last executing test programs:

3m10.739775755s ago: executing program 0 (id=6126):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x2d, 0x0, &(0x7f00000000c0))
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'pim6reg1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x0, 0x3}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, 0x0, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x140, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc5da7fa126835e4e7be322bd1467f8274504aefeacd6ca4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d43facff6ed4bd6ccf206552d3f3cccf1f9e4666829e955"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fa30b161b0333fc66e06ccfd3df42b201b5a7d06d8eac50c"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x140}, 0x1, 0x0, 0x0, 0x20000001}, 0x800)
socket$alg(0x26, 0x5, 0x0)

3m10.66903976s ago: executing program 0 (id=6129):
r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) (async)
accept4(r1, 0x0, 0x0, 0x800) (async)
accept(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

3m10.662565516s ago: executing program 0 (id=6131):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="40ee5a61dd246a5ec0fb2ad87700d1d139277e58703c44d2f0666f599a84dc533a168d42c3922e4b3e9cf8bb6d47839bda6108f2", @ANYRESDEC=r2, @ANYRESHEX=r2], 0x7c}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3000000000080004400000000a080009400000200308000340000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}, @CGW_DST_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x3, 0x3, 0x0, 0x0, "918a76e1efa19e91"}, 0x2}}, @CGW_SRC_IF={0x8}]}, 0x44}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'pimreg0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9be4a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b682159a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

3m10.606005451s ago: executing program 2 (id=6134):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000005c0)='e', 0x1}], 0x1}}], 0x1, 0x4000)
shutdown(r0, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)

3m10.573876717s ago: executing program 2 (id=6136):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f0000000e00), 0x12)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
close(0x3)

3m10.5206693s ago: executing program 2 (id=6137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) (async)
sendmsg$kcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000380)="e23e7aa875a4c1e3de1e3c3cc790c4ced36e27929ad979105a2429e17799c0b9b72da10b5d3881558bfd17b2182aa9a4f41defead0bc7e2b5d37d5def81c9c0dae68fda530ed3fee3694a28f365be625a57bd416ec6f94017978a5edea359d1ada15fcf60f6c2a32226817582f0691f3cc378cef33df02d13594dc52e0e83d1640b9e230a4b0fa1b57808e1246d228d41fe91d6c29c3449f3d13ef926eecdff7ef51cbb079d8d5b6388f729b14428406cfea86c55878221f5824450044847e2cd8", 0xc1}, {&(0x7f0000000480)="ee8a570e4b62a82735d2b591ed6bb5110665a03683252f24d504ff77ff79615d45847de0eb9b9bc7d9d6d0d1286fdcaf6151e9f78359347745f47652e75a1f1a359a5481551b0cf3934693db25b54f5fb23d9e60ee63f864d98584163bdf9edbffadc9f387212679767268ebf62436fdc28b42ce57c24d3c92401fbfef8978d2d15e9b6ae1192265bd91fdd3290ecad034df2390848ef71a7f", 0x99}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="b74075f5c202afc0cbbfab441bd56eb83e307268e0599050e14a12c1af169ec593bd56aef4a181f644ce9661213ef97233a7e031fe843fef10d329da7e320efb9b73cbf7241cd31d228a79e8c7805711bdec3fe8260bf969e209f7f77438f4d237330d4982e4226c76b10fefb31cc05514e5c0a4ffaa1dd2897b362dfb7bc3af449089d1049f8a698803179ac3a995c6201de407ea7ada8612f759ff0685629b0826bc", 0xa3}, {&(0x7f0000000700)="ed626f26fef3bc85eb0bd91a8c09b174e82fa702db7e3c051d1029d50569aaf9b995acc8fc703544d6d8980d7190ffcda9106785d1e5042a0b8d3a29e82b21ed3b8abacc813ec54e2e8952cd9969f6b8b6bb8fc5a7c5a55f7b1c4fa0a38e968f06567f4792ca1277956003697d1355b165a825a444305a56b40d943ddd3c5b677ab7c958bc7bada63ad4c25648987d4c64cf32d70eb62110c7714405057b9cdf9e6254cd6526ada740d9cccf52ef88a9aaca37a2d77ae8582c", 0xb9}, {&(0x7f00000007c0)="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", 0x1000}], 0x6, &(0x7f0000001840)=[{0x108, 0x112, 0x5, "1e6c443eb38a2f51b5e70625a8bf2122013a53ca40723839f25a481edbdb773a44c2ee6173c62ff3e149078d41bb61023f2576d6fa2c3e25928f4f726c536e569d77255d5d9d1f343499f20919b3f4eb377dcaddc3290fa2a9a766118284d66824c4966b6710ef90b625568df403c18af99a79f31eb59a032692aabd2fb85c9d7f93f09d17b786d1363cc8d479fc85a08c698a8a38bcc360f5a2ba28d61779c88e57086bac38a8b11b1eaf7b0973a1ca676b7486fb5f2d14cabfd49dcf89ce107261fc24b7e455bd85c92ad10d2125bf478ef5477816ea5b937911a1a2c0396657ae7fc68c4a1e6ebced16943ee6111593cd"}, {0xd8, 0x109, 0x2, "d7daca9ec8b7ddbb7746dca82e07c9a62347c8ed0e01fab80c8a4726fc98111f6a4375d95dd2ce6e5ea28a1f816af09ec865e5177c9ccd30b4eb9664716d244d9a03aa928a167b1e939bb4444eeddf279e495480a7b3f987b8e41ab9040565a3eb2d1689615c31d2cc3d67177cf90a7db1c90e9fa8d030176e6cda8eb49fd3cb007ad9b1b45147cc8ad1ea2b65cba1429a10990f71683508be94c959705248baa90bb27c3b0336589e90f6ac05c2cda8f38795457a28bda8ab0b382f91bd932cb101f9f4b2"}, {0xb8, 0x107, 0x7ff, "d7869defe3f887111155d7ecb17b5ef56a72122c6b3672fff580c413826e1c2088a98826c9727cc6d473b7844ecb6e2c1f19755d93b3703dd76d57184c0912c8168d7cb483284e704424b600acda595939e0684185d8cbf07df10ba6d45c2a9f9bf9ca885cebf23171efd3b3af6af50157a7eedb0d973f77a6267a6533bed718b5f0d0492aafa7f69ef42345615012b9d53b73ececf1ad12e835cfa10a2a0e630d4f17c4b527"}], 0x298}, 0x4000) (async, rerun: 32)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x400, @mcast1={0xff, 0x7}}}, {{0xa, 0xffff, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0xd4, 0x30, 0x9, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_mpls={0xbc, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x90, 0x4, "aa0d04c256c75adbd5fc65d7de7708f09fb68aa03bba653dfabcb2cc2a5a9c49b9b7f617c6886bb045d72660fd633cfc39911158583381f53efde10fe87620a6dddf30b3eb52373831cadbf223632287ca38754aa98b5af86713026a2f781dc8100fd7466151bc8f160ce580544cd480b3a50c15a105c5d24153d7fc6bd184f47cb456c1ac4811823baa1ab8"}, {0xc}, {0xc}}}]}]}, 0xd4}}, 0x0) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={<r3=>r0})
setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f00000001c0), 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000200)) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240), 0x10)

3m10.424816178s ago: executing program 2 (id=6139):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000500), 0x0}, 0x20)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000400)=0x2, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b7080000000000007b8af8ff000000d4f4cb5dc1d5083033bcc728e500b7080000ff0f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0x5}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000053", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780002"], 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x32, 0x40, 0x66, 0x0, 0x81, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x3, 0x2, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x8, 0x1, 0x4e21, 0x4e21}, 0x3, 0x3}, 0x0, 0x1}, 0x1}}}}}}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES32=r1, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0805}, 0x0)
setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000300)="c4ae3f71d2719dc20d12d3824dbae1dbe9a2c4f61af5688917e00e2bc50edf417b98f1e9df5bbf716c5804e3c61d6a3874f8afecfcecd920562e5386152cd31c46fbcee728d27e2347dec80f8a13c94d9eb14ac442f87d8c8685d0fd590a92451229abcb0a40bf4b3df25796651cb6966c4b0e1eb3eeec45cb1427741f5e4d8410f5c501bdac65a205ed48d0f5e92cf70e4a91de25ebf12b6cc26c5fae817d10762f280e94d4cb88618063e1fb275be3a67d9b8239c3f5417a6cfd6ccafd354d2c7a7d5a35ce2f928536401170a9f3c500", 0xd1)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x61, &(0x7f0000000180)="883476eb610febd21dfa39dd2e7fa6ba66db469593ac370a05303e87ae93fba0eb24bc49881556007f6da3bdf5842bf0bdf1fa46efc47a481072e791025885cc7b8b07539ebbd544b0a1be220eda3556b81050c5d553e505e12d5e24e41f42e819", 0x57, 0x0, &(0x7f0000000200)="83505a68ba9fe12303b1cb89b5a8b26c6512a62dfeec80795eae8fa816c1554d7e5e17e9acbf16c0a78a1764a7d38849a0235d020eeafe8175aec2817e73f7ef0136207650d293fb63d64bcc7c3f6fad48863d77c83cd0"})
ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0)
r10 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(r10, 0x6a, 0x10, 0x0, &(0x7f0000000080))
ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0x4008af21, &(0x7f0000000000)={0x1, 0x2005, 0x5, 0xc65a, 0x6, 0x0, [{0x6, 0x8, 0x1, '\x00', 0x140a}, {0x7, 0xda, 0x3, '\x00', 0x4}, {0x5, 0xa, 0x10001, '\x00', 0xe8e0f3a21c679b7e}, {0xd3, 0x6, 0x1dc, '\x00', 0x1207}, {0x10003, 0x63, 0xb, '\x00', 0x4}, {0x8, 0x9, 0xfffffffffffffffa}]})

3m10.424010472s ago: executing program 0 (id=6140):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async, rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCGSKNS(r2, 0x894c, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r5=>0x0}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000004000001000000010000007231a20bf63e42f2fdf8cdf833a8b8fcecadf69a2b2c8aadedd9a4582c025de0e062f32be487b63b1990126548264cf69c12e07b04857c62227489e5f608d3a54110aa2b44fb0297fe65c0777d8cc43b1b40da9e5ef701fc84c80519b413f71acdf1eabe09825a35e7b744b1696e3a332cf145385e83a1f241dfa6aaa3738c0b0adaea629480d90f136ed3ba33f06373bbe2d965b31890cac83576b245be3ea3e7e1c2651fbb482ecfeafc4df9333198a8e58badee2b52480ecd54ca87b3a626f82a389d59aa65cd0d8f75056c77f6e95981e139b1abf2840ab4adbf211a45202c803071c85d747518", @ANYRES32=r6, @ANYRES32=r6], 0x18}, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000500)=0x1, 0x4) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000b40)={0xb0, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x41015) (async, rerun: 64)
recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0xfd}, 0x0) (rerun: 64)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r9], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xfff1}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)=ANY=[@ANYBLOB="53002a44f3f764e3283780998124eb167391e4353f0399bb9465ca447e5883", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async)
r10 = socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 32)
unshare(0x20020600) (async, rerun: 32)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r13=>0x0})
connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) (async)
sendmsg$can_bcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000230900000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000400000000180000000000005c91440132bb112240fcbcc3fa9d0431795f8614d3538ce09c50eecd6ac579a8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x20000091) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r11, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) (async)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

3m10.319441519s ago: executing program 0 (id=6141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x47, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="480000001000210400000000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800b00010067656e65766500001800028003000600060005004e24000005000800010000002fe0b0bb9b265e55ec3fb050798f4dcd41fcfaf7127e859efa9760ec1b669f575e924fbbc622c05c9abff085226840a042167cb70f4c51d721a4c45fb48dde4224a7e943646dfb752987e9d512d654c511962c340cfe60eceab6e8835fa4fb616b87171954c155b991549ef01b3e274da221929140be0a2ecc611e096e12550d666a14d01e3e8353f7b395ff20f8e821a37ca279cde4b340d888b91bf28addb584e97a"], 0x48}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3800000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000200", @ANYRES32=r6, @ANYBLOB="a55b5f1cb3fe88c6f94eeb46f4c919bb40054d198111bfe948b586a244bef5fde012c22c9cba4e9be3f9e4e8a4921bfc85349561a50d601bef3cac93de139930a727522578424bd4ea70aacbb1363db0abcb5447a0e27421ab2cd9915e8305045a0d5824afc694a3e69ec1d2eebbfa7ac95867088dfd0918f60862fa73d61842138d37fd65c07a7489876921b17afd872b54fec7e1b13cae6851d10c4f3373032a403222eec76bfca7f512f166cff0b4e32be7e2eeb3afef8b55b96995d7e2db7c271b7ef46e16e0"], 0x38}, 0x1, 0xba01}, 0x0)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @rand_addr=' \x01\x00', 0x80800}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="a00000000000000029"], 0xa0}, 0xc0)
listen(r2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r9, 0x89e1, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x800)
nanosleep(&(0x7f0000000340), &(0x7f0000000580))
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000cc0), 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000ec0)={0x0, 0xb, @status={[0x81, 0x4, 0xfffffffffffffffe, 0x2, 0x3, 0x10001]}, [0x7f, 0x3, 0x5, 0x101, 0x10000000000, 0x400, 0x6, 0x8, 0x8, 0xf, 0x9c1, 0x15, 0x37, 0x6, 0x6, 0x4, 0x5, 0x4, 0x3, 0x3, 0x4401, 0x7fffffff, 0x7b2, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x59, 0xfffffffffffffff1, 0x7, 0x4, 0x50e, 0x9, 0x6, 0x4, 0x439, 0x1c, 0x8001, 0xece4, 0x6, 0xfffffffffffffdee, 0x7, 0x6, 0x4, 0x1009, 0x4, 0x9, 0x711e, 0x0, 0x3, 0x466, 0x30, 0x5, 0xffffffffffffcf27, 0x100, 0xfffffffffffffff9, 0x22d, 0x7, 0x5, 0x8, 0x10000, 0xcc9, 0x6420, 0xc]})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20)

3m10.319042054s ago: executing program 2 (id=6142):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x513, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}]}, 0x30}, 0x1, 0xefff}, 0x4080)

3m10.189305485s ago: executing program 0 (id=6144):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="2e0000f6fffff0ffffffff00000000009500000000040001"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000280)={'wlan1\x00', @remote})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000340)={0x3, 'vlan1\x00', {0x44}, 0x400})
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4)
accept(r5, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

3m10.054610721s ago: executing program 32 (id=6144):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="2e0000f6fffff0ffffffff00000000009500000000040001"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000280)={'wlan1\x00', @remote})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000340)={0x3, 'vlan1\x00', {0x44}, 0x400})
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4)
accept(r5, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

3m9.999064904s ago: executing program 2 (id=6148):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x80002005})
close(0x3)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

3m9.942402966s ago: executing program 33 (id=6148):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x80002005})
close(0x3)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

2.488579821s ago: executing program 4 (id=9290):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x200000000000001)
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x0)
write(r1, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b002c000000080001000000000008004f00000000000800150004000000080003"], 0x38}}, 0x80)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

2.39957966s ago: executing program 4 (id=9294):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x4}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0xc10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x2, [@datasec={0x4, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x0, 0x8}], 'I'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d5"}]}}, 0x0, 0x42}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r8)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "f479e882c3e931dd61be7051fd00ca44fb7e53f12164b38200f8bd57a800", "d4397f9ade4adce869555b9e87c4e38039149fe43b13d3074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x0, 0x7}})

1.499778848s ago: executing program 4 (id=9304):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_sync_fs\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18)
r5 = socket(0x2, 0x3, 0x2)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39)
setsockopt(r5, 0xff, 0x1, &(0x7f0000000100)='O', 0x1)
syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0)
recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000240)=@tipc=@name, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000300)=""/215, 0xd7}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f0000000500)=""/253, 0xfd}], 0x4, &(0x7f0000000640)=""/133, 0x85}, 0x2002)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r4, 0x0, 0x6, &(0x7f00000001c0)='wlan1\x00'}, 0x30)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

1.409167196s ago: executing program 3 (id=9306):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0c4acb1fe0a5d7b6fc93e77bc86a5e3c473db6ac594d6e6cfe74fef79e1c4a1556c39fa480c21e02097613f48b9c400362d504a502aa954ea94b880288a1", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES16=r2], 0x50)

