last executing test programs:

1.162103347s ago: executing program 2 (id=944):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r5, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r7}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000340)='illinois\x00', 0x9)
setsockopt$inet6_tcp_int(r10, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002800800020011000000040001000800", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x20000000)

1.078106893s ago: executing program 2 (id=946):
getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, &(0x7f0000000080)=0xfffffd4f)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8afef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb246ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4030b34c27a2f7fcd66ddde687c1255d0779ffec72ada8598e222d66bc90dacf240fe12755f780048804400f49d77b81534a8f1b0de80c49c7d9c87888801d819daaddb0c57513fdf7d0e942a799143dccc213cac7e8092d691a7894678472ba1970b4d6e393158dafeebae0a9d89e6e639115ddc7b54139b5b47f3d583c16b4d2da0a5c7b5ea751d03cc71fdd61140d66ff1ccfcbe83e40156854900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xae, 0x66}, [@call={0x16}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0xcc}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000224}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6a2f}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

1.001549813s ago: executing program 2 (id=947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a0102000000fff50000000100fffb0900030073797a32000000000900010073797a300000000008000a40800000042c000000080a01080000000000000000010000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa8}}, 0x0)

1.000712557s ago: executing program 2 (id=949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32)
unshare(0x22020600) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000)=0x59, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x2c}}, 0x0)

922.162278ms ago: executing program 2 (id=950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
read$ptp(r2, &(0x7f0000000500)=""/4096, 0x1000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x24, r6, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="100001800472048008000100004003"], 0x28}}, 0x0)

276.303404ms ago: executing program 0 (id=968):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x9c, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0x88, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xfffffffffffffcf1, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x6, 0x0, 0x17}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x9c}}, 0x8800)
syz_emit_ethernet(0x113f, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "efdf22", 0x1109, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2f, 0xa, 0x4, 0x5, 0x11, 0x8, 0x6, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, @local, @mcast1]}, @srh={0xc, 0x8, 0x4, 0x4, 0x2, 0x40, 0x1, [@mcast1, @mcast2, @private2, @mcast2]}, @hopopts={0x67, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x32, 0x1e8, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0xfb, 0xf3b, "d6c1095a01722890294163ebcc88593609b95f6800cc05a3fdeaa622e941a34620a56f36e632a8f77dbb932a0d39a3704192d940dae7d5ad8b590a648e68b555cbb86ec0761fb4aa69c367ad8380069f468619f4cb3cb340afb137d506624487a36c9c999a87af531c5b97caf0ae922f8e59cd6ba875464bd715a13fca874f3c63d12c2c7567b8f26174da979459d09bcbf98adae553791d71cf8babcd473c027924340f3bc4cd725992d5612889ed429ef36e68d7d6aeeb7442e50f10f7a771aabfece032e2c651fb00b37e92aedfc803dbd41ee4dbc0c1ef04473252d514241ccf311c15f914b20fe57e96c838c91e212941e732bdd86c484ea2994bcf522b329cde66c6359f34d44bef9502bf1eb546abd2b9a3e7024449d28927c39b66d10655105faf929be439e2a8aaca5027a534f6437fa5f28578c16d1ba545315103101881f0415ad64bc0dcf9904b038a222aff14f737296cf0d73ac6b8e4694cd0712b9278af15cb58d585d6d898676f454a98e4f3f0886952b95396ab53914ee022d2316df989b4424eb3264d4942584c4d4fa1853261af7fd17d63d75562fddf4a5cc8ab5e96de7590febd1a5b68a2fd59d7dbd4edef46c3ad4a4acca9d3f3153ec27a3ec7c8e9dc33d1ddd4ef329ebc82e60cc901469b0ad66b4bcd546990fa5e51b4b84cb7e158e1fa7b3b637daff4a707ccfd9c30fbae8336b2f3c763ec7b229696c5fd1d5f481cae957445092e1bbeaafcf9a4a2f2107207b170b87fa4e87a8c3edc6eb33c8c18c0aa94a89d896baa24746d2275a6293225f654ef4aabe21ad5a9cc068fad6432c45229562ae1619caf13a39a72dbff500613ec2b49ac60e43459166a60ba96323a2693413ea0568ad1949345b5b9c8427ba8c0193bae90eab9cfcb26987fe60d4d7da4e4f6018f73fb120b54ce363f9c5817b4b5fe982404bb0f17a5e60b1842382ae6585c024466635094e711d68d26c7d4c37c9ff0456af570765b9c43631f45153b7b3b03826e0c2e23b30d14c1f2d511a85c3f6e018eaf128130b938fd7eb003df2724055bf3e92b990cc5d552276da64883a0802818db1607c16aa254415998db7db4a68b6e91ff6d9bab08d48a01bea56cec7ad9daaa8a2fdb6bf4ed112585441e9848a7c44fab23b72f742c9160f3fc6abdc2a53bdb4089673627b60eb0bbbe8cb869cc0b5bbddc89defcf5b3d55e9df8a95513fd7a16dad93aa7af4a3f9b15ab4afff30bb6edfcfd6ca40468bc62ea2ea70fa6ac9a304325e199f2aaeb26721040e1e3862d3874beab11415429f3c2d535f912a8f4eb54652b1af61c96e963b84020c32319b3474112d7e35309f10e50a42d736ff8dc00a9b269ac13fd9f6c2bece53ade4fe960fec5effdb6b6f168ccca1c2554a07928ac6850627418225aebb58bbc512f3545e2df39097ae287594224044fb8bc948a2fea3a6551e48801b1269eda00f4af04f7082e4f9f8b2641ae70cae44ee8d0c63685883ba668d6aed80aa9fdbfe6738b757775ca595cf3d9aeaf92a6f97807f7db988856270c9c567a19b169ad07d8ddb962e5abecc1a4832278338b63a220baf9e92618a34949a3a727c514bdfa73bb7ccb4b19b7fcb05495503379804a925baf39f8bcc412510b87b813b9ca200853b9cb0bcc17a13f15bcbc22fbb930fa3f036b104305a65249edb69796c2bb9886c6412a6afd2f8214ad65a004f77d2f1da7fba80a1e7a9d334cf0fbb745038b21b5627bac27bbbeb8a8d97ccff3ad1a0ff97eabfc4a335ad55ece5a8f2066abcef7e3a8edbb8ccdd85883d990786147db2ceef87c42a5c8e0b544696ab308507b9b0678612d25a804a1a16b08d0716a0ba13b6b4e95b4c7a17db1f239f17c0c83d44b467a11b71033ed460c37add268a445ad74f47a5c3b1afeb30a868f251113bdb1ebafc4cd551ff6fa42c945c30f9a475bb62604859d2138c804a11d6310bc6602bdb01962eeb6902100a0be47294f2671b95c3f3c41cfedddf7f7c82b6e498b2466891db70fbbc94a5e4f950ba96f8ae1811a7cd360cccd25892e57760c831dff60c41864444bf343ca9411d89572c06ef075aa98452e5fac58acbbe57a2c8a4cff10c68164cbda5c97a7527647b0034f5526984d2dcef98abd03fd2c22d9ba0abf00253df6300b58e002840cbb11fa11dac483a4ef85187946fda92ca888ed03d14c8634b41884e2b8d8629008fa2e05b28b5fcc92d3f086db4a58b9d268d090382104861c936b99d746d96aa4b8ec25aeba933311fbe879035d66e2184b837eb7efd602b57e3f0203c34223af40fef8163c944ccf064595d443bdf5c807a275ab56b22ac64b9102ac528aed2a4741ef3d6319ef10c7c1391fc08732d39fc79b3b12b83216f07e7f84f16fd02349e2137b8e96b90e89d47ab30b576de862d16f8c6edc2157824500b1ecd07731056c4417040d6207eb72b857878f8593123d0b88a7725aedda7e9225d8f74e412a668208c423178cec83ed1662c85ac9007c0e1b6cc7d762e98b1c857633f76c2544cb4ec5a77887e3e7a3eea3bd1c928252257cd7f405b99ceab97e3d7ad8495084960eefc6236701098099fddbeeb1be5caab1d9471d853bac6d56cff773c8cbe67c8c82545f5c7b61c529f7ad85399b9c94126946600b6a7fc1097bbeaebe44397bfbfa949fe26bc2a86cb7cb929f4a47765944623c5171a7b19ea4b4270069420dc3400a7acc44fd843b9ece9771fe92886a4f1a2a22fd0dcd70cc92efd6184d3b90b66ef44d14a48906131681e4e0fbcdc33f5becd905831744f9ce660830be889691f379428f4a49a2ce4fe134970729f53166fc19970d735815cfb8d5b983f667c8e4b429dab7768aee036698cc4ecc0c267c32d35636e23dab6d71c953e1fd28974028a3300f144adcec407a8925a48f6729ebc37a26b137007b538f53f0439a27703934194843663a22f505d49c84a7d5702aef415da028eb73239fb40db1d04a2774eb7ec56a7154fb194c82d6a67db2bf4b8f68d342c8ad04699633ac7659960e36e623e4c5bfb2a76736ab480ac7812e48b7674e7a81cf47d48dce4ff902b810f40f41f783fbf65d8690d1f97a2fc8c7270d38ded4ca140872505d244043fd822c260b76112bd7afaa3a5a97042b66b824738d16a74c4937c5c2e2d91109578c2bf21e9a585a02ee976daba56ade49bcbac4d491f79b2dbc7a287686458d0e2176c3dad02d33df48a2579c55be0920fbfaa4a85a3b67f9bf27b07adfca5aa3df8abba7d0eaed941956d49bc36e6b04b897aae931c0001b541e45e7ce3da89dca30d636337d39c6850e65cc5e78eb0d825d13b2ab6e1b5d88631f6b57a549caedfd16732f7402f0463d231bc3281e98218a5e769b4be0a44b673f904e256b242a472e770bc2e586ca96ebe958294e4d9bc8d2d0dc63023a8bf1b8bb4256fa8da49549c1e8e7785cbdf993e97801d349d69630bcaf4e52f3692552774e86fc842724a26ffd07cc7899420eecf236aa8a5e8d97a5cd808ce9856def74d692ffbf069b8f3535835e18dcd60f095832556b94dd9c9ad038fc0e2aee00afb869abe8c388ffc258cd956ac42e78bbfef194a8384474d1a741f9c6cf1fbaa5d8e5747715480f4831604f7d7ba307ab47a20ab68fb88f3fbf14e3bcfa228693235aff5f7dfb27f532d38f50fc89b54d11c36e0f99e3c8e4aa8b93087f5ac8e9c3c640d0c1ac38cb29365d1fc321306e3863cbc5fcc0534c556c2070620f910518ebc05fc0c5ba6e8be528cde5c6f16535dd8d940feec1552843c261d959eadb2df350bf87d0e11a14429d252f91c55540e92b6bb893d7a76110d3ec805caea09b494bfabec115f62720a24e0cb5a8281dcb39bccfb78c75b2c6b4d0e13075ba634bccb8c044b17b6a8c333451bc19377f9d132d07be03ddb0b653a5ec69a55f025beb6660a41f941ecb2f5a95bac0fa2ae8317210d1c0dd9623e29edc148b9cfb42ee17d45e4febe2d219a9710a7951a9034c2d9c88d526f07daa86433d85e0bc51fa96e282d729971916d15368cd2bfd01a4bb1a42cfb8ecce014cca25ff3c939ed28f855dbd9811de6bdcabd7f61da8cce73ccb6654920791301c46739b0f399307ab4fb868243742013ac637ab557384ef79f76baeec2e8b017deb2aaec0a2de7a57c5e625f4d3620a48703f2649541801d21d9a828d882fa026894ffc1cfb89b31869ce06061b64001a29a37871c9bae16d841d38b04107c5eeb64c46f64e88ef6403fe2e9738984c7f67cd1acee4b199688092158ede6dc7be260a785b8d7a2bb8c2517febc52813109e80531d61d5a4c2fd9061cee271bf9880e7310e81266c5896b241bee4639c7be0ea007ed3a5cc4da56b041c6b6fbc9e17607e4fe4a8c252c82bbe0ba94e95865d5346de1312bd8f747e1da762942840bf54188694a8ea6744190427868238c57a43e0fe2d27460bd3f92e65da0ba53afc657cce021c44fd84daae85f3560fabbf4e1ee3b2434a9663def727381afefb5c4ccaceaf73e46d741e60e1bfbedcfe06a178bf8311ed143b8dcacf80676b89a33828ea1095e9c27e5566acc3e64f6448b9be3580c74eb0d9bc1b5b733bd4632abaa9905c8a1aa2333f8bc4966ad5aab5a8b17bd4db1dff53c55357dafbf925d851a847c23471203861ad29d17c92f64fec5fb845b9e5e34b99f8e1fb9914936d4d20ef66add06283128788ee85bfcc4e29104fd9bbe33b102228f38499337dac56a564caa05e8c9156e76ea99ea40e5b3097feedf7d6ca10cc096ec2fcf482ef02b24939ff791e3493133b7391efbefb7f4f426ec61afa3905f69b4b682014d906e0dc401c3e1b6a23e51138f3b4164575b726d24f4ae1865a009e039ddd52e8442fdb35adda2c193b088f414feb51642977c7cf532efeaf44d74cafc10aa72305dd0b5e56a07371f926dbaeec4416619a55d0b6f8d1b429d3e86d3df30296d8e3c9f7c888729e6941e1529d74759a9ad50f1c154c03110de12bb95097e7c0d5636854594f32e2e578ba27bae5436965fe9bfd60c3078ebbbbef365971a31b464c095b42f9d14eb252a01345fcb33e37e5beeaaa481a547fbcc3c890b3747618941f5ed7c91fe63a3fba618bd0189b4bc6258a156309de1fa7e4c6db705dca18d38c257819af991b90b7ce97d50d93024220141eddc176ae9561f5ac33296fa52c8ed168da1fb1ad7ac3dbfee7e401ffda84b4820c69e4876e3f5081f492cc77c3c59bcf94a2130d4566aaed99243ba52e2242eef23c4eaa36e36a236a90aba67caf0c6fbabb7318b36c5dcee78684ea04030b33a461746da05e00e65327407cde6958edfbf5568ed758dbc44c9ec1e4f7c77b3a121ed67c6068196d9c70d2e764a3bf8ff9b978306dc2eb782c95ed624d23ec6547636e70b0483b8f256ee7a18de8ab92498686e32268b21ca9d6ebd40582892290a9aa0bceae144f1a5fddf9e0761a74c4ea4d940a815932655d291fca0ff439f5c973ac8e96"}]}], {0x4e20, 0x4e20, 0xf9, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "ec214c88c5b5fab209fd8c6777d6f72fc0c4d1f01926328d871e69436cd7afeb66b5507aa0ef5bef87f06eabc61540fd2f022b27e689aef9bfd3cecab0acaf4ed328b7af1beba1619f0ddccfdc43c0024cfeae03efe2170bb8135331ac32516e8e37f9198cccb0577d2f54b25dbfb9a31f35b8594cf01cc189353acc433e7b4396e54bfeb4761f565e6c963903debf0644b31e8a2582cdb8b9c627f8f23b616e3cea4c9ea9f0fc3b0f7f625091564739d7a3338b8667e2307bcfd4d04a4beac2173964f59edd44b52856c1ef6563e96ef5ef1413f9049351aa6b9b2dce32111c296489583307bfbdf5"}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x320, 0x10, 0xffffff1f, 0x70bd28, 0x5dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_VF_PORTS={0x2e8, 0x18, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'ip6tnl\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x1d2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'ip6tnl\x00'}, @IFLA_PORT_PROFILE={0xf, 0x2, '/$:%-,#&.{\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4154e232}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "31e0be8adb9c3963e72e6cc3a39e43ea"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bbc08fd66a25c2c286806bf8b1c9d42b"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xae2}, @IFLA_PORT_PROFILE={0x7, 0x2, '(*\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e95415902d29f4441e523943360c0534"}, @IFLA_PORT_VF={0x8, 0x1, 0x7fe}, @IFLA_PORT_PROFILE={0xe, 0x2, '.@*.\xa8[#^+\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "63616f0d9ad0af6ef39c01a9c76bfffc"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4b6ed780507832421dd99df20f546088"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6tnl\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2c133a659f6e5d26b0f82766d8daeb32"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f106b4f66377d6b95e0f12147c9cd353"}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ec76a483e1e151f23740b9622261a5fe"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c241e9323d932115a4235b7b1834811e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "726732e00bda3c037cd3d7bfd3bef631"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2c2df5b4cfa350f5dc68a03c55c9f31d"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "42d37b34b7984ee33122a4ced7fbb1fb"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'w!+/\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x10000}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2c67c635cfd2a6500bd3e137e0ff83f6"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2efb796d847fa99fd67d99e86ac8ce0e"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6tnl\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "09177774438c6ec00200"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80000001}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2b68e2cf8d0e719363a37960dd8b32d8"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6tnl\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ffe12fdaeeebf957f2650ee9c3a07135"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a40e895d08aa6feef07c343b9b02bfb0"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e3a5391760fb02fcf990dbbc1329b16a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}]}]}]}, 0x320}}, 0x20048845)

