last executing test programs:

27.372123392s ago: executing program 0 (id=1066):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%pK    \x00'}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={<r4=>r2})
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000480)={0x0, @bcast, @rose={'rose', 0x0}, 0x1, 'syz0\x00', @bcast, 0x9, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @bcast]})
bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008095}, 0x0) (async)
sendto$packet(r2, &(0x7f0000000680)="a1272e38f90e93a1b2d24431ff65d16592f04efc84ac729dd7ca2091386cc1d22f9ba18810f7ad8fa0e0b3ee8efa4adf36942fa7e2ff3835e93413fd3d000160ac61c47f424f76e3b18bb5a67c73c6123284c6ea0b025914a1febf2076365f95f747b381150de8c97d57c52ebfe633cf9706754077d2eb6cf49b6ffc64f6d0020707b3a9405a07b3802abb27d727d5cdf0935498b6dd4379e72aaff5346290fd6d354498cb4e7d13933014a3c734ff72959c3c6c3d9ce6", 0xb7, 0x4000000, &(0x7f00000003c0)={0x11, 0x17, r3, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2963, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r0, 0x0, 0x5}, 0x18) (async)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

27.322944055s ago: executing program 0 (id=1067):
r0 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x303, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c1ff182e8079f39240aaaa613e76c1"}}}}}}}, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="17eceb10131bf0a86cd97bb99eeb78ebb9b064febc046d5d1b956b43fa201cd4a4930b9aa60bcd983dd3a106060838e49144983364a259a6b6f27d7cba0cba00ea008404d9074c55a87afe", 0x4b}, {&(0x7f0000000440)="9e4cb9ea63bda930b0d32cd0b6365c6b9f2847f5fd078fff3f40086f07ab01d9ae0dcf6347358b6e3fe1884b25c8e445de38f08a4b1552678b2ec42f2e4ce0a33059dde2f712f0f636f4adb2", 0x4c}, {&(0x7f00000003c0)="1a1ebd095c", 0x5}], 0x3}, 0x40)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xe0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xd, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x80000000}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc851}, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

26.962995388s ago: executing program 0 (id=1069):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff8b, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000d80)=0x2a82a30f, 0x4)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="f9e49fce76e4a4c1a4438fc29ba1df43504f7a27833cfe03f327e96e0ee192584bab5b6ad93aa7ebdad824a51aba39c141ddfa74cc05afce675e2dcfa37dbb57af1a9cce4a203e2291ec61c926b12c4d86bb3b27e5bf0dd6f702f7637bf8bff3251fdc93d3d3e5ce0521bf190f6586e76330c312399eedfaf0ddaa2fa363eefc2f60d3e6220ff5b4ecf76e0962770999a94f1a3da4103e8ba0a0a7a9df5712", @ANYRES32=0x0, @ANYBLOB="03000003009417ff5ad61f1fc486c8b67257d6ba", @ANYRES8, @ANYRES64, @ANYBLOB="5272f7334a3e1b0d0dc530df49795ba273a290826d9f5de579b434112a0214017c14c82b68830af7ff87c959733cefd5eba3b77ee420218124895f9b", @ANYRES16=0x0, @ANYRES64=r0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008852)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

26.962077796s ago: executing program 0 (id=1070):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="bff229bd7000fedbdf252500000006000400feff00000a0001007770616e3100000005002b00020000005d7e3ee7147c7805"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r5 = socket(0x1, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd651", 0x9}, {&(0x7f0000000100)="b7000000000000000000", 0xa}], 0x2)
connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_START_POLL(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010008010000340200000610000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c9c2102b1267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0xb3e46cb301ad6d38)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYRES8=r7], 0x24}}, 0x0)