1.350691018s ago: executing program 3 (id=9307):
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2c, 0xfffffffffffffffe, &(0x7f0000000080)=0x16)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c009ee607ad93b591c7c2e410bd96f267ae80f6f870", @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc, 0x80000000, 0x0, 0x800}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@remote, 0x0, 0x33}, 0x2, @in=@local, 0x0, 0x7, 0x0, 0xb7, 0xffffffff, 0x0, 0x9}}, 0xe8)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

1.350278467s ago: executing program 3 (id=9308):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000007c99e1e40000000000000000e62822500c3937e3ab651a79e863495459a678533a95870dfb6e0f07527b2ce9b7b186b651c9b55eb1a1c9e49368dfaca19e5a1b4541a794f8a4f65e28beca3fc107c1d0b135cb574cac55a4", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000ffe1f1745ddecfb55ad62d9ba1", @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090800000000005509010080ffffff9500000000000000851000000000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4ae5000000"], 0x48)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3e3}], 0x1, 0x9)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010021ff000091002cc1c247b3040800020002800000"], 0x1c}, 0x1, 0x0, 0x0, 0xaa34a4cfdf973201}, 0x73af1fa8ecf9c2b9)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600080004000000070000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000001580)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="000000000c000000cd39e2a7cfd6b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b734d099c896911ae10000000300000095", @ANYRES8=0x0, @ANYRESHEX], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB="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", @ANYRES64=r3, @ANYRES16=r2], 0x50)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000740)={0xe00, 0x8e, 0xf, 0x3, 0x9})
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc010}, 0x11)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001480)={'syzkaller1\x00', 0x1000})
write(r6, &(0x7f0000000340)="bf259cb1db4ee6e213892300e5557e627ece49fec67619a39761475713fdcc03b7745d3597cbfb129370c93a8daf488399d1e58cda38b211ee73ad50f088f1bff9ce227dc88562a66d23c18218e20ebe8d18eb6dd9ef613cd710b271c90b0dde86dc3b53ae0e45328477445033582da9535ca80b91f00e84f0bf532d8a9294c0ba9227df11c5d21a3540acfd633a6dcc68a74a6f791affa26d9b6a82c3805d7f9fac8861a640b80b07f7f6531e0728bc29c0c07b2bb456e31d7f8143fc59f0a9293ce6e94cc9efa035c812618f4da305138ce3ef960093349583468581eecd2c06ac5242be61b1eb52c566044d13792b03481a6715b89117602cfbefc77c9931ba84b4e5abc32e866ebf34547c221f163a404be560acf33346107ef817102c1be8481c8d8d8482ce76742da59342aa9168ad3f7389717a53ca439b213e82081bdbf28b6719a8249749e674dd9f3f64f5da618131c74622eb082710f13a8672d9eceb17cbafb79d0b0e0f7da66f01dda429fce96943deccffdbe7ca7e3bf7b4d5aa7fb36f0fc78f94402055d436466757021158db8d6a651829e949a38208e5c5cf59ec6bafd56b06da65c37c5eb408ef11754fdadd025f66ff31857bbb43dc44dcf326a99da0e0bc3bf17d983d64d5a9852cc66f44292aaad25fbdf3b7e58c19f414c498d087bf1c8a2d980f40bb2526998ff84b50c94647d27ba17c80036386da13487c552d90d35b32e096e79647f8df1dd57e23f01f6406b3068b5ecf7f7f7c1d8e05fb974f38ec8d036bffdb24f21c1d688a8e67dfd495b064bbc691348f7e07f5084ffe3d6ed181e34d784d0be84c5611a60874131a781a1eeacb2c23241a77125c7fad2835742b28f547b9e9f0a735e9de41c95a346c556690a33c059418863281353ff1606fa422572d837a4da68f0b8ea7c2d87e08ed70455d28056126258f2161f011d33ceb6b618690c772ddbbc7c65a101242178cd68d876c938ecc4dc9fde92234e4dd4381b9d4e9ec30a185feb899ab24d07c8f1e072bd1248f3cac0bd83516445feb7f5c202e24b2f4c03f843db2d0292cb8f5af5c909e3bc4d321f09f8b09d54e3ec8cebf83a8bf8c469a8e7430ab11ae53dd76ddefd8407035c50622471390552c181495d901d4920c600d25058fcbe5bc3312845acc082b9e6e6027eb40533299fbb5b2ce3fbd37d7996f0ac0e0169e9bcd71abc9127fc56d013cbd6936fa82d9ad6e9a0cea435e64655c720973e16f45f2243f0673d5d239c4c37763c397d1a899fbfad24dcd6e4258fabbf3af93bba40bc661da359f564031f62437cc5922657ccb0f84c11de0c3a756566783db19fa4cdda6e8f869b35ef586767df71b20529432468e6411bc8ab6b70ddcb6210fcba8c1bcb088bf96b054f40e7f294064f0d164554e932927a0948899429a2f6d483422df2913ea814eadaa33121ed703917b710e11988e4c3922fccea1eb6fd47fc4438a0260ed9c806d432c1410684ca0d075b341c581c69dfb354a4b72be62b5e90ccc7b651ac9a7d0f8deacc4ac5512554353407ff3a1ba96b9b0f0328725ad3a7836b531c6974a1f15c43851b471d17b635842110a5ee2428060ad899b0036df39cd698b69c07cf36a580a59abcdfc485e241b2b65f1f0a14e52df42972c820d54c18c06dd4c75386049ba311e653d88593eaee51debad52d8ff994ae6d23c8366963ca8e63857d504d60390b8504522422460d2e911e948d3c73fd82c8776b924d68294f92942bd38ec4ccd1791b4eeffee402bd66526bce39cd058a848526016c17e54f54f4c30b5e98a546e6b59b495a96ff086c83c157305432561ee906808f87ba4265a9a031fe6f0d5cf4d17017d1773ee918e217e26ddd839e1e4dbbfd8a1846654bd72a8d36b618fd1a9e1110a3af12d5adb092b0eabaed5f1644bc2b1d3f27b44c6c2ab3545b9c680c6ee7bfafbdf75be0d31d89445704900074f4758533083814024e964c8733ddec7194a7512ce3e1e7621891870e8d63e68000fcdb9f12357035f50c83a923274312837bf2300493eb4e5e542212ad0cfb932ae3422502eab8aede910413693cdbf7fab1e728080074a9eb4480d49e4fffe436a62489835a422d5acc0378ad7a9d42171b3f72450023b813d782b9ce089bb9c7a4fda24df8217971de11a682a7a0dc41d709b839b35b8f6a3861c6d666e69b7365b7da2d9a3e5bdc28bf1fc5f45b382c3ae975d8c60b1115111fc9d11e59bf5d9be2ea0328541e3168da507189ed1b53f142734ae8ef551fb42160590fd1add04f0334edbafa889b45e21ca86d982e0bcd0c26b80c87ee8bf79d730299aff8a3205fc5bcc123e7a7505a956d895a0d8c4fa9a18b2491e3b5a34b03a31a093b12517f078e907c5471a67c434942b51bd43630d39e5c4129a1901b96c1958216ba06d7555c7e088d3fbaa7b72de42a035950776335b8d8dcd6d49bdcbd294039fb87888fdea40833d090d5267f5b2fc47a28e7e74fd2794c324fe9f7922032ce276333ffe019d7773e286335cbb45c644f5b8febf42cb2f696f1d7a654ffcb6912ab3ac4469d48c8dfa798aac25b6b38cfa5bbc508beb8c2e918acbc928e7bb6da799302b56b6a36e493e5dc9b4a3998af5c7ff597698abfdc7b25dfdaf60f032cc00927c29fdda2507e4cc6a74fc56cf73ad6023d4a3ecbdfdb9a2462b7569ebe8b44c6692db628108a56aad0076b101074979ebec5b34bda053dde238bd715fb1657f016d6fbcc70fc5953f0bda81a5bb5f081ed3c511f155c5169925f977136e1755897dab87bdd05eba7fecdf469d659b4ceb14d4126068411ac473e691e88ee937fab59bb1773235bcfba999ad4e14cb47c61c61610d5579f528a55db20b145b7fa1cb0187e48c5e90d1ee532b63a29934893cb5835db603b1042c7577757818092c6acdb81879b1530d330f7c62af9d342c4bb37241d508c36fac24f91def43f3f1f4adc039eec814a273fd082d209ebd812d9237e0e774da3d52703f14d9cfecdfdb8d30c8dfe11b8778bd250da368842eb1e1f47eac235132d8ddb48d2af15039c7ba61ae49eeb5028bdff72c998012d9c744ecb39204437c929c6c8abf36e9ab712e3e4a4a465af5800a72b174d99a2d8f63c1b70925cb263d26b88696eeade4cd7b4fc55076909d72a8d933e43183d551fb944737a78ee419ec6a78a262f719fd534f88661198f35a13bf56e32901e943d4d60cabe26fee9b3d4bd365054431cee1a87c751aae8954f71bf66e22956466dd9ca0e545caaa2a10bfcbd117effb69c4897e0732768f46ccaa0c7cee4c64b9f89a2661377c25a236ae35db379b1e6dcef17b4e286fb821a86b9bac6db7f1198971e5388d4237a69fe07e60609dbf1ea50619671ad1968319b435cdd78e2eaa0af7a0e559476a842f4e50c14faced023e6feff736d077e88b69aee9e741db2453e8f33915b8dee9474c9fc5caac688f6ab235f1f0cef71f2c266152be8f60441c2c05fda8440a56713c3fb20655c32b6a88c89cd68f3f2294f52c34f7118288b9394c7ef3bdbb12dc93c2e8319816b0b37d9deda1558f5bcbed72c21b4ee4743110f0db43f4d0b0cc7270bc622a6e59009ce5d241227bc91de206336d2417f7dfd3fd418cb4d383cb0a8a0ec4ac1310ee9b6cffa0c5b78a71ad24671e0203cf7c25f1bf21f7e976d8b439f5b4e902ff6a6fcd5b1e3326bf4f85c30023feb77fcfdc47f543511516d4b480f72b0f82f3a06dfd43c95f318ad103821894e9d974a102bd1d181efd0bfa8f2c4ed603f9fb6323705239677a790091feedf57cf7a1757f45f8bba57d9ce2a958f1ddd83689e58dd6bc4db72cdcf2756d3e834bd9fbc74b9aaacc2e21685e4100303f9e6bed74e50be71830bcc77c7edfa7363506a51fe835ecee09671dd722201e8430d83ce968833b34f5499b0a082d42fa0a5f5a9d6710a2301de72bc756ada8acc7bf13b37c5b36363875da237de74a5690bad11ab7a60b9d685fa182a379f4e151f29246a52374d129267c5cffefbb9199fd0fa536d2148e85dfa3f4ea50875f3800561e048b03571552fc352f9762f79e2cd7d6771bb0cb0dce630a23eac84455cc99284b5161a3cda50c31ca23a38d9076608f4153430e738941499dd5990790539efe2009ef93a865cab6060c1b9a3abcf1968a84a8ce5f09b028356d358914eac692f0cd6d6773c626077d55c5a8cef2bffbcac564fe855dcbbc70d5cddb436a7f01e1b3b47b63b13a1c940ed8bf6d4976e414cb652e83b4ec16cc3f2f54233744140fe06bbd66f1f386850b076060552c24dda198f413df90e7aacef7ee6399ca0dd2590070283c145229a96c380d0bdb3fb979037b418fe617622fed9f1abc255ae3547c9bdd8bf496aed7700663d9abcc932316318d3c02101ee72053a74ab18c422374691de0aa9167ac6cd543ac31670ee0cef728c61e6fa5ecfa8d65f72d73bc495dd246d6eb46105658ec5c4cac6c268ddd1577507117bbd8e84fa0a064fbfc40f409c5fefaef6e05f39c0b5fcfc3f0df2be67c1e3e7ef0fcc0049c3a276163e6a3dbf51f5935eb3690334094b9a2d9e611bf7d8a9adb887581d52bc1922df90e8ec3300f2fcf3f896ab7b5b80c82bffeccd3796fabca49e2e4dbb869ac99556605cca8fdb47d14ba35ac4cc4acc459079b113a02d49ddf76e8e096e93bbafb99ef5020efd10655e85243c85e6016a77d252f92909b555259e80aa3fa80c14ba0923437090b65f70a6523a6c0dc0e8fcf428502fa6216b7cd5ba1dfa0c3144fce570c7a28470b3d61e22ab301e8189ce454925149a8013f0f5933945660adc24517076d02e99c56f0438b473712e419c7e7c632e8588fbf0537aadeee93518f9a5f073cf3ac7006776a814caf469bce10ce7ae869f3e440f5642b9c627ed44ff337403879536e1652f35e3173109f7d13b1b0a959297c20b47ae600d9bc05f43a89de6489bc65ff2b02124b8b51d4803d1c024d7259cda4d890fa0a54b62c8bae9174384325b2d6657c1f98aa00371efe3564d55925eaeb4a43499612569d91c76e0fd7600a52f3a41fb7d255e4067f5f9874aeecac42dc22c495ad486041c95cf889e1cdad2f642a19565319df958cb0cf15e8231fd7a5275e895aead4ebeefb8ca877f681e821be2dbbf70cc5a0b6e8c36aeb0b10f1d9355046c37d0fba719d557ccf669bd1abac48663f70961927c6c05897531a4ccb448f5e476d92f5389662c452267f0767300c9b848abb2674a6ccec433f03cb5826ca11ccfd3c88be427aec5b93fb5a91accba8d8cec98cb51eeb5f0757e9f95a11df59565ee7cce9dbe6f887959f3ad278a1d632ad45e292d150012fd6a1783ee77ba3b3b0874d147546e2014861c7d298759c5ada17a70cb7950e9277c215ae966a1959c00c641dc1d92b832e8e11207c7e83dd50b53084a386ec9a723b92c774794a796582de150e22c884debbebcb46da7a4db9ca1f3f952f71f88d97f6114806d1c000b235fc917c77139da13492dad4aa4d07ae2ef28a0cc7ab4c94605e0a9fc3a532c6c03aa638e35abd1165d92b7819a42493b63897cde70d6abbee2b93b6eb61c032e1bab9faf861a2b912563168361e237b22c47b1c65bfb53d36d5c2d1eb3b489f0af4ccb346158a4a402d3b517e13b416d96d12d5cb3503943a6aebe060fe397c8cd1cc265962f0f340e99d9d279168430094d0a219e0e0255f400a2280c5c5fed57cf1d88cf4dc47a7efa868c752f94b555de3ef2e4bf42da2bd36c311fed8ae679a", 0x1000)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

464.063753ms ago: executing program 3 (id=9309):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32, @ANYBLOB="04001900080015"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r7, 0x118, 0x2, 0x0, &(0x7f00000003c0))
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000003600)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000000000180000000000000017010000040000006855000000000000900000000000000017010000020000007c00002075bb"], 0x270, 0x24000060}], 0x1, 0x40813)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'pim6reg\x00', <r9=>0x0})
r10 = gettid()
r11 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r9, @ANYBLOB="049c01ef3400000000000000", @ANYRES32=r10, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4)

460.144213ms ago: executing program 1 (id=9310):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x9, 0x2, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$netlink(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)={0x10, 0x2a, 0x0, 0x70bd26, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="10ec0000000000000100000001000000"], 0x10, 0x4}, 0x8000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

359.112561ms ago: executing program 1 (id=9311):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x1f3ca, 0x4)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4, 0x10, 0xadf, 0x5}, &(0x7f0000000040)=0x18) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={<r2=>0x0, 0x4, 0x10, 0xadf, 0x5}, &(0x7f0000000040)=0x18)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0xe}, 0x8)

279.510232ms ago: executing program 3 (id=9312):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x4888, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PREF={0x5, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x88c1}, 0x0)

278.687226ms ago: executing program 1 (id=9313):
socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="c80f59bf", 0x4)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)

278.463292ms ago: executing program 1 (id=9314):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect(r2, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x370, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x80)

208.569414ms ago: executing program 3 (id=9315):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/274], 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082dbd7000fedbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600f661aa75b76a"], 0x28}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20000010)
r5 = socket(0xf, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000007c0)=0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x7c2)
syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800459800400000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b010000090780000fe06e2d4c3d9fe05f98984c85c3be6a1dc258cfe04f98900"], 0x0)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000000)={r8}, &(0x7f0000000040)=0x8)
pipe(&(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500000000000060000e2000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa02, 0x0)
splice(r9, 0x0, r10, &(0x7f00000002c0), 0x6, 0x0)