271.342347ms ago: executing program 0 (id=969):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="0000004000000000000000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000ac0)="c876f1c31ef0831156adb791103284ee9082639d20fe5145d5fcefcc79fd468e59053a5fd62c846579af10d9cdc9e540f622eb8ac161d95dca82368b8c06caae9015a30655971c7f0df6b1c67125fb668bb8b47a915183e21633cbe147f276fe29d5c033958ea62e64230816", &(0x7f00000009c0)=""/191}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r4, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018ca55110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009500000000000000"], &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf250800010005000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB='\n\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00+\x00\t\x00\x00\x00\n\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x20004004)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000016c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x94, r9, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x94}, 0x1, 0x0, 0x0, 0x94}, 0x2040)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, 0x0, 0x0)
write(r11, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c)
ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0x4008af24, &(0x7f0000000300)={{0x0, 0x4, 0x7, 0x1000, 0x2, 0x100, 0x100, 0x8, 0x3, 0x7f, 0x6, 0xfffffffffffffffb, 0x9, 0x5}})
r12 = socket$key(0xf, 0x3, 0x2)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x14}]}, 0x20}], 0x1}, 0x0)
sendmsg$key(r12, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1d77, 0xf, 0x9, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000001500)={0xf0, {{0x2, 0x4e23, @multicast1}}}, 0x88)

199.500972ms ago: executing program 1 (id=971):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x1412, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x20080042)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
unshare(0x6020480)
unshare(0x26020480)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x2e}, 0x20)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r4, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0xa}, {0x1, 0x1, 0xffffffff}, {0x0, 0x80004, 0x810104, 0x4}], 0x10, 0x1}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

198.578914ms ago: executing program 0 (id=972):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x89, 0x7, 0x10, 0x2, 0x4}, &(0x7f0000000100)=0x14)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100001002abd6e1700000000ff070000", @ANYRES32=0x0, @ANYBLOB="c12900000000000014000300776c616e300000000000000000000000080004fe3d03000034001680300001800c0004007f000000ff7f000014000a00020000000000000005000000000000000c0003"], 0x70}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

198.398404ms ago: executing program 0 (id=973):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket(0x22, 0x2, 0x23)
close(r3)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6, 0x20000000}, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xee82cffcb655e29e}, 0x20000000)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001a40), &(0x7f0000001a80)=0x8)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c010000", @ANYRESOCT=r1, @ANYRESOCT=r6], 0x11c}, 0x1, 0x0, 0x0, 0x400c894}, 0x40014)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="040027bd7000fedbdf251a00000008000300", @ANYRES32=r10, @ANYRES8=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r11, &(0x7f0000019880)=[{&(0x7f0000000400)}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000540)=0x401, 0x4)
ppoll(&(0x7f0000000380)=[{r11}], 0x1, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe})
r12 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl(r12, 0x8b21, &(0x7f0000000040))

119.785404ms ago: executing program 1 (id=974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x54}}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd4, 0x0, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe)
listen(r3, 0xfffffbeb)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000140)={0xa0000010})
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0)
syz_emit_ethernet(0x29c, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYBLOB], 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, 0x0, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000080)="e3ca58d0f17842755db686622c28e5fd9233475e43a419cc8ddc54890c275c975d4e5a08b5f15d8f7553a2efb73646eab95095d34586cdb9eab7004a6e61befc12ce41a38826e969b69a3a7ad168340a4f8d92e8cf36cc9ef020869d87f1f96d932fee2a8d7972fb534c13f0813186432249ef70999758ad23fcd78996", 0x7d)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, 0x0, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
syz_emit_ethernet(0x7e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
accept4$unix(r6, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x80800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)

119.279221ms ago: executing program 0 (id=975):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @multicast2}, &(0x7f00000004c0)=0xc) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x240c80d0}, 0x40000) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003300010328bd7002fcdb6f85060000ba"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100000200000000000000df98b07ed6c1497842eeab8c9b9bf61024e617f7409f7380f03ebc2cce1ccc2ae0058b1cb678014564d2bb8b574975057cf20738bc7a40cc9f8f9ae1f1da417c85d671588688b7f7837eec565c4efeb0549dc25016b7127ea17c73d52300000000"], 0x44}, 0x5}, 0x0) (async)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000007c0), 0x4) (async)
sendmsg$kcm(r5, &(0x7f0000003500)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x6, 0x7ffe}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)="63f805cfe6cb58278b0b", 0xa}], 0x2}, 0x48044)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000ffdbdf250100000008000200050000001400018006000100080000000800060012000000dad33ae007a09cc1d357f5"], 0x30}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000060000000b0000000000000a0508000006000000000000110400210007000000050000000000001002000000090000000000005d000000000500000d000000000c000000000000000e0000000300000001000000050000000b0000000500000001000000020000000200000000000011010000000d00000001000000000000000000002e5f00300000000000"], &(0x7f00000006c0)=""/145, 0xae, 0x91, 0x0, 0x100}, 0x28) (async, rerun: 32)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket(0x6, 0x4, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000aae07e11000001000000000000000500000095"], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, r10, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000008070000276686dd60cb3e0200303a00fc020000000000000000000000000000ff0200000000000000000000000000210400d078000000006097436700001100fe880000000000000000000000000001fe800000c5c9e278bdb9b1892665c528"], 0x0)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="7cff24f11d0001002dbd7000755e010043c40000", @ANYRES32=0x0, @ANYBLOB="d300a001060006004e22000005000c000400000008000d000200000008000d008100000008000d000200000008000f000000000030000e8005000100000000000500010008000000050001000800000004000200040002000400020005000100f2000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x480c0) (rerun: 64)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

119.054432ms ago: executing program 1 (id=976):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x40000010)
r4 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10, 0x0)
setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000040)=0x41fffffd, 0x4)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/21, 0x15}, 0x2}], 0x1, 0x45833af92e4bbbfe, 0x0)

61.813419ms ago: executing program 2 (id=977):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1805}, 0x20000080)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000000c0)="20e1b5d4ca774ff66b795ea456d05ae0c6aa", 0x12)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
close(r5)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff}, 0x6)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
ioctl$SIOCSIFHWADDR(r3, 0xff01, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x7, @loopback, 0x9}, {0xa, 0x4e21, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd0f2}, 0x1, {[0x4, 0x8bd52, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x378daea3]}}, 0x5c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r10}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r10, 0x4000, r3}, 0x18)
sendmsg$tipc(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
shutdown(r9, 0x2)

59.346663ms ago: executing program 1 (id=978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000002000100fffb0900030073797a32000000000900010073797a300000000008000a40800000042c000000080a01080000000000000000010000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa8}}, 0x0)

