last executing test programs:

1m54.061690552s ago: executing program 2 (id=2434):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32, @ANYRES32, @ANYBLOB="080000000010000000000000000000000000000080ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e000009c0b2c010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a01010100fa000000000000000000000435000000000100001e0000bf0a000000000000fe8000000000000000000000000000aa0000"], 0x23c}}, 0x0)

1m54.000028306s ago: executing program 2 (id=2436):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3ff, 0x81}, &(0x7f0000000240)=0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
close(0x3) (async)
close(0x3)
listen(r2, 0x0) (async)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (async)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

1m53.637323186s ago: executing program 2 (id=2444):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x2004885}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000180)={@broadcast, @loopback, 0xffffffffffffffff, "8f87887ad39c825507d4c05e95257c3d869215591fc3df27fc847ef5bd53f810", 0x14, 0x7, 0xa, 0x3}, 0x3c)
sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1)
recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
recvfrom(r5, &(0x7f0000000780)=""/4096, 0x1000, 0x1040, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)

1m53.409697504s ago: executing program 2 (id=2446):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000001080)=0x8)
ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000140)="4d32c68e13f7e8d4edaac0b428243f5b808694ebccd55f3e3ab48b98834521a885be2c5ec1b7b4b5be3fce6137cebf1e58b6a5d41b854f70")
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x40}, &(0x7f0000000200)=0x8)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800090329bd7000000000020a00100000000000080001000000000006001d000004000400"], 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)

1m53.250900881s ago: executing program 2 (id=2448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108000000a000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff00080003400000003840000000040a01010000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080040002800400018004000a80140000001000010000000000000000000084000a"], 0xd4}}, 0x0)

1m52.997486385s ago: executing program 2 (id=2451):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x4a, &(0x7f0000000200)=0x47c5, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, 0x41, 0x4, 0x70bd29, 0x25dfdbfe, {0x19}, [@nested={0x4, 0xa0}, @typed={0x4, 0x20}, @nested={0x6e, 0x12a, 0x0, 0x1, [@generic="8f767b527645c74417da4b1adf5a7370e8112ada1d6dfca9cf063ef9", @generic="ad38cd00aade668e0b00b8ff2e5e75e4084de150a49f5d057f2f6059ea94bdf57fc905023027dd0d5791a644866f8e5d6580a055c769a95707fe642a31", @generic="5a34318e6c01c7661d4b6723e5", @nested={0x4, 0xd2}]}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0x1}, @nested={0xc, 0x3ff3, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}, @nested={0x1c, 0x14c, 0x0, 0x1, [@nested={0x4, 0x117}, @nested={0x4, 0x103}, @typed={0x8, 0x149, 0x0, 0x0, @pid}, @typed={0x8, 0xb4, 0x0, 0x0, @pid}]}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xb8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40c0}, 0xc001)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000240)={0x40002000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

1m52.82758584s ago: executing program 32 (id=2451):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x4a, &(0x7f0000000200)=0x47c5, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, 0x41, 0x4, 0x70bd29, 0x25dfdbfe, {0x19}, [@nested={0x4, 0xa0}, @typed={0x4, 0x20}, @nested={0x6e, 0x12a, 0x0, 0x1, [@generic="8f767b527645c74417da4b1adf5a7370e8112ada1d6dfca9cf063ef9", @generic="ad38cd00aade668e0b00b8ff2e5e75e4084de150a49f5d057f2f6059ea94bdf57fc905023027dd0d5791a644866f8e5d6580a055c769a95707fe642a31", @generic="5a34318e6c01c7661d4b6723e5", @nested={0x4, 0xd2}]}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0x1}, @nested={0xc, 0x3ff3, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}, @nested={0x1c, 0x14c, 0x0, 0x1, [@nested={0x4, 0x117}, @nested={0x4, 0x103}, @typed={0x8, 0x149, 0x0, 0x0, @pid}, @typed={0x8, 0xb4, 0x0, 0x0, @pid}]}, @nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0xb8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40c0}, 0xc001)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r8, &(0x7f0000000240)={0x40002000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r10, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

37.194862454s ago: executing program 3 (id=3520):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a800160008000140097c1100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

36.993323107s ago: executing program 3 (id=3524):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0xffffffc3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="481b05c11d66a00fdcc510d3839d11413686243006659285fb0afb19ca2c8c6f7d63c55085884b0b41f14cab4bddf14c52"], 0x7c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000)
r4 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80)
r5 = socket$kcm(0x1e, 0x4, 0x0)
close(r4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0)
syz_emit_ethernet(0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff080045000026000e000000000000000000040000000000008b4000000000000000"], 0x0)
socket$key(0xf, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100096e64f1df365747040083cafaf7e4970e55e80a3bc5bbbf8d5374fbdf7359354a9a"], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r3, &(0x7f0000000080)=[{0x0}], 0x1)

36.79611375s ago: executing program 3 (id=3528):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb69}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x56, &(0x7f0000000100)=""/86, 0x41000, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x6, 0xffffff00, 0xa}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)=[{0x0, 0x4, 0x3, 0x1}, {0x1, 0x4, 0x7, 0xd}, {0x0, 0x5, 0x1}, {0x1, 0x2, 0x8, 0x4}, {0x2, 0x4, 0xb, 0x8}, {0x0, 0x4, 0x0, 0x7}, {0x5, 0x3, 0x8, 0x7}, {0x1, 0x4, 0xe}, {0x1, 0x3, 0x4, 0x2}], 0x10, 0xa71d}, 0x94)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

36.736132302s ago: executing program 3 (id=3529):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x19, &(0x7f0000000300)}, 0xd)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}}, 0x24044884)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

36.575368747s ago: executing program 3 (id=3534):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f00000000c0), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x884) (async)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x884)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000140)={r6}, 0x8)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x1, 0x0, 0x7f}, 0x10) (async)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x1, 0x0, 0x7f}, 0x10)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)

36.360850299s ago: executing program 3 (id=3537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0x60)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0x60) (async)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) (async)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async)

21.053765129s ago: executing program 33 (id=3537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0x60)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0x60) (async)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) (async)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async)

2.673252055s ago: executing program 0 (id=3986):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000800000000000000000000000000000b400000000000002000000000000000000000000000001000000000000000000000000000000000000000000ffffc90000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0)

2.671932205s ago: executing program 0 (id=3987):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r3, 0x211, 0x123, 0x234}, 0x14}}, 0x40000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
accept$inet6(r0, 0x0, &(0x7f0000000540))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x40)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0xffffffffffffffc2, 0x80, &(0x7f0000000280)={0xa, 0x400, 0x2, @private2={0xfc, 0x2, '\x00', 0x20}, 0x3}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x14, 0x1, 0x5, 0x701, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x80f, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x74}}, 0x0)

2.613858313s ago: executing program 0 (id=3988):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0800000000100000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e000009c0b2c010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a01010100fa000000000000000000000435000000000100001e0000bf0a000000000000fe8000000000000000000000000000aa0000"], 0x23c}}, 0x0)

2.611534504s ago: executing program 0 (id=3989):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048010008004b0000340000000000119078eaabd3848fdda785aba6b701eb61000000000000000089176fe0000002e0000001ac1414aa64010102ac14140f0000004e20000890786f2ba2b5b9b9d6187016270624b0f5dea78a25c351c166133cc30640ace0ed41a4a7389610dfb72d5c8a7b151da222c3ebf80cc5fab7dc"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4)
syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201000000000000008f9b3ed000000000000000000000000000000c907801000001"], 0x0)
recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/user\x00')
unshare(0x6a040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90)
getpid()
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000000)="2e000400010002", 0x7)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fd83e700000000000400028008800000e1ff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000ac00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.762123481s ago: executing program 0 (id=3994):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab000000000200000032000000080001006000000008000300", @ANYRES32=r5, @ANYBLOB="4f8660947a3000679a0d534373573f47f57b085d0dcab39abb64014bae11b9ddfb2f5ff2cafbd1a6281d2f2aa4591be303a5cf06a161f04c9f21d20984ebf6d6805bc20fac8945bb030a077931838e44e91f02d4a053071035d326c656f8becda4106b1fda212ad59b1818de0eb9b1d4fa900585e06dff6b7a6f6790d0eefce0c1b632b7e258cb4290339ffb2bf961d938761aae5984aaba7f4090fbf6b2c50633b3278b75cc723befb4f5b6cfe05b3ef01181"], 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xed}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x80)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x90002001})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061134b0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000869163e0000000000bf0700000000000026050700fcffffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYRES64=r8], 0x128}, 0x4814)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$FIBMAP(r6, 0x1, &(0x7f0000000300)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r14, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r14, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r15=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r15, 0xff09, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r16=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r16, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x8000000}}}, &(0x7f0000000040)=0x84)

1.498038029s ago: executing program 4 (id=4000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe800000fc00000000000000000000aa00000000000000003ed53089fa94b4440000ffff64010102042088be000200030c00080005fe0c5fc2445c20ceface66020086dd94a888be000000021609660501000000000088a8088022eb00020000200cf008020000000000000600ea93030800655800000002768a4d2f00bc8062ded1569a2e77a4d983cf7b6294"], 0x7a)

1.448320014s ago: executing program 4 (id=4002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x600}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}]}, 0x3c}}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, 0x2) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) (async)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) (rerun: 32)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", ""]}, 0x24}}, 0x40811)
getsockopt(r2, 0x9, 0x3, &(0x7f0000000040)=""/11, &(0x7f0000000180)=0xb)
socket$xdp(0x2c, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0xffffffffffffff7d}, 0x1, 0x7}, 0x40000)

1.322926827s ago: executing program 4 (id=4004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom$llc(r1, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="cac0", 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18, 0x20040801}}], 0x1, 0x4801)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c0004801800018008000100647570000c00028008000140000200170900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000100000000000000", @ANYRES32, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r7, 0x2e}, 0x20)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r9, &(0x7f0000000440), 0x0}, 0x20)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r10, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r11, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r11, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/17, 0x11}, 0x3}], 0x1, 0x2, 0x0)
sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1, 0x3f}, {0xfff1, 0xffff}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x24008880)

859.81159ms ago: executing program 0 (id=4012):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0xfffffffffffffc99}}]}]}, 0x6c}}, 0x4000058)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001610900000050005a0007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRESHEX=r0, @ANYRES8=r3], 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0xa0, 0x2, 0x3, 0x1}, 0x8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)

503.574578ms ago: executing program 1 (id=4016):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(r1, 0x0, 0x0, 0xee)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r2 = socket$inet6(0xa, 0x80002, 0x0)
listen(r2, 0xc98e)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000500)='0', 0x1)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000001c00000071120a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a300000000008404100736977000cc31400330077673100000000008700000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x8080)

443.420411ms ago: executing program 1 (id=4017):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x101}, {{0x0, 0x0, 0x0}, 0x2049}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001dc0)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/156, 0x9c}], 0x9, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f00000002c0)=""/46, 0x2e}], 0x3, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xa, 0x40010000, 0x0)

442.392426ms ago: executing program 4 (id=4018):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async)
connect$unix(r1, 0x0, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare(0x22020600) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000e40)={0x0, 0x6, 0x8, 0x1}) (async)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0x5, 0x7f, 0x1, 0x0, 0x0, [{{r0}, 0x9c}]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

371.645456ms ago: executing program 1 (id=4019):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000005000000000000000000aa00000000000000003ed53089fa94b4440000ffff64010102042088be000200030c00080005fe0c5fc2445c20ceface66020086dd94a888be000000021609660501000000000088a8088022eb00020000200cf008020000000000000600ea93030800655800000002768a4d2f00bc8062ded1569a2e77a4d983cf7b6294"], 0x7a)

365.451597ms ago: executing program 4 (id=4020):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r1, 0x5)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333a", 0x84}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09", 0x22}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x3, 0x24000045)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
accept(r1, &(0x7f0000000080)=@can, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), 0x0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10)
close(r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffff9}, @ldst={0x1, 0x3, 0xd, 0x4, 0x3, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1004, &(0x7f0000002fc0)=""/4100, 0x41100, 0xd}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x7}, 0x40002102)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000000780)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0xf8a, 0x3a, 0xff, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x5, "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"}}}}}}, 0x0)
recvmmsg(r9, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000020, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x4004804}, 0x4008851)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000040027bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2300000002a50000280012800900010076657468000000007b0002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0xffffffffffffffde}}, 0x0)

225.960205ms ago: executing program 1 (id=4021):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="0380c20000000e577ca5a84f0800451000380080000000019078ac1e0001ac1414aa030490781e06183f25000000006700000033000064010101e00000020018630100001903117da9ab0718ac8965f0816240"], 0x0)