208.288901ms ago: executing program 1 (id=9316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
clock_gettime(0x9, &(0x7f0000000280)) (async)
nanosleep(&(0x7f0000000000), &(0x7f0000000040))
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'vlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9a0002dce014800000000000003988b3d00df8b93f00", "afbbecd36a849524fadeca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1cf6e0543758461840e0000000000000031d6e90d2f", "0834910100a1ea266d73da04025b3a4ff59841983d5b0867663bc2ff477919ae", "4a2aa78a70c1e9cd09f65b78"}})

88.876213ms ago: executing program 4 (id=9317):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
close(r1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x4, [0x0, 0x10, 0x7, 0x22]}})

88.240162ms ago: executing program 1 (id=9318):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
write(r0, &(0x7f00000002c0), 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r7, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r7, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

86.919882ms ago: executing program 4 (id=9319):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0xf000000, 0x10000047}, 0x0)

0s ago: executing program 4 (id=9320):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc01, 0x3, 0x1b8, 0x100, 0x5002004a, 0x0, 0x100, 0x0, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, 0x0, 0xffffffff, 'veth0_macvtap\x00', 'macvtap0\x00', {}, {0xff}, 0x1, 0x2, 0x3a}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'ipvlan0\x00', 'pimreg1\x00', {}, {0x4d46f109675848}, 0x36, 0x2, 0x1}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0x28, 0x0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
socket$inet_icmp(0x2, 0x2, 0x1) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc01, 0x3, 0x1b8, 0x100, 0x5002004a, 0x0, 0x100, 0x0, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, 0x0, 0xffffffff, 'veth0_macvtap\x00', 'macvtap0\x00', {}, {0xff}, 0x1, 0x2, 0x3a}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'ipvlan0\x00', 'pimreg1\x00', {}, {0x4d46f109675848}, 0x36, 0x2, 0x1}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_int(r1, 0x0, 0x28, 0x0, 0x0) (async)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) (async)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}}) (async)

kernel console output (not intermixed with test programs):