1.277783ms ago: executing program 1 (id=979):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/4, 0x4, <r3=>0x0, &(0x7f0000000240)=""/110, 0x6e}}, 0x10) (async)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000080)=@raw=[@generic={0x1e, 0x8, 0xf, 0x10, 0x80000000}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @ldst={0x3, 0x1, 0x3, 0x9, 0x2, 0x20, 0xfffffffffffffffc}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x65, &(0x7f0000000100)=""/101, 0x41100, 0xdf967998eb472e3e, '\x00', 0x0, @fallback=0x1a, r1, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xd}, 0x10, r3, r2, 0x4, &(0x7f0000000340)=[r0, r2, r2], &(0x7f0000000380)=[{0x5, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xb}, {0x3, 0x2, 0xd, 0xb}, {0x4, 0x4, 0x8, 0x3}], 0x10, 0x6, @value=r4}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', <r6=>0x0})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0xd905, '\x00', r6, r7, 0x1, 0x1, 0x5}, 0x50)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000005c0)=0x40, 0x8)
r8 = openat$cgroup(r2, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r8, r2, 0x22, 0x1c, 0x0, @void, @value=r5}, 0x20) (async, rerun: 64)
setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000680), 0x4) (rerun: 64)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=<r9=>r2, 0x33, 0x0, 0x80000000, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup=r1, r1, 0x2f, 0x2000, 0x0, @value=r1, @void, @void, @void, r10}, 0x20) (async, rerun: 64)
ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000840)="f99a8531680a8b9d17f870dd3f4d2737c7d281ebdef906684e1dfb6e99c5f135e9ddbef1a4597ee66f41d3cc9f653bd2596d5cce25bc9104f437b5627f298ea03dea0148f0bf740c758a651a7574f0c97faea3c8d7c683299dd37610181d40a764d5b470f6a040d593f598bf5d25b5a1b8d44081192bab6a1688f1e87a546422ae26da68d3c2c1f2a69feb5c78b0cf22119237e11e7845487c4b5adf2c42d7bea10a7c3e045e67b1d9aeb8b7addc8871a0c0d9c4886d825f74e8182760a1998c9d22f0c37aedc2fc7327b8cbc087ca82a132cbe1587df3231708e094716b6c37d739e155976b6062cfc975aca7ed776ce4") (async, rerun: 64)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000a80)={'syztnl1\x00', r6, 0x7, 0x8000, 0x2, 0x7, {{0x39, 0x4, 0x0, 0x7, 0xe4, 0x67, 0x0, 0x7, 0x29, 0x0, @broadcast, @empty, {[@rr={0x7, 0xf, 0x69, [@dev={0xac, 0x14, 0x14, 0x41}, @remote, @multicast2]}, @cipso={0x86, 0x49, 0x3, [{0x2, 0x6, "95de78a2"}, {0x0, 0xc, "ce37141d54429b7c1a83"}, {0x6, 0x3, 'j'}, {0x0, 0xd, "4bcf4f41b1dc7dbc08f2ec"}, {0x1, 0x11, "cae7327993f502584c42d49dacb49d"}, {0x6, 0x10, "8b6b7bd7c7e2b22ebc6636beed37"}]}, @timestamp_prespec={0x44, 0x2c, 0x48, 0x3, 0x5, [{@broadcast, 0x7}, {@local}, {@broadcast, 0x1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @ssrr={0x89, 0x17, 0x7a, [@local, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @loopback, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0xe5, 0x1, 0x2, [{@multicast2, 0x101}, {@remote, 0xfff}, {@multicast1, 0xfffffffd}, {@local, 0x1}]}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x4, [0x0, 0x8, 0x5]}]}}}}}) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r2, r9, 0x24, 0x0, @val=@tracing={r3, 0x6}}, 0x20) (async)
bind$inet6(r2, &(0x7f0000000c40)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x1b04}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000c80)={<r13=>0x0, 0x7fff}, &(0x7f0000000cc0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000d00)={r13, 0x1, 0x10}, &(0x7f0000000d40)=0xc) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r1)
sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r15, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10)
socketpair(0x15, 0x0, 0x7, &(0x7f0000000ec0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r16, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x1409, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4000)

1.033343ms ago: executing program 0 (id=980):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@empty}, {@dev}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)

