   T24] cfg80211: failed to load regulatory.db
[   81.671942][ T5741] net_ratelimit: 40 callbacks suppressed
[   81.671958][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   81.781926][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   81.902157][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   82.021882][ T6167] bond2: (slave wlan0): failed to get link speed/duplex
[   82.111106][ T7468] netlink: 'syz.0.439': attribute type 10 has an invalid length.
[   82.122501][ T7468] bond0: entered promiscuous mode
[   82.124772][ T7468] bond0: entered allmulticast mode
[   82.127393][ T7468] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   82.154372][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   82.214940][ T7474] netlink: 'syz.0.441': attribute type 1 has an invalid length.
[   82.254562][ T7474] 8021q: adding VLAN 0 to HW filter on device bond5
[   82.271960][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   82.277117][ T7474] bond5: entered promiscuous mode
[   82.282717][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   82.392696][ T6167] bond2: (slave wlan0): failed to get link speed/duplex
[   82.501928][ T5741] bond2: (slave wlan0): failed to get link speed/duplex
[   83.722215][ T7534] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.919368][ T7552] bond6: entered promiscuous mode
[   83.923484][ T7552] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.923532][ T7568] netlink: 'syz.1.469': attribute type 2 has an invalid length.
[   83.943786][ T7552] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.946931][ T7552] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[   83.962560][ T7552] bond6: (slave vcan1): Error -95 calling set_mac_address
[   84.051622][ T7577] netlink: 'syz.0.473': attribute type 10 has an invalid length.
[   84.148174][ T7583] netlink: 'syz.2.472': attribute type 10 has an invalid length.
[   84.165426][ T7583] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   84.188585][ T7590] __nla_validate_parse: 10 callbacks suppressed
[   84.188618][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   84.194805][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'.
[   84.423805][ T7602] team0: Device gtp0 is of different type
[   84.432221][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[   84.554927][ T7611] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[   84.584220][ T7611] bond7: (slave geneve4): making interface the new active one
[   84.587817][ T7611] bond7: (slave geneve4): Enslaving as an active interface with an up link
[   84.590976][ T5741] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[   84.595084][ T5741] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[   84.598665][ T5741] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[   84.603322][ T5741] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[   84.613078][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'.
[   84.805217][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'.
[   84.922039][ T7627] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   84.925496][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'.
[   84.929902][ T7627] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   84.952843][ T7627] 8021q: adding VLAN 0 to HW filter on device bond7
[   84.963250][ T7627] bond7: (slave ip6gretap1): making interface the new active one
[   84.966971][ T7627] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link
[   84.973976][ T7627] erspan0: entered allmulticast mode
[   84.978286][ T7627] bond7: (slave erspan0): Enslaving as an active interface with an up link
[   85.087328][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.492'.
[   85.127503][ T7633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.492'.
[   86.245037][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[   86.274392][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.376074][ T7677] team0: entered promiscuous mode
[   86.378743][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[   86.454258][ T7677] team0 (unregistering): left promiscuous mode
[   86.685678][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'.
[   86.689928][ T7698] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   86.728931][ T7700] syz_tun: entered promiscuous mode
[   86.734920][ T7700] syz_tun: left promiscuous mode
[   86.772241][ T5870] net_ratelimit: 32 callbacks suppressed
[   86.772800][ T5870] bond2: (slave wlan0): failed to get link speed/duplex
[   86.884188][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   86.935093][ T7715] netlink: 'syz.1.519': attribute type 2 has an invalid length.
[   86.944602][ T7715] : entered promiscuous mode
[   86.995008][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   87.108144][ T7725] tipc: Started in network mode
[   87.110280][ T7725] tipc: Node identity 3ebb57f8eab, cluster identity 4711
[   87.113650][ T7725] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.117421][ T7725] syzkaller0: entered promiscuous mode
[   87.119452][ T7725] syzkaller0: entered allmulticast mode
[   87.135389][ T7725] tipc: Resetting bearer <eth:syzkaller0>
[   87.138926][ T7722] tipc: Resetting bearer <eth:syzkaller0>
[   87.158243][ T7722] tipc: Disabling bearer <eth:syzkaller0>
[   87.182782][ T5870] bond2: (slave wlan0): failed to get link speed/duplex
[   87.197770][ T7729] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[   87.252606][ T7729] 8021q: adding VLAN 0 to HW filter on device bond8
[   87.271030][ T7740] bond8: (slave ip6gretap1): making interface the new active one
[   87.278231][ T7740] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[   87.298939][ T7729] veth5: entered promiscuous mode
[   87.304274][ T7729] bond8: (slave veth5): Enslaving as an active interface with a down link
[   87.310345][ T7729] erspan0: entered allmulticast mode
[   87.327037][ T7729] bond8: (slave erspan0): Enslaving as an active interface with an up link
[   87.344084][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   87.471806][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   87.527140][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   87.712369][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   87.861390][ T7774] netlink: 'syz.0.535': attribute type 1 has an invalid length.
[   87.871306][ T5870] bond2: (slave wlan0): failed to get link speed/duplex
[   87.987875][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[   88.177235][ T7803] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.226659][ T7820] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   88.285883][ T7836] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   88.309412][ T7836] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.381582][ T7849] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[   88.414353][ T7849] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   88.425598][ T7849] veth9: entered promiscuous mode
[   88.429234][ T7849] bond7: (slave veth9): Enslaving as a backup interface with a down link
[   88.940091][ T7890] netlink: 'syz.2.561': attribute type 1 has an invalid length.
[   88.979185][ T7890] bond8: (slave bridge7): Enslaving as a backup interface with an up link
[   89.048991][ T7903] xt_limit: Overflow, try lower: 271964/0
[   89.540397][ T7949] vxlan0: entered promiscuous mode
[   89.552900][ T7949] vxlan0: entered allmulticast mode
[   89.555931][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.565300][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.569900][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.574623][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.629102][ T7959] __nla_validate_parse: 15 callbacks suppressed
[   89.629112][ T7959] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.580'.
[   89.780846][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.582'.
[   89.861482][ T7982] netlink: 144 bytes leftover after parsing attributes in process `syz.1.585'.
[   89.944858][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'.
[   90.024084][ T7991] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   90.070554][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[   90.076192][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[   90.467586][ T8038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'.