149.153727ms ago: executing program 1 (id=4022):
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, 0x0, 0x34004811)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}}, 0x20}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="968e07ae", @ANYRES16=r7, @ANYBLOB="000226bd7000fddbdf2501000000050003007300000008000b00", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x44844)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x3, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
pipe(&(0x7f0000000180))

73.387095ms ago: executing program 1 (id=4023):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=<r3=>0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e000000208000600ac14142b08000400"], 0x78}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES16=r3, @ANYRES32=r2, @ANYRES64=r0], 0x68}}, 0x801)
r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@remote, @default, @null, @rose, @null, @default, @null]}, &(0x7f0000000080)=0x48, 0x80000)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000000c0)=0xe35a6cfa637bae32, 0x4)

0s ago: executing program 4 (id=4024):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x3}, 0xe)
r4 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r5 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r5, 0x0, 0x0) (async)
bind$inet6(r5, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private1, 0x5}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private1, 0x5}, 0x1c)
socket$netlink(0x10, 0x3, 0x4) (async)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000200), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000300), 0x12)
sendfile(r2, r8, 0x0, 0x10001) (async)
sendfile(r2, r8, 0x0, 0x10001)
ioctl$SIOCSIFHWADDR(r2, 0xff03, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='spi_message_done\x00', 0xffffffffffffffff, 0x0, 0x488}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000001740)=ANY=[@ANYRESDEC=r9], &(0x7f00000001c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0x20000, 0x0, 0x10}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f0000001740)=ANY=[@ANYRESDEC=r9], &(0x7f00000001c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0x20000, 0x0, 0x10}, 0x10}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f00000000c0), 0x10) (async)
connect$can_bcm(r10, &(0x7f00000000c0), 0x10)
sendmmsg$sock(r10, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @remote, 'geneve1\x00'}}, 0x80, 0x0}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