26.612147742s ago: executing program 0 (id=1077):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x14)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8005)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0))
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x288, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x1cc, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x543}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x50f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4ac3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xec1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x563}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x56}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x799}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffc00}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x765a2ff4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x90, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x659}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc8bb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000880)=@buf={0x3e, &(0x7f0000000840)="aa8da888eb397d90041570357d0ffd7624147d3383c236ad8db1906895848bae1dd28393fbe5d241453db7ac89d64bb84880b0ce90699a6b9962ba1d7183"})
r3 = socket$inet(0x2, 0x5, 0x7)
ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e24, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0xc, &(0x7f00000008c0)='dummy0\x00', 0xffffffffffffffff, 0xfffffffffffffff7, 0xffc0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r4)
r5 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f00000009c0), 0x800)
sendmsg$tipc(r5, &(0x7f0000000c40)={&(0x7f0000000a00)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="88d78a9e74939b5906cf8befe17a0e2248a428c734c1858d76d703b183a7ff35c2c6ab542b4e6e992e8659608ecaab164a4dcdd411af0be720c85840c9d83cd101c08fdebd907296f18b7b8a77a9b4950fc45390d8329e3519873f08c1502441d25f1ce18117ece32db47bc00d6739c0599e27f6cf37cc37a7f9a25c15", 0x7d}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)="ad7393048cf096a20b1e3969c6d84c0d3f506cf2fa8266fe89ce1639eb74a12a28ae9e6ecb3268050cac1d04f4a2e63062578f4d7aecab8f4378e81536e03d5f75998c1822f6dc05c5816abdcb5901bd18cf006cc76caea445ecd23051019f0d7a2929092772a5711fde1a711f2ffa1054bf86603027c194979b655b6d1b0d28d6735d74af5a689e2cdb3203d3286f9a441bfd5a26b47c928af374bd724291679d2a05221419155e3b4dfc1851d0a3a9f052edcc87a9538be854ec19bca38d184676dbd46f28687ac97126223227590cad5d338d1762c408d90bff8ad645ab02a6697149c2c10f2b423fe02856429499f17f8e10f8aae7ff82", 0xf9, 0x4004000}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r4)
sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x48804)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e00)={'pimreg1\x00', 0x100})
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000e40)={0x400, 0x8, 0x820c, 0x28dd, 0x55be, 0x6, 0x2, 0x3}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r0)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f00)={0x234, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xabde}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x95c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49aa4b95}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x99dd}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6eb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x733}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8bc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x782c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb671}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfbbc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf, @loopback, 0xfff}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @private0, 0x3bbc}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff092e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20400}, 0x44008)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r8)
sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0x84, r11, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), r8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, <r13=>0x0}, &(0x7f0000001440)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001500)={'ip6tnl0\x00', &(0x7f0000001480)={'ip6tnl0\x00', <r14=>0x0, 0x2f, 0x9, 0xff, 0x612c, 0xc, @mcast1, @private0, 0x0, 0x20, 0x8, 0x8}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000001640)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x7c90dc4162797dd8}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xa4, r12, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24048815}, 0x4004081)
accept4(r5, &(0x7f0000001680)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000001700)=0x80, 0x0)

26.502629854s ago: executing program 0 (id=1080):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000100}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @generic={0x0, 0x3, 0x1, 0x9, 0x101}, @printk={@llu}]}, &(0x7f0000000180)='GPL\x00', 0xbe15, 0xb0, &(0x7f0000000680)=""/176, 0x41000, 0x35, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x10, 0x8, 0x3}, 0x10, 0x758e, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], 0x0, 0x10, 0x400}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0xfffffffffffffdb3}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r7, &(0x7f0000000480)="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", 0x1c5, 0x24004001, &(0x7f0000000280)={0xa, 0x0, 0xe6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x85}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000440)={0x800, 0x803, 0x4000, 0xb, 0x1, 0x6, 0xc1, 0x8}, 0xfffffffffffffe09)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

11.491517363s ago: executing program 32 (id=1080):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000100}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @generic={0x0, 0x3, 0x1, 0x9, 0x101}, @printk={@llu}]}, &(0x7f0000000180)='GPL\x00', 0xbe15, 0xb0, &(0x7f0000000680)=""/176, 0x41000, 0x35, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x10, 0x8, 0x3}, 0x10, 0x758e, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], 0x0, 0x10, 0x400}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0xfffffffffffffdb3}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r7, &(0x7f0000000480)="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", 0x1c5, 0x24004001, &(0x7f0000000280)={0xa, 0x0, 0xe6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x85}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000440)={0x800, 0x803, 0x4000, 0xb, 0x1, 0x6, 0xc1, 0x8}, 0xfffffffffffffe09)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