[   90.538853][ T8049] bridge3: entered promiscuous mode
[   90.550088][ T8049] bridge4: entered promiscuous mode
[   90.572145][ T8049] bridge5: entered promiscuous mode
[   90.603491][ T8049] bridge6: entered promiscuous mode
[   90.616458][ T8049] bridge7: entered promiscuous mode
[   90.630674][ T8049] bridge8: entered promiscuous mode
[   90.644763][ T8049] bridge9: entered promiscuous mode
[   90.724125][ T8049] bridge10: entered promiscuous mode
[   90.745341][ T8049] bridge11: entered promiscuous mode
[   90.770490][ T8049] bridge12: entered promiscuous mode
[   90.782059][ T8049] bridge13: entered promiscuous mode
[   90.809382][ T8049] bridge14: entered promiscuous mode
[   90.839856][ T8049] bridge15: entered promiscuous mode
[   90.874533][ T8049] bridge16: entered promiscuous mode
[   90.885007][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'.
[   90.916131][ T8049] bridge17: entered promiscuous mode
[   90.928842][ T8049] bridge18: entered promiscuous mode
[   90.963303][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'.
[   90.965366][ T8049] bridge19: entered promiscuous mode
[   90.975431][ T8049] bridge20: entered promiscuous mode
[   90.995873][ T8049] bridge21: entered promiscuous mode
[   91.018216][ T8049] bridge22: entered promiscuous mode
[   91.028804][ T8049] bridge23: entered promiscuous mode
[   91.053584][ T8049] bridge24: entered promiscuous mode
[   91.078235][ T8049] bridge25: entered promiscuous mode
[   91.082346][ T8072] syzkaller1: entered allmulticast mode
[   91.099219][ T8049] bridge26: entered promiscuous mode
[   91.120684][ T8049] bridge27: entered promiscuous mode
[   91.139131][ T8049] bridge28: entered promiscuous mode
[   91.158974][ T8049] bridge29: entered promiscuous mode
[   91.185762][ T8049] bridge30: entered promiscuous mode
[   91.196607][ T8049] bridge31: entered promiscuous mode
[   91.207286][ T8049] bridge32: entered promiscuous mode
[   91.217625][ T8049] bridge33: entered promiscuous mode
[   91.233140][ T8049] bridge34: entered promiscuous mode
[   91.253295][ T8049] bridge35: entered promiscuous mode
[   91.307162][ T8049] bridge36: entered promiscuous mode
[   91.316090][ T8049] bridge37: entered promiscuous mode
[   91.325885][ T8049] bridge38: entered promiscuous mode
[   91.335628][ T8049] bridge39: entered promiscuous mode
[   91.345878][ T8049] bridge40: entered promiscuous mode
[   91.444907][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.607'.
[   91.871910][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   92.671802][    C0] net_ratelimit: 9 callbacks suppressed
[   92.671817][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   93.711820][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   94.752110][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   95.791853][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   96.831811][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   97.871811][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   98.911807][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   99.951817][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  100.991796][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  102.031817][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  102.594768][ T8131] 8021q: adding VLAN 0 to HW filter on device bond9
[  102.681136][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'.
[  102.729573][ T8160] netlink: 256 bytes leftover after parsing attributes in process `syz.0.625'.
[  102.977654][ T8176] vlan3: entered allmulticast mode
[  102.979534][ T8176] hsr0: entered allmulticast mode
[  102.981487][ T8176] hsr_slave_0: entered allmulticast mode
[  102.990769][ T8176] hsr_slave_1: entered allmulticast mode
[  103.071767][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  103.180764][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  103.185091][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  103.196442][ T8195] ip6tnl3: entered promiscuous mode
[  103.199443][ T8195] ip6tnl3: entered allmulticast mode
[  103.631541][ T8220] netlink: 'syz.1.640': attribute type 3 has an invalid length.
[  103.641930][ T8220] netlink: 'syz.1.640': attribute type 3 has an invalid length.
[  103.656939][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'.
[  103.667411][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'.
[  103.848378][ T8235] macvlan2: entered promiscuous mode
[  103.850199][ T8235] vlan0: entered promiscuous mode
[  103.874996][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[  103.893997][ T8241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'.
[  103.901527][ T8241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'.
[  104.121773][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  104.129219][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'.
[  104.186695][ T8272] team1: entered promiscuous mode
[  104.188582][ T8272] team1: entered allmulticast mode
[  104.195573][ T8272] tap0: tun_chr_ioctl cmd 1074025677
[  104.197565][ T8272] tap0: linktype set to 825
[  105.151873][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  105.218660][ T8314] netlink: 'syz.1.669': attribute type 13 has an invalid length.
[  105.223725][ T8314] netlink: 'syz.1.669': attribute type 17 has an invalid length.
[  105.306815][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.343773][ T8321] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  105.349004][ T8321] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  105.364379][ T8323] netlink: 'syz.0.671': attribute type 1 has an invalid length.
[  105.407675][ T8331] netlink: 'syz.1.673': attribute type 1 has an invalid length.
[  105.431257][ T8331] 8021q: adding VLAN 0 to HW filter on device bond8
[  105.457213][ T8332] bond8: (slave geneve2): making interface the new active one
[  105.463056][ T8332] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  105.483660][ T8335] bond11: entered promiscuous mode
[  105.485625][ T8335] 8021q: adding VLAN 0 to HW filter on device bond11
[  105.500687][ T8335] 8021q: adding VLAN 0 to HW filter on device bond11
[  105.503458][ T8335] bond11: (slave vcan1): The slave device specified does not support setting the MAC address
[  105.507725][ T8335] bond11: (slave vcan1): Error -95 calling set_mac_address
[  105.640843][ T8345] netlink: 'syz.2.678': attribute type 7 has an invalid length.
[  106.192644][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  106.613943][ T8416] vlan3: entered promiscuous mode
[  106.616764][ T8416] team0: entered promiscuous mode
[  106.618951][ T8416] team_slave_0: entered promiscuous mode
[  106.625971][ T8416] team_slave_1: entered promiscuous mode
[  106.714179][ T8418] dummy0: entered promiscuous mode
[  106.718187][ T8418] dummy0: left promiscuous mode
[  106.819132][ T8424] netlink: 'syz.1.704': attribute type 1 has an invalid length.