0] type 1 family 0 port 8472 - 0
[  264.884575][T14618] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  264.887675][T14618] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  264.890815][T14618] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  264.981039][T14618] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.987557][T14618] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  264.990851][T14618] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  264.994643][T14618] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  265.035364][T14615] chnl_net:caif_netlink_parms(): no params data found
[  265.104139][ T5716] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  265.106807][ T5716] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  265.109297][ T5716] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  265.113372][ T5716] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  265.152592][ T5716] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.155244][ T5716] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  265.157779][ T5716] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  265.160817][ T5716] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  265.164473][T14615] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.166996][T14615] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.169577][T14615] bridge_slave_0: entered allmulticast mode
[  265.175022][T14615] bridge_slave_0: entered promiscuous mode
[  265.185696][ T5716] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.188264][ T5716] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  265.194618][ T5716] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  265.197386][ T5716] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  265.200084][ T5716] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.208898][ T5716] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  265.212081][ T5716] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  265.215098][ T5716] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  265.222788][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.225320][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.230691][T14615] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.236563][T14615] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.239305][T14615] bridge_slave_1: entered allmulticast mode
[  265.243957][T14615] bridge_slave_1: entered promiscuous mode
[  265.272338][T14615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.284909][T14615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.312309][T14615] team0: Port device team_slave_0 added
[  265.315671][T14615] team0: Port device team_slave_1 added
[  265.337722][T14615] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.339946][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.349079][T14615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.355146][T14615] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.357344][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.365622][T14615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.400076][T14615] hsr_slave_0: entered promiscuous mode
[  265.402475][T14615] hsr_slave_1: entered promiscuous mode
[  265.404909][T14655] lo speed is unknown, defaulting to 1000
[  265.415897][T14655] wg1 speed is unknown, defaulting to 1000
[  265.605538][T14615] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  265.610648][T14615] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  265.621465][T14615] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  265.626800][T14615] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  265.696551][T14615] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.711384][T14615] 8021q: adding VLAN 0 to HW filter on device team0
[  265.724527][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.727386][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  265.745649][ T4076] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.748549][ T4076] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.948899][T14615] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.998940][T14615] veth0_vlan: entered promiscuous mode
[  266.006161][T14615] veth1_vlan: entered promiscuous mode
[  266.028431][T14615] veth0_macvtap: entered promiscuous mode
[  266.038508][T14615] veth1_macvtap: entered promiscuous mode
[  266.054926][T14615] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.074847][T14615] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.085623][ T5900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.096011][ T5900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.099294][ T5900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.130158][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.165426][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.172456][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.198635][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.201314][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.493048][T14695] tipc: Can't bind to reserved service type 1
[  266.515685][T14691] lo speed is unknown, defaulting to 1000
[  266.525117][T14691] wg1 speed is unknown, defaulting to 1000
[  266.674595][T14705] lo speed is unknown, defaulting to 1000
[  266.677465][T14705] wg1 speed is unknown, defaulting to 1000
[  266.705313][ T5851] Bluetooth: hci0: command tx timeout
[  266.980025][T14713] __nla_validate_parse: 8 callbacks suppressed
[  266.980047][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'.
[  266.992182][T14713] netlink: 'syz.1.2472': attribute type 1 has an invalid length.
[  267.115181][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2477'.
[  267.670621][T14722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.852687][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'.
[  267.959726][T14739] netlink: 'syz.0.2485': attribute type 1 has an invalid length.
[  267.970545][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2485'.
[  268.148601][T14749] netlink: 'syz.0.2489': attribute type 2 has an invalid length.
[  268.298428][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'.
[  268.311440][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2492'.
[  268.377265][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2494'.
[  268.380249][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2494'.
[  268.384968][T14764] netlink: 'syz.0.2494': attribute type 1 has an invalid length.
[  268.439199][T14764] gretap1: entered promiscuous mode
[  268.456871][T14766] syzkaller1: entered promiscuous mode
[  268.459252][T14766] syzkaller1: entered allmulticast mode
[  268.691807][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'.
[  268.694949][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2498'.
[  268.782777][ T5851] Bluetooth: hci0: command tx timeout
[  270.740706][T14845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.862084][ T5851] Bluetooth: hci0: command tx timeout
[  270.921337][T14860] lo speed is unknown, defaulting to 1000
[  270.925211][T14860] wg1 speed is unknown, defaulting to 1000
[  271.137439][T14870] netlink: 'syz.1.2524': attribute type 1 has an invalid length.
[  271.430343][T14883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  271.433052][T14883] IPv6: NLM_F_CREATE should be set when creating new route
[  272.029291][T14906] __nla_validate_parse: 7 callbacks suppressed
[  272.029303][T14906] netlink: 4208 bytes leftover after parsing attributes in process `syz.3.2533'.
[  272.190508][T14916] netlink: 'syz.1.2536': attribute type 10 has an invalid length.
[  272.257923][T14917] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  272.901091][T14930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2538'.
[  272.952051][ T5851] Bluetooth: hci0: command tx timeout
[  273.134552][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2541'.
[  273.137959][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2541'.
[  273.149889][T14941] batadv0: entered promiscuous mode
[  273.163893][T14941] !: entered promiscuous mode
[  273.166584][T14941] debugfs: 'hsr0' already exists in 'hsr'
[  273.168878][T14941] Cannot create hsr debugfs directory
[  273.172939][T14941] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  273.184114][T14941] hsr0: Slave B (0!) is not up; please bring it up to get a fully working HSR network
[  273.233983][T14947] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  273.291135][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2546'.
[  273.299324][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'.
[  273.340189][T14956] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  273.344124][T14957] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  273.349026][T14953] sctp: [Deprecated]: syz.3.2547 (pid 14953) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.349026][T14953] Use struct sctp_sack_info instead
[  273.355539][T14954] sctp: [Deprecated]: syz.3.2547 (pid 14954) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.355539][T14954] Use struct sctp_sack_info instead
[  273.379114][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2547'.
[  273.495382][T14968] netlink: 'syz.0.2549': attribute type 15 has an invalid length.
[  273.498125][T14968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'.
[  273.516327][T14972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2552'.
[  273.609545][T14979] ip6_vti0: entered allmulticast mode
[  273.624148][T14979] ip6_vti0: left allmulticast mode
[  274.027427][T14991] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  274.055498][T14991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  274.064804][T14991] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2557'.
[  274.616533][   T33] audit: type=1107 audit(1757763553.382:3): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  275.148748][T15066] syzkaller1: entered promiscuous mode
[  275.150943][T15066] syzkaller1: entered allmulticast mode
[  275.318163][T15081] netlink: 'syz.3.2585': attribute type 1 has an invalid length.
[  275.346129][T15081] bond1: (slave bridge1): making interface the new active one
[  275.348842][T15081] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  275.413666][T15085] lo speed is unknown, defaulting to 1000
[  275.417356][T15085] wg1 speed is unknown, defaulting to 1000
[  275.507832][T15085] netlink: 'syz.3.2586': attribute type 33 has an invalid length.
[  276.185833][T15113] lo speed is unknown, defaulting to 1000
[  276.189581][T15113] wg1 speed is unknown, defaulting to 1000
[  276.685779][T15126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.071873][T15138] lo speed is unknown, defaulting to 1000
[  277.074768][T15138] wg1 speed is unknown, defaulting to 1000
[  277.122706][T15142] netlink: 'syz.1.2600': attribute type 33 has an invalid length.
[  277.125984][T15142] __nla_validate_parse: 8 callbacks suppressed
[  277.125996][T15142] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2600'.
[  277.204738][T15145] lo speed is unknown, defaulting to 1000
[  277.207577][T15145] wg1 speed is unknown, defaulting to 1000
[  277.348122][T15157] Bluetooth: MGMT ver 1.23
[  277.428293][T15159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.561149][T15162] syzkaller1: entered promiscuous mode
[  277.564175][T15162] syzkaller1: entered allmulticast mode
[  277.729517][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'.
[  277.743083][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'.
[  277.748080][T15175] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2610'.
[  277.907157][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2614'.
[  277.912800][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'.
[  277.916564][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2615'.
[  278.022780][T15182] netlink: 'syz.3.2614': attribute type 4 has an invalid length.
[  278.035406][T15182] netlink: 'syz.3.2614': attribute type 4 has an invalid length.
[  278.465992][T15211] lo speed is unknown, defaulting to 1000
[  278.468838][T15211] wg1 speed is unknown, defaulting to 1000
[  278.558972][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'.
[  278.643416][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'.
[  278.655237][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'.
[  278.670232][T15220] netlink: 'syz.0.2624': attribute type 1 has an invalid length.
[  278.975534][T15252] nft_compat: unsupported protocol 0
[  279.092158][T15254] netlink: 'syz.1.2632': attribute type 4 has an invalid length.
[  279.198723][T15256] tipc: Resetting bearer <eth:syzkaller0>
[  279.639466][T15273] siw: device registration error -23
[  279.894314][T15292] netlink: 'syz.0.2640': attribute type 10 has an invalid length.
[  279.897360][T15292] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  279.968935][T15292] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  280.026538][T15297] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  280.030691][T15297] openvswitch: netlink: Message has 1 unknown bytes.
[  280.590903][T15302] bridge0: port 1(batadv2) entered blocking state
[  280.598185][T15302] bridge0: port 1(batadv2) entered disabled state
[  280.600563][T15302] batadv2: entered allmulticast mode
[  280.604397][T15302] batadv2: entered promiscuous mode
[  280.887165][T15326] ip6gre0: entered promiscuous mode
[  280.950289][T15334] vxcan1: entered allmulticast mode
[  281.102061][ T5900] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  281.105732][ T5900] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  281.666488][T15375] geneve2: entered promiscuous mode
[  281.669808][T15377] IPVS: Unknown mcast interface: pim6reg
[  281.674772][ T5900] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  281.677992][ T5900] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  281.681178][ T5900] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  281.687852][ T5900] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  281.867224][T15390] tipc: Started in network mode
[  281.869200][T15390] tipc: Node identity 2e9d63c8a89c, cluster identity 4711
[  281.875220][T15390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.935951][T15390] tipc: Disabling bearer <eth:syzkaller0>
[  282.005214][T15405] netlink: 'syz.3.2678': attribute type 5 has an invalid length.
[  282.139615][T15416] __nla_validate_parse: 12 callbacks suppressed
[  282.139626][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2683'.
[  282.152317][T15417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2683'.
[  282.348739][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2685'.
[  282.537686][T15446] tipc: Enabled bearer <udp:syz2>, priority 10
[  282.650332][T15453] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20002
[  283.099603][T15477] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2701'.
[  283.251059][T15489] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2704'.
[  283.326888][T15494] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2706'.
[  283.355904][T15496] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  283.423306][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'.
[  283.532221][ T5314] tipc: Node number set to 2248238024
[  283.583705][T15507] netlink: 'syz.0.2712': attribute type 1 has an invalid length.
[  283.723660][T15519] netlink: 'syz.3.2714': attribute type 1 has an invalid length.
[  283.766866][T15519] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  283.773837][T15519] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  283.817701][T15524] gretap1: entered promiscuous mode
[  283.824186][T15524] bond2: (slave gretap1): making interface the new active one
[  283.827529][T15524] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  283.842663][T15522] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  283.901479][T15528] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2713'.
[  283.935373][T15527] syzkaller0: entered promiscuous mode
[  283.937166][T15527] syzkaller0: entered allmulticast mode
[  284.713485][   T55] Bluetooth: hci0: command 0x0405 tx timeout
[  285.221083][T15530] workqueue: Failed to create a rescuer kthread for wq "bo": -EINTR
[  285.301083][T15540] vcan0: tx drop: invalid da for name 0x0000000000000003
[  285.436745][T15550] netlink: 'syz.0.2720': attribute type 4 has an invalid length.
[  285.455416][T15550] netlink: 'syz.0.2720': attribute type 4 has an invalid length.
[  285.458372][T15553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.524071][ T5915] lo speed is unknown, defaulting to 1000
[  285.526045][ T5915] syz2: Port: 1 Link ACTIVE
[  285.671749][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  285.695200][T15562] IPVS: set_ctl: invalid protocol: 142 0.0.0.0:20003
[  285.884211][T15572] syzkaller1: entered promiscuous mode
[  285.887413][T15572] syzkaller1: entered allmulticast mode
[  286.010827][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'.
[  286.187436][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'.
[  286.408468][T15589] lo speed is unknown, defaulting to 1000
[  286.414322][T15589] wg1 speed is unknown, defaulting to 1000
[  286.707369][T15607] IPv6: Can't replace route, no match found
[  286.712936][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  286.958006][T15622] openvswitch: netlink: Invalid VLAN frame
[  286.960340][T15623] openvswitch: netlink: Invalid VLAN frame
[  287.195824][T15638] lo speed is unknown, defaulting to 1000
[  287.199933][T15638] wg1 speed is unknown, defaulting to 1000
[  287.427692][T15649] __nla_validate_parse: 5 callbacks suppressed
[  287.427707][T15649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2751'.
[  287.531134][T15651] netlink: 'syz.0.2752': attribute type 12 has an invalid length.
[  287.643384][T15659] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2753'.
[  287.680059][T15659] lo speed is unknown, defaulting to 1000
[  287.686221][T15659] wg1 speed is unknown, defaulting to 1000
[  287.739650][T15659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.751706][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  288.111090][T15673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'.
[  288.121023][T15673] batadv0: entered promiscuous mode
[  288.124383][T15673] macsec1: entered promiscuous mode
[  288.128279][T15673] batadv0: left promiscuous mode
[  288.327364][T15680] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2760'.
[  288.328471][T15675] lo speed is unknown, defaulting to 1000
[  288.330118][T15680] ..0: renamed from hsr0 (while UP)
[  288.336661][T15680] ..0: failed to rename
[  288.338085][T15680] ..0: entered allmulticast mode
[  288.339895][T15680] hsr_slave_0: entered allmulticast mode
[  288.342401][T15680] hsr_slave_1: entered allmulticast mode
[  288.344629][T15680] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  288.349368][T15675] wg1 speed is unknown, defaulting to 1000
[  288.400803][T15687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2761'.
[  288.440376][T15675] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  288.445144][T15675] macvtap1: entered allmulticast mode
[  288.447304][T15675] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  288.457786][T15675] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  288.460500][T15675] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  288.467255][T15692] netlink: 'syz.3.2762': attribute type 3 has an invalid length.