0s ago: executing program 1 (id=981):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@private, @in6=@mcast1}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60460' (ED25519) to the list of known hosts.
syzkaller login: [   48.906030][ T5816] cgroup: Unknown subsys name 'net'
[   49.055710][ T5816] cgroup: Unknown subsys name 'cpuset'
[   49.062600][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.717775][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.988322][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.991725][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.994740][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.998185][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.001045][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.037273][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.040212][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.045665][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.050933][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.055658][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.063550][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.067281][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.103801][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.109860][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.113393][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.316786][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.394222][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.494067][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.520083][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.523698][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.526487][ T5847] bridge_slave_0: entered allmulticast mode
[   55.529697][ T5847] bridge_slave_0: entered promiscuous mode
[   55.568162][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.570700][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.573271][ T5847] bridge_slave_1: entered allmulticast mode
[   55.576050][ T5847] bridge_slave_1: entered promiscuous mode
[   55.596815][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.599115][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.601539][ T5852] bridge_slave_0: entered allmulticast mode
[   55.604317][ T5852] bridge_slave_0: entered promiscuous mode
[   55.623924][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.627118][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.629977][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.632685][ T5852] bridge_slave_1: entered allmulticast mode
[   55.635453][ T5852] bridge_slave_1: entered promiscuous mode
[   55.645358][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.693474][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.718338][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.723357][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.726416][ T5854] bridge_slave_0: entered allmulticast mode
[   55.730169][ T5854] bridge_slave_0: entered promiscuous mode
[   55.737522][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.744162][ T5847] team0: Port device team_slave_0 added
[   55.746530][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.749606][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.752840][ T5854] bridge_slave_1: entered allmulticast mode
[   55.756626][ T5854] bridge_slave_1: entered promiscuous mode
[   55.784602][ T5847] team0: Port device team_slave_1 added
[   55.813493][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.833519][ T5852] team0: Port device team_slave_0 added
[   55.852026][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.857389][ T5852] team0: Port device team_slave_1 added
[   55.873001][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.876010][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.887013][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.894029][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.897052][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.908055][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.956645][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.959550][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.970306][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.977328][ T5854] team0: Port device team_slave_0 added
[   55.980009][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.983162][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.993916][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.001655][ T5854] team0: Port device team_slave_1 added
[   56.069722][ T5847] hsr_slave_0: entered promiscuous mode
[   56.073517][ T5847] hsr_slave_1: entered promiscuous mode
[   56.076971][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.079918][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.093078][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.101106][ T5852] hsr_slave_0: entered promiscuous mode
[   56.104473][ T5852] hsr_slave_1: entered promiscuous mode
[   56.106748][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.108765][ T5852] Cannot create hsr debugfs directory
[   56.120036][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.123113][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.134178][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.259923][ T5854] hsr_slave_0: entered promiscuous mode
[   56.265150][ T5854] hsr_slave_1: entered promiscuous mode
[   56.268130][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.270532][ T5854] Cannot create hsr debugfs directory
[   56.505903][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.520995][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.528517][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.554020][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.595471][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.604723][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.629912][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.636538][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.687669][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.702206][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.709939][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.715375][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.803779][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.836231][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.858026][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.870373][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.872963][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.879376][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.881822][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.902769][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.928778][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.948165][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.951271][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.966358][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.969432][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.976659][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.004186][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.007279][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.028836][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.031318][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.072239][ T5856] Bluetooth: hci0: command tx timeout
[   57.092687][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.149955][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.152930][ T5856] Bluetooth: hci1: command tx timeout
[   57.154982][ T5856] Bluetooth: hci2: command tx timeout
[   57.206172][ T5847] veth0_vlan: entered promiscuous mode
[   57.212914][ T5847] veth1_vlan: entered promiscuous mode
[   57.247867][ T5847] veth0_macvtap: entered promiscuous mode
[   57.267509][ T5847] veth1_macvtap: entered promiscuous mode
[   57.278679][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.295790][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.309589][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.327959][ T5719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.333474][ T5719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.337282][ T5719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.349398][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.360156][ T5719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.410408][ T5852] veth0_vlan: entered promiscuous mode
[   57.437791][ T5852] veth1_vlan: entered promiscuous mode
[   57.469511][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.472978][ T5854] veth0_vlan: entered promiscuous mode
[   57.480598][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.495957][ T5854] veth1_vlan: entered promiscuous mode
[   57.521977][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.525219][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.538666][ T5854] veth0_macvtap: entered promiscuous mode
[   57.552930][ T5852] veth0_macvtap: entered promiscuous mode
[   57.558799][ T5854] veth1_macvtap: entered promiscuous mode
[   57.579504][ T5852] veth1_macvtap: entered promiscuous mode
[   57.587244][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.599399][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.612350][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.628030][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.659867][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.664049][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.670194][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.674013][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.674798][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.683369][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.696616][ T5911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.706111][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.710324][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.723147][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.805645][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.820601][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.821662][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.826864][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.874540][ T1205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.877829][ T1205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.935066][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.938133][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.948812][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'.
[   57.954967][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.961206][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.001186][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.040418][ T5925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.049955][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.175211][ T5938] syzkaller1: entered promiscuous mode
[   58.179525][ T5938] syzkaller1: entered allmulticast mode
[   58.182282][ T5928] nbd0: detected capacity change from 0 to 127
[   58.187482][ T5937] block nbd0: Receive control failed (result -32)
[   58.196317][ T5851] block nbd0: Dead connection, failed to find a fallback
[   58.198682][ T5851] block nbd0: shutting down sockets
[   58.200711][ T5851] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.205167][ T5851] Buffer I/O error on dev nbd0, logical block 0, async page read
[   58.208115][ T5851] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.218342][ T5851] Buffer I/O error on dev nbd0, logical block 1, async page read
[   58.221187][ T5851] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.224837][ T5851] Buffer I/O error on dev nbd0, logical block 2, async page read
[   58.227790][ T5851] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.235912][ T5851] Buffer I/O error on dev nbd0, logical block 3, async page read
[   58.238803][ T5851] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.244179][ T5851] Buffer I/O error on dev nbd0, logical block 0, async page read
[   58.246856][ T5851] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.253097][ T5851] Buffer I/O error on dev nbd0, logical block 1, async page read
[   58.255794][ T5851] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.258843][ T5851] Buffer I/O error on dev nbd0, logical block 2, async page read
[   58.263452][ T5851] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.271011][ T5851] Buffer I/O error on dev nbd0, logical block 3, async page read
[   58.277094][ T5851] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.285138][ T5851] Buffer I/O error on dev nbd0, logical block 0, async page read
[   58.288857][ T5851] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.293297][ T5851] Buffer I/O error on dev nbd0, logical block 1, async page read
[   58.298144][ T5851] ldm_validate_partition_table(): Disk read failed.
[   58.302028][ T5851] Dev nbd0: unable to read RDB block 0
[   58.304870][ T5851]  nbd0: unable to read partition table
[   58.311085][ T5851] ldm_validate_partition_table(): Disk read failed.
[   58.314767][ T5944] syzkaller0: entered promiscuous mode
[   58.316685][ T5944] syzkaller0: entered allmulticast mode
[   58.325388][ T5851] Dev nbd0: unable to read RDB block 0
[   58.328023][ T5851]  nbd0: unable to read partition table
[   58.350386][ T5946] netlink: 788 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.418354][ T5948] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   58.429788][ T5948] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   58.436617][ T5948] Zero length message leads to an empty skb
[   58.473645][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.476495][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.773807][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.816767][ T5978] syzkaller1: entered promiscuous mode
[   58.818962][ T5978] syzkaller1: entered allmulticast mode
[   59.151803][   T55] Bluetooth: hci0: command tx timeout
[   59.232369][ T5856] Bluetooth: hci1: command tx timeout
[   59.234901][   T55] Bluetooth: hci2: command tx timeout
[   59.671181][ T6001] netlink: zone id is out of range
[   59.671216][ T6000] netlink: zone id is out of range
[   59.675005][ T6001] netlink: zone id is out of range
[   59.675771][ T6000] netlink: zone id is out of range
[   59.678703][ T6001] netlink: zone id is out of range
[   59.680257][ T6000] netlink: zone id is out of range
[   59.684843][ T6001] netlink: zone id is out of range
[   59.685087][ T6000] netlink: zone id is out of range
[   59.857397][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.874739][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.917469][ T6011] Bluetooth: MGMT ver 1.23
[   59.988172][ T6017] team0: Port device team_slave_0 removed
[   60.424980][ T6023] nftables ruleset with unbound chain
[   60.694047][ T6040] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   60.698828][ T6040] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   60.746437][ T6043] tc_dump_action: action bad kind
[   61.231595][   T55] Bluetooth: hci0: command tx timeout
[   61.311778][ T5856] Bluetooth: hci1: command tx timeout
[   61.314631][   T55] Bluetooth: hci2: command tx timeout
[   61.958193][ T6136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.987195][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv1
[   61.990139][ T6150] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   61.997457][ T6150] team0: Failed to send options change via netlink (err -105)
[   62.000017][ T6150] team0: Port device batadv1 added
[   62.043192][ T6136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.057192][ T6160] tipc: Started in network mode
[   62.059230][ T6160] tipc: Node identity ac1414aa, cluster identity 4711
[   62.066083][ T6160] tipc: Enabled bearer <udp:s>, priority 10
[   62.134921][ T6136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.144410][ T6168] netlink: 'syz.0.52': attribute type 10 has an invalid length.
[   62.150615][ T6167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.153540][ T6167] IPv6: NLM_F_CREATE should be set when creating new route
[   62.155003][ T6168] batman_adv: batadv0: Adding interface: netdevsim0
[   62.156454][ T6167] IPv6: NLM_F_CREATE should be set when creating new route
[   62.159175][ T6168] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.159198][ T6168] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   62.170551][ T6168] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET)
[   62.230256][ T6136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.370965][ T5719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.388073][ T5719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.430903][ T5877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.436126][ T5877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.564214][ T6175] block nbd1: server does not support multiple connections per device.
[   62.581925][ T6175] block nbd1: shutting down sockets
[   62.665221][ T6198] netlink: 'syz.2.65': attribute type 1 has an invalid length.