2.341174048s ago: executing program 2 (id=1317):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r3 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCADDRT(r3, 0x890b, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, r4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r2, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESHEX=r5], 0x4)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
accept4$packet(r1, 0x0, &(0x7f0000000240), 0x80800)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="890c0400000000002000128008000100677470001400028005000500010000000800440001000000"], 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040845}, 0x10)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)

2.050792924s ago: executing program 3 (id=1322):
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async)
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x100000000) (async)
sendfile(r1, r0, 0x0, 0x100000000)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf583aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa8696677ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae478468945b423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa10261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d", @ANYBLOB="059d1359cec3c1ce13b937d5241193c9517940878461988fb63b1fc79e8b7eca87bde62d5a4ad1f24f4273d2da542e7cea4c4575d2d9706885393a50d9085b19af0bd4e9c06c25eff2c5dea68318d1484d96fe34bfe545d1d9b5a7a1d3f9321d7698e744cf6c629e4d44c9bd8691ce61efcd9a2e34d3b864f7a7f6fd23d4c1dc3dd42e6d5838f19da7239c7c066817c910259c4201dc588dbff5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x368, 0xa, 0x148, 0x0, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'wlan0\x00', {0xff}}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x3, 0x2, 0x0, 0xb, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1b0000000000000000000000060000000000000008ab2bc235ebcc6b693b2bb7ac51fe845ce3d4fe135fea0f129abbdaf2e9978d6811a52fcc9aa9f761d58012fc97b9f19dcd8ab9630af7fe6f80951c3024d97e6c3bb7589a8485d42932241d3d7dfea02412a4551b29ab90d88e15689ff882b2e55009ad4dab0176a111cab1d5fcf9c47cb9cbf66f098d064d847be64128abfd653f079d8bb7c87a893ea2a5792d1edd345c563548296296e3e0b39e894258cf42ac0403c44c02e19fe6e5532952bfb2e83ec6fdeb49bec546c3a3ba282f9f03", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff000) (async)
sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff000)
socket(0xa, 0x3, 0x3a)
connect$phonet_pipe(r0, 0x0, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

1.820961671s ago: executing program 3 (id=1323):
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r0, 0x0, 0x400000}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000009219000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x31, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4)
recvmmsg(r4, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0)
unshare(0x6a040000)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
poll(&(0x7f0000000080)=[{r7, 0x2b}], 0x1, 0x7572)

1.567368635s ago: executing program 3 (id=1324):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x0)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18002000000000001001f30001", @ANYRESDEC=r2], 0x13}}], 0x1, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000ec00040000000000"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)

1.489169492s ago: executing program 3 (id=1325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x50)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x13, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff0000000010000000798c50e026a5c07a360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000ffbfffff0000f8ffffffb702000008000000b508000000000000850000000661000095000000000000005869ff3ffc986d97"], &(0x7f0000000000)='GPL\x00', 0x8, 0xe0, &(0x7f0000000700)=""/224}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES64=r0, @ANYRESOCT=r4], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x60702, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010400dd5ef92d00000000000000", @ANYRES32=0x0, @ANYBLOB="1b8b020000000000"], 0x20}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840)
write(r6, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
r8 = socket$netlink(0x10, 0x3, 0x0)
getpid()
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_TXQLEN={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}]}, 0x44}}, 0x4000)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100158018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x9c}}, 0x8010)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)