[  288.547576][T15699] bond0: (slave rose0): Error: Device can not be enslaved while up
[  288.550193][T15699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'.
[  288.617497][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'.
[  288.627531][T15704] geneve3: entered promiscuous mode
[  288.630249][T15704] geneve3: entered allmulticast mode
[  288.635247][   T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[  288.638912][   T12] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[  288.643673][   T12] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[  288.646636][   T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[  288.746908][T15708] netlink: 'syz.3.2767': attribute type 1 has an invalid length.
[  288.779523][T15708] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  288.783883][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  288.788399][T15708] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  288.835093][T15710] bond3: (slave bridge3): Enslaving as an active interface with a down link
[  288.968735][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2770'.
[  289.516138][T15747] netlink: 'syz.0.2778': attribute type 14 has an invalid length.
[  289.521150][T15747] netlink: 'syz.0.2778': attribute type 14 has an invalid length.
[  289.831720][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  289.920421][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2780'.
[  289.956690][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2781'.
[  289.962380][T15761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.277439][ T5920] IPVS: starting estimator thread 0...
[  290.279798][T15792] tipc: Enabled bearer <udp:s>, priority 10
[  290.360459][T15795] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  290.368292][T15793] IPVS: using max 43 ests per chain, 103200 per kthread
[  290.387295][T15801] netlink: 'syz.3.2794': attribute type 3 has an invalid length.
[  290.645380][T15817] net_ratelimit: 2 callbacks suppressed
[  290.645391][T15817] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  290.650219][T15817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.659846][T15817] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  290.682474][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  290.711778][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  290.871793][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  291.093935][T15841] netlink: 'syz.0.2805': attribute type 30 has an invalid length.
[  291.102877][T15839] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  291.212251][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  291.213925][T15848] lo speed is unknown, defaulting to 1000
[  291.218176][T15848] wg1 speed is unknown, defaulting to 1000
[  291.277923][T15855] openvswitch: netlink: Actions may not be safe on all matching packets
[  291.690994][T15891] delete_channel: no stack
[  291.741765][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  291.760997][T15899] netlink: 'syz.3.2823': attribute type 1 has an invalid length.
[  291.802787][T15897] lo speed is unknown, defaulting to 1000
[  291.813461][T15897] wg1 speed is unknown, defaulting to 1000
[  291.885768][T15899] bond0: (slave bond_slave_1): Releasing backup interface
[  292.264273][T15911] lo speed is unknown, defaulting to 1000
[  292.267958][T15911] wg1 speed is unknown, defaulting to 1000
[  292.484878][T15928] __nla_validate_parse: 13 callbacks suppressed
[  292.484889][T15928] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2830'.
[  292.489732][T15928] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2830'.
[  292.616205][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2830'.
[  292.679250][T15926] lo speed is unknown, defaulting to 1000
[  292.683977][T15926] wg1 speed is unknown, defaulting to 1000
[  292.716112][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2830'.
[  292.754656][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'.
[  292.757721][T15937] lo speed is unknown, defaulting to 1000
[  292.757862][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2835'.
[  292.766850][T15942] netlink: 'syz.0.2835': attribute type 7 has an invalid length.
[  292.793742][T15937] wg1 speed is unknown, defaulting to 1000
[  292.898043][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'.
[  293.059519][T15962] netlink: 'syz.3.2840': attribute type 11 has an invalid length.
[  293.070225][T15964] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2841'.
[  293.217930][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'.
[  293.236359][T15974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.247293][T15974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  293.251386][T15974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  293.326365][T15974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.330899][T15974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  293.335127][T15974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  293.405096][T15974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.409238][T15974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  293.418028][T15974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  293.489686][T15974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.495921][T15974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  293.499267][T15974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  293.522983][T15984] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  293.535345][T15984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2850'.
[  293.598501][T15990] netlink: 'syz.1.2852': attribute type 1 has an invalid length.
[  293.645587][ T5878] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  293.651180][ T5878] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  293.655964][ T5878] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  293.719810][ T5900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  293.725360][ T5900] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  293.728713][ T5900] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  293.732836][ T5900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  293.736168][ T5900] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  293.739645][ T5900] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  293.746558][T15994] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.750375][ T5900] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  293.768324][ T5900] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  293.773276][ T5900] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  293.777185][T15999] netlink: 'syz.1.2855': attribute type 8 has an invalid length.
[  293.844460][T16002] netlink: 'syz.0.2857': attribute type 1 has an invalid length.
[  293.847152][T16002] netlink: 'syz.0.2857': attribute type 3 has an invalid length.
[  293.924889][T16006] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  294.264776][T16025] netlink: 'syz.1.2864': attribute type 1 has an invalid length.
[  294.373232][T16038] netlink: 'syz.1.2869': attribute type 5 has an invalid length.
[  294.407868][T16040] bridge_slave_0: left allmulticast mode
[  294.410599][T16040] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.435308][T16040] bridge_slave_1: left allmulticast mode
[  294.442287][T16040] bridge_slave_1: left promiscuous mode
[  294.448373][T16040] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.479764][T16040] bond0: (slave bond_slave_0): Releasing backup interface
[  294.496172][T16040] team0: Port device team_slave_0 removed
[  294.520273][T16040] team0: Port device team_slave_1 removed
[  294.539913][T16040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.549108][T16040] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.553358][T16040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.556134][T16040] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.758491][T16059] netlink: 'syz.1.2872': attribute type 4 has an invalid length.
[  294.905788][T16066] netlink: 'syz.1.2873': attribute type 3 has an invalid length.
[  295.274172][T16077] lo speed is unknown, defaulting to 1000
[  295.278027][T16077] wg1 speed is unknown, defaulting to 1000
[  295.372916][T16080] syzkaller1: entered promiscuous mode
[  295.375469][T16080] syzkaller1: entered allmulticast mode
[  295.537788][T16077] netlink: 'syz.3.2877': attribute type 2 has an invalid length.
[  295.911784][    C0] net_ratelimit: 14 callbacks suppressed
[  295.911795][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  295.984861][T16103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  295.987988][T16103] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.061839][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  296.382994][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  296.836160][T16141] syzkaller1: entered promiscuous mode
[  296.838034][T16141] syzkaller1: entered allmulticast mode
[  296.941749][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  297.040066][T16148] lo speed is unknown, defaulting to 1000
[  297.042987][T16148] wg1 speed is unknown, defaulting to 1000
[  297.088224][T16151] tipc: Resetting bearer <eth:syzkaller0>
[  297.108806][T16151] tipc: Resetting bearer <eth:syzkaller0>
[  297.111802][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  297.126920][T16155] netlink: 'syz.1.2899': attribute type 1 has an invalid length.
[  297.421844][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  297.991790][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  298.141785][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  298.358404][T16197] lo speed is unknown, defaulting to 1000
[  298.361458][T16197] wg1 speed is unknown, defaulting to 1000
[  298.408092][T16204] nbd: socks must be embedded in a SOCK_ITEM attr
[  298.461721][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  298.666001][T16216] __nla_validate_parse: 8 callbacks suppressed
[  298.666016][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2915'.
[  298.774071][T16225] siw: device registration error -23
[  299.021911][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  299.181171][T16250] netlink: 'syz.1.2926': attribute type 11 has an invalid length.
[  299.314027][T16258] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2930'.
[  299.503596][T16270] tipc: Enabling of bearer <eth:xfrm0> rejected, max 3 bearers permitted
[  299.553542][T16272] netlink: 'syz.0.2934': attribute type 11 has an invalid length.
[  299.809462][T16286] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  300.166787][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'.
[  301.101879][    C0] net_ratelimit: 6 callbacks suppressed
[  301.101894][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  301.213829][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812269b800: rx timeout, send abort
[  301.217494][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810a19a400: rx timeout, send abort
[  301.221023][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a19a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  301.272072][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  301.400576][T16337] tipc: New replicast peer: 255.255.255.255
[  301.403703][T16337] tipc: Enabled bearer <udp:s>, priority 10
[  301.581672][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  301.668346][T16354] netlink: 'syz.1.2957': attribute type 1 has an invalid length.
[  301.671755][T16354] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2957'.
[  301.675567][T16354] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2957'.
[  301.693551][T16357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2960'.
[  301.717268][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812269b800: abort rx timeout. Force session deactivation
[  301.844925][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'.
[  301.894819][T16367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  301.897987][T16367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  301.905293][T16367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  301.957855][T16367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  301.961903][T16367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  301.965834][T16367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  302.031466][T16367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  302.038680][T16367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  302.045516][T16367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  302.088942][T16367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  302.093695][T16367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  302.098892][T16367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  302.141890][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  302.179490][ T5900] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  302.184089][ T5900] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  302.188222][ T5900] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  302.203716][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  302.206464][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  302.209534][   T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  302.222761][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  302.226091][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  302.233501][   T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  302.247202][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  302.250068][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  302.253205][   T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  302.311810][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  302.320627][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'.
[  302.369601][T16384] lo speed is unknown, defaulting to 1000
[  302.375444][T16384] wg1 speed is unknown, defaulting to 1000
[  302.414260][T16387] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2969'.
[  302.503571][T16393] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2972'.
[  302.610132][T16399] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.617322][T16399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  302.620638][T16399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  302.621919][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  302.628488][T16399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  302.688478][T16399] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.692433][T16399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  302.696153][T16399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  302.699876][T16399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  302.770759][T16399] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.779902][T16399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  302.794201][T16399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  302.798357][T16399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  302.858132][T16399] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.864013][T16399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  302.872597][T16399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  302.877204][T16399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  302.957694][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.961102][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  302.966799][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  302.969963][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  302.992429][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.995600][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  302.998756][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  303.003867][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  303.025582][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  303.028820][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  303.033461][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  303.036708][   T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  303.040017][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.044077][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  303.047259][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  303.050356][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  303.191786][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  303.192588][T16441] syzkaller1: entered promiscuous mode
[  303.197000][T16441] syzkaller1: entered allmulticast mode
[  303.271012][T16444] ..1: renamed from ..0 (while UP)
[  303.275738][T16444] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  303.342225][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  303.661839][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  303.697859][T16447] __nla_validate_parse: 3 callbacks suppressed
[  303.697870][T16447] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2985'.
[  304.598102][T16456] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  304.600598][T16456] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  304.619446][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2988'.
[  304.688411][T16458] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  304.693592][T16458] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  305.003348][T16471] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2994'.
[  305.070242][T16473] lo speed is unknown, defaulting to 1000
[  305.076323][T16473] wg1 speed is unknown, defaulting to 1000
[  305.128030][T16478] lo speed is unknown, defaulting to 1000
[  305.134241][T16478] wg1 speed is unknown, defaulting to 1000
[  305.201272][T16485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2999'.
[  305.350022][T16492] ip_vti0: entered promiscuous mode
[  305.363797][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'.
[  305.462900][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[  305.474507][T16498] vxcan1 (unregistering): left allmulticast mode
[  305.540438][   T13] tipc: Subscription rejected, illegal request
[  305.548852][T16500] IPv6: Can't replace route, no match found
[  305.555294][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'.
[  305.560724][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'.
[  305.568544][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3006'.
[  305.598012][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'.
[  306.311830][    C0] net_ratelimit: 6 callbacks suppressed
[  306.311844][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  306.463959][T16554] ip6gretap0: entered promiscuous mode
[  306.465642][T16554] ip6gretap0: entered allmulticast mode
[  306.471955][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  306.617147][T16562] lo speed is unknown, defaulting to 1000
[  306.620742][T16562] wg1 speed is unknown, defaulting to 1000
[  306.781889][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  306.788510][T16578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.997962][T16584] lo speed is unknown, defaulting to 1000
[  307.014603][T16584] wg1 speed is unknown, defaulting to 1000
[  307.017368][T16586] netlink: 'syz.3.3036': attribute type 10 has an invalid length.
[  307.048748][T16586] 8021q: adding VLAN 0 to HW filter on device team0
[  307.341815][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  307.501794][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  307.821852][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  307.860720][T16614] syzkaller1: entered promiscuous mode