[   62.748417][ T6208] veth3: entered promiscuous mode
[   62.775292][ T6212] __nla_validate_parse: 13 callbacks suppressed
[   62.775307][ T6212] netlink: 100 bytes leftover after parsing attributes in process `syz.1.66'.
[   62.815890][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.818827][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.868868][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.876222][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.934501][ T6198] erspan0: entered allmulticast mode
[   62.942781][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.946805][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.950695][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.956222][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.989540][ T6214] syz.0.67 (6214) used greatest stack depth: 19896 bytes left
[   62.995934][ T6217] vlan0: entered allmulticast mode
[   62.997904][ T6217] bridge0: entered allmulticast mode
[   63.037425][ T6221] netlink: 'syz.2.70': attribute type 2 has an invalid length.
[   63.045757][ T6222] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   63.064091][ T6221] k*]: entered promiscuous mode
[   63.066983][ T6224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.077402][ T6221] erspan0: left allmulticast mode
[   63.088988][ T6224] syzkaller0: entered promiscuous mode
[   63.091262][ T6224] syzkaller0: entered allmulticast mode
[   63.104489][ T6221] veth0_to_team: entered promiscuous mode
[   63.106462][ T6221] veth0_to_team: entered allmulticast mode
[   63.113836][ T6221] Illegal XDP return value 16128 on prog  (id 17) dev syz_tun, expect packet loss!
[   63.119361][ T6224] tipc: Resetting bearer <eth:syzkaller0>
[   63.123650][ T6223] tipc: Resetting bearer <eth:syzkaller0>
[   63.130716][ T6223] tipc: Disabling bearer <eth:syzkaller0>
[   63.149454][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.169116][ T6226] dummy0: entered promiscuous mode
[   63.172756][ T6226] macsec1: entered promiscuous mode
[   63.190126][ T6226] dummy0: left promiscuous mode
[   63.311770][ T5856] Bluetooth: hci0: command tx timeout
[   63.386969][ T6242] netlink: 'syz.2.75': attribute type 10 has an invalid length.
[   63.391930][ T5856] Bluetooth: hci1: command tx timeout
[   63.394290][ T5856] Bluetooth: hci2: command tx timeout
[   63.405277][ T6242] 8021q: adding VLAN 0 to HW filter on device team0
[   63.411035][ T6242] bond0: (slave team0): Enslaving as an active interface with an up link
[   63.445628][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.448326][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.501146][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.509617][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.546370][ T5719] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.549418][ T5719] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.556763][ T5719] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.560479][ T5719] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.605324][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'.
[   63.608776][ T6250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.78'.
[   63.687369][ T6256] netlink: 'syz.1.80': attribute type 12 has an invalid length.
[   63.817193][ T6263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.037602][ T6280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.87'.
[   64.043471][ T6280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.183362][ T5898] tipc: Node number set to 2886997162
[   64.198743][ T6288] netlink: 'syz.2.90': attribute type 10 has an invalid length.
[   64.205829][ T6288] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   64.272480][ T6293] netlink: 100 bytes leftover after parsing attributes in process `syz.2.90'.
[   64.480846][ T6303] netlink: 'syz.2.94': attribute type 5 has an invalid length.
[   64.965082][ T6318] dvmrp8: entered allmulticast mode
[   65.114271][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'.
[   65.229524][ T6338] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[   65.236330][ T6338] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[   65.331612][ T6354] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   65.334411][ T6354] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'.
[   65.340120][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.342939][ T6354] IPv6: NLM_F_CREATE should be set when creating new route
[   65.405467][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'.
[   65.606835][ T6376] net_ratelimit: 10 callbacks suppressed
[   65.606846][ T6376] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   65.765761][ T6386] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.769211][ T6386] bridge0: port 3(bond1) entered blocking state
[   65.772644][ T6386] bridge0: port 3(bond1) entered disabled state
[   65.775530][ T6386] bond1: entered allmulticast mode
[   65.779807][ T6386] bond1: entered promiscuous mode
[   66.180497][ T6407] bond1: entered promiscuous mode
[   66.183097][ T6407] bond1: entered allmulticast mode
[   66.189086][ T6407] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.262025][ T6427] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   66.969821][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.972462][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.085988][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.221243][ T5719] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.225171][ T5719] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.228755][ T5719] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.232591][ T5719] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.851314][ T6489] __nla_validate_parse: 12 callbacks suppressed
[   67.851325][ T6489] netlink: 64 bytes leftover after parsing attributes in process `syz.2.145'.
[   67.860509][ T6489] netlink: 22 bytes leftover after parsing attributes in process `syz.2.145'.
[   67.866429][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'.
[   68.007214][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[   68.202591][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'.
[   68.218992][ T6522] tipc: Started in network mode
[   68.220759][ T6522] tipc: Node identity 92c947ae36bc, cluster identity 4711
[   68.223796][ T6522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.227255][ T6522] syzkaller0: entered promiscuous mode
[   68.229561][ T6522] syzkaller0: entered allmulticast mode
[   68.239331][ T6522] tipc: Resetting bearer <eth:syzkaller0>
[   68.242686][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   68.250273][ T6521] tipc: Disabling bearer <eth:syzkaller0>
[   68.290268][ T6525] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   68.296204][ T6525] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   68.315490][ T6523] Bluetooth: MGMT ver 1.23
[   68.499023][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[   68.546537][ T6548] bridge_slave_0: left allmulticast mode
[   68.548392][ T6548] bridge_slave_0: left promiscuous mode
[   68.550611][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.555872][ T6548] bridge_slave_1: left allmulticast mode
[   68.557782][ T6548] bridge_slave_1: left promiscuous mode
[   68.559649][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.564126][ T6548] bond0: (slave bond_slave_0): Releasing backup interface
[   68.567561][ T6548] bond0: (slave bond_slave_1): Releasing backup interface
[   68.572090][ T6548] team0: Port device team_slave_0 removed
[   68.575564][ T6548] team0: Port device team_slave_1 removed
[   68.577602][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.580587][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.584708][ T6548] team0: Port device batadv1 removed
[   68.589433][ T6548] validate_nla: 3 callbacks suppressed
[   68.589443][ T6548] netlink: 'syz.1.164': attribute type 10 has an invalid length.
[   68.597392][ T6548] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.989234][ T6580] netlink: 'syz.0.172': attribute type 11 has an invalid length.
[   69.135416][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.174'.
[   69.175766][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'.
[   69.204562][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'.
[   69.215795][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[   69.252645][ T6594] netlink: 'syz.0.176': attribute type 25 has an invalid length.
[   69.266006][ T6596] dvmrp8: left allmulticast mode
[   70.128501][ T6612] netlink: 'syz.1.179': attribute type 5 has an invalid length.
[   70.139678][ T6615] unsupported nlmsg_type 40
[   70.440471][ T6662] openvswitch: netlink: Missing key (keys=40, expected=80)
[   70.532261][ T6668] netlink: 'syz.2.189': attribute type 10 has an invalid length.
[   70.559291][ T6668] team0: Port device dummy0 added
[   70.565699][ T6668] netlink: 'syz.2.189': attribute type 10 has an invalid length.
[   70.576761][ T6668] team0: Port device dummy0 removed
[   70.580503][ T6668] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.856417][ T6684] pimreg: entered allmulticast mode
[   70.859920][ T6684] pimreg: left allmulticast mode
[   70.941136][ T6684] bond2: entered promiscuous mode
[   70.943402][ T6684] bond2: entered allmulticast mode
[   70.945406][ T6684] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.075490][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.078902][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   72.539083][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.723926][ T6801] macsec1: entered promiscuous mode
[   72.725642][ T6801] batadv0: entered promiscuous mode
[   72.729401][ T6801] batadv0: left promiscuous mode
[   72.747858][ T6802] macsec1: entered promiscuous mode
[   72.750047][ T6802] batadv0: entered promiscuous mode
[   72.756246][ T6802] batadv0: left promiscuous mode
[   73.199341][ T6818] __nla_validate_parse: 21 callbacks suppressed
[   73.199351][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   73.210454][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   73.262838][ T6819] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.226'.
[   73.383854][ T6831] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'.
[   73.475989][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   73.502843][ T6839] bond1: left allmulticast mode
[   73.505136][ T6839] bond1: left promiscuous mode
[   73.507552][ T6839] bridge0: port 3(bond1) entered disabled state
[   73.518648][ T6839] bridge_slave_1: left allmulticast mode
[   73.523906][ T6839] bridge_slave_1: left promiscuous mode
[   73.533213][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.540883][ T6839] bridge_slave_0: left allmulticast mode
[   73.544466][ T6839] bridge_slave_0: left promiscuous mode
[   73.546371][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.839322][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[   73.847822][ T6863] netlink: 'syz.0.238': attribute type 5 has an invalid length.
[   73.851122][ T6863] netlink: 48 bytes leftover after parsing attributes in process `syz.0.238'.
[   73.870392][ T6863] geneve2: entered promiscuous mode
[   73.872658][ T6863] geneve2: entered allmulticast mode
[   73.876285][ T5719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   73.881219][ T5719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   73.898309][ T6858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.930155][ T6867] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   73.935827][ T6867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.241'.
[   73.951935][ T6858] batman_adv: batadv0: Removing interface: netdevsim0
[   73.955230][ T6858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   74.018355][ T5719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   74.026949][ T5719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   74.037806][ T5719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   74.045274][ T5719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   74.081747][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   74.084744][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   74.094163][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.107954][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.655718][ T6910] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   75.701992][ T6913] netlink: 'syz.0.254': attribute type 2 has an invalid length.
[   75.824384][ T6924] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   75.829586][ T6924] bond1: left promiscuous mode
[   75.833553][ T6924] bond1: left allmulticast mode
[   75.836353][ T6924] bond2: left promiscuous mode
[   75.840833][ T6924] bond2: left allmulticast mode
[   75.960828][ T6935] warning: `syz.1.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.004704][ T6942] macsec0: entered allmulticast mode
[   76.113226][ T5719] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   76.116901][ T5719] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   76.128843][ T5719] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   76.133461][ T5719] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   76.345223][ T6972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.452636][ T6978] netlink: 'syz.1.270': attribute type 5 has an invalid length.
[   76.592902][ T6984] netlink: 'syz.2.273': attribute type 5 has an invalid length.
[   76.598196][ T6984] netlink: 'syz.2.273': attribute type 5 has an invalid length.
[   76.645006][ T6986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.982261][ T6994] macsec0: left allmulticast mode
[   76.988894][ T6994] geneve2: left promiscuous mode
[   76.991243][ T6994] geneve2: left allmulticast mode
[   77.010760][ T6994] hsr_slave_0: left promiscuous mode
[   77.014846][ T6994] hsr_slave_1: left promiscuous mode
[   77.410709][ T7010] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20004
[   77.610923][ T7019] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[   77.681005][ T7019] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.684561][ T7019] bond1: (slave bond2): making interface the new active one
[   77.687659][ T7019] bond1: (slave bond2): Enslaving as an active interface with an up link
[   77.698715][ T7019] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   77.709971][ T7019] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.750119][ T7026] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   77.755246][ T7026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.934402][ T7031] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   78.372289][ T7078] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   78.390683][ T7078] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[   78.394544][ T7078] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   78.399336][ T7078] bond3: (slave vcan1): making interface the new active one
[   78.402668][ T7078] bond3: (slave vcan1): Enslaving as an active interface with an up link
[   78.409005][ T7078] bond3: (slave vcan2): The slave device specified does not support setting the MAC address
[   78.414131][ T7078] bond3: (slave vcan2): Enslaving as a backup interface with an up link
[   78.418328][ T7078] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.714090][ T7090] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[   78.863494][ T7094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.872239][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   78.900653][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   78.934742][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   78.966795][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   78.981092][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   78.994390][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   78.995813][ T7104] __nla_validate_parse: 12 callbacks suppressed
[   78.995822][ T7104] netlink: 108 bytes leftover after parsing attributes in process `syz.1.306'.
[   79.026044][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   79.040743][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   79.057440][ T7104] vxcan2: entered promiscuous mode
[   79.075568][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   79.090216][ T7096] netlink: 'syz.2.303': attribute type 9 has an invalid length.
[   79.408736][ T7120] netlink: 72 bytes leftover after parsing attributes in process `syz.1.312'.
[   79.565737][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'.
[   79.704883][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.320'.
[   79.807382][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.322'.
[   80.095394][ T7180] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   80.997688][ T7201] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   81.002679][ T7201] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   81.158386][ T7208] ieee802154 phy0 wpan0: encryption failed: -22
[   81.167756][ T7207] batman_adv: batadv0: Adding interface: dummy0
[   81.170300][ T7207] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.179157][ T7207] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   81.209848][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'.