[  106.840353][ T8424] bond9: entered promiscuous mode
[  106.845348][ T8424] 8021q: adding VLAN 0 to HW filter on device bond9
[  107.062903][ T8451] syzkaller0: entered promiscuous mode
[  107.065306][ T8451] syzkaller0: entered allmulticast mode
[  107.233653][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  108.007842][ T8460] __nla_validate_parse: 10 callbacks suppressed
[  108.007853][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'.
[  108.031090][ T8460] bridge41: port 1(veth11) entered blocking state
[  108.037302][ T8460] bridge41: port 1(veth11) entered disabled state
[  108.040359][ T8460] veth11: entered allmulticast mode
[  108.045772][ T8460] veth11: entered promiscuous mode
[  108.065002][ T8460] bridge41: port 2(veth0_to_bond) entered blocking state
[  108.069194][ T8460] bridge41: port 2(veth0_to_bond) entered disabled state
[  108.076851][ T8460] veth0_to_bond: entered allmulticast mode
[  108.080422][ T8460] veth0_to_bond: entered promiscuous mode
[  108.105085][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.713'.
[  108.156939][ T8467] gtp0: entered promiscuous mode
[  108.169371][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  108.271974][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  108.488600][ T8499] netlink: 'syz.0.724': attribute type 3 has an invalid length.
[  108.507673][ T8501] syz_tun: entered allmulticast mode
[  108.515083][ T8499] syz_tun: left allmulticast mode
[  108.548065][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'.
[  109.057071][ T8556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'.
[  109.125542][ T8561] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0
[  109.248751][ T8571] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  109.312480][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  109.330694][ T8582] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[  109.331405][ T8580] syzkaller1: entered promiscuous mode
[  109.336069][ T8580] syzkaller1: entered allmulticast mode
[  109.370870][ T8582] bond10: (slave geneve3): making interface the new active one
[  109.375036][ T8582] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  109.378354][ T6167] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  109.381034][ T6167] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  109.383963][ T6167] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  109.386926][ T6167] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  109.449984][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'.
[  109.455666][ T8589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'.
[  109.636995][ T8602] netlink: 'syz.0.758': attribute type 1 has an invalid length.
[  109.670728][ T8602] bond10: (slave bridge2): making interface the new active one
[  109.678490][ T8602] bond10: (slave bridge2): Enslaving as an active interface with an up link
[  109.881038][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'.
[  109.897698][ T8618] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  109.936132][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'.
[  109.939194][ T8624] netlink: 'syz.2.764': attribute type 20 has an invalid length.
[  109.952071][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'.
[  109.953852][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.956201][ T8624] netlink: 'syz.2.764': attribute type 20 has an invalid length.
[  109.963710][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.967277][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.001537][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.289152][ T8644] batadv1: entered promiscuous mode
[  110.291280][ T8644] batadv1: entered allmulticast mode
[  110.351861][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  110.478010][ T8659] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.502640][ T8661] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.505940][ T8661] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.529118][ T8659] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.555545][ T8661] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.559210][ T8661] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.600190][ T8659] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.641161][ T8661] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.645467][ T8661] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.686345][ T8659] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.718535][ T8661] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.725659][ T8661] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.770404][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.784120][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.799659][ T5870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.811246][ T5870] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.847999][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  110.851903][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  110.865253][ T5870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  110.868420][ T5870] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  110.881423][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  110.886092][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  110.900602][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  110.904259][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  111.052670][ T8672] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000
[  111.391843][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  111.429782][ T8697] macsec2: entered promiscuous mode
[  111.432332][ T8697] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  111.435445][ T8697] macsec2: entered allmulticast mode
[  111.437563][ T8697] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  111.710970][ T5848] Bluetooth: hci2: link tx timeout
[  111.716101][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.720381][ T5843] Bluetooth: hci2: link tx timeout
[  111.723543][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.726933][ T5843] Bluetooth: hci2: link tx timeout
[  111.729064][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.732667][ T5843] Bluetooth: hci2: link tx timeout
[  111.734803][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.745624][ T5843] Bluetooth: hci2: link tx timeout
[  111.747872][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.751260][ T5843] Bluetooth: hci2: link tx timeout
[  111.753943][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.757189][ T5843] Bluetooth: hci2: link tx timeout
[  111.759374][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.777796][ T5843] Bluetooth: hci2: link tx timeout
[  111.779994][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  112.375144][ T8734] ip6tnl4: entered promiscuous mode
[  112.391381][ T8734] ip6tnl4: entered allmulticast mode
[  112.431792][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  112.768646][ T8772] sctp: [Deprecated]: syz.1.809 (pid 8772) Use of int in max_burst socket option.
[  112.768646][ T8772] Use struct sctp_assoc_value instead
[  112.771542][ T8770] macvlan2: entered promiscuous mode
[  112.777582][ T8770] vlan0: entered promiscuous mode
[  112.788686][ T8769] xt_socket: unknown flags 0xd0
[  112.843732][ T8776] sctp: [Deprecated]: syz.1.809 (pid 8776) Use of int in max_burst socket option deprecated.
[  112.843732][ T8776] Use struct sctp_assoc_value instead
[  113.121147][ T8788] netlink: 'syz.2.814': attribute type 2 has an invalid length.
[  113.143549][ T8788] __nla_validate_parse: 11 callbacks suppressed
[  113.143559][ T8788] netlink: 64 bytes leftover after parsing attributes in process `syz.2.814'.
[  113.200072][ T8793] netlink: 'syz.0.816': attribute type 2 has an invalid length.
[  113.339818][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[  113.377355][ T8801] netlink: 'syz.0.819': attribute type 2 has an invalid length.
[  113.380010][ T8801] netlink: 119 bytes leftover after parsing attributes in process `syz.0.819'.
[  113.471790][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  113.531003][ T8816] vlan2: entered promiscuous mode
[  113.534029][ T8816] bridge0: entered promiscuous mode
[  113.572467][ T8823] netlink: 'syz.2.825': attribute type 15 has an invalid length.
[  113.767963][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'.
[  113.771618][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'.
[  113.785795][ T8844] netlink: 'syz.0.829': attribute type 15 has an invalid length.
[  113.794089][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  113.883832][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'.
[  114.158455][ T8861] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.832'.
[  114.296922][ T8867] veth15: entered promiscuous mode
[  114.302449][ T8867] bond11: (slave veth15): Enslaving as a backup interface with a down link
[  114.325965][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'.
[  114.334718][ T8867] 8021q: adding VLAN 0 to HW filter on device bond11
[  114.420379][ T8885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.443128][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'.