[  307.863801][T16614] syzkaller1: entered allmulticast mode
[  307.872863][T16614] netlink: 'syz.3.3044': attribute type 1 has an invalid length.
[  307.892645][T16614] 8021q: adding VLAN 0 to HW filter on device bond4
[  308.029507][T16621] netlink: 'syz.3.3046': attribute type 1 has an invalid length.
[  308.096084][   T33] audit: type=1800 audit(1757763586.862:4): pid=16623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3047" name="blkio.bfq.time_recursive" dev="tmpfs" ino=949 res=0 errno=0
[  308.392574][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  308.490196][ T5900] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.498891][ T5900] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  308.512266][ T5900] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  308.515820][ T5900] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  308.530212][ T5900] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.534070][ T5900] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  308.537635][ T5900] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  308.541260][ T5900] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  308.544873][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  308.552665][ T5900] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.559467][ T5900] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  308.566915][ T5900] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  308.570302][ T5900] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  308.579399][ T5900] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  308.586489][ T5900] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  308.591963][ T5900] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  308.597673][ T5900] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  308.861884][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  309.088729][T16623] syz.3.3047: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  309.099911][T16623] CPU: 0 UID: 0 PID: 16623 Comm: syz.3.3047 Not tainted syzkaller #0 PREEMPT(full) 
[  309.099925][T16623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.099932][T16623] Call Trace:
[  309.099936][T16623]  <TASK>
[  309.099941][T16623]  dump_stack_lvl+0x189/0x250
[  309.099959][T16623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.099970][T16623]  ? __pfx__printk+0x10/0x10
[  309.099983][T16623]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  309.099994][T16623]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  309.100004][T16623]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  309.100015][T16623]  warn_alloc+0x214/0x310
[  309.100032][T16623]  ? __pfx_warn_alloc+0x10/0x10
[  309.100050][T16623]  ? __get_vm_area_node+0x28f/0x300
[  309.100068][T16623]  ? hash_netport4_resize+0x235/0x1b60
[  309.100088][T16623]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  309.100125][T16623]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  309.100149][T16623]  ? rcu_is_watching+0x15/0xb0
[  309.100164][T16623]  ? hash_netport4_resize+0x235/0x1b60
[  309.100177][T16623]  ? hash_netport4_resize+0x235/0x1b60
[  309.100189][T16623]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  309.100208][T16623]  ? hash_netport4_resize+0x235/0x1b60
[  309.100228][T16623]  hash_netport4_resize+0x235/0x1b60
[  309.100243][T16623]  ? hash_netport4_uadt+0xc97/0xf30
[  309.100265][T16623]  ? __pfx_hash_netport4_add+0x10/0x10
[  309.100281][T16623]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  309.100298][T16623]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  309.100313][T16623]  call_ad+0x44e/0xb00
[  309.100331][T16623]  ? __pfx_call_ad+0x10/0x10
[  309.100350][T16623]  ? __nla_parse+0x40/0x60
[  309.100360][T16623]  ip_set_ad+0x791/0x930
[  309.100382][T16623]  ? __pfx_ip_set_ad+0x10/0x10
[  309.100447][T16623]  nfnetlink_rcv_msg+0xb4d/0x1130
[  309.100472][T16623]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  309.100507][T16623]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  309.100550][T16623]  ? kasan_save_free_info+0x46/0x50
[  309.100584][T16623]  netlink_rcv_skb+0x208/0x470
[  309.100595][T16623]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  309.100608][T16623]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  309.100621][T16623]  ? bpf_lsm_capable+0x9/0x20
[  309.100634][T16623]  ? security_capable+0x7e/0x2e0
[  309.100651][T16623]  nfnetlink_rcv+0x26a/0x2520
[  309.100665][T16623]  ? __dev_queue_xmit+0x1d79/0x3b50
[  309.100684][T16623]  ? __dev_queue_xmit+0x27b/0x3b50
[  309.100700][T16623]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  309.100712][T16623]  ? __pfx___dev_queue_xmit+0x10/0x10
[  309.100729][T16623]  ? ref_tracker_free+0x63a/0x7d0
[  309.100743][T16623]  ? __asan_memcpy+0x40/0x70
[  309.100752][T16623]  ? __pfx_ref_tracker_free+0x10/0x10
[  309.100772][T16623]  ? skb_clone+0x246/0x3a0
[  309.100784][T16623]  ? __netlink_deliver_tap+0x807/0x850
[  309.100793][T16623]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.100804][T16623]  ? netlink_deliver_tap+0x2e/0x1b0
[  309.100816][T16623]  netlink_unicast+0x82f/0x9e0
[  309.100834][T16623]  ? __pfx_netlink_unicast+0x10/0x10
[  309.100847][T16623]  ? netlink_sendmsg+0x642/0xb30
[  309.100855][T16623]  ? skb_put+0x11b/0x210
[  309.100865][T16623]  netlink_sendmsg+0x805/0xb30
[  309.100878][T16623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.100889][T16623]  ? aa_sock_msg_perm+0xf1/0x1d0
[  309.100898][T16623]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  309.100907][T16623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  309.100917][T16623]  __sock_sendmsg+0x21c/0x270
[  309.100932][T16623]  ____sys_sendmsg+0x505/0x830
[  309.100945][T16623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  309.100959][T16623]  ? import_iovec+0x74/0xa0
[  309.100971][T16623]  ___sys_sendmsg+0x21f/0x2a0
[  309.100982][T16623]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.101008][T16623]  ? __fget_files+0x2a/0x420
[  309.101016][T16623]  ? __fget_files+0x3a0/0x420
[  309.101028][T16623]  __x64_sys_sendmsg+0x19b/0x260
[  309.101039][T16623]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  309.101054][T16623]  ? rcu_is_watching+0x15/0xb0
[  309.101065][T16623]  ? do_syscall_64+0xbe/0x3b0
[  309.101078][T16623]  do_syscall_64+0xfa/0x3b0
[  309.101087][T16623]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.101095][T16623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.101103][T16623]  ? exc_page_fault+0x9f/0xf0
[  309.101112][T16623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.101121][T16623] RIP: 0033:0x7f2e0a98eba9
[  309.101131][T16623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.101138][T16623] RSP: 002b:00007f2e0b829038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.101149][T16623] RAX: ffffffffffffffda RBX: 00007f2e0abd5fa0 RCX: 00007f2e0a98eba9
[  309.101155][T16623] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007
[  309.101160][T16623] RBP: 00007f2e0aa11e19 R08: 0000000000000000 R09: 0000000000000000
[  309.101165][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.101170][T16623] R13: 00007f2e0abd6038 R14: 00007f2e0abd5fa0 R15: 00007ffc1adc2f88
[  309.101183][T16623]  </TASK>
[  309.101187][T16623] Mem-Info:
[  309.276405][T16623] active_anon:15265 inactive_anon:0 isolated_anon:0
[  309.276405][T16623]  active_file:1600 inactive_file:38337 isolated_file:0
[  309.276405][T16623]  unevictable:1768 dirty:150 writeback:0
[  309.276405][T16623]  slab_reclaimable:11558 slab_unreclaimable:89497
[  309.276405][T16623]  mapped:18375 shmem:2547 pagetables:939
[  309.276405][T16623]  sec_pagetables:0 bounce:0
[  309.276405][T16623]  kernel_misc_reclaimable:0
[  309.276405][T16623]  free:240317 free_pcp:19499 free_cma:0
[  309.292315][T16623] Node 0 active_anon:42424kB inactive_anon:0kB active_file:4632kB inactive_file:22316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37400kB dirty:420kB writeback:0kB shmem:4756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6288kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.304017][T16623] Node 1 active_anon:18636kB inactive_anon:0kB active_file:1768kB inactive_file:131032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36100kB dirty:180kB writeback:0kB shmem:5432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6552kB pagetables:1756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.315641][T16623] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  309.327231][T16623] lowmem_reserve[]: 0 811 811 811 811
[  309.329358][T16623] Node 0 DMA32 free:244408kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42424kB inactive_anon:0kB active_file:4632kB inactive_file:22316kB unevictable:3536kB writepending:420kB present:1556484kB managed:830872kB mlocked:0kB bounce:0kB free_pcp:38036kB local_pcp:23948kB free_cma:0kB
[  309.340431][T16623] lowmem_reserve[]: 0 0 0 0 0
[  309.342737][T16623] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  309.353784][T16623] lowmem_reserve[]: 0 0 854 854 854
[  309.355579][T16623] Node 1 Normal free:243008kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18636kB inactive_anon:0kB active_file:1768kB inactive_file:131032kB unevictable:3536kB writepending:180kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39840kB local_pcp:15372kB free_cma:0kB
[  309.367140][T16623] lowmem_reserve[]: 0 0 0 0 0
[  309.368698][T16623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  309.373160][T16623] Node 0 DMA32: 376*4kB (UME) 571*8kB (UME) 333*16kB (UME) 176*32kB (UME) 168*64kB (UM) 62*128kB (UME) 31*256kB (UME) 14*512kB (UME) 11*1024kB (UM) 5*2048kB (M) 42*4096kB (UM) = 244360kB
[  309.379424][T16623] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  309.395135][T16623] Node 1 Normal: 709*4kB (UME) 419*8kB (UME) 229*16kB (UME) 581*32kB (UM) 261*64kB (UME) 62*128kB (UME) 24*256kB (UM) 13*512kB (UME) 13*1024kB (UM) 8*2048kB (UM) 36*4096kB (UM) = 243036kB
[  309.402060][T16623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  309.405352][T16623] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  309.408248][T16623] 42484 total pagecache pages
[  309.409716][T16623] 0 pages in swap cache
[  309.411165][T16623] Free swap  = 124996kB
[  309.413287][T16623] Total swap = 124996kB
[  309.414791][T16623] 786301 pages RAM
[  309.415984][T16623] 0 pages HighMem/MovableOnly
[  309.417479][T16623] 241351 pages reserved
[  309.418865][T16623] 0 pages cma reserved
[  309.431902][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  309.505742][T16664] lo speed is unknown, defaulting to 1000
[  309.512688][T16664] wg1 speed is unknown, defaulting to 1000
[  309.549934][T16669] vlan0: entered promiscuous mode
[  309.552629][T16669] vlan0: entered allmulticast mode
[  309.593928][T16669] __nla_validate_parse: 9 callbacks suppressed
[  309.593940][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3063'.
[  309.654925][T16676] netlink: 'syz.3.3065': attribute type 13 has an invalid length.
[  309.657907][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3065'.
[  309.693840][T16676] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  309.717100][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3063'.
[  309.886810][T16695] netlink: 'syz.0.3069': attribute type 30 has an invalid length.
[  310.061207][T16698] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3070'.
[  310.104880][T16700] netlink: 'syz.0.3071': attribute type 3 has an invalid length.
[  310.148911][T16702] netlink: 'syz.0.3072': attribute type 4 has an invalid length.
[  310.155875][   T47] lo speed is unknown, defaulting to 1000
[  310.158034][   T47] syz2: Port: 1 Link DOWN
[  310.159774][T16702] netlink: 'syz.0.3072': attribute type 4 has an invalid length.
[  310.166484][ T5314] lo speed is unknown, defaulting to 1000
[  310.168481][ T5314] syz2: Port: 1 Link ACTIVE
[  310.211158][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3073'.
[  310.361999][T16707] netlink: 'syz.1.3074': attribute type 2 has an invalid length.
[  310.385195][T16708] netlink: 'syz.0.3075': attribute type 1 has an invalid length.
[  310.420091][T16708] 8021q: adding VLAN 0 to HW filter on device bond10
[  310.441024][T16708] bond10: (slave ip6erspan0): making interface the new active one
[  310.446051][T16708] bond10: (slave ip6erspan0): Enslaving as an active interface with an up link
[  310.496951][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'.
[  310.672228][T16730] netlink: 'syz.0.3082': attribute type 2 has an invalid length.
[  310.674993][T16730] netlink: 'syz.0.3082': attribute type 2 has an invalid length.
[  310.790696][T16743] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3085'.
[  310.826331][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'.
[  310.916156][T16751] syzkaller1: entered promiscuous mode
[  310.918040][T16751] syzkaller1: entered allmulticast mode
[  311.511730][    C0] net_ratelimit: 7 callbacks suppressed
[  311.511746][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  311.607778][T16783] openvswitch: netlink: Missing key (keys=40, expected=80)
[  311.661973][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  311.699981][T16791] syzkaller1: entered promiscuous mode
[  311.702637][T16791] syzkaller1: entered allmulticast mode
[  311.835519][T16795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  311.918364][T16799] netlink: 'syz.0.3105': attribute type 1 has an invalid length.
[  311.945224][T16799] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  311.950406][T16799] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  311.958620][T16799] bond11: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  311.981732][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  311.997175][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'.
[  312.027775][T16803] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  312.369655][T16829] lo speed is unknown, defaulting to 1000
[  312.373581][T16829] wg1 speed is unknown, defaulting to 1000
[  312.398352][T16837] xt_HMARK: proto mask must be zero with L3 mode
[  312.541730][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  312.701853][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  312.816656][T16866] team0: Port device dummy0 added
[  312.823814][T16861] delete_channel: no stack
[  312.827159][T16866] team0: Port device dummy0 removed
[  313.021788][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  313.065926][T16880] lo speed is unknown, defaulting to 1000
[  313.069719][T16880] wg1 speed is unknown, defaulting to 1000
[  313.591857][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  313.741798][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  314.638943][T16949] __nla_validate_parse: 8 callbacks suppressed
[  314.638959][T16949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3158'.
[  314.762404][T16957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3159'.
[  314.807524][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3160'.
[  314.890318][T16963] lo speed is unknown, defaulting to 1000
[  314.896342][T16963] wg1 speed is unknown, defaulting to 1000
[  315.393811][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'.
[  316.666749][T16993] validate_nla: 7 callbacks suppressed
[  316.666766][T16993] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  316.672672][T16993] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3172'.
[  316.701844][    C0] net_ratelimit: 7 callbacks suppressed
[  316.701858][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  316.730246][T16995] netlink: 'syz.1.3171': attribute type 11 has an invalid length.
[  316.736782][T16995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3171'.
[  316.866608][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  316.930350][T17006] lo speed is unknown, defaulting to 1000
[  316.934813][T17006] wg1 speed is unknown, defaulting to 1000
[  316.977165][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[  317.181789][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  317.621047][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'.
[  317.656549][T17049] lo speed is unknown, defaulting to 1000
[  317.659396][T17049] wg1 speed is unknown, defaulting to 1000
[  317.741782][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  317.911738][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  318.221901][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  318.221955][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  318.469303][T17103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3200'.
[  318.497690][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'.
[  318.539573][T17116] sctp: [Deprecated]: syz.3.3201 (pid 17116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.539573][T17116] Use struct sctp_sack_info instead
[  318.704907][T17131] netlink: 'syz.0.3206': attribute type 1 has an invalid length.
[  318.715750][T17129] siw: device registration error -23
[  318.781988][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  318.941689][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  319.261866][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  319.433204][T17168] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  319.437173][T17168] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.440976][T17168] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  319.489810][T17168] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  319.496149][T17168] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.500470][T17168] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  319.571145][T17168] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  319.574681][T17168] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.577963][T17168] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  319.587919][T17180] netlink: 'syz.0.3224': attribute type 9 has an invalid length.
[  319.636982][T17168] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  319.640757][T17168] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  319.654605][T17168] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  319.753424][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  319.757180][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  319.759891][   T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  319.789526][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  319.792509][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  319.795333][   T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  319.798208][T17186] lo speed is unknown, defaulting to 1000
[  319.801235][T17186] wg1 speed is unknown, defaulting to 1000
[  319.809898][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  319.813056][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  319.816153][   T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  319.821784][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  319.834212][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  319.837186][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  319.839989][   T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  319.878278][T17194] lo speed is unknown, defaulting to 1000
[  319.881310][T17194] wg1 speed is unknown, defaulting to 1000
[  319.885566][T17193] netlink: 'syz.0.3228': attribute type 1 has an invalid length.