[   81.250707][ T7203] netdevsim netdevsim2: Direct firmware load for /. failed with error -2
[   81.257431][ T7203] netdevsim netdevsim2: Falling back to sysfs fallback for: /.
[   81.267468][ T7212] IPVS: persistence engine module ip_vs_pe_ not found
[   81.314660][    T9] cfg80211: failed to load regulatory.db
[   81.583617][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   81.593250][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'.
[   81.632546][ T7220] netlink: 172 bytes leftover after parsing attributes in process `syz.0.341'.
[   81.861120][ T7229] netlink: 176 bytes leftover after parsing attributes in process `syz.2.344'.
[   82.872142][ T7304] team1: entered promiscuous mode
[   82.873823][ T7304] team1: entered allmulticast mode
[   83.190199][ T7335] syzkaller1: entered promiscuous mode
[   83.193881][ T7335] syzkaller1: entered allmulticast mode
[   83.748967][ T7371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.791005][ T7371] syzkaller0: entered promiscuous mode
[   83.793835][ T7371] syzkaller0: entered allmulticast mode
[   83.796950][ T7371] tipc: Resetting bearer <eth:syzkaller0>
[   83.809504][ T5897] IPVS: starting estimator thread 0...
[   83.827405][ T7370] tipc: Resetting bearer <eth:syzkaller0>
[   83.901714][ T7372] IPVS: using max 81 ests per chain, 194400 per kthread
[   84.668706][ T7370] tipc: Disabling bearer <eth:syzkaller0>
[   84.776823][ T7390] __nla_validate_parse: 6 callbacks suppressed
[   84.776832][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.800446][ T7393] validate_nla: 26 callbacks suppressed
[   84.800459][ T7393] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   84.835548][ T7393] 8021q: adding VLAN 0 to HW filter on device bond4
[   84.840302][ T7393] bond3: (slave bond4): making interface the new active one
[   84.843567][ T7393] bond3: (slave bond4): Enslaving as an active interface with an up link
[   84.894740][ T7402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.954634][ T7405] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   84.996654][ T7405] netlink: 'syz.0.382': attribute type 11 has an invalid length.
[   85.088268][ T5310] IPVS: starting estimator thread 0...
[   85.195723][ T7412] IPVS: using max 48 ests per chain, 115200 per kthread
[   85.537672][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'.
[   85.645338][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[   85.748451][ T7449] syzkaller1: entered promiscuous mode
[   85.750744][ T7449] syzkaller1: entered allmulticast mode
[   85.765553][ T7457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'.
[   85.812004][ T7460] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[   85.838571][ T7460] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   85.846895][ T5719] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   85.854141][ T7460] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.872288][ T7460] veth5: entered promiscuous mode
[   85.877027][ T7460] bond4: (slave veth5): Enslaving as a backup interface with a down link
[   85.972483][ T6246] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   86.293936][ T7491] syzkaller0: entered promiscuous mode
[   86.297085][ T7491] syzkaller0: entered allmulticast mode
[   86.364836][ T7498] netlink: 'syz.2.407': attribute type 23 has an invalid length.
[   86.552870][ T7505] nbd2: detected capacity change from 0 to 63
[   86.559844][ T7498] block nbd2: NBD_DISCONNECT
[   86.562563][ T7498] block nbd2: Disconnected due to user request.
[   86.565368][ T7498] block nbd2: shutting down sockets
[   86.581683][   T61] blk_print_req_error: 138 callbacks suppressed
[   86.581693][   T61] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   86.586666][   T61] buffer_io_error: 138 callbacks suppressed
[   86.586672][   T61] Buffer I/O error on dev nbd2, logical block 0, async page read
[   86.593218][   T61] Buffer I/O error on dev nbd2, logical block 1, async page read
[   86.596486][   T61] Buffer I/O error on dev nbd2, logical block 2, async page read
[   86.599604][   T61] Buffer I/O error on dev nbd2, logical block 3, async page read
[   86.605071][ T7068] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.609551][ T7068] Buffer I/O error on dev nbd2, logical block 0, async page read
[   86.613333][ T7068] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.617218][ T7068] Buffer I/O error on dev nbd2, logical block 1, async page read
[   86.620633][ T7068] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.624499][ T7068] Buffer I/O error on dev nbd2, logical block 2, async page read
[   86.627935][ T7068] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.634530][ T7068] Buffer I/O error on dev nbd2, logical block 3, async page read
[   86.640263][ T7068] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.649115][ T7068] Buffer I/O error on dev nbd2, logical block 0, async page read
[   86.660338][ T7068] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.665256][ T7068] Buffer I/O error on dev nbd2, logical block 1, async page read
[   86.668745][ T7068] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.672406][ T7068] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.676197][ T7068] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   86.682759][ T7068] ldm_validate_partition_table(): Disk read failed.
[   86.687321][ T7068] Dev nbd2: unable to read RDB block 0
[   86.695727][ T7068]  nbd2: unable to read partition table
[   86.711969][ T7068] ldm_validate_partition_table(): Disk read failed.
[   86.722881][ T7068] Dev nbd2: unable to read RDB block 0
[   86.732916][ T7068]  nbd2: unable to read partition table
[   86.838509][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'.
[   86.964241][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'.
[   87.116598][ T7552] netlink: 'syz.0.423': attribute type 16 has an invalid length.
[   87.120242][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'.
[   87.127028][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'.
[   87.138408][ T7552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.423'.
[   87.297728][ T7567] dvmrp8: entered allmulticast mode
[   87.382941][ T7570] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.735793][ T7590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.738649][ T7590] syzkaller0: entered promiscuous mode
[   87.740549][ T7590] syzkaller0: entered allmulticast mode
[   87.757154][ T7590] tipc: Resetting bearer <eth:syzkaller0>
[   87.762843][ T7589] tipc: Resetting bearer <eth:syzkaller0>
[   87.770572][ T7589] tipc: Disabling bearer <eth:syzkaller0>
[   87.904223][ T7596] netlink: 'syz.1.436': attribute type 4 has an invalid length.
[   88.075457][ T5897] IPVS: starting estimator thread 0...
[   88.098888][ T7615] netlink: 'syz.1.442': attribute type 10 has an invalid length.
[   88.162034][ T7614] IPVS: using max 45 ests per chain, 108000 per kthread
[   88.187669][ T7619] nbd: socks must be embedded in a SOCK_ITEM attr
[   88.242811][ T7625] dvmrp6: entered allmulticast mode
[   88.245867][ T7624] syz_tun: entered allmulticast mode
[   88.276515][ T7623] syz_tun: left allmulticast mode
[   88.292873][ T7623] dvmrp6: left allmulticast mode
[   88.373347][ T7632] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   88.376730][ T7633] netlink: 'syz.2.448': attribute type 11 has an invalid length.
[   88.896935][ T7671] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   89.067771][ T7683] IPVS: Error connecting to the multicast addr
[   89.082725][ T7682] IPVS: Error connecting to the multicast addr
[   89.147051][ T7691] vti0: entered promiscuous mode
[   89.149058][ T7691] vti0: entered allmulticast mode
[   89.341328][ T7702] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   89.346037][ T7705] netlink: 'syz.1.468': attribute type 5 has an invalid length.
[   90.441665][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   90.447358][ T7734] netlink: 'syz.0.472': attribute type 6 has an invalid length.
[   90.507098][ T7738] __nla_validate_parse: 11 callbacks suppressed
[   90.507112][ T7738] netlink: 84 bytes leftover after parsing attributes in process `syz.2.474'.
[   90.656494][ T7752] netlink: 'syz.0.479': attribute type 10 has an invalid length.
[   90.676234][ T7755] netlink: 'syz.1.480': attribute type 10 has an invalid length.
[   90.716056][ T7757] netlink: 76 bytes leftover after parsing attributes in process `syz.1.481'.
[   90.724141][ T7759] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[   90.745094][ T7759] 8021q: adding VLAN 0 to HW filter on device bond5
[   90.747426][ T7761] netlink: 'syz.0.483': attribute type 3 has an invalid length.
[   90.762855][ T7759] bond5: (slave erspan1): making interface the new active one
[   90.765969][ T7759] bond5: (slave erspan1): Enslaving as an active interface with an up link
[   90.776205][ T7761] syz_tun: entered allmulticast mode
[   90.779164][ T7761] dvmrp8: left allmulticast mode
[   90.840368][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.843793][ T7761] 8021q: adding VLAN 0 to HW filter on device team0
[   90.849103][ T7761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.866302][ T7760] syz_tun: left allmulticast mode
[   90.876922][ T7761] syz.0.483 (7761) used greatest stack depth: 19224 bytes left
[   90.889193][ T7772] netlink: 'syz.1.487': attribute type 1 has an invalid length.
[   90.892811][ T7772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.487'.
[   90.911895][ T7773] netlink: 'syz.1.487': attribute type 1 has an invalid length.
[   90.915162][ T7773] netlink: 224 bytes leftover after parsing attributes in process `syz.1.487'.
[   90.925043][ T7772] syz_tun: entered allmulticast mode
[   90.954953][ T7773] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   90.959022][ T7773] vti0: left promiscuous mode
[   90.963978][ T7773] vti0: left allmulticast mode
[   91.007441][ T7785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.020410][ T7786] netlink: 68 bytes leftover after parsing attributes in process `syz.2.492'.
[   91.046082][ T7784] delete_channel: no stack
[   91.102653][ T7800] netlink: 'syz.1.494': attribute type 39 has an invalid length.
[   91.111280][ T7793] netlink: 'syz.1.494': attribute type 39 has an invalid length.
[   91.178382][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[   91.216785][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[   91.234352][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.244352][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.247042][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.250271][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.260839][ T7816] netlink: 'syz.2.501': attribute type 5 has an invalid length.
[   91.365738][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[   91.411656][ T7828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.506'.
[   91.558061][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[   91.602755][ T7846] IPVS: Unknown mcast interface: veth1_vlan
[   91.755773][ T7863] geneve2: entered promiscuous mode
[   91.758971][ T6246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   91.777260][ T6246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   91.781670][ T6246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   91.784849][ T6246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   92.014197][ T7876] bond6: entered promiscuous mode
[   92.016939][ T7876] 8021q: adding VLAN 0 to HW filter on device bond6
[   93.380718][ T7954] dvmrp8: entered allmulticast mode
[   93.388611][ T7953] dvmrp8: left allmulticast mode
[   93.444024][ T7956] lo speed is unknown, defaulting to 1000
[   93.446938][ T7956] lo speed is unknown, defaulting to 1000
[   93.450050][ T7956] lo speed is unknown, defaulting to 1000
[   93.555950][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.563120][ T7963] 8021q: adding VLAN 0 to HW filter on device team0
[   93.579074][ T7963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.628925][  T973] lo speed is unknown, defaulting to 1000
[   93.632161][  T973] syz0: Port: 1 Link ACTIVE
[   93.634196][ T7956] infiniband syz0: set active
[   93.636070][ T7956] infiniband syz0: added lo
[   93.669802][ T7956] RDS/IB: syz0: added
[   93.672487][ T7956] smc: adding ib device syz0 with port count 1
[   93.675044][ T7956] smc:    ib device syz0 port 1 has pnetid 
[   93.679443][  T973] lo speed is unknown, defaulting to 1000
[   93.683644][ T7956] lo speed is unknown, defaulting to 1000
[   93.802732][ T7956] lo speed is unknown, defaulting to 1000
[   93.896833][ T7956] lo speed is unknown, defaulting to 1000
[   94.095769][ T7976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.214198][ T7983] dvmrp8: entered allmulticast mode
[   94.218163][ T7983] dvmrp8: left allmulticast mode
[   94.521274][ T7994] vxcan0: entered promiscuous mode
[   95.285360][ T8051] lo speed is unknown, defaulting to 1000
[   95.353064][ T8059] vlan2: entered promiscuous mode
[   95.359073][ T8059] bridge0: entered promiscuous mode
[   95.483056][ T8064] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   95.715833][ T8072] vlan2: entered promiscuous mode
[   95.718088][ T8072] hsr_slave_1: entered promiscuous mode
[   95.721134][ T8072] vlan2: entered allmulticast mode
[   95.723279][ T8072] hsr_slave_1: entered allmulticast mode
[   95.898797][ T8078] __nla_validate_parse: 20 callbacks suppressed
[   95.898807][ T8078] netlink: 68 bytes leftover after parsing attributes in process `syz.1.564'.
[   95.967865][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'.
[   96.013005][ T8083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.567'.
[   96.016871][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[   96.101138][ T8084] validate_nla: 5 callbacks suppressed
[   96.101148][ T8084] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[   96.105641][ T8084] netlink: 'syz.2.566': attribute type 4 has an invalid length.
[   96.108232][ T8084] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.566'.
[   96.111219][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.568'.
[   96.116834][ T8084] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[   96.119750][ T8084] netlink: 'syz.2.566': attribute type 4 has an invalid length.
[   96.122990][ T8084] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.566'.
[   96.234154][ T8090] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   96.267229][ T8090] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   96.308480][ T8090] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   96.331169][ T8090] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   96.403719][ T6246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   96.413744][ T6246] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   96.425685][ T6246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   96.435658][ T6246] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   96.709460][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'.
[   96.940867][ T8114] syzkaller0: tun_chr_ioctl cmd 35111
[   96.971061][ T8114] syzkaller0: create flow: hash 3056401578 index 1
[   97.018785][ T8113] syzkaller0: delete flow: hash 3056401578 index 1
[   97.452834][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'.
[   97.856118][ T8121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.884519][ T8128] macvlan0: entered promiscuous mode
[   97.886389][ T8128] macvlan0: entered allmulticast mode
[   97.888741][ T8128] bond7: (slave macvlan0): Opening slave failed
[   97.899306][ T8133] lo speed is unknown, defaulting to 1000
[   97.903264][ T8133] lo speed is unknown, defaulting to 1000
[   97.910251][ T8133] lo speed is unknown, defaulting to 1000
[   97.915239][ T8133] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   97.920380][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[   97.924529][ T8133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   97.975229][ T8133] lo speed is unknown, defaulting to 1000
[   97.978630][ T8133] lo speed is unknown, defaulting to 1000
[   98.003479][ T8133] lo speed is unknown, defaulting to 1000
[   98.113843][ T5856] Bluetooth: hci2: command tx timeout
[   98.223103][ T8171] netlink: 'syz.1.592': attribute type 13 has an invalid length.
[   98.238142][ T6246] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.240990][ T8171] netlink: 'syz.1.592': attribute type 13 has an invalid length.
[   98.242166][ T6246] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.247558][ T6246] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.250433][ T6246] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.460756][ T8192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.464355][ T8192] syzkaller0: entered promiscuous mode
[   98.466534][ T8192] syzkaller0: entered allmulticast mode
[   98.543893][ T8191] tipc: Resetting bearer <eth:syzkaller0>
[   98.555510][ T8191] tipc: Disabling bearer <eth:syzkaller0>
[   98.713726][ T8212] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[   99.206462][ T8249] ieee802154 phy0 wpan0: encryption failed: -22