1.430282561s ago: executing program 2 (id=1327):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004) (async)
listen(r0, 0x400004)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x181200, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(r7) (async)
close(r7)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRES16=r8, @ANYBLOB="011536f4f4ab3f6e021f2c35c30000000d0000000000010000000000000001410000001c001700000000000000006574f4366c6613e2c671b2723ce6798b7df699295e3c494a995f8c7fad85bb96d934e4320b1a14483c0c5c36d610faff2c9e559ff7aaf5ab5f0a145c51fe64f83664a903b221359814fb2f94551e5cdd92defc5c3f1b5c2ab32cd1fe7b3b4f2413c8fc4f66bcd85e411e0257da769bd15885ef98f871e041e718c9bef8f693c32038a50da9756d06"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9) (async)
close(r9)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
close(0x3)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000004fc000128bd7000ffdbdf25010000085dcf4f1f82d4a3f62d96d47b03b2b6eddf7a58521324bb1c2bbb18bc3d0d5df939574230a623226de148c9dabd8679dda7888018dc5f0c6cf6efe9e67879ceb3d1024feb7431b0ac08e5d1176f8a4998502cb858a1c58c120eeb2d359ea4f7f5d22308123056d924c51a2d"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)

1.120726875s ago: executing program 3 (id=1329):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000001a006d0000002a3fcb5ad3650e373acf5cab6ca08256c3c03b61e8629dd3c84735af7ee684953e13469391f77edb14945dcd96df6204ba97d51dbf3969a5a0bd0de40d5eaee6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
unshare(0x600)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x793}], 0x1}}], 0x1, 0xd2eec573eac1f7c5)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x41, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}})
connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
pipe(&(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f100"], 0x0)
close(r5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x20b}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
splice(r4, 0x0, r7, 0x0, 0x10d00, 0xf)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102)

1.117189391s ago: executing program 2 (id=1330):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00f600050000146500000002006f27651006e8abb492bd40ce0f5d7e7a6e818eda00659e6ce9ec86c3ce85078d48c7b195138769f93432d705360c3ed31b76083a6a76f742b5591e07e9005737326c65719b2e652d000000d23b17a5f3e5f67d76e86526842b0797a5386965317bcd71ccad4a96a5613db1c5e66e0a2f63b4a01d1cba52f4716498c552375e83c46a786ef9fd07013d0508f226398d73bf4a90c151bd5513640567e67452894036c53b616030464570f874dc776c3e6900effef5902277d8fcfb303bd9f2327d507e27e0110ed18389ed4710b9ea90009eea5c02a4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
unshare(0x64000600)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r7}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
openat$cgroup_ro(r3, &(0x7f0000000400)='cgroup.freeze\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x2f, 0x0, @multicast2, @local, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@local}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x44a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000000)

1.116379176s ago: executing program 1 (id=1331):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x400, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x80, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x8, 0x53, 0x0, 0xd56, 0x6, 0x4}}, {0xc, 0x2, [0x6, 0xffff, 0x8, 0xfffa]}}, {{0x1c, 0x1, {0x4, 0xc, 0x3, 0x80, 0x2, 0x7, 0x8, 0x7}}, {0x12, 0x2, [0xfffb, 0x7, 0x5ac, 0x5, 0xb2, 0x3, 0x2]}}]}]}, 0x80}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.050784595s ago: executing program 1 (id=1332):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) (async)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

990.723636ms ago: executing program 1 (id=1333):
unshare(0x6a040000)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000000c0)={0x0, 0x23}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='westwood\x00', 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x80)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, 0x0)
r4 = accept4$ax25(r2, 0x0, 0x0, 0x800)
r5 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0)
ioctl$SIOCAX25DELUID(r2, 0x89e2, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040084)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
connect$netlink(r3, &(0x7f0000000080), 0xc)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@fallback=r1, 0xffffffffffffffff, 0x36, 0x4008, 0x0, @void, @value=r6}, 0x20)
sendto$inet6(r1, &(0x7f0000000500)="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", 0xfc, 0x24008844, &(0x7f0000000000)={0xa, 0x4e24, 0x80397, @rand_addr=' \x01\x00', 0x101}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x5, 0x90, 0x3}, {0x9, 0xd, 0xfe, 0x7}]}, 0x10)
ppoll(&(0x7f0000000400)=[{r5, 0x10}], 0x1, &(0x7f0000000440), &(0x7f0000000480)={[0x10001]}, 0x8)
socket$alg(0x26, 0x5, 0x0)
connect$qrtr(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x2, 0x7fff}, 0xc)
shutdown(r1, 0x1)