[  319.888147][T17193] __nla_validate_parse: 10 callbacks suppressed
[  319.888155][T17193] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3228'.
[  319.918767][T17199] netlink: 'syz.0.3228': attribute type 1 has an invalid length.
[  319.922865][T17199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3228'.
[  319.946311][T17200] netlink: 'syz.3.3229': attribute type 11 has an invalid length.
[  320.071454][T17208] netlink: 'syz.1.3232': attribute type 1 has an invalid length.
[  320.219371][T17210] bridge8: entered promiscuous mode
[  320.221865][T17210] bridge8: entered allmulticast mode
[  320.275562][T17212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'.
[  320.298512][T17208] bond10: entered promiscuous mode
[  320.300161][T17208] bond10: entered allmulticast mode
[  320.383357][T17223] wg2: entered promiscuous mode
[  320.384948][T17223] wg2: entered allmulticast mode
[  320.398421][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'.
[  320.401887][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'.
[  320.410336][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'.
[  320.415084][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.418461][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.421075][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.425207][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'.
[  320.435349][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  320.496024][T17233] vxcan0: entered promiscuous mode
[  320.551430][T17240] netlink: 'syz.3.3241': attribute type 1 has an invalid length.
[  320.580927][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'.
[  320.645108][T17246] netlink: 'syz.0.3244': attribute type 1 has an invalid length.
[  320.838728][T17270] syzkaller0: entered promiscuous mode
[  320.840620][T17270] syzkaller0: entered allmulticast mode
[  321.911988][    C0] net_ratelimit: 7 callbacks suppressed
[  321.912004][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  322.071818][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  322.306853][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'.
[  322.310520][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3254'.
[  322.381851][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  322.417361][T17299] validate_nla: 1 callbacks suppressed
[  322.417375][T17299] netlink: 'syz.1.3257': attribute type 6 has an invalid length.
[  322.433428][T17300] netlink: 'syz.1.3257': attribute type 12 has an invalid length.
[  322.674921][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.695176][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.698276][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.725860][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.900239][T17334] bond0: (slave rose0): Error: Device can not be enslaved while up
[  322.951729][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  323.111767][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  323.157355][T17358] netlink: 'syz.0.3275': attribute type 11 has an invalid length.
[  323.407071][T17372] netlink: 'syz.0.3279': attribute type 1 has an invalid length.
[  323.421733][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  323.991917][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.141912][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  324.387773][T17390] netlink: 'syz.1.3284': attribute type 11 has an invalid length.
[  324.391058][T17390] netlink: 'syz.1.3284': attribute type 11 has an invalid length.
[  324.461747][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.709523][T17416] ..1: renamed from ..0
[  324.716821][T17416] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  324.725328][T17416] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  324.838208][T17422] netlink: 'syz.3.3293': attribute type 1 has an invalid length.
[  324.873577][T17422] bond5: entered promiscuous mode
[  324.875594][T17422] 8021q: adding VLAN 0 to HW filter on device bond5
[  324.896537][T17422] 8021q: adding VLAN 0 to HW filter on device bond5
[  324.898978][T17422] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address
[  324.905417][T17422] bond5: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  324.913991][T17422] bond5: (slave wireguard2): making interface the new active one
[  324.917352][T17422] wireguard2: entered promiscuous mode
[  324.921104][T17422] bond5: (slave wireguard2): Enslaving as an active interface with an up link
[  324.948594][T17422] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address
[  324.958539][T17422] bond5: (slave wireguard3): Enslaving as a backup interface with an up link
[  325.106537][T17438] __nla_validate_parse: 34 callbacks suppressed
[  325.106551][T17438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3296'.
[  325.293403][T17449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3300'.
[  325.393642][ T5314] lo speed is unknown, defaulting to 1000
[  325.395967][ T5314] syz2: Port: 1 Link DOWN
[  325.486580][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3302'.
[  325.545417][T17458] netlink: 'syz.0.3302': attribute type 4 has an invalid length.
[  325.549335][T17458] netlink: 'syz.0.3302': attribute type 4 has an invalid length.
[  325.558429][   T47] lo speed is unknown, defaulting to 1000
[  325.560218][   T47] syz2: Port: 1 Link ACTIVE
[  325.816183][T17477] netlink: 'syz.0.3305': attribute type 10 has an invalid length.
[  325.818821][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3305'.
[  325.880102][T17477] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  325.892788][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3304'.
[  326.496274][T17502] syz_tun: entered allmulticast mode
[  327.041944][T17505] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3315'.
[  327.045726][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  327.112007][    C0] net_ratelimit: 8 callbacks suppressed
[  327.112022][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  327.243964][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3319'.
[  327.246953][T17521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3319'.
[  327.559866][T17541] validate_nla: 1 callbacks suppressed
[  327.559876][T17541] netlink: 'syz.1.3326': attribute type 11 has an invalid length.
[  327.581667][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  327.675383][T17551] siw: device registration error -23
[  327.755730][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3332'.
[  327.815196][T17566] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  327.863508][T17572] netlink: 'syz.1.3335': attribute type 11 has an invalid length.
[  327.939280][T17579] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  328.057163][T17588] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002
[  328.141793][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  328.164147][T17590] lo speed is unknown, defaulting to 1000
[  328.172505][T17590] wg1 speed is unknown, defaulting to 1000
[  328.621804][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  328.730436][T17618] netlink: 'syz.0.3348': attribute type 1 has an invalid length.
[  328.925688][T17631] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  328.978243][T17637] syzkaller1: entered promiscuous mode
[  328.980538][T17637] syzkaller1: entered allmulticast mode
[  329.182240][   T55] Bluetooth: hci0: command 0x0405 tx timeout
[  329.191793][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  329.299951][T17668] netlink: 'syz.3.3364': attribute type 11 has an invalid length.
[  329.400069][T17682] netlink: 'syz.1.3369': attribute type 29 has an invalid length.
[  329.405145][T17682] netlink: 'syz.1.3369': attribute type 29 has an invalid length.
[  329.440933][T17690] netlink: 'syz.3.3371': attribute type 9 has an invalid length.
[  329.616598][T17697] lo speed is unknown, defaulting to 1000
[  329.625423][T17697] wg1 speed is unknown, defaulting to 1000
[  329.661890][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  329.877194][T17711] netlink: 'syz.1.3377': attribute type 2 has an invalid length.
[  330.061849][T17728] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.097975][T17728] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.148274][T17728] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.189049][T17728] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.221901][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  330.254097][ T5716] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.267106][ T5716] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.283046][ T5716] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.301493][ T5716] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.348445][T17737] IPVS: length: 111 != 8
[  330.351152][T17737] IPVS: length: 111 != 8
[  330.353982][T17737] IPVS: length: 111 != 8
[  330.355437][T17737] IPVS: length: 111 != 8
[  330.356848][T17737] IPVS: length: 111 != 8
[  330.358450][T17737] IPVS: length: 111 != 8
[  330.360066][T17737] IPVS: length: 111 != 8
[  330.366715][T17737] IPVS: length: 111 != 8
[  330.368410][T17738] __nla_validate_parse: 8 callbacks suppressed
[  330.368417][T17738] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3385'.
[  330.378269][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'.
[  330.701761][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  330.839342][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'.
[  331.387974][T17780] sctp: [Deprecated]: syz.1.3399 (pid 17780) Use of int in maxseg socket option.
[  331.387974][T17780] Use struct sctp_assoc_value instead
[  331.611079][T17791] netlink: 'syz.0.3403': attribute type 1 has an invalid length.
[  331.619597][T17791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3403'.
[  331.747441][T17804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3406'.
[  331.875790][T17815] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3410'.
[  332.007455][T17823] lo speed is unknown, defaulting to 1000
[  332.021409][T17823] wg1 speed is unknown, defaulting to 1000
[  332.221284][T17823] netlink: 'syz.1.3413': attribute type 13 has an invalid length.
[  332.238516][T17823] net_ratelimit: 2 callbacks suppressed
[  332.238527][T17823] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  332.301810][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  332.399193][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'.
[  332.429792][T17836] lo speed is unknown, defaulting to 1000
[  332.439341][T17836] wg1 speed is unknown, defaulting to 1000
[  332.476361][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'.
[  332.781933][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  332.791201][T17846] validate_nla: 3 callbacks suppressed
[  332.791214][T17846] netlink: 'syz.0.3418': attribute type 4 has an invalid length.
[  332.810146][ T5915] lo speed is unknown, defaulting to 1000
[  332.813726][ T5915] syz2: Port: 1 Link DOWN
[  332.821076][T17846] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3418'.
[  332.829171][T17846] block nbd0: not configured, cannot reconfigure
[  332.896939][T17847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3418'.
[  333.012703][T17858] netlink: 'syz.1.3419': attribute type 11 has an invalid length.
[  333.149246][T17875] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  333.154111][T17874] sctp: [Deprecated]: syz.3.3425 (pid 17874) Use of int in maxseg socket option.
[  333.154111][T17874] Use struct sctp_assoc_value instead
[  333.258587][T17878] lo speed is unknown, defaulting to 1000
[  333.270068][T17878] wg1 speed is unknown, defaulting to 1000
[  333.341810][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  333.456767][T17884] netlink: 'syz.0.3427': attribute type 1 has an invalid length.
[  333.463107][T17884] netlink: 'syz.0.3427': attribute type 24 has an invalid length.
[  333.821827][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  333.897606][T17914] lo speed is unknown, defaulting to 1000
[  333.901409][T17914] wg1 speed is unknown, defaulting to 1000
[  334.312753][T17935] siw: device registration error -23
[  334.320461][T17931] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.330924][T17931] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  334.335401][T17931] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.339078][T17931] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  334.385671][T17935] netlink: 'syz.1.3444': attribute type 4 has an invalid length.
[  334.391070][T17942] siw: device registration error -23
[  334.393570][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  334.409420][T17931] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.433468][T17931] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  334.437264][T17931] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.440997][T17931] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  334.508847][T17931] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.512435][T17931] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  334.516207][T17931] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.520071][T17931] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  334.555453][T17931] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.558629][T17931] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  334.562000][T17931] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  334.566233][T17931] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  334.660742][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.664163][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  334.667620][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  334.671062][   T13] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  334.687510][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.691432][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  334.697728][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  334.712155][   T13] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  334.726347][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.729800][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  334.734301][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  334.738627][   T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  334.757324][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.760874][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  334.765019][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  334.768559][   T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  334.862213][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  334.927719][T17961] siw: device registration error -23
[  335.328599][T17988] netlink: 'syz.0.3461': attribute type 9 has an invalid length.
[  335.429577][T17996] __nla_validate_parse: 12 callbacks suppressed
[  335.429593][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'.
[  335.780336][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'.
[  335.785441][T18016] netlink: 'syz.1.3469': attribute type 12 has an invalid length.
[  335.788416][T18016] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3469'.
[  335.906233][T18025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3472'.
[  336.001015][T18031] netlink: 'syz.1.3474': attribute type 9 has an invalid length.
[  336.006967][T18031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3474'.
[  336.085864][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3476'.
[  336.115939][T18031] block nbd0: server does not support multiple connections per device.
[  336.126310][T18031] block nbd0: shutting down sockets
[  336.162035][T18041] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.210534][T18047] 8021q: adding VLAN 0 to HW filter on device bond7
[  336.257792][T18054] netlink: 'syz.3.3478': attribute type 5 has an invalid length.
[  336.272668][T18057] lo speed is unknown, defaulting to 1000
[  336.275393][T18057] wg1 speed is unknown, defaulting to 1000
[  336.313981][T18059] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  336.317051][T18059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.324848][T18059] tipc: Resetting bearer <eth:syzkaller0>
[  336.331095][T18059] openvswitch: netlink: Tunnel attr 16369 out of range max 16
[  337.250942][T18073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.254709][T18073] syzkaller0: entered promiscuous mode
[  337.256977][T18073] syzkaller0: entered allmulticast mode
[  337.291137][T18073] bridge5: entered promiscuous mode
[  337.293565][T18073] bridge5: entered allmulticast mode
[  337.296541][T18073] team0: Port device bridge5 added
[  337.323457][T18070] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3483'.
[  337.326708][T18071] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3483'.
[  337.333657][T18073] tipc: Resetting bearer <eth:syzkaller0>
[  337.347805][T18072] tipc: Resetting bearer <eth:syzkaller0>
[  337.363792][T18072] tipc: Disabling bearer <eth:syzkaller0>
[  337.398216][T18079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3486'.
[  337.452581][T18085] sctp: [Deprecated]: syz.0.3488 (pid 18085) Use of int in max_burst socket option.
[  337.452581][T18085] Use struct sctp_assoc_value instead
[  337.506209][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'.
[  337.531981][T18089] team0: entered promiscuous mode
[  337.535600][T18089] team0: entered allmulticast mode
[  337.538203][T18089] 8021q: adding VLAN 0 to HW filter on device team0
[  337.550884][T18087] batadv2: entered promiscuous mode
[  337.557245][T18087] batadv2: entered allmulticast mode
[  337.598274][T18091] team0: Device macvtap1 is already an upper device of the team interface
[  337.870431][T18097] validate_nla: 3 callbacks suppressed
[  337.870451][T18097] netlink: 'syz.0.3492': attribute type 13 has an invalid length.
[  337.881797][T18097] netlink: 'syz.0.3492': attribute type 17 has an invalid length.
[  337.926485][T18097] erspan0: left promiscuous mode
[  337.968551][T18097] ip6gretap0: left promiscuous mode
[  337.970880][T18097] ip6gretap0: left allmulticast mode
[  338.005865][T18097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  338.015861][ T5314] lo speed is unknown, defaulting to 1000
[  338.018116][ T5314] syz2: Port: 1 Link ACTIVE
[  338.597846][T18110] 0X: renamed from caif0
[  338.601238][T18110] 0X: entered allmulticast mode
[  338.604624][T18110] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  338.688166][T18118] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.695259][T18118] tipc: Resetting bearer <eth:syzkaller0>
[  338.862698][ T5716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.869002][ T5716] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  338.892011][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  339.129543][T18129] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  339.189906][T18133] netlink: 'syz.0.3503': attribute type 1 has an invalid length.
[  339.402621][T18137] lo speed is unknown, defaulting to 1000
[  339.406137][T18137] wg1 speed is unknown, defaulting to 1000
[  339.629803][T18160] netlink: 'syz.3.3512': attribute type 1 has an invalid length.
[  339.654281][T18160] 8021q: adding VLAN 0 to HW filter on device bond8
[  339.678655][T18160] bond8: (slave geneve4): making interface the new active one
[  339.682007][T18160] bond8: (slave geneve4): Enslaving as an active interface with an up link