[  114.511826][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  114.637873][ T8906] validate_nla: 1 callbacks suppressed
[  114.637883][ T8906] netlink: 'syz.0.844': attribute type 1 has an invalid length.
[  114.798645][ T8910] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  114.885741][ T8920] netlink: 'syz.2.848': attribute type 1 has an invalid length.
[  114.940549][ T8920] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.950019][ T8920] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  115.012258][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.849'.
[  115.173896][ T8927] netlink: 'syz.0.850': attribute type 21 has an invalid length.
[  115.175900][ T8938] sctp: [Deprecated]: syz.2.853 (pid 8938) Use of int in maxseg socket option.
[  115.175900][ T8938] Use struct sctp_assoc_value instead
[  115.190419][ T8927] ipvlan2: entered promiscuous mode
[  115.551862][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  116.178595][ T9002] netlink: 'syz.2.870': attribute type 1 has an invalid length.
[  116.590901][ T9009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.594425][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  116.599450][ T9009] syzkaller0: entered promiscuous mode
[  116.604171][ T9009] syzkaller0: entered allmulticast mode
[  116.635680][ T9009] tipc: Resetting bearer <eth:syzkaller0>
[  116.648743][ T9008] tipc: Resetting bearer <eth:syzkaller0>
[  116.663243][ T9008] tipc: Disabling bearer <eth:syzkaller0>
[  117.269230][ T9036] netlink: 'syz.0.881': attribute type 5 has an invalid length.
[  117.417799][ T9049] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  117.468522][ T9049] bond12: (slave bridge43): making interface the new active one
[  117.473872][ T9049] bond12: (slave bridge43): Enslaving as an active interface with an up link
[  117.536602][ T9056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.631883][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  117.920820][ T9081] netlink: 'syz.1.895': attribute type 7 has an invalid length.
[  117.957643][ T9081] 8021q: adding VLAN 0 to HW filter on device bond13
[  117.961244][ T9081] bridge44: port 1(bond13) entered blocking state
[  117.965656][ T9081] bridge44: port 1(bond13) entered disabled state
[  117.968649][ T9081] bond13: entered allmulticast mode
[  117.973892][ T9081] bridge44: port 1(bond13) entered blocking state
[  117.976887][ T9081] bridge44: port 1(bond13) entered forwarding state
[  118.440777][   T52] bridge44: port 1(bond13) entered disabled state
[  118.671881][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  119.205041][ T9102] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  119.236971][ T9104] netlink: 'syz.1.904': attribute type 2 has an invalid length.
[  119.274150][ T9106] __nla_validate_parse: 13 callbacks suppressed
[  119.274166][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'.
[  119.507923][ T9119] netlink: 'syz.2.910': attribute type 3 has an invalid length.
[  119.511463][ T9119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.910'.
[  119.683321][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[  119.717010][ T9147] netlink: 'syz.2.916': attribute type 1 has an invalid length.
[  119.720404][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'.
[  119.721811][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  119.878518][ T9164] netlink: 216 bytes leftover after parsing attributes in process `syz.2.923'.
[  119.881533][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'.
[  119.885273][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'.
[  119.890809][ T9166] netlink: 2 bytes leftover after parsing attributes in process `syz.0.922'.
[  119.933247][ T9164] geneve2: entered promiscuous mode
[  119.937045][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.940496][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.945183][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.948139][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.982930][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'.
[  120.007741][ T9173] vlan2: entered allmulticast mode
[  120.009930][ T9173] veth1: entered allmulticast mode
[  120.074750][ T9178] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  120.230588][ T9191] pimreg3: entered allmulticast mode
[  120.238266][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.932'.
[  120.305798][ T9199] team0: Device gtp0 is of different type
[  120.539520][ T9218] netlink: 'syz.2.940': attribute type 2 has an invalid length.
[  120.599005][ T9215] only policy match revision 0 supported
[  120.599020][ T9215] unable to load match
[  120.726849][ T9240] netlink: 'syz.2.946': attribute type 5 has an invalid length.
[  120.743164][ T9240] geneve3: entered promiscuous mode
[  120.745038][ T9240] geneve3: entered allmulticast mode
[  120.751566][ T5870] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  120.759920][ T5870] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  120.761759][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  120.767935][ T5870] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  120.773527][ T5870] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  120.906721][ T9252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.909949][ T9252] syzkaller0: entered promiscuous mode
[  120.913727][ T9252] syzkaller0: entered allmulticast mode
[  120.925964][ T9252] tipc: Resetting bearer <eth:syzkaller0>
[  120.989185][ T9251] tipc: Resetting bearer <eth:syzkaller0>
[  121.001309][ T9251] tipc: Disabling bearer <eth:syzkaller0>
[  121.551381][ T9287] batadv2: entered promiscuous mode
[  121.562632][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv2
[  121.791859][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  122.026875][ T9347] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  122.143643][ T9361] openvswitch: netlink: Flow key attribute not present in set flow.
[  122.216176][ T9361] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  122.832462][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  123.112421][ T9441] bond14: entered promiscuous mode
[  123.118231][ T9441] 8021q: adding VLAN 0 to HW filter on device bond14
[  123.210720][ T9441] bond14 (unregistering): Released all slaves
[  123.515494][ T9469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.636836][ T9481] 8021q: adding VLAN 0 to HW filter on device bond14
[  123.734183][ T9478] bridge45: port 1(veth17) entered blocking state
[  123.736442][ T9478] bridge45: port 1(veth17) entered disabled state
[  123.738790][ T9478] veth17: entered allmulticast mode
[  123.741356][ T9478] veth17: entered promiscuous mode
[  124.075809][ T9513] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  124.106126][ T9515] batadv_slave_0: entered promiscuous mode
[  124.297019][ T9531] __nla_validate_parse: 23 callbacks suppressed
[  124.297062][ T9531] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1024'.
[  124.303920][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'.
[  124.605331][ T9550] geneve4: entered promiscuous mode
[  124.607592][ T9550] geneve4: entered allmulticast mode
[  124.611646][ T5741] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 36142 - 0
[  124.619310][ T5741] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 52414 - 0
[  124.623223][ T5741] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 36142 - 0
[  124.626705][ T5741] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 52414 - 0
[  124.630221][ T5741] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 36142 - 0
[  124.637518][ T5741] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 52414 - 0
[  124.641135][ T5741] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 36142 - 0
[  124.644801][ T5741] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 52414 - 0
[  124.711391][ T9553] netlink: 'syz.0.1033': attribute type 6 has an invalid length.