729.655109ms ago: executing program 1 (id=1334):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0)
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x4, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x802a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3e}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4040)
r4 = socket$kcm(0x21, 0x2, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000000040))
write$6lowpan_enable(r1, &(0x7f00000001c0)='0', 0x1)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000100)={0x2b, 0xa, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x4d}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x8001}, @calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0x401}}]}, 0x60)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

677.462516ms ago: executing program 1 (id=1335):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000255e4d097f2b0c61a4e6e7bff45c53b36d85af5964118ff7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x6, <r2=>0x0}, 0x8) (rerun: 64)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r2, 0x4) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) (rerun: 64)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r5}, 0x18) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r5, <r10=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1a, 0x5, &(0x7f0000000700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000740)='syzkaller\x00', 0x10000, 0xab, &(0x7f0000000780)=""/171, 0x40f00, 0x11, '\x00', r8, @tracing=0x17, r3, 0x8, &(0x7f0000000840)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000009c0)=[r9, r1, r10, r1, r5, r5], &(0x7f0000000a00)=[{0x2, 0x4, 0x8, 0x4}, {0x4, 0x2, 0x3}, {0x4, 0x5, 0x4, 0x9}, {0x1, 0x1, 0xe, 0xb}, {0x4, 0x2}, {0x2, 0x4, 0xa, 0x4}, {0x5, 0x5, 0xa, 0xa}], 0x10, 0x6}, 0x94) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x20, r13, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x20000000) (async)
r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r12, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x44, r14, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
sendmsg$NLBL_CALIPSO_C_LISTALL(r12, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r14, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0xc0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) (async)
r15 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r15, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) (async)
shutdown(r15, 0x1) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x2f, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0)

672.784015ms ago: executing program 1 (id=1336):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff9}, 0x50)
getsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xc0}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x792, 0xff, 0x808, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0xa}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r4}, 0x38)
sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r2}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK    \x00'}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000ddffffb6080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008420000b7040000000000008500000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {}, {}, {0x10}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10, 0x0, 0x8000000000000}, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

252.528992ms ago: executing program 3 (id=1337):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1900ed975cc5a3d64a8910466c0b04", @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="0a001a0008021100000100000a001a0008021100000100000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x2c008890)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async)
setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0x1, 0x4) (async)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

250.169417ms ago: executing program 2 (id=1338):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x10, 0x2, 0x9}}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) (async)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) (async)
close(0x4) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-7G'], 0x9) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r5 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) (async)
r6 = socket(0x25, 0x5, 0x0)
connect$bt_l2cap(r6, 0x0, 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x38, 0x1a, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x14, 0x0, 0x0, 0x1, 0xfe, 0x4, 0xa00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_UID={0x8, 0x19, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e)

90.932506ms ago: executing program 2 (id=1339):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1805}, 0x20000080) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x800, 0x5, 0x0, 0xfffffffffffffff9, 0x100000}, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
close(0x4) (async)
sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r3, 0x0, 0x0) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x0)
close(r5) (async)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff}, 0x6)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff01, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095", @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)

0s ago: executing program 2 (id=1340):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xc29600}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x4050)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e21000014000200626174616476300000000200000000000800010002000000080003"], 0x5c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
pipe(&(0x7f0000000200))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xfffffffffffffebf, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socket$netlink(0x10, 0x3, 0x4)

kernel console output (not intermixed with test programs):