tes in process `syz.2.5746'.
[  303.503540][T19205] vlan0: entered promiscuous mode
[  303.641943][T19209] block nbd1: server does not support multiple connections per device.
[  303.648692][T19209] block nbd1: shutting down sockets
[  303.687439][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5754'.
[  303.698724][T19218] macsec0: entered promiscuous mode
[  303.700797][T19218] 0: entered promiscuous mode
[  303.704372][T19218] macsec0: entered allmulticast mode
[  303.706442][T19218] 0: entered allmulticast mode
[  303.708391][T19218] hsr_slave_0: entered allmulticast mode
[  303.710574][T19218] hsr_slave_1: entered allmulticast mode
[  303.717812][T19218] 0: left allmulticast mode
[  303.719686][T19218] hsr_slave_0: left allmulticast mode
[  303.731438][T19218] hsr_slave_1: left allmulticast mode
[  303.733521][T19218] 0: left promiscuous mode
[  303.752722][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5756'.
[  303.756462][T19221] netlink: 'syz.0.5756': attribute type 30 has an invalid length.
[  303.796808][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  303.796933][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5756'.
[  303.801883][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  303.806266][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  303.808923][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.822061][T19221] netlink: 'syz.0.5756': attribute type 30 has an invalid length.
[  303.925065][T19231] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5761'.
[  304.921156][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5765'.
[  304.932235][T19247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.618893][T19267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.622780][T19268] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.717527][T19272] macsec0: entered promiscuous mode
[  305.719626][T19272] team0: entered promiscuous mode
[  306.068045][T19294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5781'.
[  307.195150][T19329] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5792'.
[  307.295490][T19336] tipc: Resetting bearer <eth:team0>
[  307.299329][T19336] tipc: Resetting bearer <eth:team0>
[  307.306084][T19336] tipc: Resetting bearer <eth:team0>
[  307.316760][T19336] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  307.553438][   T26] wlan0: Trigger new scan to find an IBSS to join
[  308.995944][T19421] netlink: 'syz.2.5815': attribute type 1 has an invalid length.
[  308.998710][T19421] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5815'.
[  309.008557][T19421] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  309.218144][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5817'.
[  309.425731][T19436] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5822'.
[  309.430582][T19436] netlink: 'syz.2.5822': attribute type 3 has an invalid length.
[  309.814660][T19434] netlink: 'syz.1.5821': attribute type 2 has an invalid length.
[  310.087919][T19469] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  310.129324][T19478] bridge0: port 1(erspan0) entered blocking state
[  310.136231][T19478] bridge0: port 1(erspan0) entered disabled state
[  310.138936][T19478] erspan0: entered allmulticast mode
[  310.145785][T19478] erspan0: entered promiscuous mode
[  310.161223][T19478] erspan0: left allmulticast mode
[  310.163924][T19478] erspan0: left promiscuous mode
[  310.165993][T19478] bridge0: port 1(erspan0) entered disabled state
[  310.246253][T19485] netlink: 'syz.1.5836': attribute type 24 has an invalid length.
[  310.591849][T11954] wlan0: Trigger new scan to find an IBSS to join
[  311.043059][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5844'.
[  311.056962][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5844'.
[  311.402878][T19540] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.422334][T19540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5855'.
[  311.425545][T19540] openvswitch: netlink: Flow key attr not present in new flow.
[  311.529806][T19544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.536431][T19542] tipc: Resetting bearer <eth:syzkaller0>
[  311.736504][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5860'.
[  312.898803][T19542] tipc: Disabling bearer <eth:syzkaller0>
[  312.922764][T19553] bond0: (slave bond_slave_1): Releasing backup interface
[  312.926203][T19553] bond_slave_1 (unregistering): left promiscuous mode
[  312.928945][T19553] bond_slave_1 (unregistering): left allmulticast mode
[  313.007560][T19557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.010591][T19557] syzkaller0: entered promiscuous mode
[  313.017525][T19557] syzkaller0: entered allmulticast mode
[  313.058462][T19557] tipc: Resetting bearer <eth:syzkaller0>
[  313.068260][T19556] tipc: Resetting bearer <eth:syzkaller0>
[  313.083987][T19556] tipc: Disabling bearer <eth:syzkaller0>
[  313.098080][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5865'.
[  313.105335][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5865'.
[  313.220754][T19569] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  313.551126][   T26] wlan0: Trigger new scan to find an IBSS to join
[  314.501347][T11954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.581345][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  314.691472][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  314.801126][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  314.911549][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  315.021425][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  315.131417][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  315.241532][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  315.351517][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  315.461513][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  316.451589][   T12] net_ratelimit: 8 callbacks suppressed
[  316.451670][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  316.561596][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  316.671502][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  316.781626][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  316.835172][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.891855][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  317.001645][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  317.111476][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  317.221330][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  317.331911][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  317.441799][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  321.461950][ T5867] net_ratelimit: 35 callbacks suppressed
[  321.461974][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  321.571469][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  321.681360][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  321.791573][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  321.901692][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  322.011739][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  322.121690][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  322.231570][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  322.342367][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  322.451435][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  326.561740][ T5867] net_ratelimit: 36 callbacks suppressed
[  326.561763][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  326.671186][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  326.781294][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  326.891343][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  327.001520][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  327.111488][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  327.222223][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  327.331502][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  327.442765][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  327.553175][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  331.651678][   T13] net_ratelimit: 36 callbacks suppressed
[  331.651697][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  331.761350][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  331.871606][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  331.981474][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  332.091674][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  332.201046][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  332.311382][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  332.431298][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  332.541718][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  332.661856][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  336.691732][   T13] net_ratelimit: 35 callbacks suppressed
[  336.691757][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  336.812056][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  336.921400][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  337.031155][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  337.141664][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  337.251091][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  337.361397][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  337.471412][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  337.581267][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  337.691378][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  341.791395][   T13] net_ratelimit: 36 callbacks suppressed
[  341.791413][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  341.902436][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  342.021753][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  342.141274][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  342.251508][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  342.361387][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  342.472065][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  342.581571][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  342.692907][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  342.801281][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  343.069934][T19604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5879'.
[  343.112183][T19614] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5881'.
[  343.115555][T19614] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5881'.
[  343.118358][T19614] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5881'.
[  343.130525][T19614] tipc: Resetting bearer <eth:syzkaller0>
[  343.160746][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  343.329225][T19628] netlink: 'syz.0.5883': attribute type 1 has an invalid length.
[  343.335941][T19628] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5883'.
[  343.555439][T19643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5889'.
[  343.582611][T19648] veth1_to_bond: entered allmulticast mode
[  343.584444][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5890'.
[  343.624147][T19649] veth1_to_bond (unregistering): left allmulticast mode
[  343.898641][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5900'.
[  343.904340][T19682] netlink: 'syz.1.5900': attribute type 7 has an invalid length.
[  343.907550][T19682] netlink: 'syz.1.5900': attribute type 8 has an invalid length.
[  343.910664][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5900'.
[  343.978011][T19681] delete_channel: no stack
[  344.324352][T19713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.335705][T19713] syzkaller0: entered promiscuous mode
[  344.337833][T19713] syzkaller0: entered allmulticast mode
[  344.369276][T19713] tipc: Resetting bearer <eth:syzkaller0>
[  344.375864][T19712] tipc: Resetting bearer <eth:syzkaller0>
[  344.387414][T19712] tipc: Disabling bearer <eth:syzkaller0>
[  344.728041][T19742] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5920'.
[  344.960564][   T33] audit: type=1800 audit(1757059066.238:10): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5927" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=10075 res=0 errno=0
[  344.973667][   T33] audit: type=1804 audit(1757059066.238:11): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5927" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=10075 res=1 errno=0
[  345.067986][T19773] ..1: renamed from ..0
[  345.072062][T19773] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.076041][T19773] ..1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  345.077035][T19775] netlink: 'syz.1.5931': attribute type 1 has an invalid length.
[  345.080157][T19773] ..1: entered allmulticast mode
[  345.080171][T19773] hsr_slave_0: entered allmulticast mode
[  345.080179][T19773] hsr_slave_1: entered allmulticast mode
[  345.107619][T19775] 8021q: adding VLAN 0 to HW filter on device bond2
[  345.136116][T19775] bond2: (slave veth5): Enslaving as an active interface with a down link
[  345.169860][T19775] gretap1: entered promiscuous mode
[  345.188724][T19775] bond2: (slave gretap1): making interface the new active one
[  345.193889][T19775] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  345.212066][T19775] macvlan4: entered promiscuous mode
[  345.214494][T19775] macvlan4: entered allmulticast mode
[  345.217287][T19775] bond2: entered promiscuous mode
[  345.220082][T19775] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  345.224812][T19775] bond2: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  345.233208][T19775] bond2: left promiscuous mode
[  345.768267][T19787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.772573][T19787] syzkaller0: entered promiscuous mode
[  345.774692][T19787] syzkaller0: entered allmulticast mode
[  345.855598][T19787] tipc: Resetting bearer <eth:syzkaller0>
[  345.875882][T19786] tipc: Resetting bearer <eth:syzkaller0>
[  345.897206][T19786] tipc: Disabling bearer <eth:syzkaller0>
[  346.380397][T19826] syzkaller0: entered promiscuous mode
[  346.384020][T19826] syzkaller0: entered allmulticast mode
[  346.871696][   T13] net_ratelimit: 35 callbacks suppressed
[  346.871717][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  346.912413][   T27] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  346.983642][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  347.051828][T19871] vxcan2: entered promiscuous mode
[  347.093925][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  347.214514][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  347.282251][T19903] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.287397][T19903] tipc: Resetting bearer <eth:syzkaller0>
[  347.321764][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  347.434307][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  347.541494][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  347.661356][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  347.771439][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  347.881536][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  350.496791][T19933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.593524][T19945] netlink: 'syz.2.5987': attribute type 1 has an invalid length.
[  350.660280][T19946] vlan4: entered allmulticast mode
[  350.668738][T19946] bond7: entered allmulticast mode
[  350.917719][T19979] netlink: 'syz.1.5999': attribute type 4 has an invalid length.
[  350.929392][T19981] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  350.950390][T19987] __nla_validate_parse: 6 callbacks suppressed
[  350.950403][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6000'.
[  351.088811][T19999] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6005'.
[  351.245111][T20012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6013'.
[  351.252268][T20012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6013'.
[  351.356273][T20023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6016'.
[  351.360732][T20026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6016'.
[  351.392591][T20030] IPv6: NLM_F_CREATE should be specified when creating new route
[  351.716502][T20061] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6026'.
[  351.971661][   T12] net_ratelimit: 36 callbacks suppressed
[  351.971679][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  352.081340][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  352.191471][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  352.301810][T20113] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  352.314089][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  352.421808][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  352.524269][T20137] ieee802154 phy0 wpan0: encryption failed: -90
[  352.533634][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  352.536021][T20137] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6057'.
[  352.539725][T20139] netlink: 'syz.1.6058': attribute type 1 has an invalid length.
[  352.650314][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  352.681956][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.687238][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.716041][T20154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6060'.
[  352.742914][T20156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6062'.
[  352.762259][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  352.871355][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  352.991885][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  353.439552][T20220] netlink: 'syz.0.6085': attribute type 1 has an invalid length.
[  353.446802][T20220] netlink: 'syz.0.6085': attribute type 1 has an invalid length.
[  353.585525][T20226] 8021q: VLANs not supported on tunl0
[  353.942800][ T5867] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  354.247599][T20271] netlink: 'syz.1.6103': attribute type 5 has an invalid length.
[  354.284441][T20273] IPv6: NLM_F_CREATE should be specified when creating new route
[  354.286952][T20276] netlink: 'syz.0.6105': attribute type 3 has an invalid length.
[  354.290561][T20276] netlink: 'syz.0.6105': attribute type 3 has an invalid length.
[  354.673928][T20314] netlink: 'syz.2.6119': attribute type 10 has an invalid length.
[  355.762210][T20402] netlink: 'syz.1.6149': attribute type 12 has an invalid length.
[  355.877022][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  355.880694][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  355.888748][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  355.895840][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  355.904936][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  356.059543][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  356.066070][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  356.068933][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  356.073521][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  356.077040][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  356.307202][T20406] chnl_net:caif_netlink_parms(): no params data found
[  356.406872][T20406] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.409370][T20406] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.412442][T20406] bridge_slave_0: entered allmulticast mode
[  356.415799][T20406] bridge_slave_0: entered promiscuous mode
[  356.438726][T20406] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.450482][T20406] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.454514][T20406] bridge_slave_1: entered allmulticast mode
[  356.458105][T20406] bridge_slave_1: entered promiscuous mode
[  356.515702][T20406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.535993][T20406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.594694][T20406] team0: Port device team_slave_0 added
[  356.618492][T20406] team0: Port device team_slave_1 added
[  356.713726][T20406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.716232][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.728115][T20406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.756146][T20406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.758859][T20406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.774929][T20406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.864075][T20406] hsr_slave_0: entered promiscuous mode
[  356.867220][T20406] hsr_slave_1: entered promiscuous mode
[  356.869973][T20406] debugfs: 'hsr0' already exists in 'hsr'
[  356.872925][T20406] Cannot create hsr debugfs directory
[  356.898510][T20416] chnl_net:caif_netlink_parms(): no params data found
[  357.125499][T20416] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.127893][T20416] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.130251][T20416] bridge_slave_0: entered allmulticast mode
[  357.138785][T20416] bridge_slave_0: entered promiscuous mode
[  357.147635][T20416] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.153772][T20416] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.156072][T20416] bridge_slave_1: entered allmulticast mode
[  357.158972][T20416] bridge_slave_1: entered promiscuous mode
[  357.202703][T20416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.212196][   T12] net_ratelimit: 31 callbacks suppressed
[  357.212210][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  357.241368][T20416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.287311][T20416] team0: Port device team_slave_0 added
[  357.291966][T20416] team0: Port device team_slave_1 added
[  357.314411][T20406] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  357.319280][T20416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.322370][T20416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.332929][T20416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.338893][T20416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.342469][T20416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.352394][T20416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.358505][T20406] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  357.378886][T20406] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  357.404467][T20406] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  357.499521][T20416] hsr_slave_0: entered promiscuous mode
[  357.513668][T20416] hsr_slave_1: entered promiscuous mode
[  357.516410][T20416] debugfs: 'hsr0' already exists in 'hsr'
[  357.518665][T20416] Cannot create hsr debugfs directory
[  357.592477][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  357.605967][T20480] __nla_validate_parse: 19 callbacks suppressed
[  357.605983][T20480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6170'.
[  357.621446][T20480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6170'.
[  357.761915][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  357.768446][T20406] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.808306][T20406] 8021q: adding VLAN 0 to HW filter on device team0
[  357.812200][T20416] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  357.818342][T20416] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  357.826802][T20416] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  357.839909][T20416] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  357.852702][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.855489][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.870158][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.873105][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.953043][   T54] Bluetooth: hci0: command tx timeout
[  358.020087][T20416] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.049135][T20416] 8021q: adding VLAN 0 to HW filter on device team0
[  358.059249][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.062152][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.072355][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  358.082319][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.085250][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.114176][   T54] Bluetooth: hci1: command tx timeout
[  358.176428][T20406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.217171][T20406] veth0_vlan: entered promiscuous mode
[  358.225903][T20406] veth1_vlan: entered promiscuous mode
[  358.247489][T20406] veth0_macvtap: entered promiscuous mode
[  358.252736][T20406] veth1_macvtap: entered promiscuous mode
[  358.265178][T20406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.277139][T20406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.287464][ T5867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.303853][ T5867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.311870][ T5867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.322134][ T5867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.341836][ T5867] bond6: (slave wlan0): failed to get link speed/duplex
[  358.362540][T20416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.375440][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.377935][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.409249][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.413654][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.451040][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  358.562952][   T12] bond6: (slave wlan0): failed to get link speed/duplex