[  124.727642][ T9554] netlink: 'syz.0.1033': attribute type 12 has an invalid length.
[  124.730559][ T9554] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1033'.
[  124.771257][ T9556] netlink: 'syz.0.1033': attribute type 12 has an invalid length.
[  124.774777][ T9556] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1033'.
[  124.838518][ T9561] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  124.870921][ T9561] bond11: entered promiscuous mode
[  124.873344][ T9561] 8021q: adding VLAN 0 to HW filter on device bond11
[  124.882401][ T9561] 8021q: adding VLAN 0 to HW filter on device bond11
[  124.885633][ T9561] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address
[  124.889220][ T9561] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  124.897235][ T9561] bond11: (slave wireguard0): making interface the new active one
[  124.901827][ T9561] wireguard0: entered promiscuous mode
[  124.904697][ T9561] bond11: (slave wireguard0): Enslaving as an active interface with an up link
[  124.922600][ T9561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.925648][ T9561] IPv6: NLM_F_CREATE should be set when creating new route
[  124.928611][ T9561] IPv6: NLM_F_CREATE should be set when creating new route
[  124.932979][ T9561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.982510][ T9576] IPVS: persistence engine module ip_vs_pe_ not found
[  124.991617][ T2307] IPVS: starting estimator thread 0...
[  125.033780][ T9585] 8021q: VLANs not supported on ip_vti0
[  125.081843][ T9582] IPVS: using max 80 ests per chain, 192000 per kthread
[  125.181486][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'.
[  125.634329][   T85] wlan0: Trigger new scan to find an IBSS to join
[  125.688454][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  125.702194][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'.
[  125.709238][ T9637] netlink: 'syz.1.1055': attribute type 14 has an invalid length.
[  125.713379][ T9637] netlink: 'syz.1.1055': attribute type 13 has an invalid length.
[  125.796740][ T9640] netlink: 'syz.2.1057': attribute type 32 has an invalid length.
[  126.067084][ T9663] sctp: [Deprecated]: syz.0.1062 (pid 9663) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.067084][ T9663] Use struct sctp_sack_info instead
[  126.149556][ T9672] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1064'.
[  126.191115][ T9677] netlink: 'syz.1.1067': attribute type 1 has an invalid length.
[  126.210720][ T9677] 8021q: adding VLAN 0 to HW filter on device bond14
[  126.231646][ T9677] vlan4: entered promiscuous mode
[  126.240040][ T9677] bond14: entered promiscuous mode
[  126.243565][ T9677] vlan4: entered allmulticast mode
[  126.245722][ T9677] bond14: entered allmulticast mode
[  126.260372][ T9677] bond14: (slave gretap3): making interface the new active one
[  126.267060][ T9677] gretap3: entered promiscuous mode
[  126.269384][ T9677] gretap3: entered allmulticast mode
[  126.274382][ T9677] bond14: (slave gretap3): Enslaving as an active interface with an up link
[  126.287687][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  126.300857][ T9681] netlink: 'syz.2.1065': attribute type 30 has an invalid length.
[  126.394448][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  126.397826][ T9681] netlink: 'syz.2.1065': attribute type 30 has an invalid length.
[  126.428680][ T9692] gretap0: entered promiscuous mode
[  126.433195][ T9692] gretap0: left promiscuous mode
[  126.587867][ T9697] trusted_key: syz.0.1073 sent an empty control message without MSG_MORE.
[  126.664893][ T9699] syzkaller1: entered promiscuous mode
[  126.667149][ T9699] syzkaller1: entered allmulticast mode
[  127.865101][ T9725] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  128.043738][ T9736] sctp: [Deprecated]: syz.1.1084 (pid 9736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.043738][ T9736] Use struct sctp_sack_info instead
[  128.051309][ T9736] sctp: [Deprecated]: syz.1.1084 (pid 9736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.051309][ T9736] Use struct sctp_sack_info instead
[  128.300632][ T9754] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.317513][ T9754] vxcan6: entered promiscuous mode
[  128.503255][ T9680] Set syz1 is full, maxelem 65536 reached
[  129.177436][ T9818] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address
[  129.184159][ T9818] bond15: (slave vxcan3): Error -95 calling set_mac_address
[  129.204430][ T9822] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  129.234199][ T9824] pimreg: entered promiscuous mode
[  129.236134][ T9824] pimreg: entered allmulticast mode
[  129.588826][ T9849] __nla_validate_parse: 9 callbacks suppressed
[  129.588837][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'.
[  129.620649][ T9849] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  129.626059][ T9849] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  129.675844][ T9850] macvlan3: entered promiscuous mode
[  129.678235][ T9850] macvlan3: entered allmulticast mode
[  129.681131][ T9850] bond16: (slave macvlan3): Error -98 calling set_mac_address
[  129.696804][ T9857] macvlan3: entered promiscuous mode
[  129.698997][ T9857] macvlan3: entered allmulticast mode
[  129.701490][ T9857] bond16: (slave macvlan3): Error -98 calling set_mac_address
[  129.762419][ T9860] sctp: [Deprecated]: syz.2.1120 (pid 9860) Use of int in maxseg socket option.
[  129.762419][ T9860] Use struct sctp_assoc_value instead
[  129.923026][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'.
[  130.626558][ T9885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1130'.
[  130.638833][ T9885] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  130.672848][   T85] wlan0: Trigger new scan to find an IBSS to join
[  130.714243][ T9893] vlan5: entered promiscuous mode
[  130.716600][ T9893] vlan5: entered allmulticast mode
[  130.753592][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'.
[  130.934316][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'.