[   99.250311][ T8256] lo speed is unknown, defaulting to 1000
[   99.301787][ T8263] IPVS: length: 213 != 24
[   99.428512][ T8256] lo speed is unknown, defaulting to 1000
[   99.495357][ T8277] netlink: 'syz.0.624': attribute type 5 has an invalid length.
[  100.191487][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  100.255326][ T8310] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  100.269922][ T8312] netlink: 'syz.2.632': attribute type 5 has an invalid length.
[  100.330083][ T8318] netlink: 'syz.2.633': attribute type 3 has an invalid length.
[  100.332973][ T8318] netlink: 'syz.2.633': attribute type 3 has an invalid length.
[  100.377191][ T8320] netlink: zone id is out of range
[  100.379724][ T8320] netlink: zone id is out of range
[  100.402545][ T8320] netlink: set zone limit has 4 unknown bytes
[  100.418641][ T8321] netlink: del zone limit has 4 unknown bytes
[  100.421988][ T8320] netlink: del zone limit has 4 unknown bytes
[  100.546077][ T8335] syz_tun (unregistering): left allmulticast mode
[  100.610113][ T8335] ip6tnl1: entered promiscuous mode
[  100.623513][ T8335] ip6tnl1: entered allmulticast mode
[  100.627413][ T8335] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  100.791329][ T8341] lo speed is unknown, defaulting to 1000
[  101.099768][ T8344] __nla_validate_parse: 26 callbacks suppressed
[  101.099783][ T8344] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.639'.
[  101.128782][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'.
[  101.167348][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'.
[  101.177528][ T8344] validate_nla: 3 callbacks suppressed
[  101.177537][ T8344] netlink: 'syz.0.639': attribute type 13 has an invalid length.
[  101.183179][ T8344] netlink: 'syz.0.639': attribute type 17 has an invalid length.
[  101.246046][ T8344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.251552][   T24] lo speed is unknown, defaulting to 1000
[  101.254421][ T8341] lo speed is unknown, defaulting to 1000
[  101.504603][ T8403] netlink: 44 bytes leftover after parsing attributes in process `syz.0.652'.
[  101.511643][ T8403] netlink: 43 bytes leftover after parsing attributes in process `syz.0.652'.
[  101.522196][ T8403] netlink: 'syz.0.652': attribute type 5 has an invalid length.
[  101.524711][ T8403] netlink: 43 bytes leftover after parsing attributes in process `syz.0.652'.
[  101.568711][ T8405] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002
[  101.576982][ T8405] syzkaller1: entered promiscuous mode
[  101.579991][ T8405] syzkaller1: entered allmulticast mode
[  101.586300][ T8403] lo speed is unknown, defaulting to 1000
[  101.613443][ T8412] netlink: 192 bytes leftover after parsing attributes in process `syz.0.652'.
[  101.726585][ T8403] lo speed is unknown, defaulting to 1000
[  102.130120][ T8466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.136775][ T8466] syzkaller0: entered promiscuous mode
[  102.138835][ T8466] syzkaller0: entered allmulticast mode
[  102.157410][ T8466] tipc: Resetting bearer <eth:syzkaller0>
[  102.165231][ T8465] tipc: Resetting bearer <eth:syzkaller0>
[  102.180823][ T8465] tipc: Disabling bearer <eth:syzkaller0>
[  102.187553][ T8470] pimreg: entered allmulticast mode
[  102.190095][ T8470] pimreg: left allmulticast mode
[  102.304188][ T8477] xt_HMARK: spi-set and port-set can't be combined
[  102.308902][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.666'.
[  102.320068][ T8470] bond8: entered promiscuous mode
[  102.323861][ T8470] bond8: entered allmulticast mode
[  102.326045][ T8470] 8021q: adding VLAN 0 to HW filter on device bond8
[  102.485219][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  102.531252][ T8495] netlink: 88 bytes leftover after parsing attributes in process `syz.1.671'.
[  102.666370][ T8504] netlink: 'syz.0.672': attribute type 3 has an invalid length.
[  103.387614][ T8524] syzkaller1: entered promiscuous mode
[  103.389753][ T8524] syzkaller1: entered allmulticast mode
[  103.560075][ T8540] netlink: 'syz.2.680': attribute type 2 has an invalid length.
[  103.578482][ T8540] : entered promiscuous mode
[  103.666025][ T8550] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.943202][ T8572] bond0: (slave bond_slave_0): Releasing backup interface
[  103.956071][ T8572] bond0: (slave bond_slave_1): Releasing backup interface
[  103.977494][ T8572] team0: Port device team_slave_1 removed
[  103.982399][ T8572] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.987195][ T8572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.991763][ T8572] bond3: (slave bond4): Releasing backup interface
[  104.039339][ T8572] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[  104.046074][ T8572] bond0: (slave wlan1): Opening slave failed
[  104.150289][ T8585] netlink: 'syz.2.695': attribute type 1 has an invalid length.
[  104.170560][ T8585] 8021q: adding VLAN 0 to HW filter on device bond9
[  104.185512][ T8585] bond9: (slave veth11): Enslaving as an active interface with a down link
[  104.293429][ T8594] lo speed is unknown, defaulting to 1000
[  104.375562][ T8594] lo speed is unknown, defaulting to 1000
[  104.580174][ T8600] lo speed is unknown, defaulting to 1000
[  104.871319][ T8600] lo speed is unknown, defaulting to 1000
[  105.051830][ T5897] lo speed is unknown, defaulting to 1000
[  105.053973][ T5897] syz1: Port: 1 Link DOWN
[  105.060661][ T8623] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.080494][ T5719] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.087265][ T5719] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.090875][ T5719] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.153515][ T5719] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.157955][ T8623] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.235956][ T8623] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.338891][ T8623] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.387987][ T8638] netlink: 'syz.0.708': attribute type 12 has an invalid length.
[  105.450461][ T5719] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.453496][ T5719] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.462671][ T5719] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.477599][ T5719] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.008409][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.023235][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.028375][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.054897][ T8669] bond0: entered promiscuous mode
[  106.064442][ T8669] ip6gretap0: entered promiscuous mode
[  106.075200][ T8669] debugfs: 'hsr0' already exists in 'hsr'
[  106.079244][ T8669] Cannot create hsr debugfs directory
[  106.084821][ T8669] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  106.088978][ T8669] hsr0: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  106.101814][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.113614][ T8668] __nla_validate_parse: 8 callbacks suppressed
[  106.113622][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'.
[  106.119710][ T8668] openvswitch: netlink: Missing key (keys=40, expected=80)
[  106.125064][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'.
[  106.139615][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'.
[  106.185401][ T8681] netlink: 596 bytes leftover after parsing attributes in process `syz.0.717'.
[  106.259640][ T8681] macvlan2: entered allmulticast mode
[  106.263138][ T8681] veth1_vlan: entered allmulticast mode
[  106.267406][ T8681] veth1_vlan: left allmulticast mode
[  106.269586][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.279621][ T8686] tipc: Can't bind to reserved service type 0
[  106.292434][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[  106.306766][ T8695] netlink: 'syz.2.721': attribute type 1 has an invalid length.
[  106.309996][ T8695] netlink: 184 bytes leftover after parsing attributes in process `syz.2.721'.
[  106.349829][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'.
[  106.357700][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'.
[  106.391778][ T8702] netlink: 244 bytes leftover after parsing attributes in process `syz.2.723'.
[  106.420353][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[  106.565464][ T8726] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[  106.594991][ T8732] netlink: 'syz.1.732': attribute type 2 has an invalid length.
[  106.600490][ T8732] k*: entered promiscuous mode
[  106.830883][ T8753] 8021q: VLANs not supported on ip6_vti0
[  106.938200][ T8761] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.170471][ T8770] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  107.585655][ T8777] netlink: 'syz.1.744': attribute type 10 has an invalid length.
[  107.789607][ T8797] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  107.803076][ T8796] raw_sendmsg: syz.1.750 forgot to set AF_INET. Fix it!
[  108.037291][ T8821] netlink: 'syz.2.756': attribute type 2 has an invalid length.
[  108.040934][ T8822] netlink: 'syz.2.756': attribute type 2 has an invalid length.
[  108.307770][ T8832] netlink: 'syz.1.760': attribute type 1 has an invalid length.
[  108.311241][ T8832] netlink: 'syz.1.760': attribute type 4 has an invalid length.
[  108.344722][ T8834] netlink: 'syz.1.761': attribute type 12 has an invalid length.
[  108.539687][ T8847] netlink: 'syz.1.767': attribute type 1 has an invalid length.
[  108.569228][ T8847] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  109.364825][ T8907] tipc: Started in network mode
[  109.366632][ T8907] tipc: Node identity aebc258b89e1, cluster identity 4711
[  109.369221][ T8907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.383877][ T8907] syzkaller0: entered promiscuous mode
[  109.390658][ T8907] syzkaller0: entered allmulticast mode
[  109.470857][ T8909] tipc: Resetting bearer <eth:syzkaller0>
[  109.495774][ T8909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.498882][ T8909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  109.597015][ T8906] tipc: Resetting bearer <eth:syzkaller0>
[  109.615493][ T8906] tipc: Disabling bearer <eth:syzkaller0>
[  109.997016][ T8951] ieee802154 phy0 wpan0: encryption failed: -22
[  110.103035][ T8971] vlan1: entered allmulticast mode
[  110.104825][ T8971] bridge_slave_0: entered allmulticast mode
[  110.224367][ T8979] syz_tun: entered allmulticast mode
[  110.266314][ T8979] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.269998][ T8979] 8021q: adding VLAN 0 to HW filter on device team0
[  110.276851][ T8979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.288311][  T973] lo speed is unknown, defaulting to 1000
[  110.290407][  T973] syz1: Port: 1 Link ACTIVE
[  110.293862][ T8978] syz_tun: left allmulticast mode
[  110.297095][ T8983] veth0: entered promiscuous mode
[  110.328371][ T8985] veth0 (unregistering): left promiscuous mode
[  110.398248][ T8995] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:20001
[  110.434634][ T8997] openvswitch: netlink: Flow key attr not present in new flow.
[  110.530094][ T9006] tipc: Failed to remove unknown binding: 66,1,1/0:641964703/641964705
[  110.537499][ T9006] tipc: Failed to remove unknown binding: 66,1,1/0:641964703/641964705
[  110.541174][ T9006] tipc: Failed to remove unknown binding: 66,1,1/0:641964703/641964705
[  110.772167][ T9015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.776584][ T9015] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  110.818886][ T9018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  110.867712][ T9018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  110.917727][ T9018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  110.966029][ T9018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  111.028382][ T5719] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  111.038145][ T5719] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  111.050476][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  111.063996][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  111.199793][ T9026] __nla_validate_parse: 32 callbacks suppressed
[  111.199803][ T9026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.818'.
[  111.207640][ T9026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.818'.
[  111.261878][ T5877] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  111.264749][  T973] lo speed is unknown, defaulting to 1000
[  111.266933][  T973] syz0: Port: 1 Link DOWN
[  111.267246][ T5877] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  111.274918][ T5877] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  111.278975][ T5877] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  111.289193][  T973] lo speed is unknown, defaulting to 1000
[  111.339963][ T9026] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.391670][ T9034] veth0_to_bond: entered allmulticast mode
[  111.672722][ T9055] netlink: 7 bytes leftover after parsing attributes in process `syz.0.828'.
[  111.834957][ T9058] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  111.952824][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.958417][ T9069] validate_nla: 7 callbacks suppressed
[  111.958425][ T9069] netlink: 'syz.0.833': attribute type 13 has an invalid length.
[  111.962628][ T9068] netlink: 'syz.0.833': attribute type 13 has an invalid length.
[  111.966323][ T9068] netlink: 'syz.0.833': attribute type 17 has an invalid length.
[  111.967718][ T9069] netlink: 'syz.0.833': attribute type 17 has an invalid length.
[  111.998623][ T9069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.018536][ T9068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.026109][ T9077] batadv_slave_1: entered promiscuous mode
[  112.039766][ T9080] batadv_slave_1: left promiscuous mode
[  112.055417][ T9069] lo speed is unknown, defaulting to 1000
[  112.074084][ T9083] netlink: 13 bytes leftover after parsing attributes in process `syz.1.836'.
[  112.184864][ T9072] lo speed is unknown, defaulting to 1000
[  112.185553][ T9069] lo speed is unknown, defaulting to 1000
[  112.257270][ T9094] netlink: 'syz.1.840': attribute type 4 has an invalid length.
[  112.389182][ T9072] lo speed is unknown, defaulting to 1000
[  112.549888][ T9109] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.843'.
[  112.698290][ T9117] tipc: Enabled bearer <ib:caif0>, priority 14
[  112.739999][ T9119] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  112.780359][ T9126] netlink: 88 bytes leftover after parsing attributes in process `syz.2.847'.
[  112.860941][ T9129] netlink: 44 bytes leftover after parsing attributes in process `syz.1.848'.
[  112.991534][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  112.993407][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'.
[  112.999141][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'.
[  113.139337][ T9168] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  113.151690][ T9168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.216862][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'.
[  113.220612][ T9170] netlink: 'syz.0.860': attribute type 2 has an invalid length.
[  113.269747][ T9174] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  113.325492][ T9174] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  113.471144][ T9196] netlink: 'syz.2.865': attribute type 2 has an invalid length.
[  113.478110][ T9196] netlink: 'syz.2.865': attribute type 5 has an invalid length.
[  113.674150][ T9210] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.702343][ T9210] bond6: (slave gretap1): making interface the new active one
[  113.706446][ T9210] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  113.729284][ T9210] syz.0.868 (9210) used greatest stack depth: 19048 bytes left
[  113.811504][   T24] tipc: Node number set to 2759149486
[  114.031514][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  114.117954][ T5310] lo speed is unknown, defaulting to 1000
[  114.125374][ T5310] syz1: Port: 1 Link DOWN
[  114.151003][ T9248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.155390][ T9248] syzkaller0: entered promiscuous mode
[  114.157239][ T9248] syzkaller0: entered allmulticast mode
[  114.173674][ T9248] tipc: Resetting bearer <eth:syzkaller0>
[  114.202623][ T9247] tipc: Resetting bearer <eth:syzkaller0>
[  114.210276][ T9247] tipc: Disabling bearer <eth:syzkaller0>
[  114.278254][ T9256] syzkaller1: entered promiscuous mode
[  114.280364][ T9256] syzkaller1: entered allmulticast mode
[  114.555875][ T9295] macsec1: entered promiscuous mode
[  114.563501][ T9295] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  114.565900][ T9295] macsec1: entered allmulticast mode
[  114.570919][ T9295] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  114.581052][ T9295] macsec2: entered promiscuous mode
[  114.583064][ T9295] macsec2: entered allmulticast mode
[  114.589082][ T9294] delete_channel: no stack
[  114.950440][ T9325] bond7: entered promiscuous mode
[  114.954492][ T9325] 8021q: adding VLAN 0 to HW filter on device bond7
[  114.964701][ T9328] dvmrp8: entered allmulticast mode