[  339.888263][T18181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  339.897904][T18183] netlink: 'syz.3.3520': attribute type 21 has an invalid length.
[  339.902905][T18183] netlink: 'syz.3.3520': attribute type 30 has an invalid length.
[  339.995409][T18183] netlink: 'syz.3.3520': attribute type 30 has an invalid length.
[  340.297902][T18211] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003
[  340.422050][T18234] netlink: 'syz.3.3529': attribute type 1 has an invalid length.
[  340.456031][T18224] __nla_validate_parse: 35 callbacks suppressed
[  340.456043][T18224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3531'.
[  340.509200][T18242] netlink: 'syz.0.3533': attribute type 1 has an invalid length.
[  340.546965][T18242] 8021q: adding VLAN 0 to HW filter on device bond12
[  340.680495][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3535'.
[  340.770013][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3537'.
[  340.844352][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  340.846436][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.848926][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.851269][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.854297][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.856662][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.859163][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.861625][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.864522][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.867107][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.869628][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.872299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.875188][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.877896][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.880611][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.883066][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.886092][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.889030][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.891488][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.893986][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.896796][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.899325][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.902436][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.905298][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.908010][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.910456][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.913438][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.916396][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.918956][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.921436][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.924503][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.927027][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.929745][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.932796][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.935892][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.938870][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.942019][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.945111][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.948211][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.950998][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.954158][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.956798][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  340.959416][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  340.962198][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  341.215773][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'.
[  341.220806][T18276] netlink: 'syz.0.3543': attribute type 15 has an invalid length.
[  341.316163][T18281] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.503294][T18287] 8021q: adding VLAN 0 to HW filter on device bond13
[  342.176958][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'.
[  343.030638][T18332] validate_nla: 2 callbacks suppressed
[  343.030653][T18332] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  343.037156][T18332] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3560'.
[  343.040838][T18332] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  343.044590][T18332] netlink: 'syz.1.3560': attribute type 2 has an invalid length.
[  343.049843][T18336] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  343.053668][T18336] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3560'.
[  343.057151][T18336] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  343.060247][T18336] netlink: 'syz.1.3560': attribute type 2 has an invalid length.
[  343.111852][T18339] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  343.135007][T18339] netlink: 'syz.0.3561': attribute type 10 has an invalid length.
[  343.182307][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.389956][T18348] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.438487][T18348] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.496955][T18348] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.546980][T18348] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.623953][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.638772][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.650848][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.660882][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.794656][T18355] syzkaller1: entered promiscuous mode
[  343.796852][T18355] syzkaller1: entered allmulticast mode
[  344.137514][T18363] IPv6: Can't replace route, no match found
[  344.288003][T18375] lo speed is unknown, defaulting to 1000
[  344.291948][T18375] wg1 speed is unknown, defaulting to 1000
[  344.388983][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3575'.
[  344.892466][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'.
[  344.988716][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'.
[  345.080554][T18397] tipc: Resetting bearer <eth:syzkaller0>
[  345.091204][T18396] tipc: Resetting bearer <eth:syzkaller0>
[  345.202189][T18405] netlink: 'syz.1.3582': attribute type 11 has an invalid length.
[  345.394379][T18422] netlink: 'syz.0.3589': attribute type 11 has an invalid length.
[  345.485606][T18424] 8021q: VLANs not supported on caif0
[  345.629733][T18428] lo speed is unknown, defaulting to 1000
[  345.634003][T18428] wg1 speed is unknown, defaulting to 1000
[  345.821920][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  346.076069][T18439] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  346.080820][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'.
[  346.088152][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3594'.
[  346.092573][T18439] netlink: 'syz.0.3594': attribute type 10 has an invalid length.
[  346.105332][T18439] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  346.274516][T18448] netlink: zone id is out of range
[  346.276695][T18448] netlink: zone id is out of range
[  346.280000][T18448] netlink: zone id is out of range
[  346.286969][T18448] netlink: zone id is out of range
[  346.294235][T18448] netlink: zone id is out of range
[  346.306335][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3599'.
[  346.316092][T18448] netlink: set zone limit has 4 unknown bytes
[  346.321389][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'.
[  346.327998][T18450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3599'.
[  346.331368][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'.
[  346.334957][T18450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3599'.
[  346.339435][T18448] netlink: del zone limit has 4 unknown bytes
[  346.398490][T18454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.746762][T18475] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  346.754047][T18477] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  346.886740][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'.
[  346.889888][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'.
[  346.894189][T18472] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3607'.
[  348.270690][T18514] nbd: device at index 0 is going down
[  348.395878][T18519] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  348.398325][T18519] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  348.652335][T18541] syzkaller1: entered promiscuous mode
[  348.654081][T18541] syzkaller1: entered allmulticast mode
[  348.674434][T18541] lo speed is unknown, defaulting to 1000
[  348.677129][T18541] wg1 speed is unknown, defaulting to 1000
[  348.691074][T18540] lo speed is unknown, defaulting to 1000
[  348.717456][T18540] wg1 speed is unknown, defaulting to 1000
[  349.210075][T18560] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.269711][T18560] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.335979][T18560] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.397372][T18560] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.463100][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.474381][ T5900] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.484122][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.492045][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.615705][T18605] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.646582][T18605] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.706900][T18605] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.746516][T18605] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.810017][ T5900] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.824020][ T5900] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.838904][ T5900] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.848322][ T5900] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.919582][T18614] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.925634][T18614] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  351.134770][T18618] __nla_validate_parse: 5 callbacks suppressed
[  351.134784][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3650'.
[  351.185194][T18623] validate_nla: 1 callbacks suppressed
[  351.185210][T18623] netlink: 'syz.1.3651': attribute type 11 has an invalid length.
[  351.269480][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'.
[  351.288212][T18627] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3653'.
[  351.477629][T18634] lo speed is unknown, defaulting to 1000
[  351.482740][T18634] wg1 speed is unknown, defaulting to 1000
[  352.061761][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.337549][T18640] can: request_module (can-proto-0) failed.
[  352.421062][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3658'.
[  352.489697][T18656] netlink: 'syz.1.3658': attribute type 10 has an invalid length.
[  352.563079][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'.
[  352.566304][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'.
[  352.627506][T18673] netlink: 'syz.1.3664': attribute type 11 has an invalid length.
[  352.677974][T18676] lo speed is unknown, defaulting to 1000
[  352.680890][T18676] wg1 speed is unknown, defaulting to 1000
[  352.720968][T18678] netlink: 'syz.1.3665': attribute type 33 has an invalid length.
[  352.724381][T18678] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3665'.
[  352.882658][T18686] syzkaller1: entered promiscuous mode
[  352.885265][T18686] syzkaller1: entered allmulticast mode
[  353.186912][T18698] tipc: Resetting bearer <eth:syzkaller0>
[  353.231354][ T5900] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.236846][ T5900] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.240044][ T5900] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.246786][ T5900] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  353.571079][T18706] netlink: 'syz.0.3671': attribute type 11 has an invalid length.
[  354.606042][T18721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3674'.
[  354.740674][T18729] netlink: 'syz.1.3677': attribute type 12 has an invalid length.
[  355.068632][T18743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3681'.
[  355.097226][ T5900] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  355.100596][ T5900] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  355.104706][ T5900] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  355.108653][ T5900] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.108925][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3681'.
[  356.260630][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  356.265271][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  356.271449][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.277025][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.280427][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  356.329270][T18761] lo speed is unknown, defaulting to 1000
[  356.334231][T18761] wg1 speed is unknown, defaulting to 1000
[  356.400673][T18765] lo speed is unknown, defaulting to 1000
[  356.406787][T18765] wg1 speed is unknown, defaulting to 1000
[  356.619236][T18761] chnl_net:caif_netlink_parms(): no params data found
[  356.755674][T18761] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.758625][T18761] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.761724][T18761] bridge_slave_0: entered allmulticast mode
[  356.763529][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'.
[  356.765805][T18761] bridge_slave_0: entered promiscuous mode
[  356.772655][T18761] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.775693][T18761] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.778754][T18761] bridge_slave_1: entered allmulticast mode
[  356.781978][T18761] bridge_slave_1: entered promiscuous mode
[  356.810494][T18761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.816992][T18761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.842755][T18761] team0: Port device team_slave_0 added
[  356.846510][T18761] team0: Port device team_slave_1 added
[  356.877519][T18761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.880444][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.889458][T18761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.895504][T18761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.897789][T18761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.906089][T18761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.964566][T18761] hsr_slave_0: entered promiscuous mode
[  356.967510][T18761] hsr_slave_1: entered promiscuous mode
[  357.034660][T18792] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3693'.
[  357.204528][T18761] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  357.211184][T18761] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  357.217200][T18761] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  357.222823][T18761] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  357.259587][T18761] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.262503][T18761] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.265819][T18761] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.268596][T18761] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.278206][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.282983][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.305562][T18814] netem: change failed
[  357.333834][T18817] netem: change failed
[  357.425733][T18761] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.445042][T18761] 8021q: adding VLAN 0 to HW filter on device team0
[  357.456034][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.459802][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.480028][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.482969][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.647207][T18830] netlink: 'syz.0.3702': attribute type 1 has an invalid length.
[  357.680791][T18830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3702'.
[  357.685236][T18830] 8021q: adding VLAN 0 to HW filter on device bond14
[  357.768802][T18761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.831079][T18842] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3704'.
[  357.838211][T18842] ..1: renamed from ..0
[  357.841287][T18842] ..1: failed to rename
[  357.844055][T18842] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  357.848522][T18842] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  357.975487][T18761] veth0_vlan: entered promiscuous mode
[  357.984187][T18761] veth1_vlan: entered promiscuous mode
[  358.017437][T18761] veth0_macvtap: entered promiscuous mode
[  358.026348][T18761] veth1_macvtap: entered promiscuous mode
[  358.051671][T18761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.060810][T18761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.077522][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.081085][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.085342][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.088680][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.199004][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.202550][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.262643][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.265536][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.304191][   T55] Bluetooth: hci3: command tx timeout
[  358.314502][T18862] netlink: 9300 bytes leftover after parsing attributes in process `syz.1.3708'.
[  358.317941][T18862] tc_dump_action: action bad kind
[  358.387134][T18866] tipc: Resetting bearer <eth:syzkaller0>
[  358.391498][T18866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3710'.
[  358.446212][T18871] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3711'.
[  358.449769][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3711'.
[  358.454334][T18871] openvswitch: netlink: Unknown nsh attribute 0
[  358.457335][T18871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.526047][T18876] pim6reg: entered allmulticast mode
[  358.720330][T18891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3718'.
[  358.776709][T18901] netlink: 'syz.1.3721': attribute type 21 has an invalid length.
[  358.815444][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'.
[  358.818517][T18903] netlink: 'syz.1.3722': attribute type 30 has an invalid length.
[  359.031096][T18919] lo speed is unknown, defaulting to 1000
[  359.036737][T18919] wg1 speed is unknown, defaulting to 1000
[  359.358017][T18953] lo speed is unknown, defaulting to 1000
[  359.381959][T18953] wg1 speed is unknown, defaulting to 1000
[  359.436615][T18964] netlink: 'syz.1.3736': attribute type 11 has an invalid length.
[  359.540655][T18968] netlink: 'syz.1.3739': attribute type 1 has an invalid length.
[  359.582554][   T32] wlan0: Trigger new scan to find an IBSS to join
[  359.615802][T18974] wg1: entered promiscuous mode
[  359.617556][T18974] wg1: entered allmulticast mode
[  359.677308][T18980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  359.681147][T18980] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  359.863137][T18985] netlink: 'syz.0.3745': attribute type 12 has an invalid length.
[  360.020084][T18993] netlink: 'syz.0.3747': attribute type 13 has an invalid length.
[  360.020168][T18994] netlink: 'syz.0.3747': attribute type 13 has an invalid length.