[  130.975361][ T9904] bridge_slave_0: left allmulticast mode
[  130.977292][ T9904] bridge_slave_0: left promiscuous mode
[  130.979203][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.986513][ T9904] bridge_slave_1: left promiscuous mode
[  130.989188][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.997459][ T9904] veth0_to_bond: left allmulticast mode
[  130.999890][ T9904] veth0_to_bond: left promiscuous mode
[  131.002491][ T9904] bridge41: port 2(veth0_to_bond) entered disabled state
[  131.008803][ T9904] bond0: (slave bond_slave_0): Releasing backup interface
[  131.018073][ T9904] bond0: (slave bond_slave_1): Releasing backup interface
[  131.028821][ T9904] team0: Port device team_slave_0 removed
[  131.034883][ T9904] team0: Port device team_slave_1 removed
[  131.037353][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.040039][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.045019][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.047665][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.058653][ T9904] bond2: (slave wlan0): Releasing active interface
[  131.061576][ T9904] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  131.069881][ T9904] vlan2: entered promiscuous mode
[  131.075657][ T9904] bond2: (slave vlan2): Releasing active interface
[  131.078651][ T9904] vlan2: left promiscuous mode
[  131.088715][ T9904] veth1: left promiscuous mode
[  131.093552][ T9904] bond3: (slave veth3): Releasing active interface
[  131.097751][ T9904] batman_adv: batadv0: Removing interface: ipvlan3
[  131.104953][ T9904] bond7: (slave ip6gretap1): Releasing backup interface
[  131.107822][ T9904] bond7: (slave ip6gretap1): the permanent HWaddr of slave - ba:f7:5b:c5:3d:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  131.119877][ T9904] bond7: (slave veth9): Releasing backup interface
[  131.129102][ T9904] bond8: (slave geneve2): Releasing active interface
[  131.141522][ T9904] veth11: left allmulticast mode
[  131.144229][ T9904] veth11: left promiscuous mode
[  131.145857][ T9904] bridge41: port 1(veth11) entered disabled state
[  131.151454][ T9904] bond10: (slave geneve3): Releasing active interface
[  131.160150][ T9904] bond11: (slave veth15): Releasing backup interface
[  131.170882][ T9904] bond12: (slave bridge43): Releasing active interface
[  131.179381][ T9904] bond13: left allmulticast mode
[  131.181749][ T9904] bridge44: port 1(bond13) entered disabled state
[  131.189219][ T9904] veth17: left allmulticast mode
[  131.191270][ T9904] veth17: left promiscuous mode
[  131.194114][ T9904] bridge45: port 1(veth17) entered disabled state
[  131.198980][ T9904] bond14: (slave gretap3): Releasing active interface
[  131.201474][ T9904] gretap3: left promiscuous mode
[  131.204451][ T9904] gretap3: left allmulticast mode
[  131.249150][ T9907] team0: Failed to send options change via netlink (err -105)
[  131.252566][ T9907] team0: Mode changed to "activebackup"
[  131.255127][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.259401][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.266218][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.271533][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  131.582489][  T436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.679805][ T9926] validate_nla: 7 callbacks suppressed
[  131.679815][ T9926] netlink: 'syz.2.1142': attribute type 1 has an invalid length.
[  131.712732][ T9926] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.718176][ T9926] bond17: (slave vxcan3): Error -95 calling set_mac_address
[  131.764800][ T9936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1142'.
[  131.768233][ T9936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.884413][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1151'.
[  131.890513][ T9953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  131.915339][ T9954] erspan0: left allmulticast mode
[  131.924255][ T9954] ipvlan2: left allmulticast mode
[  131.928370][ T9954] team0: left allmulticast mode
[  131.930423][ T9954] team_slave_0: left allmulticast mode
[  131.933370][ T9954] team_slave_1: left allmulticast mode
[  131.935405][ T9954] bridge2: left allmulticast mode
[  131.937663][ T9954] bond5: left promiscuous mode
[  131.939256][ T9954] bridge5: left promiscuous mode
[  131.943464][ T9954] bond5: left allmulticast mode
[  131.944052][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'.
[  131.945483][ T9954] bridge5: left allmulticast mode
[  131.948482][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'.
[  131.953087][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'.
[  131.960639][ T9954] ip6tnl3: left promiscuous mode
[  131.967812][ T9954] ip6tnl3: left allmulticast mode
[  131.984682][ T9954] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  131.987628][ T9954] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  131.990510][ T9954] macsec2: left promiscuous mode
[  131.993237][ T9954] macsec2: left allmulticast mode
[  131.997335][ T9954] ip6tnl4: left promiscuous mode
[  131.999523][ T9954] ip6tnl4: left allmulticast mode
[  132.007969][ T9954] geneve2: left promiscuous mode
[  132.015214][ T9954] geneve3: left promiscuous mode
[  132.017531][ T9954] geneve3: left allmulticast mode
[  132.030790][ T9954] pimreg: left promiscuous mode
[  132.034415][ T9954] pimreg: left allmulticast mode
[  132.042493][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.046726][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.050334][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  132.056998][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.060944][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.066150][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  132.069787][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.076219][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.079941][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  132.085204][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.088763][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.102595][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  132.138116][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.144410][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.148299][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.155826][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.159783][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.166244][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.170696][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.175099][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.179644][ T9966] netlink: 'syz.2.1154': attribute type 9 has an invalid length.
[  132.596159][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.760082][T10011] chnl_net:caif_netlink_parms(): no params data found
[  134.550272][T10083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.554134][T10083] syzkaller0: entered promiscuous mode
[  134.557263][T10083] syzkaller0: entered allmulticast mode
[  134.612276][T10083] tipc: Resetting bearer <eth:syzkaller0>
[  134.633005][T10082] tipc: Resetting bearer <eth:syzkaller0>
[  134.643618][T10082] tipc: Disabling bearer <eth:syzkaller0>
[  134.890386][T10098] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  134.979153][T10105] __nla_validate_parse: 17 callbacks suppressed
[  134.979164][T10105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'.
[  135.009309][T10107] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1199'.
[  135.103868][T10120] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1204'.
[  135.170461][T10121] IPv6: sit3: Disabled Multicast RS
[  135.226644][T10129] raw_sendmsg: syz.0.1208 forgot to set AF_INET. Fix it!
[  135.531900][T10149] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.042203][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'.
[  136.248467][T10195] netem: incorrect ge model size
[  136.250793][T10195] netem: change failed
[  136.676798][T10221] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.680954][T10221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.687882][T10221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.693484][T10221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  136.747532][T10221] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.751135][T10221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.760447][T10221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.766464][T10221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  136.811322][T10221] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.820638][T10221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.826902][T10221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.830639][T10221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  136.920639][T10221] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.927738][T10221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  136.932311][T10221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.936460][T10221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  136.958096][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  137.059724][ T8105] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.064515][ T8105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  137.067776][ T8105] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  137.070967][ T8105] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  137.089532][ T8105] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.097673][ T8105] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  137.100713][ T8105] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  137.104376][ T8105] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  137.145018][ T8105] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.149390][ T8105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  137.156504][ T8105] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  137.159449][ T8105] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  137.162197][ T8105] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.165374][ T8105] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  137.168579][ T8105] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  137.171524][ T8105] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  137.238282][T10244] validate_nla: 6 callbacks suppressed
[  137.238294][T10244] netlink: 'syz.1.1243': attribute type 2 has an invalid length.