[  114.987354][ T9330] dvmrp8: left allmulticast mode
[  115.071528][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  115.178957][ T9346] bridge0: port 1(veth0_to_bond) entered blocking state
[  115.185627][ T9346] bridge0: port 1(veth0_to_bond) entered disabled state
[  115.188723][ T9346] veth0_to_bond: entered allmulticast mode
[  115.194979][ T9346] veth0_to_bond: entered promiscuous mode
[  115.400683][   T24] lo speed is unknown, defaulting to 1000
[  115.402816][   T24] syz0: Port: 1 Link ACTIVE
[  115.404643][   T24] lo speed is unknown, defaulting to 1000
[  115.542831][ T9373] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.549053][ T9373] bond0: (slave rose0): Enslaving as an active interface with an up link
[  115.556610][ T9375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  115.813734][ T9429] geneve2: entered promiscuous mode
[  115.817067][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.819697][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.834522][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.837198][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.962691][ T9443] bond0: (slave wlan1): Opening slave failed
[  115.967943][ T9443] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  116.043227][ T9452] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  116.069868][ T9454] ieee802154 phy0 wpan0: encryption failed: -22
[  116.111526][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  116.127374][ T9457] lo speed is unknown, defaulting to 1000
[  116.218926][ T9457] lo speed is unknown, defaulting to 1000
[  116.218976][ T9459] lo speed is unknown, defaulting to 1000
[  116.232162][ T9460] tipc: Resetting bearer <ib:caif0>
[  116.238827][ T9460] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  116.249243][ T9460] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  116.253271][ T9460] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  116.308988][ T9459] lo speed is unknown, defaulting to 1000
[  116.416516][ T9472] __nla_validate_parse: 14 callbacks suppressed
[  116.416532][ T9472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.926'.
[  116.478183][ T9478] syzkaller0: entered promiscuous mode
[  116.479987][ T9478] syzkaller0: entered allmulticast mode
[  116.486122][ T9476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.516175][ T9478] IPVS: set_ctl: invalid protocol: 11612 100.1.1.1:21
[  116.578121][ T9475] tipc: Resetting bearer <eth:syzkaller0>
[  116.587324][ T9475] tipc: Disabling bearer <eth:syzkaller0>
[  116.762790][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'.
[  116.811830][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'.
[  116.815792][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.934'.
[  116.917077][ T9501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.935'.
[  116.969246][ T5877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.978273][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.008154][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.016864][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.055410][ T9501] bond11 (unregistering): Released all slaves
[  117.161543][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  117.214303][ T9515] bond3: option mode: unable to set because the bond device has slaves
[  117.340909][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.344873][ T9522] 8021q: adding VLAN 0 to HW filter on device team0
[  117.349954][ T9522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.358551][    T9] lo speed is unknown, defaulting to 1000
[  117.364798][ T9522] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.365647][    T9] syz1: Port: 1 Link ACTIVE
[  117.770663][ T9558] IPVS: length: 24 != 55320
[  117.870272][ T9564] pim6reg: entered allmulticast mode
[  117.875358][ T9564] trusted_key: syz.1.954 sent an empty control message without MSG_MORE.
[  118.191570][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  118.208852][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'.
[  118.233616][ T9599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.964'.
[  118.309289][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.968'.
[  118.314455][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.968'.
[  118.322220][ T9608] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.967'.
[  118.410399][ T9618] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  118.429044][ T9620] validate_nla: 15 callbacks suppressed
[  118.429053][ T9620] netlink: 'syz.1.971': attribute type 10 has an invalid length.
[  118.435916][ T9620] dummy0: entered promiscuous mode
[  118.438829][ T9620] batman_adv: batadv0: Interface activated: dummy0
[  118.443249][ T9620] batman_adv: batadv0: Interface deactivated: dummy0
[  118.445652][ T9620] batman_adv: batadv0: Removing interface: dummy0
[  118.447467][ T9622] delete_channel: no stack
[  118.450025][ T9620] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  118.638323][ T9645] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  118.641880][ T9645] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  118.654132][ T9646] netlink: 'syz.0.980': attribute type 11 has an invalid length.
[  118.696116][ T9652] ------------[ cut here ]------------
[  118.698628][ T9652] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  118.703349][ T9652] WARNING: CPU: 1 PID: 9652 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.706971][ T9652] Modules linked in:
[  118.709951][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) 
[  118.714368][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.718515][ T9652] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.721168][ T9652] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 e0 37 b0 8c e8 e6 d4 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 37 36 d7 f6 90 0f 0b 90 42 80 7c 3d
[  118.728890][ T9652] RSP: 0018:ffffc900066372f0 EFLAGS: 00010246
[  118.730928][ T9652] RAX: 6aa35fb9a2ca1400 RBX: 0000000000000000 RCX: 0000000000080000
[  118.733972][ T9652] RDX: ffffc90003c0a000 RSI: 00000000000062c5 RDI: 00000000000062c6
[  118.736559][ T9652] RBP: ffff888021a0d728 R08: 0000000000000003 R09: 0000000000000004
[  118.739335][ T9652] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888021a0e9d0
[  118.742335][ T9652] R13: ffff888021a0cd80 R14: 1ffff11004341ae5 R15: dffffc0000000000
[  118.745167][ T9652] FS:  00007fd308ec46c0(0000) GS:ffff8881a3c16000(0000) knlGS:0000000000000000
[  118.748107][ T9652] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.750797][ T9652] CR2: 00007fb46d970fc8 CR3: 000000003e246000 CR4: 00000000000006f0
[  118.753936][ T9652] Call Trace:
[  118.755111][ T9652]  <TASK>
[  118.756138][ T9652]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  118.758159][ T9652]  __ieee80211_link_release_channel+0x33b/0x4a0
[  118.760248][ T9652]  ieee80211_if_change_type+0x14c/0x990
[  118.762349][ T9652]  ieee80211_change_iface+0xd5/0x510
[  118.764305][ T9652]  cfg80211_change_iface+0x795/0xef0
[  118.766372][ T9652]  nl80211_set_interface+0x773/0xaa0
[  118.768592][ T9652]  ? __pfx_nl80211_set_interface+0x10/0x10
[  118.771031][ T9652]  ? nl80211_pre_doit+0x4fb/0x930
[  118.773438][ T9652]  genl_family_rcv_msg_doit+0x215/0x300
[  118.775733][ T9652]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  118.778290][ T9652]  ? bpf_lsm_capable+0x9/0x20
[  118.780262][ T9652]  ? security_capable+0x7e/0x2e0
[  118.782588][ T9652]  genl_rcv_msg+0x60e/0x790
[  118.784506][ T9652]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.786222][ T9652]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  118.788298][ T9652]  ? __pfx_nl80211_set_interface+0x10/0x10
[  118.790743][ T9652]  ? __pfx_nl80211_post_doit+0x10/0x10
[  118.793304][ T9652]  ? __asan_memcpy+0x40/0x70
[  118.795250][ T9652]  ? __pfx_ref_tracker_free+0x10/0x10
[  118.797491][ T9652]  netlink_rcv_skb+0x208/0x470
[  118.799493][ T9652]  ? __lock_acquire+0xab9/0xd20
[  118.801161][ T9652]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.803404][ T9652]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.805207][ T9652]  ? down_read+0x1ad/0x2e0
[  118.806906][ T9652]  genl_rcv+0x28/0x40
[  118.808585][ T9652]  netlink_unicast+0x82f/0x9e0
[  118.810735][ T9652]  ? __pfx_netlink_unicast+0x10/0x10
[  118.813171][ T9652]  ? netlink_sendmsg+0x642/0xb30
[  118.815253][ T9652]  ? skb_put+0x11b/0x210
[  118.817133][ T9652]  netlink_sendmsg+0x805/0xb30
[  118.819134][ T9652]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.821330][ T9652]  ? aa_sock_msg_perm+0xf1/0x1d0
[  118.823598][ T9652]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.825787][ T9652]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.827972][ T9652]  __sock_sendmsg+0x21c/0x270
[  118.829940][ T9652]  __sys_sendto+0x3bd/0x520
[  118.832181][ T9652]  ? __pfx___sys_sendto+0x10/0x10
[  118.834313][ T9652]  ? fput_close_sync+0x119/0x200
[  118.836472][ T9652]  ? __pfx_fput_close_sync+0x10/0x10
[  118.838374][ T9652]  __x64_sys_sendto+0xde/0x100
[  118.839952][ T9652]  do_syscall_64+0xfa/0x3b0
[  118.841596][ T9652]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.843366][ T9652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.845319][ T9652]  ? exc_page_fault+0x9f/0xf0
[  118.846832][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.848747][ T9652] RIP: 0033:0x7fd307f90a7c
[  118.850340][ T9652] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  118.857186][ T9652] RSP: 002b:00007fd308ec2e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  118.859976][ T9652] RAX: ffffffffffffffda RBX: 00007fd308ec2fa0 RCX: 00007fd307f90a7c
[  118.863110][ T9652] RDX: 0000000000000024 RSI: 00007fd308ec2ff0 RDI: 0000000000000005
[  118.866381][ T9652] RBP: 0000000000000000 R08: 00007fd308ec2e74 R09: 000000000000000c
[  118.869501][ T9652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  118.872282][ T9652] R13: 0000000000000000 R14: 00007fd308ec2ff0 R15: 0000000000000000
[  118.874912][ T9652]  </TASK>
[  118.875954][ T9652] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  118.878344][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.0.983 Not tainted syzkaller #0 PREEMPT(full) 
[  118.881370][ T9652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.884657][ T9652] Call Trace:
[  118.885773][ T9652]  <TASK>
[  118.886775][ T9652]  dump_stack_lvl+0x99/0x250
[  118.888299][ T9652]  ? __asan_memcpy+0x40/0x70
[  118.889746][ T9652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.891437][ T9652]  ? __pfx__printk+0x10/0x10
[  118.892977][ T9652]  vpanic+0x281/0x750
[  118.894312][ T9652]  ? __pfx__printk+0x10/0x10
[  118.895832][ T9652]  ? __pfx_vpanic+0x10/0x10
[  118.897335][ T9652]  ? is_bpf_text_address+0x292/0x2b0
[  118.899098][ T9652]  panic+0xb9/0xc0
[  118.900539][ T9652]  ? __pfx_panic+0x10/0x10
[  118.902498][ T9652]  __warn+0x31b/0x4b0
[  118.904236][ T9652]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.906689][ T9652]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.909169][ T9652]  report_bug+0x2be/0x4f0
[  118.911052][ T9652]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.913008][ T9652]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.914875][ T9652]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  118.916791][ T9652]  handle_bug+0x84/0x160
[  118.918184][ T9652]  exc_invalid_op+0x1a/0x50
[  118.919679][ T9652]  asm_exc_invalid_op+0x1a/0x20
[  118.921237][ T9652] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  118.923292][ T9652] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 e0 37 b0 8c e8 e6 d4 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 37 36 d7 f6 90 0f 0b 90 42 80 7c 3d
[  118.929589][ T9652] RSP: 0018:ffffc900066372f0 EFLAGS: 00010246
[  118.931592][ T9652] RAX: 6aa35fb9a2ca1400 RBX: 0000000000000000 RCX: 0000000000080000
[  118.934199][ T9652] RDX: ffffc90003c0a000 RSI: 00000000000062c5 RDI: 00000000000062c6
[  118.936849][ T9652] RBP: ffff888021a0d728 R08: 0000000000000003 R09: 0000000000000004
[  118.939461][ T9652] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888021a0e9d0
[  118.941963][ T9652] R13: ffff888021a0cd80 R14: 1ffff11004341ae5 R15: dffffc0000000000
[  118.944577][ T9652]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  118.946609][ T9652]  __ieee80211_link_release_channel+0x33b/0x4a0
[  118.948640][ T9652]  ieee80211_if_change_type+0x14c/0x990
[  118.950430][ T9652]  ieee80211_change_iface+0xd5/0x510
[  118.952116][ T9652]  cfg80211_change_iface+0x795/0xef0
[  118.953811][ T9652]  nl80211_set_interface+0x773/0xaa0
[  118.955558][ T9652]  ? __pfx_nl80211_set_interface+0x10/0x10
[  118.957812][ T9652]  ? nl80211_pre_doit+0x4fb/0x930
[  118.959495][ T9652]  genl_family_rcv_msg_doit+0x215/0x300
[  118.961348][ T9652]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  118.963359][ T9652]  ? bpf_lsm_capable+0x9/0x20
[  118.964913][ T9652]  ? security_capable+0x7e/0x2e0
[  118.966588][ T9652]  genl_rcv_msg+0x60e/0x790
[  118.968101][ T9652]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.969779][ T9652]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  118.971572][ T9652]  ? __pfx_nl80211_set_interface+0x10/0x10
[  118.974103][ T9652]  ? __pfx_nl80211_post_doit+0x10/0x10
[  118.976419][ T9652]  ? __asan_memcpy+0x40/0x70
[  118.978427][ T9652]  ? __pfx_ref_tracker_free+0x10/0x10
[  118.980742][ T9652]  netlink_rcv_skb+0x208/0x470
[  118.982815][ T9652]  ? __lock_acquire+0xab9/0xd20
[  118.984922][ T9652]  ? __pfx_genl_rcv_msg+0x10/0x10
[  118.987027][ T9652]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.989312][ T9652]  ? down_read+0x1ad/0x2e0
[  118.991239][ T9652]  genl_rcv+0x28/0x40
[  118.993015][ T9652]  netlink_unicast+0x82f/0x9e0
[  118.995120][ T9652]  ? __pfx_netlink_unicast+0x10/0x10
[  118.997401][ T9652]  ? netlink_sendmsg+0x642/0xb30
[  118.999570][ T9652]  ? skb_put+0x11b/0x210
[  119.001451][ T9652]  netlink_sendmsg+0x805/0xb30
[  119.003533][ T9652]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.005798][ T9652]  ? aa_sock_msg_perm+0xf1/0x1d0
[  119.007935][ T9652]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  119.010134][ T9652]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.012280][ T9652]  __sock_sendmsg+0x21c/0x270
[  119.014338][ T9652]  __sys_sendto+0x3bd/0x520
[  119.016310][ T9652]  ? __pfx___sys_sendto+0x10/0x10
[  119.018487][ T9652]  ? fput_close_sync+0x119/0x200
[  119.020650][ T9652]  ? __pfx_fput_close_sync+0x10/0x10
[  119.022944][ T9652]  __x64_sys_sendto+0xde/0x100
[  119.025024][ T9652]  do_syscall_64+0xfa/0x3b0
[  119.026893][ T9652]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.029170][ T9652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.031767][ T9652]  ? exc_page_fault+0x9f/0xf0
[  119.033814][ T9652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.036320][ T9652] RIP: 0033:0x7fd307f90a7c
[  119.038008][ T9652] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  119.044208][ T9652] RSP: 002b:00007fd308ec2e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  119.046932][ T9652] RAX: ffffffffffffffda RBX: 00007fd308ec2fa0 RCX: 00007fd307f90a7c
[  119.049532][ T9652] RDX: 0000000000000024 RSI: 00007fd308ec2ff0 RDI: 0000000000000005
[  119.052128][ T9652] RBP: 0000000000000000 R08: 00007fd308ec2e74 R09: 000000000000000c
[  119.055013][ T9652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  119.058249][ T9652] R13: 0000000000000000 R14: 00007fd308ec2ff0 R15: 0000000000000000
[  119.061259][ T9652]  </TASK>
[  119.063072][ T9652] Kernel Offset: disabled
[  119.064520][ T9652] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:00:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00007f61e9fc5fa0 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=000055555b979808 RBP=00007f61e9fc7da0 RSP=00007ffd55ffa330
R8 =0000000000000000 R9 =7fffffffffffffff R10=0000000000000000 R11=0000000000000293
R12=000000000001d1d9 R13=00007f61e9fc6090 R14=ffffffffffffffff R15=00007ffd55ffa440
RIP=00007f61e9c65615 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b979500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001440 CR3=0000000109203000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006464615f6e7261 656c5f6c616e7265
XMM02=0001000a80010060 8002000400000000 XMM03=4001000c80020050 00000074696d696c
XMM04=0100000040040008 0800000000000000 XMM05=0100110000001407 0000000000000040
XMM06=01000c0000000000 0000004002000cba XMM07=0f00004003000809 0000000000000040
XMM08=02000c0180000000 0000004001000c01 XMM09=0000000000000000 00007f61e9e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007920000 RBX=1ffff1100471825a RCX=000000000000009d RDX=ffff8880238c12d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0b88 RSP=ffffc900001e09e0
R8 =ffff8880238c16bf R9 =1ffff110047182d7 R10=dffffc0000000000 R11=ffffed10047182d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff8698bdeb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd308ec46c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb46d970fc8 CR3=000000003e246000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=ffff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