[  358.654859][T20416] veth0_vlan: entered promiscuous mode
[  358.674722][T20416] veth1_vlan: entered promiscuous mode
[  358.684773][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  358.725019][T20416] veth0_macvtap: entered promiscuous mode
[  358.733300][T20416] veth1_macvtap: entered promiscuous mode
[  358.757466][T20416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.769202][T20416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.782897][ T5910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.789080][ T5910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.798931][ T5910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.809516][ T5910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.812435][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  358.911437][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.914078][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.931108][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  358.945204][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.947858][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.086916][T20543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6182'.
[  359.495127][T20560] vlan2: entered promiscuous mode
[  359.496998][T20560] bond0: entered promiscuous mode
[  359.499011][T20560] bond_slave_0: entered promiscuous mode
[  359.506506][T20560] bond_slave_1: entered promiscuous mode
[  359.678120][T20567] netlink: 'syz.4.6191': attribute type 1 has an invalid length.
[  360.032111][   T54] Bluetooth: hci0: command tx timeout
[  360.195206][   T54] Bluetooth: hci1: command tx timeout
[  360.225003][T20581] netlink: 'syz.3.6196': attribute type 3 has an invalid length.
[  360.228878][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6196'.
[  360.400120][T20592] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6200'.
[  360.689221][T20602] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  360.696458][T20602] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  360.853133][T20610] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6204'.
[  360.875986][T20612] tipc: Started in network mode
[  360.877565][T20612] tipc: Node identity 9699fe451aaf, cluster identity 4711
[  360.879913][T20612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.890222][T20612] syzkaller0: entered promiscuous mode
[  360.894040][T20612] syzkaller0: entered allmulticast mode
[  360.922626][T20612] tipc: Resetting bearer <eth:syzkaller0>
[  360.937592][T20611] tipc: Resetting bearer <eth:syzkaller0>
[  360.962116][T20611] tipc: Disabling bearer <eth:syzkaller0>
[  360.976470][T20610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6204'.
[  360.979297][T20610] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6204'.
[  360.996896][T20610] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6204'.
[  361.372766][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6209'.
[  362.111858][   T54] Bluetooth: hci0: command tx timeout
[  362.235512][ T5910] net_ratelimit: 27 callbacks suppressed
[  362.235535][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  362.271210][   T54] Bluetooth: hci1: command tx timeout
[  362.288425][T20681] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  362.292733][T20681] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  362.341958][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  362.451525][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  362.561510][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  362.672063][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  362.785501][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  362.909414][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  363.037796][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  363.155189][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  363.216911][ T5895] IPVS: starting estimator thread 0...
[  363.261646][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  363.315917][T20707] IPVS: using max 45 ests per chain, 108000 per kthread
[  363.818136][T20732] __nla_validate_parse: 4 callbacks suppressed
[  363.818155][T20732] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6242'.
[  363.922541][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6244'.
[  363.926110][T20736] bridge_slave_1: left allmulticast mode
[  363.927987][T20736] bridge_slave_1: left promiscuous mode
[  363.929878][T20736] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.936445][T20736] bridge_slave_0: left allmulticast mode
[  363.938750][T20736] bridge_slave_0: left promiscuous mode
[  363.941864][T20736] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.191531][   T54] Bluetooth: hci0: command tx timeout
[  364.352095][   T54] Bluetooth: hci1: command tx timeout
[  364.466662][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6251'.
[  364.988069][T20793] netlink: 'syz.1.6264': attribute type 2 has an invalid length.
[  364.996218][T20793] netlink: 'syz.1.6264': attribute type 1 has an invalid length.
[  364.998650][T20793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6264'.
[  365.037173][T20793] bridge9: entered promiscuous mode
[  365.039140][T20793] bridge9: entered allmulticast mode
[  365.127382][T20807] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6269'.
[  365.140814][T20807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6269'.
[  365.223799][T20816] netlink: 'syz.4.6271': attribute type 3 has an invalid length.
[  365.379824][T20835] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6278'.
[  365.429052][T20835] netlink: 'syz.3.6278': attribute type 4 has an invalid length.
[  365.435950][T20835] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6278'.
[  365.587617][T20853] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6284'.
[  365.736818][T20857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6286'.
[  367.189029][T20918] IPv6: NLM_F_CREATE should be specified when creating new route
[  367.233697][T20920] netlink: 'syz.4.6304': attribute type 10 has an invalid length.
[  367.245644][T20920] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  367.249680][T20920] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  367.302184][T20532] net_ratelimit: 36 callbacks suppressed
[  367.302202][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  367.441452][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  367.552463][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  367.662168][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  367.771492][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  367.881384][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  367.992462][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  368.101309][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  368.211158][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  368.331747][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  368.816866][T21014] syzkaller1: entered promiscuous mode
[  368.818789][T21014] syzkaller1: entered allmulticast mode
[  369.313534][T21045] tipc: Started in network mode
[  369.315421][T21045] tipc: Node identity d68ca24bfab8, cluster identity 4711
[  369.320373][T21045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  369.334508][T21045] syzkaller0: entered promiscuous mode
[  369.339839][T21045] syzkaller0: entered allmulticast mode
[  369.357422][T21049] __nla_validate_parse: 4 callbacks suppressed
[  369.357434][T21049] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6347'.
[  369.372371][T21045] tipc: Resetting bearer <eth:syzkaller0>
[  369.374718][T21048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6347'.
[  369.378124][T21044] tipc: Resetting bearer <eth:syzkaller0>
[  369.389772][T21044] tipc: Disabling bearer <eth:syzkaller0>
[  369.554864][T21060] Bluetooth: MGMT ver 1.23
[  369.597768][T21060] syz_tun: entered promiscuous mode
[  370.455890][T21105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6363'.
[  370.800502][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6369'.
[  370.926068][T21134] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6375'.
[  370.933308][T21134] IPVS: length: 24 != 6168
[  370.937352][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6375'.
[  370.958416][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6374'.
[  371.044109][T21141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6377'.
[  371.357810][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6383'.
[  371.474049][T21171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6386'.
[  371.793403][T21184] netlink: 'syz.1.6391': attribute type 2 has an invalid length.
[  371.818156][T21184] : entered promiscuous mode
[  372.355887][T21215] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001
[  372.412003][   T13] net_ratelimit: 48 callbacks suppressed
[  372.412024][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  372.523382][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  372.651776][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  372.682932][T21226] batadv1: entered promiscuous mode
[  372.685198][T21226] batadv1: entered allmulticast mode
[  372.761492][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  372.871262][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  372.884155][T21243] openvswitch: netlink: VXLAN extension 226 out of range max 1
[  372.981523][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  373.092826][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  373.214796][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  373.331816][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  373.455935][T21281] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  373.459261][T21281] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  373.498016][T21285] : renamed from bond_slave_0 (while UP)
[  374.396630][ T5859] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.409689][ T5859] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.414798][ T5859] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.436704][ T5859] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.525381][T21346] __nla_validate_parse: 14 callbacks suppressed
[  374.525397][T21346] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6446'.
[  374.739182][T21368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6454'.
[  374.742646][T21368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6454'.
[  374.747039][T21368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6454'.
[  375.402927][T21414] netlink: 'syz.4.6470': attribute type 4 has an invalid length.
[  376.785119][T21488] netlink: 'syz.3.6494': attribute type 2 has an invalid length.
[  377.147293][T21514] netlink: 'syz.3.6505': attribute type 3 has an invalid length.
[  377.151074][T21514] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6505'.
[  377.239350][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6508'.
[  377.285108][T21525] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6509'.
[  377.482495][T21475] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  377.494256][ T5859] net_ratelimit: 38 callbacks suppressed
[  377.494269][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  377.548476][T21547] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6517'.
[  377.613356][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  377.722541][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  377.833795][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  377.951977][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  378.023322][T21595] netlink: 'syz.1.6535': attribute type 23 has an invalid length.
[  378.071392][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  378.147637][T21598] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6536'.
[  378.156016][T21598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6536'.
[  378.159355][T21598] sch_fq: defrate 0 ignored.
[  378.167636][T21602] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  378.170534][T21602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.193541][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  378.274459][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.311347][ T5910] bond6: (slave wlan0): failed to get link speed/duplex
[  378.913942][   T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  379.104824][T21648] IPv6: NLM_F_CREATE should be specified when creating new route
[  379.293404][T21659] bridge_slave_1: left allmulticast mode
[  379.295691][T21659] bridge_slave_1: left promiscuous mode
[  379.298139][T21659] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.304208][T21659] bridge_slave_0: left allmulticast mode
[  379.306307][T21659] bridge_slave_0: left promiscuous mode
[  379.308547][T21659] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.643888][T21665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.698226][T21665] syzkaller0: entered promiscuous mode
[  379.700653][T21665] syzkaller0: entered allmulticast mode
[  379.709149][T21665] tipc: Resetting bearer <eth:syzkaller0>
[  380.691033][   T47] tipc: Node number set to 741646923
[  382.650242][T11954] tipc: Resetting bearer <eth:syzkaller0>
[  382.657627][T21664] tipc: Resetting bearer <eth:syzkaller0>
[  383.948851][T21664] tipc: Disabling bearer <eth:syzkaller0>
[  383.981167][T20532] net_ratelimit: 13 callbacks suppressed
[  383.981181][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  384.091200][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  384.100251][T21697] __nla_validate_parse: 4 callbacks suppressed
[  384.100268][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6568'.
[  384.166987][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6570'.
[  384.170674][T21701] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  384.176697][T21701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.202012][T20532] bond6: (slave wlan0): failed to get link speed/duplex
[  384.312702][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  384.421134][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  384.531908][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  384.652125][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  384.771791][ T5859] bond6: (slave wlan0): failed to get link speed/duplex
[  384.851181][T21765] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  384.924201][T21769] netlink: 'syz.3.6591': attribute type 303 has an invalid length.
[  385.719114][T21793] netlink: 'syz.4.6603': attribute type 2 has an invalid length.
[  385.730445][T21793] k*]: entered promiscuous mode
[  385.783069][T21793] 8021q: adding VLAN 0 to HW filter on device team0
[  385.814031][T21793] veth0_to_team: entered promiscuous mode
[  385.816227][T21793] veth0_to_team: entered allmulticast mode
[  386.075055][T21812] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6610'.
[  386.223801][T21827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6615'.
[  386.577949][T21861] netlink: 'syz.3.6625': attribute type 1 has an invalid length.
[  386.596707][  T723] wlan1: Trigger new scan to find an IBSS to join
[  386.803130][T21868] syzkaller1: entered promiscuous mode
[  386.805124][T21868] syzkaller1: entered allmulticast mode
[  386.809643][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6627'.
[  386.877475][T20532] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  387.300349][T21882] dvmrp8: entered allmulticast mode
[  387.787423][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6635'.
[  387.876200][T21912] IPVS: Error connecting to the multicast addr
[  387.996370][T21914] tipc: Resetting bearer <eth:team0>
[  388.054386][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6642'.
[  388.504539][T21963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6657'.
[  388.619137][T21968] tipc: Resetting bearer <eth:syzkaller0>
[  389.025904][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6666'.
[  389.030215][T21989] netlink: 'syz.4.6666': attribute type 1 has an invalid length.
[  389.034238][T21989] netlink: 'syz.4.6666': attribute type 1 has an invalid length.
[  389.036584][T21989] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6666'.
[  389.110292][T21998] __nla_validate_parse: 1 callbacks suppressed
[  389.110304][T21998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6669'.
[  389.116801][T21998] tc_dump_action: action bad kind
[  389.193883][T22006] net_ratelimit: 33 callbacks suppressed
[  389.193902][T22006] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  389.223392][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6672'.
[  389.272203][T22010] lo speed is unknown, defaulting to 1000
[  389.274616][T22010] lo speed is unknown, defaulting to 1000
[  389.278457][T22010] lo speed is unknown, defaulting to 1000
[  389.289519][T22010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  389.324648][T22010] lo speed is unknown, defaulting to 1000
[  389.333515][T22010] lo speed is unknown, defaulting to 1000
[  389.341990][T22010] lo speed is unknown, defaulting to 1000
[  389.353028][T22010] lo speed is unknown, defaulting to 1000
[  389.355997][T22010] lo speed is unknown, defaulting to 1000
[  389.440287][T22021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6679'.
[  389.529300][T22017] tipc: Resetting bearer <eth:team0>
[  389.558784][T22017] veth0: left promiscuous mode
[  389.580595][T20532] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  389.583649][T20532] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  389.592181][T20532] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  389.600455][T20532] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  389.611372][T20532] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  389.615977][T20532] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  389.619336][T20532] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  389.626485][T20532] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  389.654606][   T33] audit: type=1107 audit(1757059110.928:12): pid=22033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  390.689694][T22084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6691'.
[  391.178626][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6703'.
[  391.261214][T22123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6706'.
[  391.448493][T22141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6713'.
[  391.699287][T22152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6715'.
[  391.708921][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6715'.
[  391.937454][T22158] netlink: 'syz.1.6718': attribute type 2 has an invalid length.
[  391.947852][T22158] k*]: entered promiscuous mode
[  391.969146][T22158] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  393.082847][T22196] netlink: 'syz.1.6734': attribute type 2 has an invalid length.
[  393.115976][T22196] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  393.251386][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6738'.
[  393.575758][T22227] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002
[  394.116039][T22254] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  394.119421][T22254] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  394.192696][T22256] netlink: 'syz.4.6754': attribute type 2 has an invalid length.
[  394.217110][T22256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.239315][   T24] lo speed is unknown, defaulting to 1000
[  394.243724][   T24] syz2: Port: 1 Link ACTIVE
[  394.300471][T22262] __nla_validate_parse: 7 callbacks suppressed
[  394.300484][T22262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6756'.
[  394.410335][T22269] syzkaller1: entered promiscuous mode
[  394.421550][T22269] syzkaller1: entered allmulticast mode
[  394.526139][T22275] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6762'.
[  394.654599][T22280] netlink: 'syz.4.6764': attribute type 2 has an invalid length.
[  394.659723][T22280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.695328][T22289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6767'.
[  394.710622][T22288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.721657][T22289] netlink: 'syz.1.6767': attribute type 1 has an invalid length.
[  394.741640][T22288] syzkaller0: entered promiscuous mode
[  394.750893][T22288] syzkaller0: entered allmulticast mode
[  394.772479][T22288] tipc: Resetting bearer <eth:syzkaller0>
[  394.842761][T22286] tipc: Resetting bearer <eth:syzkaller0>
[  394.927840][T22286] tipc: Disabling bearer <eth:syzkaller0>
[  395.107215][T22309] bridge11: entered allmulticast mode
[  395.427740][T22334] netlink: 'syz.4.6782': attribute type 2 has an invalid length.
[  395.435301][T22334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  395.593754][T22329] lo speed is unknown, defaulting to 1000
[  396.169348][T22364] netlink: 'syz.3.6790': attribute type 3 has an invalid length.
[  396.489796][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6796'.
[  396.495569][T22377] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  396.511059][T22370] lo speed is unknown, defaulting to 1000
[  397.007253][T22403] ieee802154 phy0 wpan0: encryption failed: -22
[  397.092169][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6805'.
[  397.103203][T22409] netlink: 'syz.3.6805': attribute type 5 has an invalid length.
[  397.106321][T22409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6805'.
[  397.131397][T22409] geneve2: entered promiscuous mode
[  397.135156][T22409] geneve2: entered allmulticast mode
[  397.143248][T22388] lo speed is unknown, defaulting to 1000
[  397.155615][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  397.159183][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  397.185991][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  397.214625][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  397.277701][T22418] sctp: [Deprecated]: syz.4.6808 (pid 22418) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.277701][T22418] Use struct sctp_sack_info instead
[  397.449358][T22434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.455386][T22431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6812'.
[  397.458686][T22431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6812'.
[  397.484502][T22433] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6814'.
[  397.595946][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  397.598401][T22431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6812'.
[  397.607588][T22423] tipc: Resetting bearer <eth:syzkaller0>
[  398.964027][T22423] tipc: Disabling bearer <eth:syzkaller0>
[  400.187590][T22497] pim6reg: entered allmulticast mode
[  400.640274][T22528] netlink: 'syz.3.6847': attribute type 7 has an invalid length.
[  400.643836][T22528] netlink: 'syz.3.6847': attribute type 8 has an invalid length.
[  400.722070][T22534] netlink: 'syz.1.6848': attribute type 1 has an invalid length.
[  400.724608][T22534] netlink: 'syz.1.6848': attribute type 1 has an invalid length.
[  401.259774][T22585] __nla_validate_parse: 8 callbacks suppressed
[  401.259791][T22585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6867'.
[  401.476166][T22603] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6874'.
[  401.495138][T22603] batadv4: entered promiscuous mode
[  401.497292][T22603] batadv4: entered allmulticast mode
[  401.616592][T22617] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6878'.
[  401.625604][T22617] batadv1: entered promiscuous mode
[  401.627803][T22617] batadv1: entered allmulticast mode
[  402.385726][T22644] lo speed is unknown, defaulting to 1000
[  402.407456][T22647] netlink: 'syz.3.6887': attribute type 2 has an invalid length.
[  402.780387][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6898'.
[  402.970667][T22645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.306871][T22687] netlink: 'syz.3.6905': attribute type 6 has an invalid length.
[  403.745177][T22712] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6916'.
[  404.635726][T22776] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000
[  404.919652][   T10] IPVS: starting estimator thread 0...
[  405.021952][T22795] IPVS: using max 64 ests per chain, 153600 per kthread
[  405.246928][T22808] netlink: 'syz.4.6953': attribute type 1 has an invalid length.
[  405.250241][T22808] nbd: error processing sock list
[  405.253354][T22808] block nbd1: shutting down sockets
[  405.403252][T22819] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6957'.
[  405.646156][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6968'.
[  405.652103][T22844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6967'.
[  405.664639][T22846] batadv_slave_1: entered promiscuous mode
[  405.686929][T22846] batadv_slave_1: left promiscuous mode
[  405.760711][T22854] netlink: 'syz.4.6971': attribute type 1 has an invalid length.
[  405.766397][T22854] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6971'.
[  405.953511][T22860] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  406.055249][T22868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6974'.
[  406.307533][T22881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6982'.
[  406.391680][T22881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.395590][T22881] batadv_slave_0: entered promiscuous mode
[  406.410603][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6982'.