[  137.268663][T10244] : entered promiscuous mode
[  137.369182][T10249] wg1 speed is unknown, defaulting to 1000
[  137.372187][T10249] wg1 speed is unknown, defaulting to 1000
[  137.380350][T10249] wg1 speed is unknown, defaulting to 1000
[  137.397098][T10249] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  137.434536][T10249] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  137.496820][T10249] wg1 speed is unknown, defaulting to 1000
[  137.499725][T10249] wg1 speed is unknown, defaulting to 1000
[  137.540152][T10249] wg1 speed is unknown, defaulting to 1000
[  137.822247][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'.
[  137.981443][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'.
[  138.004900][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'.
[  138.014622][T10295] netlink: 'syz.0.1258': attribute type 1 has an invalid length.
[  138.110093][T10309] netlink: 'syz.0.1263': attribute type 1 has an invalid length.
[  138.160207][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'.
[  138.285041][T10323] netlink: 'syz.2.1268': attribute type 1 has an invalid length.
[  138.328230][T10323] 8021q: adding VLAN 0 to HW filter on device bond19
[  138.388700][T10324] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.1266'.
[  138.390521][T10333] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  138.398675][T10333] openvswitch: netlink: Duplicate key (type 0).
[  138.410414][T10324] batadv1: entered allmulticast mode
[  138.415090][T10324] 8021q: adding VLAN 0 to HW filter on device batadv1
[  138.630214][T10356] netlink: 'syz.2.1277': attribute type 30 has an invalid length.
[  138.649177][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.654596][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.657727][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.661435][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.339354][T10382] syzkaller1: entered promiscuous mode
[  139.341433][T10382] syzkaller1: entered allmulticast mode
[  139.644910][T10403] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  139.691067][T10407] netlink: 'syz.1.1293': attribute type 1 has an invalid length.
[  139.737258][T10407] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  139.745967][T10407] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  139.777893][T10410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.204438][T10435] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  140.209690][T10435] macsec1: entered promiscuous mode
[  140.216974][T10435] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  140.514693][T10456] IPv6: Can't replace route, no match found
[  140.868451][T10474] netlink: 'syz.2.1309': attribute type 8 has an invalid length.
[  140.871539][T10474] __nla_validate_parse: 7 callbacks suppressed
[  140.871551][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  141.046419][T10479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1311'.
[  141.119673][T10481] wg1 speed is unknown, defaulting to 1000
[  141.367942][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1313'.
[  141.466603][T10489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1314'.
[  141.934118][T10499] netlink: 'syz.0.1317': attribute type 1 has an invalid length.
[  141.948544][T10499] 8021q: adding VLAN 0 to HW filter on device bond12
[  141.979042][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'.
[  143.001298][T10578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.166167][T10591] netlink: 'syz.1.1340': attribute type 4 has an invalid length.
[  143.485548][T10619] netlink: 'syz.2.1346': attribute type 6 has an invalid length.
[  143.498097][T10622] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  143.510188][T10624] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  143.535896][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1349'.
[  143.659808][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1354'.
[  143.744290][T10643] netlink: 'syz.2.1355': attribute type 21 has an invalid length.
[  143.747224][T10643] gretap0: Device is already in use.
[  143.810787][T10649] wg1 speed is unknown, defaulting to 1000
[  143.834579][T10651] wg1 speed is unknown, defaulting to 1000
[  143.977243][T10669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1362'.
[  144.076579][T10676] tc_dump_action: action bad kind
[  144.087037][T10678] netlink: 'syz.0.1365': attribute type 1 has an invalid length.
[  144.136592][T10680] netlink: 'syz.0.1366': attribute type 5 has an invalid length.
[  144.658924][T10703] tipc: Enabling of bearer <ib:dvmrp1> rejected, failed to enable media
[  144.667300][T10703] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1374'.
[  144.860153][T10718] xt_time: invalid argument - start or stop time greater than 23:59:59
[  145.085662][T10741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1386'.
[  145.094913][T10741] gretap0: entered promiscuous mode
[  145.099916][T10741] gretap0: left promiscuous mode
[  145.808413][T10799] bridge0: port 1(batadv2) entered blocking state
[  145.811286][T10799] bridge0: port 1(batadv2) entered disabled state
[  145.816502][T10799] batadv2: entered allmulticast mode
[  145.822788][T10799] batadv2: entered promiscuous mode
[  145.984142][T10816] __nla_validate_parse: 5 callbacks suppressed
[  145.984156][T10816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1411'.
[  146.302491][ T6167] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  146.305737][ T6167] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  147.290120][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1425'.
[  147.301184][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1424'.
[  147.359917][T10873] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1428'.
[  147.370616][T10873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1428'.
[  147.477556][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'.
[  147.574444][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'.
[  147.590940][T10888] bridge46: entered promiscuous mode
[  147.593551][T10888] bridge46: entered allmulticast mode
[  147.599637][T10888] team0: Port device bridge46 added
[  147.691121][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1434'.
[  148.067585][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1443'.
[  148.306961][T10935] sctp: [Deprecated]: syz.0.1448 (pid 10935) Use of int in maxseg socket option.
[  148.306961][T10935] Use struct sctp_assoc_value instead
[  148.307447][T10934] netlink: 'syz.2.1449': attribute type 10 has an invalid length.
[  148.320852][T10934] netlink: 'syz.2.1449': attribute type 10 has an invalid length.
[  148.330810][T10934] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  148.354308][    T9] syz_tun: tun_net_xmit 130
[  148.442159][    T9] syz_tun: tun_net_xmit 110
[  148.477190][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'.
[  148.481294][T10940] netlink: 'syz.2.1451': attribute type 12 has an invalid length.
[  148.485345][T10940] netlink: 'syz.2.1451': attribute type 14 has an invalid length.
[  148.603409][T10952] netlink: 'syz.2.1454': attribute type 1 has an invalid length.