c1: entered promiscuous mode
[   68.480340][ T6017] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   68.608657][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.611529][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.669098][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.676932][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.767203][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.770245][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.773856][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.835496][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.989319][ T6051] wg2: entered promiscuous mode
[   68.993449][ T6051] wg2: entered allmulticast mode
[   69.053642][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.059372][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.143103][ T6061] netlink: 'syz.1.33': attribute type 1 has an invalid length.
[   69.305003][ T6077] netlink: 'syz.2.36': attribute type 10 has an invalid length.
[   70.036329][   T54] Bluetooth: hci0: command tx timeout
[   70.114900][   T54] Bluetooth: hci1: command tx timeout
[   70.133978][   T54] Bluetooth: hci2: command tx timeout
[   70.201296][ T6084] geneve2: entered promiscuous mode
[   70.238820][ T6091] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   70.263482][ T6091] bond1: (slave geneve2): making interface the new active one
[   70.279198][ T6091] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   70.281878][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   70.286095][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   70.289368][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   70.298728][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   70.350560][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.368659][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.380291][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.485257][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.43'.
[   71.079377][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.081446][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.307814][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.311102][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.409542][ T6131] netlink: 'syz.1.49': attribute type 29 has an invalid length.
[   71.448550][ T6137] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   71.644041][ T6146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'.
[   71.653993][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.659498][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.670490][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.679042][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.729180][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'.
[   71.748951][ T6150] netlink: 156 bytes leftover after parsing attributes in process `syz.1.53'.
[   71.757337][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   71.775795][ T6151] netlink: 'syz.2.52': attribute type 1 has an invalid length.
[   71.922736][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'.
[   71.934040][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.939026][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.939934][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'.
[   71.942788][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.942826][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.987948][ T6162] geneve3: entered promiscuous mode
[   71.990709][   T12] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[   71.994211][   T12] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[   71.998038][   T12] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[   72.002033][   T12] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[   72.058281][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.061315][ T6164] bridge_slave_1: left allmulticast mode
[   72.063185][ T6164] bridge_slave_1: left promiscuous mode
[   72.065275][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.070829][ T6164] bridge_slave_0: left allmulticast mode
[   72.072774][ T6164] bridge_slave_0: left promiscuous mode
[   72.076238][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.105640][   T54] Bluetooth: hci0: command tx timeout
[   72.133468][ T6167] netlink: 76 bytes leftover after parsing attributes in process `syz.0.59'.
[   72.184849][   T54] Bluetooth: hci2: command tx timeout
[   72.186866][   T54] Bluetooth: hci1: command tx timeout
[   72.385478][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   72.494145][ T6186] syzkaller1: entered promiscuous mode
[   72.496123][ T6186] syzkaller1: entered allmulticast mode
[   72.672337][ T6190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.65'.
[   73.693570][    T9] IPVS: starting estimator thread 0...
[   73.786061][ T6217] IPVS: using max 63 ests per chain, 151200 per kthread
[   73.808589][ T5316] IPVS: starting estimator thread 0...
[   73.894484][ T6226] IPVS: using max 63 ests per chain, 151200 per kthread
[   74.781345][ T6247] netlink: 'syz.2.78': attribute type 1 has an invalid length.
[   75.432791][ T6282] bridge_slave_0: invalid flags given to default FDB implementation
[   75.703262][ T6308] netlink: 'syz.2.96': attribute type 22 has an invalid length.
[   75.899863][ T6316] syzkaller1: entered promiscuous mode
[   75.901781][ T6316] syzkaller1: entered allmulticast mode
[   76.164256][ T6346] netlink: 'syz.2.105': attribute type 4 has an invalid length.
[   76.600451][ T6363] tipc: Can't bind to reserved service type 1
[   76.608423][ T6363] netlink: 'syz.0.109': attribute type 39 has an invalid length.
[   76.659912][ T6372] Bluetooth: MGMT ver 1.23
[   76.663017][ T6364] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   76.674715][ T6364] __nla_validate_parse: 14 callbacks suppressed
[   76.674728][ T6364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.109'.
[   76.679928][ T6364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.109'.
[   76.705791][ T6364] netlink: 'syz.0.109': attribute type 5 has an invalid length.
[   76.708372][ T6364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.109'.
[   76.845658][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'.
[   76.848505][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'.
[   77.062482][ T6398] netlink: 'syz.2.117': attribute type 4 has an invalid length.