[  360.128763][T18998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  360.247101][T19002] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  360.382215][   T55] Bluetooth: hci3: command tx timeout
[  360.486662][T19007] syzkaller1: entered promiscuous mode
[  360.488938][T19007] syzkaller1: entered allmulticast mode
[  361.288342][T19027] tipc: Resetting bearer <eth:syzkaller0>
[  361.307234][T19027] tipc: Resetting bearer <eth:syzkaller0>
[  361.536095][T19041] macsec0: entered promiscuous mode
[  361.537874][T19041] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  361.546661][T19041] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  361.849909][T19054] __nla_validate_parse: 18 callbacks suppressed
[  361.849925][T19054] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3767'.
[  362.046286][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3773'.
[  362.049338][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3773'.
[  362.103788][T19077] netlink: 'syz.0.3774': attribute type 1 has an invalid length.
[  362.115844][T19077] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  362.153047][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.209229][T19086] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3775'.
[  362.256405][T19089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  362.272023][ T1279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.396808][T19097] syzkaller1: entered promiscuous mode
[  362.398623][T19097] syzkaller1: entered allmulticast mode
[  362.461905][ T5851] Bluetooth: hci3: command tx timeout
[  362.507836][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'.
[  362.511676][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3780'.
[  362.674233][T19110] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  362.733652][T19115] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3785'.
[  362.743331][T19115] netlink: 'syz.1.3785': attribute type 1 has an invalid length.
[  362.991097][T19134] syzkaller1: entered promiscuous mode
[  362.993223][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3790'.
[  362.997384][T19134] syzkaller1: entered allmulticast mode
[  363.086296][T19141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3793'.
[  363.089597][T19141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3793'.
[  363.105379][T19141] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  363.109021][T19141] gretap1: entered promiscuous mode
[  363.112297][T19141] gretap1: entered allmulticast mode
[  363.182798][T19149] lo speed is unknown, defaulting to 1000
[  363.186021][T19149] wg1 speed is unknown, defaulting to 1000
[  363.428385][T19149] netlink: 'syz.1.3796': attribute type 2 has an invalid length.
[  363.647301][T19189] siw: device registration error -23
[  364.100103][T14675] IPVS: starting estimator thread 0...
[  364.179831][T19217] lo speed is unknown, defaulting to 1000
[  364.183923][T19217] wg1 speed is unknown, defaulting to 1000
[  364.195799][T19215] IPVS: using max 44 ests per chain, 105600 per kthread
[  364.542099][ T5851] Bluetooth: hci3: command 0x0419 tx timeout
[  364.815795][T19261] netlink: 'syz.0.3833': attribute type 11 has an invalid length.
[  364.819955][T19261] netlink: 'syz.0.3833': attribute type 11 has an invalid length.
[  365.140170][T19284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.556947][T19307] IPVS: Scheduler module ip_vs_sip not found
[  365.776208][T19328] veth11: entered promiscuous mode
[  365.802689][T19331] lo speed is unknown, defaulting to 1000
[  365.806161][T19331] wg1 speed is unknown, defaulting to 1000
[  366.622378][   T55] Bluetooth: hci3: command 0x0419 tx timeout
[  366.876570][T19383] netlink: 'syz.1.3873': attribute type 1 has an invalid length.
[  366.907475][T19383] netlink: 'syz.1.3873': attribute type 1 has an invalid length.
[  367.022027][T19396] lo speed is unknown, defaulting to 1000
[  367.025879][T19396] wg1 speed is unknown, defaulting to 1000
[  367.057823][T19399] __nla_validate_parse: 23 callbacks suppressed
[  367.057834][T19399] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3876'.
[  367.072290][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'.
[  367.075919][T19399] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  367.079284][T19399] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  367.086845][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'.
[  367.601128][T19409] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3879'.
[  367.679583][T19416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3881'.
[  367.747608][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'.
[  367.769991][T19420] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3883'.
[  368.049499][T19441] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3887'.
[  368.102263][T19448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3888'.
[  368.265171][T19463] netlink: 'syz.4.3892': attribute type 1 has an invalid length.
[  368.297306][T19463] bond1: entered promiscuous mode
[  368.300852][T19463] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.337814][T19449] netlink: 'syz.0.3889': attribute type 12 has an invalid length.
[  368.357291][T19463] 8021q: adding VLAN 0 to HW filter on device bond1
[  368.360223][T19449] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3889'.
[  368.365264][T19463] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  368.369758][T19463] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  368.385623][T19463] bond1: (slave wireguard0): making interface the new active one
[  368.388831][T19463] wireguard0: entered promiscuous mode
[  368.393078][T19463] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  368.398247][T19451] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  368.702619][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  369.559056][T19498] nbd: couldn't find a device at index 0
[  369.732788][T19509] geneve2: entered promiscuous mode
[  369.737028][   T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  369.741251][   T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  369.744301][   T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  369.746965][   T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  370.371223][T19558] lo speed is unknown, defaulting to 1000
[  370.376728][T19558] wg1 speed is unknown, defaulting to 1000
[  370.459516][T19561] syzkaller1: entered promiscuous mode
[  370.462609][T19561] syzkaller1: entered allmulticast mode
[  370.559551][T19569] 8021q: VLANs not supported on nlmon0
[  370.562624][T19566] netlink: 'syz.0.3918': attribute type 1 has an invalid length.
[  370.839563][T19585] bridge13: entered promiscuous mode
[  370.846518][T19585] bridge13: entered allmulticast mode
[  371.643685][T19619] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  371.651863][T19619] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  371.660066][T19619] tipc: Resetting bearer <eth:syzkaller0>
[  371.865872][T19630] block nbd3: shutting down sockets
[  371.876426][T19633] rdma_rxe: rxe_newlink: failed to add lo
[  371.876568][T19634] rdma_rxe: rxe_newlink: failed to add lo
[  371.890218][T19633] ip6gre0: left promiscuous mode
[  371.893658][T19633] 8021q: adding VLAN 0 to HW filter on device team0
[  371.897332][T19633] 0X: left allmulticast mode
[  371.899232][T19633] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  372.047481][T19643] 8021q: adding VLAN 0 to HW filter on device bond13
[  372.065559][T19643] xt_time: invalid argument - start or stop time greater than 23:59:59
[  372.076007][T19644] vlan0: entered allmulticast mode
[  372.077720][T19644] bridge0: entered allmulticast mode
[  372.080986][T19644] bridge20: port 1(vlan0) entered blocking state
[  372.084115][T19644] bridge20: port 1(vlan0) entered disabled state
[  372.087727][T19644] vlan0: entered promiscuous mode
[  372.089783][T19644] bridge0: entered promiscuous mode
[  372.157982][T19647] netlink: 'syz.1.3944': attribute type 1 has an invalid length.
[  372.306781][T19664] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  372.313024][T19664] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  372.320348][T19667] netlink: 'syz.4.3951': attribute type 39 has an invalid length.
[  372.321389][T19664] tipc: Resetting bearer <eth:syzkaller0>
[  372.385662][T19674] netlink: 'syz.4.3951': attribute type 1 has an invalid length.
[  372.444467][T19676] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.493167][T19682] __nla_validate_parse: 11 callbacks suppressed
[  372.493179][T19682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3954'.
[  372.538116][T19676] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.597129][T19676] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.624160][T19688] bridge1: entered promiscuous mode
[  372.625867][T19688] bridge1: entered allmulticast mode
[  372.657956][T19676] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.700100][T19696] netlink: 'syz.0.3960': attribute type 4 has an invalid length.
[  372.736825][ T5900] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.739591][ T5900] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.753088][ T5900] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.837806][ T5900] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.043779][T19718] netlink: 'syz.0.3966': attribute type 5 has an invalid length.
[  373.048183][T19718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3966'.
[  373.112892][T19720] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3967'.
[  373.124560][T19724] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3967'.
[  373.198783][T19727] lo speed is unknown, defaulting to 1000
[  373.204827][T19727] wg1 speed is unknown, defaulting to 1000
[  373.268238][T19732] lo speed is unknown, defaulting to 1000
[  373.280578][T19732] wg1 speed is unknown, defaulting to 1000
[  373.356602][T19739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3972'.
[  373.413406][T19739] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  373.417012][T19739] team0: Device ipvlan2 is already an upper device of the team interface
[  373.709521][T19754] netlink: 'syz.0.3976': attribute type 2 has an invalid length.
[  373.739008][T19754] netlink: 'syz.0.3976': attribute type 9 has an invalid length.
[  373.743526][T19754] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.3976'.
[  374.284340][T19771] netlink: 'syz.0.3982': attribute type 2 has an invalid length.
[  374.459266][T19790] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002
[  374.584433][T19793] lo speed is unknown, defaulting to 1000
[  374.587470][T19793] wg1 speed is unknown, defaulting to 1000
[  375.174671][T19798] netlink: 'syz.1.3990': attribute type 3 has an invalid length.
[  375.197435][T19798] ip6_vti0: entered allmulticast mode
[  375.201378][T19797] ip6_vti0: left allmulticast mode
[  375.315861][T19802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3992'.
[  375.318947][T19804] netlink: 'syz.4.3993': attribute type 11 has an invalid length.
[  375.351011][T19802] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  375.415317][T19808] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3995'.
[  375.490784][T19813] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  375.511190][T19817] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  375.682919][T19828] netlink: 'syz.1.4003': attribute type 1 has an invalid length.
[  375.716049][T19828] 8021q: adding VLAN 0 to HW filter on device bond14
[  375.725770][T19828] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4003'.
[  376.023254][T19843] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4007'.
[  376.109648][T19852] netlink: 'syz.1.4009': attribute type 1 has an invalid length.
[  376.113387][T19853] netlink: 'syz.1.4009': attribute type 1 has an invalid length.
[  376.129606][T19852] 8021q: adding VLAN 0 to HW filter on device bond15
[  376.137404][T19852] bond15: entered promiscuous mode
[  376.793015][T19887] ..0: renamed from hsr0 (while UP)
[  376.797904][T19887] ..0: failed to rename
[  376.799718][T19887] ..0: entered allmulticast mode
[  376.806879][T19887] hsr_slave_0: entered allmulticast mode
[  376.809386][T19887] hsr_slave_1: entered allmulticast mode
[  376.815250][T19887] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  376.947290][T19894] netlink: 'syz.1.4022': attribute type 16 has an invalid length.
[  376.950572][T19894] netlink: 'syz.1.4022': attribute type 17 has an invalid length.
[  377.098474][T19860] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  377.101264][T19860] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  377.113351][T19860] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  377.115823][T19860] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  377.141219][T19860] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  377.145992][T19860] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  377.149998][T19860] CPU: 0 UID: 0 PID: 19860 Comm: syz.0.4012 Not tainted syzkaller #0 PREEMPT(full) 
[  377.153946][T19860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  377.158026][T19860] RIP: 0010:klist_remove+0x14a/0x340
[  377.160180][T19860] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 59 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 59 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  377.167895][T19860] RSP: 0018:ffffc9000609f800 EFLAGS: 00010202
[  377.170353][T19860] RAX: 000000000000000b RBX: ffff888027509cc0 RCX: 0000000000000000
[  377.173555][T19860] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  377.176842][T19860] RBP: ffffc9000609f900 R08: ffffffff8f8a09a3 R09: 1ffffffff1f14134
[  377.180151][T19860] R10: dffffc0000000000 R11: fffffbfff1f14135 R12: 0000000000000000
[  377.183288][T19860] R13: 1ffff1102393078c R14: ffff88811c983c60 R15: dffffc0000000000
[  377.186572][T19860] FS:  00007f4dedb7c6c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  377.190054][T19860] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.192660][T19860] CR2: 000000110c3b5f18 CR3: 000000003a838000 CR4: 00000000000006f0
[  377.195856][T19860] Call Trace:
[  377.197281][T19860]  <TASK>
[  377.198544][T19860]  ? __pfx_klist_remove+0x10/0x10
[  377.200564][T19860]  ? __pfx_kobject_move+0x10/0x10
[  377.202632][T19860]  ? do_raw_spin_unlock+0x4d/0x240
[  377.204807][T19860]  ? get_device_parent+0x366/0x3a0
[  377.206957][T19860]  device_move+0x193/0x700
[  377.208828][T19860]  hci_conn_del_sysfs+0xb8/0x170
[  377.210850][T19860]  hci_conn_del+0xc33/0x11b0
[  377.212773][T19860]  hci_conn_hash_flush+0x191/0x230
[  377.214930][T19860]  hci_dev_close_sync+0xaef/0x1330
[  377.217039][T19860]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  377.219340][T19860]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  377.221817][T19860]  hci_dev_do_close+0x2f/0x90
[  377.223752][T19860]  hci_rfkill_set_block+0x21d/0x2e0
[  377.225913][T19860]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  377.228236][T19860]  rfkill_set_block+0x1d2/0x440
[  377.230260][T19860]  rfkill_fop_write+0x44b/0x570
[  377.232319][T19860]  ? __pfx_rfkill_fop_write+0x10/0x10
[  377.234524][T19860]  ? security_kernfs_init_security+0x240/0x290
[  377.237026][T19860]  ? rw_verify_area+0x255/0x4d0
[  377.239057][T19860]  ? __lock_acquire+0xab9/0xd20
[  377.241108][T19860]  ? __pfx_rfkill_fop_write+0x10/0x10
[  377.243311][T19860]  vfs_write+0x27e/0xb30
[  377.245121][T19860]  ? __pfx_vfs_write+0x10/0x10
[  377.247113][T19860]  ? __fget_files+0x2a/0x420
[  377.249044][T19860]  ? __fget_files+0x2a/0x420
[  377.250953][T19860]  ? __fget_files+0x3a0/0x420
[  377.252938][T19860]  ? __fget_files+0x2a/0x420
[  377.254849][T19860]  ksys_write+0x145/0x250
[  377.256659][T19860]  ? __pfx_ksys_write+0x10/0x10
[  377.258708][T19860]  ? rcu_is_watching+0x15/0xb0
[  377.260730][T19860]  ? do_syscall_64+0xbe/0x3b0
[  377.262663][T19860]  do_syscall_64+0xfa/0x3b0
[  377.264573][T19860]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.266704][T19860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.269215][T19860]  ? exc_page_fault+0x9f/0xf0
[  377.271822][T19860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.274061][T19860] RIP: 0033:0x7f4decd8eba9
[  377.275812][T19860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.283044][T19860] RSP: 002b:00007f4dedb7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  377.286203][T19860] RAX: ffffffffffffffda RBX: 00007f4decfd5fa0 RCX: 00007f4decd8eba9
[  377.289267][T19860] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009
[  377.292288][T19860] RBP: 00007f4dece11e19 R08: 0000000000000000 R09: 0000000000000000
[  377.295290][T19860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.298447][T19860] R13: 00007f4decfd6038 R14: 00007f4decfd5fa0 R15: 00007ffee694df88
[  377.301564][T19860]  </TASK>
[  377.302784][T19860] Modules linked in:
[  377.306020][T19860] ---[ end trace 0000000000000000 ]---
[  377.327650][T19860] RIP: 0010:klist_remove+0x14a/0x340
[  377.329889][T19860] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 59 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 59 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  377.338832][T19860] RSP: 0018:ffffc9000609f800 EFLAGS: 00010202
[  377.341309][T19860] RAX: 000000000000000b RBX: ffff888027509cc0 RCX: 0000000000000000
[  377.344686][T19860] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  377.347754][T19860] RBP: ffffc9000609f900 R08: ffffffff8f8a09a3 R09: 1ffffffff1f14134
[  377.350814][T19860] R10: dffffc0000000000 R11: fffffbfff1f14135 R12: 0000000000000000
[  377.354084][T19860] R13: 1ffff1102393078c R14: ffff88811c983c60 R15: dffffc0000000000
[  377.357189][T19860] FS:  00007f4dedb7c6c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  377.360639][T19860] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.363331][T19860] CR2: 00007f0db4774c00 CR3: 000000003a838000 CR4: 00000000000006f0
[  377.366561][T19860] Kernel panic - not syncing: Fatal exception
[  377.369775][T19860] Kernel Offset: disabled
[  377.371537][T19860] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:40:56  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005054 RDI=0000000000005055 RBP=00000000000003f8 RSP=ffffc9000609f030
R8 =ffff88801f8b8237 R9 =1ffff11003f17046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b0191d R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4dedb7c6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3b5f18 CR3=000000003a838000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f86545a7498 00007f86545a7470 XMM03=00007f86545a74a8 00007f86545a74a0
XMM04=00007f865510d100 00007f86545a7460 XMM05=00007f86545a7478 00007f86545a74c0
XMM06=00007f86545a74b8 00007f86545a74b0 XMM07=00007f86545a74a8 00007f86545a74a0
XMM08=0000000000000000 00007f8654412ee7 XMM09=0000000000000000 00007f8654412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44fbb RBX=1ffff11009608341 RCX=ffff888021365640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90004137600 RSP=ffffc90004137480
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44fa3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0db29f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f865516efc8 CR3=0000000121502000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0db4812e53
XMM06=0000000000000000 00007f0db4812e4d XMM07=0000000000000000 00007f0db4812e61
XMM08=0000000000000000 00007f0db4812ee7 XMM09=0000000000000000 00007f0db4812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