[  148.636130][T10954] netlink: 'syz.0.1455': attribute type 1 has an invalid length.
[  148.786160][T10967] wg1 speed is unknown, defaulting to 1000
[  148.789800][T10966] wg1 speed is unknown, defaulting to 1000
[  148.902209][T10979] netlink: 'syz.1.1460': attribute type 32 has an invalid length.
[  148.957734][T10983] netlink: 'syz.0.1461': attribute type 30 has an invalid length.
[  149.402795][T11013] wg1 speed is unknown, defaulting to 1000
[  150.065064][T11049] netlink: 'syz.0.1477': attribute type 4 has an invalid length.
[  150.129757][T11050] netlink: 'syz.0.1477': attribute type 4 has an invalid length.
[  150.414960][T11029] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  150.419865][T11029] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  150.424420][T11029] CPU: 1 UID: 0 PID: 11029 Comm: syz.2.1471 Not tainted syzkaller #0 PREEMPT(full) 
[  150.428368][T11029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.432694][T11029] RIP: 0010:rose_transmit_link+0x32/0x740
[  150.435143][T11029] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 89 f7 52 f7 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  150.443211][T11029] RSP: 0018:ffffc90007627910 EFLAGS: 00010207
[  150.445846][T11029] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888106995640
[  150.449258][T11029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810ab40000
[  150.452687][T11029] RBP: 0000000000000000 R08: ffff888106995640 R09: 0000000000000008
[  150.455980][T11029] R10: 000000000000000f R11: 0000000000000000 R12: ffff88810ab40000
[  150.459337][T11029] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036
[  150.462691][T11029] FS:  00007f61381666c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  150.466434][T11029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.469062][T11029] CR2: 0000000000000000 CR3: 0000000122a2e000 CR4: 00000000000006f0
[  150.472359][T11029] Call Trace:
[  150.473867][T11029]  <TASK>
[  150.475181][T11029]  ? skb_put+0x11b/0x210
[  150.476937][T11029]  rose_write_internal+0x11dc/0x1ac0
[  150.479149][T11029]  ? __pfx_rose_write_internal+0x10/0x10
[  150.481550][T11029]  ? __timer_delete+0x5d/0x390
[  150.483636][T11029]  rose_release+0x236/0x4e0
[  150.485624][T11029]  sock_close+0xc3/0x240
[  150.487428][T11029]  ? __pfx_sock_close+0x10/0x10
[  150.489511][T11029]  __fput+0x44c/0xa70
[  150.491207][T11029]  task_work_run+0x1d4/0x260
[  150.493198][T11029]  ? __pfx_task_work_run+0x10/0x10
[  150.495422][T11029]  ? task_work_add+0x377/0x420
[  150.497494][T11029]  ? __pfx_task_work_add+0x10/0x10
[  150.499718][T11029]  get_signal+0x11ed/0x1340
[  150.501720][T11029]  arch_do_signal_or_restart+0x9a/0x750
[  150.504094][T11029]  ? __pfx___sys_connect+0x10/0x10
[  150.506284][T11029]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  150.508915][T11029]  ? exit_to_user_mode_loop+0x40/0x110
[  150.511266][T11029]  exit_to_user_mode_loop+0x75/0x110
[  150.513516][T11029]  do_syscall_64+0x2bd/0x3b0
[  150.515488][T11029]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.517735][T11029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.520268][T11029]  ? exc_page_fault+0x9f/0xf0
[  150.522285][T11029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.524745][T11029] RIP: 0033:0x7f613738ebe9
[  150.526683][T11029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.534870][T11029] RSP: 002b:00007f6138166038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  150.538417][T11029] RAX: 0000000000000000 RBX: 00007f61375c6090 RCX: 00007f613738ebe9
[  150.541683][T11029] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[  150.545019][T11029] RBP: 00007f6137411e19 R08: 0000000000000000 R09: 0000000000000000
[  150.548391][T11029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.551710][T11029] R13: 00007f61375c6128 R14: 00007f61375c6090 R15: 00007ffd48d990f8
[  150.554893][T11029]  </TASK>
[  150.556208][T11029] Modules linked in:
[  150.558863][T11029] ---[ end trace 0000000000000000 ]---
[  150.562992][T11029] RIP: 0010:rose_transmit_link+0x32/0x740
[  150.566098][T11029] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 89 f7 52 f7 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  150.573776][T11029] RSP: 0018:ffffc90007627910 EFLAGS: 00010207
[  150.575962][T11029] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888106995640
[  150.579374][T11029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810ab40000
[  150.582973][T11029] RBP: 0000000000000000 R08: ffff888106995640 R09: 0000000000000008
[  150.587024][T11029] R10: 000000000000000f R11: 0000000000000000 R12: ffff88810ab40000
[  150.590036][T11029] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036
[  150.593391][T11029] FS:  00007f61381666c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  150.596704][T11029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.598942][T11029] CR2: 000055558ba2f5c8 CR3: 0000000122a2e000 CR4: 00000000000006f0
[  150.601639][T11029] Kernel panic - not syncing: Fatal exception
[  150.604373][T11029] Kernel Offset: disabled
[  150.605873][T11029] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:16:01  Registers:
info registers vcpu 0

CPU#0
RAX=d606d8857038a400 RBX=ffffffff819683c8 RCX=d606d8857038a400 RDX=0000000000000001
RSI=ffffffff8be337e0 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005622a1138600 CR3=0000000037ac4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=3231f90000000000 0406000000000000 XMM03=0d00ad0004000400 1900000025000000
XMM04=00007fde64efd100 00007fde64397460 XMM05=00007fde64397478 00007fde643974c0
XMM06=00007fde643974b8 00007fde643974b0 XMM07=00007fde643974a8 00007fde643974a0
XMM08=0000000000000000 00007fde64212ee7 XMM09=0000000000000000 00007fde64212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007627150
R8 =ffff888107470237 R9 =1ffff11020e8e046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd905 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f61381666c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000122a2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000030717062
XMM02=00007f6137597498 00007f6137597470 XMM03=00007f61375974a8 00007f61375974a0
XMM04=00007f61380fd100 00007f6137597460 XMM05=00007f6137597478 00007f61375974c0
XMM06=00007f61375974b8 00007f61375974b0 XMM07=00007f61375974a8 00007f61375974a0
XMM08=0000000000000000 00007f6137412ee7 XMM09=0000000000000000 00007f6137412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