[  406.493538][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6986'.
[  406.497144][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6986'.
[  406.816169][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6991'.
[  406.869104][T22920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6994'.
[  407.255405][T22945] netlink: 'syz.4.7002': attribute type 28 has an invalid length.
[  408.175631][T23032] 8021q: adding VLAN 0 to HW filter on device bond3
[  408.179651][T23029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7031'.
[  408.190445][T23032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7031'.
[  408.225570][T23011] lo speed is unknown, defaulting to 1000
[  408.339052][T23047] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7036'.
[  408.354441][T23042] block nbd1: server does not support multiple connections per device.
[  408.360607][T23042] block nbd1: shutting down sockets
[  408.366827][T23042] IPv6: Can't replace route, no match found
[  408.415412][   T13] tipc: Subscription rejected, illegal request
[  408.724914][T23064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7042'.
[  408.784556][T23066] IPv6: NLM_F_CREATE should be specified when creating new route
[  409.283616][T23098] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  409.732887][T23128] IPv6: Can't replace route, no match found
[  410.272357][T23140] tipc: Enabled bearer <udp:s>, priority 10
[  410.446701][T23148] syzkaller0: entered promiscuous mode
[  410.464512][T23148] syzkaller0: entered allmulticast mode
[  412.314192][T23190] __nla_validate_parse: 2 callbacks suppressed
[  412.314205][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7083'.
[  412.354668][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7084'.
[  412.440526][T23198] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7087'.
[  412.515776][T23198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7087'.
[  412.668389][T23214] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7092'.
[  412.672446][T23212] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7092'.
[  412.797708][T23224] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7095'.
[  412.899797][T23233] netlink: 'syz.3.7098': attribute type 10 has an invalid length.
[  412.924017][T23233] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  413.059660][T23243] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  413.956739][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.960312][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.134181][T23316] netlink: 'syz.3.7121': attribute type 21 has an invalid length.
[  414.458718][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7131'.
[  414.585315][T23355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7137'.
[  414.599905][T23359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7138'.
[  414.633453][T23359] sctp: [Deprecated]: syz.1.7138 (pid 23359) Use of int in max_burst socket option.
[  414.633453][T23359] Use struct sctp_assoc_value instead
[  414.746683][T23368] team0: No ports can be present during mode change
[  414.886438][T23366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.896557][T23379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.992331][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.168578][T23398] can: request_module (can-proto-0) failed.
[  415.175890][T23403] netlink: 'syz.1.7154': attribute type 4 has an invalid length.
[  415.256299][T23410] netlink: 'syz.1.7156': attribute type 1 has an invalid length.
[  415.393617][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.032891][T11954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.043423][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.267417][T23453] smc: net device bond0 erased user defined pnetid SYZ
[  416.274237][T23453] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  416.463157][T23461] netlink: 'syz.1.7174': attribute type 1 has an invalid length.
[  416.548386][T23463] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  416.557028][T23463] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  416.672287][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.676824][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.745370][T23475] tipc: MTU too low for tipc bearer
[  417.083949][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.506751][T23526] netlink: 'syz.4.7197': attribute type 1 has an invalid length.
[  417.545564][T23526] 8021q: adding VLAN 0 to HW filter on device bond1
[  417.566160][T23526] bond1: (slave geneve2): making interface the new active one
[  417.570615][T23526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.575759][T23526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.579424][T23526] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  418.029649][T23564] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  418.209010][T23576] netlink: 'syz.4.7219': attribute type 1 has an invalid length.
[  418.484158][T23603] __nla_validate_parse: 14 callbacks suppressed
[  418.484180][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7228'.
[  418.495105][T23603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7228'.
[  418.498599][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7226'.
[  418.519867][T23598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7226'.
[  418.611117][T23617] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7234'.
[  418.954373][T23646] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.7246'.
[  419.187537][T23675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7255'.
[  419.194944][T23675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7255'.
[  419.496393][T23682] lo speed is unknown, defaulting to 1000
[  420.191418][   T47] net_ratelimit: 17 callbacks suppressed
[  420.191438][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.695068][T23728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7269'.
[  420.700355][T23728] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7269'.
[  420.891551][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.168472][   T54] Bluetooth: hci1: link tx timeout
[  421.171612][   T54] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  421.236089][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.508740][T23780] tipc: Enabling of bearer <et:g> rejected, media not registered
[  421.677999][T23801] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  421.794205][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.809435][T21615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.889544][T20532] syzkaller0: tun_net_xmit 76
[  421.895582][T20532] syzkaller0: tun_net_xmit 48
[  421.898899][T23820] syzkaller0: create flow: hash 1808830267 index 1
[  421.911458][    T9] syzkaller0: tun_net_xmit 76
[  421.974191][   T95] syzkaller0: tun_net_xmit 76
[  421.978899][T23812] syzkaller0: delete flow: hash 1808830267 index 1
[  422.012663][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.273004][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.437456][T21615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.112083][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.151319][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.232115][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  423.631960][T23856] __nla_validate_parse: 5 callbacks suppressed
[  423.631982][T23856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7316'.
[  424.907360][T23910] IPVS: Scheduler module ip_vs_sip not found
[  425.327615][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7341'.
[  425.357787][ T5859] net_ratelimit: 7 callbacks suppressed
[  425.357807][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.391775][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.478791][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.286169][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.392608][T23860] Set syz1 is full, maxelem 65536 reached
[  426.431268][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.491468][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.471236][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.555709][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.601207][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.601215][   T24] net_ratelimit: 6 callbacks suppressed
[  430.601232][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.767098][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.911229][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.241747][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.393898][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.631117][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.011222][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.041272][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.671756][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.151796][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.791530][   T24] net_ratelimit: 6 callbacks suppressed
[  435.791551][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.501707][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.832707][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.997507][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.621392][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.791740][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.887464][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.352162][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.761576][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.911370][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.715035][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  440.991223][ T5882] net_ratelimit: 3 callbacks suppressed
[  440.991239][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.006241][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.021876][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.032107][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.112221][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.151953][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.077001][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.271470][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.556749][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.560001][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.191467][   T24] net_ratelimit: 6 callbacks suppressed
[  446.191487][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.622044][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.232957][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.721538][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.871630][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.271809][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.831533][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.312453][T11954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.315720][T11954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.941445][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.407318][ T5882] net_ratelimit: 5 callbacks suppressed
[  451.407338][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.876131][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.174455][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.437279][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.066228][T23958] pimreg: tun_chr_ioctl cmd 2147767506
[  453.068593][T23958] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7350'.
[  453.163992][T23970] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7356'.
[  453.169002][T23970] openvswitch: netlink: Key type 16374 is out of range max 32
[  453.273075][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.316776][T23987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7364'.
[  453.329792][T23987] netlink: 'syz.4.7364': attribute type 20 has an invalid length.
[  453.471342][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.533804][T24002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7370'.
[  453.642357][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.843863][T24026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.847757][T24027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.212853][T24051] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7389'.
[  454.221398][T24051] netlink: 'syz.3.7389': attribute type 1 has an invalid length.
[  454.310974][T24058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.385976][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.458525][T24058] lo speed is unknown, defaulting to 1000
[  454.505463][T24073] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  454.512713][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.679417][T24087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7399'.
[  454.737887][T24090] sctp: [Deprecated]: syz.4.7398 (pid 24090) Use of int in max_burst socket option deprecated.
[  454.737887][T24090] Use struct sctp_assoc_value instead
[  454.748987][T24089] macvtap2: entered promiscuous mode
[  454.753024][T24089] vlan0: entered promiscuous mode
[  454.754846][T24089] macvtap2: entered allmulticast mode
[  454.756547][T24089] vlan0: entered allmulticast mode
[  454.836124][T24094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7401'.
[  454.839303][T24097] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7401'.
[  455.568336][T24145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7417'.
[  455.701815][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7420'.
[  455.783933][T24166] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  455.787488][T24166] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  455.864877][T24177] tipc: Trying to set illegal importance in message
[  456.589304][   T12] net_ratelimit: 5 callbacks suppressed
[  456.589321][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.599641][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.743204][T24220] netlink: 'syz.1.7442': attribute type 29 has an invalid length.
[  456.746616][T24220] netlink: 'syz.1.7442': attribute type 29 has an invalid length.
[  456.909201][T24239] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  456.914240][T24239] netlink: 'syz.1.7447': attribute type 12 has an invalid length.
[  456.936398][T24241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.632736][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.635454][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.703468][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.117105][T24331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.122573][T24331] syzkaller0: entered promiscuous mode
[  458.124658][T24331] syzkaller0: entered allmulticast mode
[  458.148580][T24335] __nla_validate_parse: 11 callbacks suppressed
[  458.148591][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7482'.
[  458.150174][T24331] tipc: Resetting bearer <eth:syzkaller0>
[  458.164048][T24329] tipc: Resetting bearer <eth:syzkaller0>
[  458.176951][T24329] tipc: Disabling bearer <eth:syzkaller0>
[  458.291571][T24341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.294013][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7485'.
[  458.342624][T24342] ieee802154 phy0 wpan0: encryption failed: -22
[  458.347010][T24342] netlink: 'syz.4.7485': attribute type 1 has an invalid length.
[  458.349542][T24342] netlink: 612 bytes leftover after parsing attributes in process `syz.4.7485'.
[  458.380798][T24344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.450311][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7488'.
[  458.497205][T24351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7489'.
[  458.648427][T24365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7493'.
[  458.793493][T24374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.800161][T24374] syzkaller0: entered promiscuous mode
[  458.804971][T24374] syzkaller0: entered allmulticast mode
[  458.832212][T24374] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  458.855459][T24374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7496'.
[  458.861574][T24374] tipc: Resetting bearer <eth:syzkaller0>
[  458.865331][T24373] tipc: Resetting bearer <eth:syzkaller0>
[  458.877560][T24373] tipc: Disabling bearer <eth:syzkaller0>
[  458.948741][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7499'.
[  459.195261][T24385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7500'.
[  459.198807][T24385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7500'.
[  459.890532][T24436] netlink: 'syz.3.7518': attribute type 41 has an invalid length.
[  459.944788][T24440] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  459.949226][T24440] syzkaller0: entered promiscuous mode
[  459.954544][T24440] syzkaller0: entered allmulticast mode
[  459.969738][T24442] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  459.974473][T24442] gretap1: entered promiscuous mode
[  459.976512][T24442] gretap1: entered allmulticast mode
[  460.127892][T24458] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  460.130158][T24457] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  460.306523][T24474] netlink: 'syz.1.7529': attribute type 1 has an invalid length.
[  460.313881][T24474] netlink: 'syz.1.7529': attribute type 1 has an invalid length.
[  460.316325][T24474] netlink: 'syz.1.7529': attribute type 1 has an invalid length.
[  460.318950][T24474] netlink: 'syz.1.7529': attribute type 2 has an invalid length.
[  460.321777][T24474] netlink: 'syz.1.7529': attribute type 2 has an invalid length.
[  460.346125][T24467] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  460.688043][T24499] netlink: 'syz.4.7538': attribute type 3 has an invalid length.
[  460.691582][T24499] netlink: 'syz.4.7538': attribute type 2 has an invalid length.
[  460.694486][T24499] netlink: 'syz.4.7538': attribute type 2 has an invalid length.
[  461.057597][T24527] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  461.070389][T24527] hsr_slave_0: left promiscuous mode
[  461.076057][T24527] hsr_slave_1: left promiscuous mode
[  461.381426][T24538] tap0: tun_chr_ioctl cmd 1074025677
[  461.385369][T24538] tap0: linktype set to 800
[  461.436842][T24534] lo speed is unknown, defaulting to 1000
[  463.510404][T24660] __nla_validate_parse: 19 callbacks suppressed
[  463.510418][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7587'.
[  463.815687][T24689] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7594'.
[  463.852236][T24696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7596'.
[  463.855120][T24696] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  463.910093][T24702] validate_nla: 1 callbacks suppressed
[  463.910106][T24702] netlink: 'syz.4.7597': attribute type 2 has an invalid length.
[  463.916105][T24702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7597'.
[  463.974904][T24702] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7597'.
[  464.032707][T24708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7599'.
[  464.277562][T24725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7606'.
[  464.280680][T24725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7606'.
[  464.345954][T24720] delete_channel: no stack
[  464.478030][T24740] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7611'.
[  464.490104][T24745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7610'.
[  464.928123][T24797] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  464.933466][T24797] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len
[  466.100347][T24847] syzkaller0: create flow: hash 1808830267 index 1
[  466.145698][ T5859] syzkaller0: tun_net_xmit 76
[  466.147847][ T5859] syzkaller0: tun_net_xmit 48
[  466.181718][   T10] syzkaller0: tun_net_xmit 76
[  466.213476][T24850] syzkaller0: delete flow: hash 1808830267 index 1
[  467.589971][T24871] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  467.605404][T24871] bond2: (slave veth5): Releasing active interface
[  467.607635][T24871] bond2: (slave veth5): the permanent HWaddr of slave - b2:f1:08:c9:06:e2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  467.633111][T24871] bond2: (slave gretap1): Releasing active interface
[  467.643051][T24871] netlink: 'syz.1.7649': attribute type 10 has an invalid length.
[  467.646803][T24871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  467.649835][T24871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  467.801251][T24879] syz_tun: left promiscuous mode
[  467.915121][T24879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.933754][T24879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.064461][T24879] mac80211_hwsim hwsim22 wlan1: left allmulticast mode
[  468.073536][T24879] geneve2: left promiscuous mode
[  468.076633][T24879] geneve2: left allmulticast mode
[  468.084075][T24879] gretap1: left promiscuous mode
[  468.086134][T24879] gretap1: left allmulticast mode
[  468.088554][ T5910] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  468.094627][ T5910] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.097457][ T5910] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  468.100192][ T5910] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  468.103232][ T5910] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.106000][ T5910] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  468.108885][ T5910] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  468.116042][ T5910] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.118835][ T5910] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  468.121901][ T5910] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  468.126514][ T5910] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  468.129311][ T5910] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  468.434300][T24900] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (115)
[  468.483851][T24907] syzkaller1: entered promiscuous mode
[  468.485913][T24907] syzkaller1: entered allmulticast mode
[  468.623858][T24922] __nla_validate_parse: 8 callbacks suppressed
[  468.623871][T24922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7663'.
[  468.792235][T24939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7671'.
[  468.891174][T24949] delete_channel: no stack
[  469.213277][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7683'.
[  469.483800][T24983] lo speed is unknown, defaulting to 1000
[  469.531674][T25006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.539461][T25006] syzkaller0: entered promiscuous mode
[  469.544910][T25006] syzkaller0: entered allmulticast mode
[  469.605779][T25006] veth1_macvtap: mtu less than device minimum
[  469.613890][T25006] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7692'.
[  469.624481][T25004] tipc: Resetting bearer <eth:syzkaller0>
[  469.656495][T25004] tipc: Disabling bearer <eth:syzkaller0>
[  469.785542][T25021] syzkaller1: entered promiscuous mode
[  469.787807][T25021] syzkaller1: entered allmulticast mode
[  469.829721][T25027] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  469.886758][T25034] netlink: 4704 bytes leftover after parsing attributes in process `syz.1.7702'.
[  469.935737][T25038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.939754][T25038] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  469.968194][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7705'.
[  469.988842][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7705'.
[  470.064030][T25030] lo speed is unknown, defaulting to 1000
[  470.436930][T25064] dvmrp1: entered allmulticast mode
[  470.441660][T25066] dvmrp1: left allmulticast mode
[  470.736891][T25083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7715'.
[  470.848894][T25088] netlink: 340 bytes leftover after parsing attributes in process `syz.4.7717'.
[  471.837726][T25154] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7741'.
[  472.770635][T25231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.773848][T25306] __nla_validate_parse: 8 callbacks suppressed
[  473.773866][T25306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7796'.
[  473.779737][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7796'.
[  473.825889][T25306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7796'.
[  473.985718][T25319] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_cmd_wq": -EINTR
[  474.168584][T25346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7802'.
[  474.208016][T25348] netlink: 'syz.3.7803': attribute type 1 has an invalid length.
[  474.228994][T25348] bond2: entered promiscuous mode
[  474.230878][T25348] 8021q: adding VLAN 0 to HW filter on device bond2
[  474.247819][T25348] 8021q: adding VLAN 0 to HW filter on device bond2
[  474.250048][T25348] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  474.253429][T25348] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  474.258373][T25348] bond2: (slave vxcan1): making interface the new active one
[  474.261105][T25348] vxcan1: entered promiscuous mode
[  474.263471][T25348] bond2: (slave vxcan1): Enslaving as an active interface with an up link
[  474.269267][T25348] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  474.364775][T25356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7806'.
[  474.367683][T25356] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  474.550250][T25362] netlink: 'syz.3.7809': attribute type 11 has an invalid length.
[  474.793089][T25389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7817'.
[  474.795644][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7817'.
[  474.847924][T25394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7817'.
[  474.856712][T25395] tipc: Enabled bearer <eth:gre0>, priority 10
[  474.963387][T25401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.966999][T25399] tipc: Resetting bearer <eth:syzkaller0>
[  475.228236][T25412] netlink: 'syz.3.7826': attribute type 2 has an invalid length.
[  476.356868][T25399] tipc: Disabling bearer <eth:syzkaller0>
[  476.553845][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7834'.
[  476.667763][T25444] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  476.766579][T25463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7842'.
[  476.887793][T25476] netlink: 'syz.3.7847': attribute type 29 has an invalid length.
[  476.891279][T25476] netlink: 'syz.3.7847': attribute type 29 has an invalid length.
[  476.945466][T25479] sctp: [Deprecated]: syz.3.7847 (pid 25479) Use of struct sctp_assoc_value in delayed_ack socket option.
[  476.945466][T25479] Use struct sctp_sack_info instead
[  476.967450][T25481] ip6gretap2: entered allmulticast mode
[  476.969615][T25481] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  477.847574][T25547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.076638][T25586] netlink: 'syz.4.7880': attribute type 5 has an invalid length.
[  478.085727][T25586] geneve3: entered promiscuous mode
[  478.087538][T25586] geneve3: entered allmulticast mode
[  478.090344][ T5859] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  478.094388][T20532] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  478.098112][T20532] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  478.104340][T20532] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  478.147712][T25594] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  478.950781][T25632] __nla_validate_parse: 6 callbacks suppressed
[  478.950794][T25632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7896'.
[  478.959497][T25632] openvswitch: netlink: nsh attr 20 is out of range max 3
[  478.962288][T25632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.097610][T25640] netlink: 'syz.1.7899': attribute type 1 has an invalid length.
[  479.171346][T25640] bond6: (slave bridge14): making interface the new active one
[  479.175843][T25640] bond6: (slave bridge14): Enslaving as an active interface with an up link
[  479.444461][T25681] netlink: 'syz.3.7912': attribute type 3 has an invalid length.
[  479.787415][T25706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7920'.
[  480.444534][T25771] netlink: 284 bytes leftover after parsing attributes in process `syz.1.7945'.
[  480.858765][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7959'.
[  481.094791][T25841] tun0: tun_chr_ioctl cmd 1074025673
[  481.222062][T25856] netlink: 'syz.4.7977': attribute type 1 has an invalid length.
[  481.339584][T25865] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7979'.
[  481.361377][T25865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7979'.
[  481.414851][T25864] lo speed is unknown, defaulting to 1000
[  481.585426][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7986'.
[  481.621360][T25880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7986'.
[  481.983993][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  482.004276][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  482.012959][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  482.293850][   T54] Bluetooth: hci2: link tx timeout
[  482.295865][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  482.428462][T25931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8007'.
[  482.446748][T25928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8007'.
[  482.551402][T25924] lo speed is unknown, defaulting to 1000
[  482.991531][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  483.071135][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  483.456594][T25954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.456699][T25952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.500164][T25958] syzkaller0: entered promiscuous mode
[  483.509341][T25958] syzkaller0: entered allmulticast mode
[  483.744944][T25988] netlink: 'syz.1.8023': attribute type 1 has an invalid length.
[  483.748542][T25988] netlink: 'syz.1.8023': attribute type 3 has an invalid length.
[  483.894788][   T24] lo speed is unknown, defaulting to 1000
[  483.900923][   T24] syz2: Port: 1 Link DOWN
[  483.940652][T26021] netlink: 'syz.4.8030': attribute type 10 has an invalid length.
[  484.264022][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  484.362012][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  484.456561][T26068] sctp: [Deprecated]: syz.1.8047 (pid 26068) Use of int in max_burst socket option.
[  484.456561][T26068] Use struct sctp_assoc_value instead
[  484.549026][T26077] __nla_validate_parse: 6 callbacks suppressed
[  484.549037][T26077] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8050'.
[  484.629558][T26083] netlink: 'syz.1.8053': attribute type 1 has an invalid length.
[  484.639671][T26083] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8053'.
[  484.749167][T26095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8058'.
[  484.926187][T26106] IPVS: set_ctl: invalid protocol: 0 172.20.20.17:20004
[  484.935421][T26115] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8062'.
[  485.017713][T26122] netlink: 360 bytes leftover after parsing attributes in process `syz.1.8065'.
[  485.871071][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  485.894128][T26213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8099'.
[  485.902206][T26211] delete_channel: no stack
[  486.063662][T26235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8108'.
[  486.248343][T26259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8116'.
[  486.256855][T26259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8116'.
[  486.259648][T26259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8116'.
[  486.427618][T26283] netlink: 'syz.4.8124': attribute type 1 has an invalid length.
[  486.430006][T26283] netlink: 'syz.4.8124': attribute type 4 has an invalid length.
[  486.557749][T26295] syzkaller1: entered promiscuous mode
[  486.559597][T26295] syzkaller1: entered allmulticast mode
[  486.990639][T26325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  488.324844][T26435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  488.327427][T26435] syzkaller0: entered promiscuous mode
[  488.329339][T26435] syzkaller0: entered allmulticast mode
[  488.358546][T26435] tipc: Resetting bearer <eth:syzkaller0>
[  488.366240][T26434] tipc: Resetting bearer <eth:syzkaller0>
[  488.385536][T26434] tipc: Disabling bearer <eth:syzkaller0>
[  489.066038][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.069125][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.075859][T26478] v: renamed from ip6_vti0
[  489.439774][T26492] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  489.715204][T26523] netlink: 'syz.3.8206': attribute type 1 has an invalid length.
[  489.717833][T26523] __nla_validate_parse: 10 callbacks suppressed
[  489.717842][T26523] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8206'.
[  489.879735][T26526] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8207'.
[  489.903392][T26526] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  489.905738][T26526] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  489.919281][T26535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8210'.
[  490.315127][T26575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8224'.
[  490.318184][T26577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8224'.
[  490.387209][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8225'.
[  490.450293][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8225'.
[  490.457558][T26589] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  490.463302][T26589] syzkaller0: entered promiscuous mode
[  490.465038][T26589] syzkaller0: entered allmulticast mode
[  490.580617][T26595] IPv6: NLM_F_REPLACE set, but no existing node found!
[  490.694589][T26604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8233'.
[  490.785075][T26613] syzkaller1: tun_chr_ioctl cmd 1074025677
[  490.787412][T26613] syzkaller1: linktype set to 6
[  490.807252][T26620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8237'.
[  491.222328][T26657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8251'.
[  491.280121][T26659] IPVS: rr: FWM 3 0x00000003 - no destination available
[  491.375757][T26657] lo speed is unknown, defaulting to 1000
[  491.440450][T26676] netlink: 'syz.3.8256': attribute type 10 has an invalid length.
[  491.591788][T26678] bond2: (slave vxcan1): Releasing backup interface
[  491.594196][T26678] vxcan1 (unregistering): left promiscuous mode
[  491.597720][T26678] bond2: Destroying bond
[  491.701072][T26678] bond2 (unregistering): Released all slaves
[  492.186896][T26702] netlink: 'syz.4.8266': attribute type 10 has an invalid length.
[  492.195558][T26702] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode
[  492.198384][T26702] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  492.703176][T26753] sctp: [Deprecated]: syz.3.8289 (pid 26753) Use of struct sctp_assoc_value in delayed_ack socket option.
[  492.703176][T26753] Use struct sctp_sack_info instead
[  492.844816][T26772] netlink: 'syz.3.8295': attribute type 1 has an invalid length.
[  492.902440][T26776] netlink: 'syz.1.8297': attribute type 1 has an invalid length.
[  492.926261][T26776] bond7 (unregistering): Released all slaves
[  493.031494][T26783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.040983][T26783] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode
[  493.043353][T26783] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode
[  493.068248][T26783] tipc: Resetting bearer <eth:syzkaller0>
[  493.834850][T26843] batadv_slave_1: entered promiscuous mode
[  493.858958][T26840] batadv_slave_1: left promiscuous mode
[  494.052974][   T95] tipc: Node number set to 2352414277
[  494.591206][   T64] wlan1: Trigger new scan to find an IBSS to join
[  495.180726][T26902] __nla_validate_parse: 13 callbacks suppressed
[  495.180740][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8344'.
[  495.510146][T26937] netlink: 'syz.3.8354': attribute type 4 has an invalid length.
[  495.515100][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8354'.
[  496.076656][T26955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8360'.
[  496.097620][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8360'.
[  496.525541][T26983] 8021q: VLANs not supported on nlmon0
[  496.556478][T26987] netlink: 340 bytes leftover after parsing attributes in process `syz.4.8373'.
[  496.801593][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8379'.
[  496.847783][T27004] batman_adv: batadv0: Adding interface: ipvlan2
[  496.850435][T27004] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  496.859252][T27004] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  496.887473][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8382'.
[  496.890191][T27008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8382'.
[  497.286734][ T5910] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  497.363531][T27042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  497.551346][   T36] wlan1: Trigger new scan to find an IBSS to join
[  497.992598][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8391'.
[  498.057043][T27046] team0 (unregistering): Port device team_slave_0 removed
[  498.076528][T27046] team0 (unregistering): Port device team_slave_1 removed
[  498.289010][T27066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.297571][T27066] geneve1: entered promiscuous mode
[  498.299188][T27066] geneve1: entered allmulticast mode
[  498.335671][T27061] tipc: Disabling bearer <eth:syzkaller0>
[  498.340694][T27075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8402'.
[  498.555149][T27101] netlink: 'syz.1.8412': attribute type 9 has an invalid length.
[  499.238726][T27169] team0: Port device team_slave_0 removed
[  499.383456][T27183] netlink: 'syz.4.8438': attribute type 10 has an invalid length.
[  499.477379][T27174] lo speed is unknown, defaulting to 1000
[  500.511676][T21615] wlan1: Trigger new scan to find an IBSS to join
[  501.263197][T27222] __nla_validate_parse: 7 callbacks suppressed
[  501.263209][T27222] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8450'.
[  501.428648][T27237] netlink: 340 bytes leftover after parsing attributes in process `syz.3.8457'.
[  501.461162][   T64] wlan1: Creating new IBSS network, BSSID 56:36:b0:c3:6a:dc
[  502.628842][T27284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8474'.
[  503.155073][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8487'.
[  503.163022][T27323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8483'.
[  503.172058][T27319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.336079][T27335] netlink: 'syz.3.8492': attribute type 3 has an invalid length.
[  503.338768][T27335] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8492'.
[  503.584983][T27350] netlink: 340 bytes leftover after parsing attributes in process `syz.1.8497'.
[  504.228168][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8502'.
[  504.230935][T27369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8502'.
[  504.332138][T27375] syzkaller1: entered promiscuous mode
[  504.340742][T27375] syzkaller1: entered allmulticast mode
[  504.605759][T27395] netlink: 'syz.4.8513': attribute type 1 has an invalid length.
[  504.624597][T27395] bond2: entered promiscuous mode
[  504.626650][T27395] 8021q: adding VLAN 0 to HW filter on device bond2
[  504.635847][T27395] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8513'.
[  504.644106][T27395] batadv1: entered promiscuous mode
[  504.646315][T27395] batadv1: entered allmulticast mode
[  504.650058][T27395] 8021q: adding VLAN 0 to HW filter on device batadv1
[  504.657615][T27395] bond2: (slave batadv1): making interface the new active one
[  504.662116][T27395] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  505.926903][T27440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.339219][T27456] __nla_validate_parse: 2 callbacks suppressed
[  506.339232][T27456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8535'.
[  507.054708][T27495] netlink: 'syz.4.8548': attribute type 3 has an invalid length.
[  507.083681][T27501] netlink: 'syz.1.8546': attribute type 16 has an invalid length.
[  507.086298][T27501] netlink: 'syz.1.8546': attribute type 17 has an invalid length.
[  507.122865][T27501] 8021q: adding VLAN 0 to HW filter on device 
[  507.126040][T27501] 8021q: adding VLAN 0 to HW filter on device team0
[  507.130806][T27501] tipc: Resetting bearer <eth:team0>
[  507.141248][T27501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  507.335655][T27516] netlink: 340 bytes leftover after parsing attributes in process `syz.4.8554'.
[  507.420750][T27520] veth0_to_bond: entered allmulticast mode
[  507.589130][T27524] netlink: 'syz.4.8558': attribute type 1 has an invalid length.
[  507.592672][T27524] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8558'.
[  507.727190][T27528] netlink: 45 bytes leftover after parsing attributes in process `syz.4.8560'.
[  507.862064][T27533] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  507.871199][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  508.070406][T27548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8569'.
[  508.228925][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8571'.
[  508.232891][T27555] netlink: 'syz.1.8571': attribute type 30 has an invalid length.
[  508.253192][ T5910] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  508.258444][ T5910] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  508.264788][ T5910] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  508.267655][ T5910] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  508.304245][T27557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8572'.
[  508.831060][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  508.906533][T27575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8580'.
[  508.989872][T27583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8584'.
[  509.195096][T27604] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8593'.
[  509.240105][T27604] netlink: 'syz.1.8593': attribute type 21 has an invalid length.
[  510.536470][T27675] netlink: 'syz.1.8619': attribute type 13 has an invalid length.
[  510.540004][T27675] netlink: 'syz.1.8619': attribute type 13 has an invalid length.
[  510.679743][T27681] bond0: (slave 30): Releasing backup interface
[  510.683480][T27681] bond0: (slave bond_slave_1): Releasing backup interface
[  510.688827][T27681] team0: Port device team_slave_1 removed
[  510.691584][T27681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.694305][T27681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.697547][T27681] bond0: (slave wlan1): Releasing backup interface
[  511.082095][T27713] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20004
[  511.320009][T27724] lo speed is unknown, defaulting to 1000
[  511.500505][T27728] __nla_validate_parse: 9 callbacks suppressed
[  511.500520][T27728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8638'.
[  511.505652][T27728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8638'.
[  511.509035][T27728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8638'.
[  512.156493][T27772] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  512.215071][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8655'.
[  512.218952][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8655'.
[  512.226359][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8655'.
[  512.230037][T27777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8655'.
[  512.238186][T27777] netlink: 'syz.3.8655': attribute type 11 has an invalid length.
[  512.524225][T27800] netlink: 340 bytes leftover after parsing attributes in process `syz.3.8663'.
[  512.697460][T27813] tipc: Resetting bearer <eth:syzkaller0>
[  512.798752][T27822] netlink: 2188 bytes leftover after parsing attributes in process `syz.1.8672'.
[  513.038304][T27848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8681'.
[  513.161009][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  513.169370][T27864] netlink: 'syz.3.8689': attribute type 1 has an invalid length.
[  513.996050][T27882] netlink: 'syz.3.8695': attribute type 9 has an invalid length.
[  514.106259][T27893] netlink: 'syz.1.8699': attribute type 1 has an invalid length.
[  514.130141][T27895] netlink: 'syz.3.8698': attribute type 1 has an invalid length.
[  514.133575][T27895] netlink: 'syz.3.8698': attribute type 2 has an invalid length.
[  514.138191][T27896] netlink: 'syz.3.8698': attribute type 1 has an invalid length.
[  514.265347][T27906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.508954][T27943] validate_nla: 3 callbacks suppressed
[  515.508974][T27943] netlink: 'syz.3.8716': attribute type 1 has an invalid length.
[  515.514750][T27943] netlink: 'syz.3.8716': attribute type 4 has an invalid length.
[  516.766021][T28013] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  516.821939][T28017] __nla_validate_parse: 6 callbacks suppressed
[  516.821988][T28017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8741'.
[  516.950350][T28028] netlink: 'syz.1.8747': attribute type 4 has an invalid length.
[  516.963346][T28029] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  516.969441][T28026] IPVS: stopping backup sync thread 28029 ...
[  516.994365][T28030] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8746'.
[  516.997585][T28026] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8746'.
[  517.008720][T28032] tun0: tun_chr_ioctl cmd 2147767520
[  517.014814][T28026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8746'.
[  517.018262][T28026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8746'.
[  517.024726][T28030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8746'.
[  517.027701][T28030] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8746'.
[  517.249197][T28052] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.8756'.
[  517.410252][T28058] netlink: 340 bytes leftover after parsing attributes in process `syz.1.8758'.
[  517.540257][T28061] netlink: 'syz.1.8759': attribute type 1 has an invalid length.
[  517.551140][T28061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8759'.
[  517.743917][T28075] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  518.071747][T28101] bond0: option all_slaves_active: invalid value (7)
[  518.219430][T28119] netlink: 'syz.3.8784': attribute type 10 has an invalid length.
[  518.225117][T28119] team0: Device hsr_slave_0 failed to register rx_handler
[  518.266994][T28132] netlink: 'syz.3.8787': attribute type 2 has an invalid length.
[  518.547975][T28168] netlink: 'syz.1.8799': attribute type 15 has an invalid length.
[  518.700811][T28173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  519.334450][T28199] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  519.338192][T28199] macsec0: entered allmulticast mode
[  519.340526][T28199] team0: entered allmulticast mode
[  519.845538][T28228] tipc: Resetting bearer <eth:gre0>
[  519.847728][T28228] tipc: Resetting bearer <eth:gre0>
[  519.886347][ T5882] lo speed is unknown, defaulting to 1000
[  520.102258][T28246] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  520.109799][T28246] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  520.121461][T28246] syzkaller0: entered promiscuous mode
[  520.123694][T28246] syzkaller0: entered allmulticast mode
[  520.822148][ T5910] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.825210][ T5910] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  520.860424][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  520.864316][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  520.872509][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  520.875863][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  521.023824][T28323] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003
[  521.418000][T28341] lo speed is unknown, defaulting to 1000
[  522.027540][T28357] __nla_validate_parse: 29 callbacks suppressed
[  522.027597][T28357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8865'.
[  522.405266][T28380] syzkaller1: entered promiscuous mode
[  522.407662][T28380] syzkaller1: entered allmulticast mode
[  523.386871][T28389] netlink: 'syz.3.8877': attribute type 1 has an invalid length.
[  523.390161][T28389] netlink: 'syz.3.8877': attribute type 4 has an invalid length.
[  523.709420][T28398] netlink: 'syz.4.8881': attribute type 1 has an invalid length.
[  523.714171][T28398] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8881'.
[  523.717440][T28398] netlink: 105 bytes leftover after parsing attributes in process `syz.4.8881'.
[  523.825113][T28429] netlink: 'syz.3.8890': attribute type 15 has an invalid length.
[  523.829015][T28429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8890'.
[  524.164301][T28438] lo speed is unknown, defaulting to 1000
[  524.715219][T28451] syzkaller0: entered promiscuous mode
[  524.717474][T28451] syzkaller0: entered allmulticast mode
[  524.794318][T28461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8902'.
[  524.824343][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8901'.
[  526.208095][T28463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8904'.
[  526.376997][T28481] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.8911'.
[  526.417396][T28484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8912'.
[  526.530749][T28495] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8917'.
[  526.629398][T28507] bond0: entered promiscuous mode
[  526.637377][T28507] bond0: entered allmulticast mode
[  526.639764][T28507] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.139514][T28517] __nla_validate_parse: 1 callbacks suppressed
[  527.139530][T28517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8923'.
[  527.298297][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8927'.
[  527.302809][T28525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8927'.
[  527.618525][T28529] lo speed is unknown, defaulting to 1000
[  527.656071][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8930'.
[  527.788152][T28545] vlan3: entered promiscuous mode
[  527.789762][T28545] macvtap0: entered promiscuous mode
[  527.840711][T28549] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8936'.
[  528.078357][T28572] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8945'.
[  528.233006][T28572]  (unregistering): Released all slaves
[  528.292732][T28572] pim6reg1: entered promiscuous mode
[  528.294896][T28572] pim6reg1: entered allmulticast mode
[  528.555577][T28621] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8960'.
[  528.559585][T28622] netlink: 348 bytes leftover after parsing attributes in process `syz.3.8960'.
[  529.323539][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8976'.
[  529.328628][T28673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.392483][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8976'.
[  529.399839][T28678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.476522][T28683] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  529.650558][T28699] batadv1: entered promiscuous mode
[  529.655368][T28699] batadv1: entered allmulticast mode
[  531.026075][T28763] netlink: 'syz.3.9006': attribute type 33 has an invalid length.
[  531.044122][T28763] netlink: 'syz.3.9006': attribute type 1 has an invalid length.
[  531.494658][T28818] tc_dump_action: action bad kind
[  531.546463][T28823] netlink: 'syz.1.9025': attribute type 5 has an invalid length.
[  532.012822][T28871] netlink: 'syz.1.9047': attribute type 1 has an invalid length.
[  532.160558][T28889] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  532.166690][T28889] __nla_validate_parse: 10 callbacks suppressed
[  532.166706][T28889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9053'.
[  532.173596][T28889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9053'.
[  532.208290][T28896] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9055'.
[  533.373379][T28926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9064'.
[  533.429666][T28936] tipc: Resetting bearer <eth:team0>
[  533.920153][T28971] netlink: 165 bytes leftover after parsing attributes in process `syz.4.9078'.
[  534.101440][T28991] netlink: 'syz.1.9082': attribute type 2 has an invalid length.
[  534.103913][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9082'.
[  534.994517][T29007] netlink: 'syz.4.9087': attribute type 1 has an invalid length.
[  534.997790][T29007] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9087'.
[  535.008566][T29007] netlink: 'syz.4.9087': attribute type 1 has an invalid length.
[  535.098196][T29020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9091'.
[  535.467844][T29059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9102'.
[  535.500665][T29059] netlink: 'syz.4.9102': attribute type 10 has an invalid length.
[  535.503988][T29059] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  535.532581][T29050] lo speed is unknown, defaulting to 1000
[  535.667011][T29064] netlink: 'syz.1.9103': attribute type 6 has an invalid length.
[  535.772792][T29072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9105'.
[  535.943597][T29084] IPVS: Scheduler module ip_vs_sip not found
[  536.218940][T29115] netlink: 'syz.4.9119': attribute type 1 has an invalid length.
[  536.569472][T29164] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  536.798131][T29187] openvswitch: netlink: Flow key attr not present in new flow.
[  536.867299][T29191] nbd: must specify at least one socket
[  536.919796][T29195] IPVS: length: 214 != 24
[  538.201922][T29240] __nla_validate_parse: 9 callbacks suppressed
[  538.201938][T29240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9153'.
[  538.582701][T29272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9161'.
[  538.593452][T29274] openvswitch: netlink: IPv4 tun info is not correct
[  538.599460][T29274] syzkaller1: entered promiscuous mode
[  538.608783][T29274] syzkaller1: entered allmulticast mode
[  538.911045][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  539.029541][T29324] 0: renamed from sit0
[  539.045471][T29321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9177'.
[  539.112920][T29334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9180'.
[  539.189425][T29339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  539.196697][T29339] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  539.415645][T29355] team0: entered promiscuous mode
[  539.417317][T29355] team0: entered allmulticast mode
[  539.419447][T29355] 8021q: adding VLAN 0 to HW filter on device team0
[  539.424168][T29358] only policy match revision 0 supported
[  539.424178][T29358] unable to load match
[  539.434926][T29358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9189'.
[  539.442427][T29358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9189'.
[  539.449344][T29358] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  539.455377][T29371] openvswitch: netlink: VXLAN extension 226 out of range max 1
[  539.512133][T29376] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  540.828114][T29486] veth1_to_bond: entered allmulticast mode
[  540.832716][T29485] veth1_to_bond: left allmulticast mode
[  540.930810][T29492] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9231'.
[  540.939315][T29492] nbd: illegal input index 65508
[  541.212010][T29502] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9234'.
[  541.217613][T29502] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.9234'.
[  541.221123][T29502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'.
[  541.337493][T29514] syz_tun: entered allmulticast mode
[  541.342153][T29514] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  541.427368][T29513] syz_tun: left allmulticast mode
[  541.479113][T29527] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000
[  541.950524][T29564] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.981336][T29374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  542.072873][T29574] nbd1: detected capacity change from 0 to 127
[  542.076020][   T56] block nbd1: Receive control failed (result -32)
[  542.296284][T29601] netlink: 'syz.4.9265': attribute type 1 has an invalid length.
[  542.316810][T29601] 8021q: adding VLAN 0 to HW filter on device bond3
[  542.340138][T29601] 8021q: adding VLAN 0 to HW filter on device bond3
[  542.342984][T29601] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  542.347760][T29601] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  542.400036][T29603] bond3: (slave bridge2): Enslaving as an active interface with a down link
[  542.419372][T29608] vlan0: entered promiscuous mode
[  542.683388][T29374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  543.182038][T29693] tun0: tun_chr_ioctl cmd 1074025673
[  543.242882][T29700] __nla_validate_parse: 14 callbacks suppressed
[  543.242896][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9294'.
[  543.384935][ T5859] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  543.596448][T29730] netlink: 'syz.1.9303': attribute type 4 has an invalid length.
[  544.223195][T29737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.226886][T29737] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  545.077949][T29737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.085268][T29737] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  545.188829][T29737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.194662][T29737] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  545.248828][T29760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9309'.
[  545.275697][T29737] bond0: (slave netdevsim0): Releasing backup interface
[  545.278640][T29737] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[  545.408902][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  545.411885][   T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  545.424668][T29787] xt_HMARK: spi-set and port-set can't be combined
[  545.438200][T29790] netlink: 'syz.3.9315': attribute type 3 has an invalid length.
[  545.459350][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  545.462569][   T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  545.469425][ T5910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  545.473004][ T5910] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  545.484244][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  545.486925][   T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  545.556313][T29794] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  545.559498][T29794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  545.618792][T29794] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  545.623059][T29794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  545.661761][T29794] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  545.664934][T29794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  545.705869][T29794] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  545.709886][T29794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  545.785412][T20532] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.787990][T20532] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  545.808898][T20532] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.812396][T20532] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  545.816467][T20532] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.819538][T20532] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  545.834051][T20532] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.838644][T20532] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  545.846795][T29795] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  545.849745][T29795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  545.856873][T20532] ==================================================================
[  545.859357][T20532] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  545.861647][T20532] Read of size 8 at addr ffff88810da948b0 by task kworker/u8:5/20532
[  545.865174][T20532] 
[  545.866255][T20532] CPU: 0 UID: 0 PID: 20532 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  545.866267][T20532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  545.866274][T20532] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  545.866297][T20532] Call Trace:
[  545.866303][T20532]  <TASK>
[  545.866307][T20532]  dump_stack_lvl+0x189/0x250
[  545.866320][T20532]  ? __kasan_check_byte+0x12/0x40
[  545.866333][T20532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  545.866341][T20532]  ? lock_release+0x4b/0x3e0
[  545.866355][T20532]  ? __virt_addr_valid+0x4a5/0x5c0
[  545.866367][T20532]  print_report+0xca/0x240
[  545.866375][T20532]  ? __mutex_lock+0x147/0x1350
[  545.866382][T20532]  kasan_report+0x118/0x150
[  545.866392][T20532]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  545.866404][T20532]  ? __mutex_lock+0x147/0x1350
[  545.866412][T20532]  __mutex_lock+0x147/0x1350
[  545.866419][T20532]  ? __mutex_lock+0x5bb/0x1350
[  545.866426][T20532]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  545.866438][T20532]  ? __pfx___mutex_lock+0x10/0x10
[  545.866445][T20532]  ? __lock_acquire+0xab9/0xd20
[  545.866458][T20532]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  545.866470][T20532]  ? process_scheduled_works+0x9ef/0x17b0
[  545.866478][T20532]  ? process_scheduled_works+0x9ef/0x17b0
[  545.866495][T20532]  process_scheduled_works+0xae1/0x17b0
[  545.866508][T20532]  ? __pfx_process_scheduled_works+0x10/0x10
[  545.866518][T20532]  worker_thread+0x8a0/0xda0
[  545.866526][T20532]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  545.866538][T20532]  ? __kthread_parkme+0x7b/0x200
[  545.866548][T20532]  kthread+0x711/0x8a0
[  545.866558][T20532]  ? __pfx_worker_thread+0x10/0x10
[  545.866565][T20532]  ? __pfx_kthread+0x10/0x10
[  545.866574][T20532]  ? _raw_spin_unlock_irq+0x23/0x50
[  545.866583][T20532]  ? lockdep_hardirqs_on+0x9c/0x150
[  545.866595][T20532]  ? __pfx_kthread+0x10/0x10
[  545.866604][T20532]  ret_from_fork+0x3fc/0x770
[  545.866613][T20532]  ? __pfx_ret_from_fork+0x10/0x10
[  545.866621][T20532]  ? __switch_to_asm+0x39/0x70
[  545.866631][T20532]  ? __switch_to_asm+0x33/0x70
[  545.866640][T20532]  ? __pfx_kthread+0x10/0x10
[  545.866648][T20532]  ret_from_fork_asm+0x1a/0x30
[  545.866661][T20532]  </TASK>
[  545.866664][T20532] 
[  545.946771][T20532] Allocated by task 29794:
[  545.948520][T20532]  kasan_save_track+0x3e/0x80
[  545.950401][T20532]  __kasan_kmalloc+0x93/0xb0
[  545.952253][T20532]  __kmalloc_noprof+0x27a/0x4f0
[  545.954238][T20532]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  545.956537][T20532]  notifier_call_chain+0x1b6/0x3e0
[  545.958303][T20532]  register_netdevice+0x1608/0x1ae0
[  545.960272][T20532]  nsim_create+0xae8/0xf10
[  545.962012][T20532]  __nsim_dev_port_add+0x6b6/0xb10
[  545.963967][T20532]  nsim_dev_port_add_all+0x37/0xf0
[  545.965738][T20532]  nsim_dev_reload_up+0x451/0x780
[  545.967767][T20532]  devlink_reload+0x4ec/0x8d0
[  545.969646][T20532]  devlink_nl_reload_doit+0xb35/0xd50
[  545.971774][T20532]  genl_family_rcv_msg_doit+0x215/0x300
[  545.973947][T20532]  genl_rcv_msg+0x60e/0x790
[  545.975762][T20532]  netlink_rcv_skb+0x208/0x470
[  545.977659][T20532]  genl_rcv+0x28/0x40
[  545.979204][T20532]  netlink_unicast+0x82f/0x9e0
[  545.981036][T20532]  netlink_sendmsg+0x805/0xb30
[  545.982902][T20532]  __sock_sendmsg+0x21c/0x270
[  545.984773][T20532]  ____sys_sendmsg+0x505/0x830
[  545.986667][T20532]  ___sys_sendmsg+0x21f/0x2a0
[  545.988562][T20532]  __x64_sys_sendmsg+0x19b/0x260
[  545.990205][T20532]  do_syscall_64+0xfa/0x3b0
[  545.992005][T20532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.994391][T20532] 
[  545.995365][T20532] Freed by task 29795:
[  545.996972][T20532]  kasan_save_track+0x3e/0x80
[  545.998879][T20532]  kasan_save_free_info+0x46/0x50
[  546.000906][T20532]  __kasan_slab_free+0x5b/0x80
[  546.002818][T20532]  kfree+0x18e/0x440
[  546.004414][T20532]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  546.006900][T20532]  notifier_call_chain+0x1b6/0x3e0
[  546.008941][T20532]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  546.011537][T20532]  unregister_netdevice_queue+0x33c/0x380
[  546.013966][T20532]  nsim_destroy+0x1dd/0x670
[  546.015782][T20532]  __nsim_dev_port_del+0x14d/0x1b0
[  546.017851][T20532]  nsim_dev_reload_destroy+0x288/0x490
[  546.019995][T20532]  nsim_dev_reload_down+0x8a/0xc0
[  546.021957][T20532]  devlink_reload+0x1b6/0x8d0
[  546.023838][T20532]  devlink_nl_reload_doit+0xb35/0xd50
[  546.025939][T20532]  genl_family_rcv_msg_doit+0x215/0x300
[  546.028103][T20532]  genl_rcv_msg+0x60e/0x790
[  546.029917][T20532]  netlink_rcv_skb+0x208/0x470
[  546.031847][T20532]  genl_rcv+0x28/0x40
[  546.033450][T20532]  netlink_unicast+0x82f/0x9e0
[  546.035373][T20532]  netlink_sendmsg+0x805/0xb30
[  546.037305][T20532]  __sock_sendmsg+0x21c/0x270
[  546.039222][T20532]  ____sys_sendmsg+0x505/0x830
[  546.041144][T20532]  ___sys_sendmsg+0x21f/0x2a0
[  546.043029][T20532]  __x64_sys_sendmsg+0x19b/0x260
[  546.044933][T20532]  do_syscall_64+0xfa/0x3b0
[  546.046766][T20532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.048876][T20532] 
[  546.049667][T20532] Last potentially related work creation:
[  546.051468][T20532]  kasan_save_stack+0x3e/0x60
[  546.052989][T20532]  kasan_record_aux_stack+0xbd/0xd0
[  546.055094][T20532]  insert_work+0x3d/0x330
[  546.056861][T20532]  __queue_work+0xbaf/0xfb0
[  546.058736][T20532]  queue_work_on+0x181/0x270
[  546.060609][T20532]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  546.062846][T20532]  udp_tunnel_push_rx_port+0x180/0x200
[  546.064690][T20532]  geneve_offload_rx_ports+0xd7/0x160
[  546.066356][T20532]  geneve_netdevice_event+0x6a/0x80
[  546.067970][T20532]  notifier_call_chain+0x1b6/0x3e0
[  546.069757][T20532]  call_netdevice_notifiers+0x88/0xc0
[  546.071853][T20532]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  546.074445][T20532]  notifier_call_chain+0x1b6/0x3e0
[  546.076407][T20532]  register_netdevice+0x1608/0x1ae0
[  546.078492][T20532]  nsim_create+0xae8/0xf10
[  546.079906][T20532]  __nsim_dev_port_add+0x6b6/0xb10
[  546.081523][T20532]  nsim_dev_port_add_all+0x37/0xf0
[  546.083113][T20532]  nsim_dev_reload_up+0x451/0x780
[  546.084800][T20532]  devlink_reload+0x4ec/0x8d0
[  546.086268][T20532]  devlink_nl_reload_doit+0xb35/0xd50
[  546.087924][T20532]  genl_family_rcv_msg_doit+0x215/0x300
[  546.089792][T20532]  genl_rcv_msg+0x60e/0x790
[  546.091496][T20532]  netlink_rcv_skb+0x208/0x470
[  546.093149][T20532]  genl_rcv+0x28/0x40
[  546.094566][T20532]  netlink_unicast+0x82f/0x9e0
[  546.096405][T20532]  netlink_sendmsg+0x805/0xb30
[  546.098293][T20532]  __sock_sendmsg+0x21c/0x270
[  546.100133][T20532]  ____sys_sendmsg+0x505/0x830
[  546.101957][T20532]  ___sys_sendmsg+0x21f/0x2a0
[  546.103778][T20532]  __x64_sys_sendmsg+0x19b/0x260
[  546.105760][T20532]  do_syscall_64+0xfa/0x3b0
[  546.107499][T20532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.109310][T20532] 
[  546.110043][T20532] Second to last potentially related work creation:
[  546.112540][T20532]  kasan_save_stack+0x3e/0x60
[  546.114402][T20532]  kasan_record_aux_stack+0xbd/0xd0
[  546.116432][T20532]  insert_work+0x3d/0x330
[  546.118135][T20532]  __queue_work+0xcd2/0xfb0
[  546.119899][T20532]  queue_work_on+0x181/0x270
[  546.121687][T20532]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  546.123597][T20532]  udp_tunnel_push_rx_port+0x180/0x200
[  546.125734][T20532]  vxlan_offload_rx_ports+0x139/0x200
[  546.127865][T20532]  vxlan_netdevice_event+0x111/0x470
[  546.130023][T20532]  notifier_call_chain+0x1b6/0x3e0
[  546.131987][T20532]  call_netdevice_notifiers+0x88/0xc0
[  546.133956][T20532]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  546.135982][T20532]  notifier_call_chain+0x1b6/0x3e0
[  546.137658][T20532]  register_netdevice+0x1608/0x1ae0
[  546.139278][T20532]  nsim_create+0xae8/0xf10
[  546.140653][T20532]  __nsim_dev_port_add+0x6b6/0xb10
[  546.142220][T20532]  nsim_dev_port_add_all+0x37/0xf0
[  546.143742][T20532]  nsim_dev_reload_up+0x451/0x780
[  546.145490][T20532]  devlink_reload+0x4ec/0x8d0
[  546.147298][T20532]  devlink_nl_reload_doit+0xb35/0xd50
[  546.148946][T20532]  genl_family_rcv_msg_doit+0x215/0x300
[  546.150924][T20532]  genl_rcv_msg+0x60e/0x790
[  546.152649][T20532]  netlink_rcv_skb+0x208/0x470
[  546.154452][T20532]  genl_rcv+0x28/0x40
[  546.155758][T20532]  netlink_unicast+0x82f/0x9e0
[  546.157448][T20532]  netlink_sendmsg+0x805/0xb30
[  546.159143][T20532]  __sock_sendmsg+0x21c/0x270
[  546.160805][T20532]  ____sys_sendmsg+0x505/0x830
[  546.162343][T20532]  ___sys_sendmsg+0x21f/0x2a0
[  546.163881][T20532]  __x64_sys_sendmsg+0x19b/0x260
[  546.165773][T20532]  do_syscall_64+0xfa/0x3b0
[  546.167340][T20532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.169333][T20532] 
[  546.170210][T20532] The buggy address belongs to the object at ffff88810da94800
[  546.170210][T20532]  which belongs to the cache kmalloc-256 of size 256
[  546.174663][T20532] The buggy address is located 176 bytes inside of
[  546.174663][T20532]  freed 256-byte region [ffff88810da94800, ffff88810da94900)
[  546.178792][T20532] 
[  546.179741][T20532] The buggy address belongs to the physical page:
[  546.182263][T20532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10da94
[  546.185644][T20532] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  546.188551][T20532] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  546.191449][T20532] page_type: f5(slab)
[  546.192684][T20532] raw: 057ff00000000040 ffff88801a441b40 ffffea00010f4d80 dead000000000005
[  546.195813][T20532] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  546.199005][T20532] head: 057ff00000000040 ffff88801a441b40 ffffea00010f4d80 dead000000000005
[  546.202177][T20532] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  546.204866][T20532] head: 057ff00000000001 ffffea000436a501 00000000ffffffff 00000000ffffffff
[  546.208109][T20532] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  546.211554][T20532] page dumped because: kasan: bad access detected
[  546.214150][T20532] page_owner tracks the page as allocated
[  546.216468][T20532] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18498738342, free_ts 0
[  546.224300][T20532]  post_alloc_hook+0x240/0x2a0
[  546.226279][T20532]  get_page_from_freelist+0x21e4/0x22c0
[  546.228366][T20532]  __alloc_frozen_pages_noprof+0x181/0x370
[  546.230396][T20532]  alloc_pages_mpol+0x232/0x4a0
[  546.231865][T20532]  allocate_slab+0x8a/0x370
[  546.233245][T20532]  ___slab_alloc+0xbeb/0x1410
[  546.234764][T20532]  __kvmalloc_node_noprof+0x429/0x5f0
[  546.236455][T20532]  v4l2_ctrl_new+0x9d0/0x1780
[  546.237856][T20532]  v4l2_ctrl_new_custom+0x57c/0x7b0
[  546.239401][T20532]  vivid_create_controls+0xb7e/0x3a60
[  546.240957][T20532]  vivid_probe+0x41bf/0x7180
[  546.242401][T20532]  platform_probe+0xf9/0x190
[  546.243801][T20532]  really_probe+0x26d/0x9e0
[  546.245463][T20532]  __driver_probe_device+0x18c/0x2f0
[  546.247164][T20532]  driver_probe_device+0x4f/0x430
[  546.248819][T20532]  __driver_attach+0x452/0x700
[  546.250476][T20532] page_owner free stack trace missing
[  546.252388][T20532] 
[  546.253127][T20532] Memory state around the buggy address:
[  546.254804][T20532]  ffff88810da94780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  546.257256][T20532]  ffff88810da94800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  546.259751][T20532] >ffff88810da94880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  546.262427][T20532]                                      ^
[  546.264101][T20532]  ffff88810da94900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  546.267010][T20532]  ffff88810da94980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  546.269826][T20532] ==================================================================
[  546.279196][T20532] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  546.281625][T20532] CPU: 0 UID: 0 PID: 20532 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  546.284684][T20532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  546.288477][T20532] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  546.291316][T20532] Call Trace:
[  546.292645][T20532]  <TASK>
[  546.293805][T20532]  dump_stack_lvl+0x99/0x250
[  546.295611][T20532]  ? __asan_memcpy+0x40/0x70
[  546.297449][T20532]  ? __pfx_dump_stack_lvl+0x10/0x10
[  546.299503][T20532]  ? __pfx__printk+0x10/0x10
[  546.301327][T20532]  vpanic+0x281/0x750
[  546.302875][T20532]  ? preempt_schedule+0xae/0xc0
[  546.304760][T20532]  ? __pfx_vpanic+0x10/0x10
[  546.306516][T20532]  ? preempt_schedule_common+0x83/0xd0
[  546.308561][T20532]  ? preempt_schedule+0xae/0xc0
[  546.310439][T20532]  ? __pfx_preempt_schedule+0x10/0x10
[  546.312516][T20532]  panic+0xb9/0xc0
[  546.313983][T20532]  ? __pfx_panic+0x10/0x10
[  546.315828][T20532]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  546.318198][T20532]  ? __mutex_lock+0x147/0x1350
[  546.320114][T20532]  check_panic_on_warn+0x89/0xb0
[  546.322122][T20532]  ? __mutex_lock+0x147/0x1350
[  546.324117][T20532]  end_report+0x78/0x160
[  546.325852][T20532]  kasan_report+0x129/0x150
[  546.327728][T20532]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  546.330096][T20532]  ? __mutex_lock+0x147/0x1350
[  546.331859][T20532]  __mutex_lock+0x147/0x1350
[  546.333527][T20532]  ? __mutex_lock+0x5bb/0x1350
[  546.335410][T20532]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  546.337875][T20532]  ? __pfx___mutex_lock+0x10/0x10
[  546.339873][T20532]  ? __lock_acquire+0xab9/0xd20
[  546.341785][T20532]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  546.344250][T20532]  ? process_scheduled_works+0x9ef/0x17b0
[  546.346520][T20532]  ? process_scheduled_works+0x9ef/0x17b0
[  546.348810][T20532]  process_scheduled_works+0xae1/0x17b0
[  546.350926][T20532]  ? __pfx_process_scheduled_works+0x10/0x10
[  546.353142][T20532]  worker_thread+0x8a0/0xda0
[  546.354613][T20532]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  546.356946][T20532]  ? __kthread_parkme+0x7b/0x200
[  546.358537][T20532]  kthread+0x711/0x8a0
[  546.359811][T20532]  ? __pfx_worker_thread+0x10/0x10
[  546.361384][T20532]  ? __pfx_kthread+0x10/0x10
[  546.362815][T20532]  ? _raw_spin_unlock_irq+0x23/0x50
[  546.364436][T20532]  ? lockdep_hardirqs_on+0x9c/0x150
[  546.366156][T20532]  ? __pfx_kthread+0x10/0x10
[  546.367581][T20532]  ret_from_fork+0x3fc/0x770
[  546.368985][T20532]  ? __pfx_ret_from_fork+0x10/0x10
[  546.370523][T20532]  ? __switch_to_asm+0x39/0x70
[  546.371948][T20532]  ? __switch_to_asm+0x33/0x70
[  546.373557][T20532]  ? __pfx_kthread+0x10/0x10
[  546.375465][T20532]  ret_from_fork_asm+0x1a/0x30
[  546.377472][T20532]  </TASK>
[  546.379403][T20532] Kernel Offset: disabled
[  546.381210][T20532] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:01:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900068a7130
R8 =ffff888106990237 R9 =1ffff11020d32046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd911 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb74c1f5fc8 CR3=000000012e4de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=224e000000000000 0000000078900600 XMM03=0000000040009845 0008ffffffffffff
XMM04=0000000000000000 00dbe39018f88831 XMM05=ea2203b7defb5801 d93ec105ce5b34d0
XMM06=557efdd9ce159fe7 01383bfc44726c18 XMM07=63ac359f076efe00 732ef5b89d3a4f13
XMM08=c67e6d275b05b8ea afc010c1a71cf115 XMM09=0000000000000000 00007f320e212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff3363600 RBX=000000000010f631 RCX=ffff8880431f3980 RDX=0000000000000000
RSI=0000000000001000 RDI=0000000000000000 RBP=000000000010f631 RSP=ffffc9000464f310
R8 =0000000000000000 R9 =ffffffff822e53cd R10=dffffc0000000000 R11=fffff9400087b189
R12=000000000010f631 R13=dffffc0000000000 R14=0000000000000000 R15=0000000000001000
RIP=ffffffff822e3796 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557b333500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb74ecf56c0 CR3=000000010ee9a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