[   77.072303][ T6398] netlink: 'syz.2.117': attribute type 4 has an invalid length.
[   77.454430][ T6409] netlink: 'syz.2.121': attribute type 7 has an invalid length.
[   77.462331][ T6409] netlink: 'syz.2.121': attribute type 3 has an invalid length.
[   77.467286][ T6409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.121'.
[   77.483718][ T6409] geneve2: entered promiscuous mode
[   77.486572][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.489846][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.492852][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.505714][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.561135][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'.
[   78.351037][ T5745] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.358621][ T5745] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.362199][ T5745] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.366577][ T5745] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.370189][ T5745] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.373726][ T5745] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.379156][ T5745] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.389929][ T5745] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.482706][ T6431] tipc: Started in network mode
[   78.486698][ T6431] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   78.489956][ T6431] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   78.501528][ T5745] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.513685][ T5745] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.524468][ T5745] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.534837][ T5745] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.645793][ T6437] tipc: Started in network mode
[   78.647492][ T6437] tipc: Node identity be855a4025ee, cluster identity 4711
[   78.650085][ T6437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.653058][ T6437] syzkaller0: entered promiscuous mode
[   78.671043][ T6437] syzkaller0: entered allmulticast mode
[   78.714971][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[   78.733184][ T6436] tipc: Resetting bearer <eth:syzkaller0>
[   78.747808][ T6436] tipc: Disabling bearer <eth:syzkaller0>
[   78.906017][ T6454] netlink: 256 bytes leftover after parsing attributes in process `syz.2.135'.
[   78.992887][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'.
[   79.797256][ T6499] netlink: 'syz.2.145': attribute type 2 has an invalid length.
[   79.814188][ T6499] : entered promiscuous mode
[   79.817796][ T6494] netlink: 60 bytes leftover after parsing attributes in process `syz.1.144'.
[   80.121286][ T6535] geneve3: entered promiscuous mode
[   80.165637][ T6535] geneve3: entered promiscuous mode
[   80.178592][ T6538] nicvf0: entered promiscuous mode
[   80.181244][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   80.187611][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   80.190833][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   80.201902][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   80.299769][ T6542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.303744][ T5745] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[   80.334544][ T6535] geneve3: entered promiscuous mode
[   80.693663][ T6553] netlink: 'syz.1.153': attribute type 11 has an invalid length.
[   80.731045][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.772224][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.833041][ T6550] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   80.979552][ T6535] geneve3: entered promiscuous mode
[   80.999154][ T6546] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.016618][ T5882] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.019801][ T5882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.022837][ T5882] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   81.041792][ T5882] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0
[   81.050824][ T5882] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.072678][ T5882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.085257][ T5882] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   81.090000][ T5882] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0
[   81.124522][ T5882] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.128099][ T5882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.131638][ T5882] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   81.144791][ T5882] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0
[   81.148676][ T5882] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.157717][ T5882] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.161597][ T5882] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   81.165204][ T5882] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0
[   81.169035][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   81.173743][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   81.177943][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   81.181478][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   81.193905][ T6557] wg2: entered allmulticast mode
[   81.324013][ T6567] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.499395][ T6588] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   81.500307][ T6586] IPVS: stopping backup sync thread 6588 ...
[   81.507726][ T6589] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   81.511092][ T6589] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   81.602592][ T6599] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   81.602838][ T6598] IPVS: stopping backup sync thread 6599 ...
[   82.020131][ T6619] __nla_validate_parse: 6 callbacks suppressed
[   82.020148][ T6619] netlink: 84 bytes leftover after parsing attributes in process `syz.1.172'.
[   82.327345][ T6625] tipc: Started in network mode
[   82.329254][ T6625] tipc: Node identity 7f000001, cluster identity 4711
[   82.332984][ T6625] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.435324][  T971] tipc: Node number set to 4278255617
[   82.517623][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.176'.
[   82.757819][ T6633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.177'.
[   82.827243][ T6641] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   82.837437][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[   82.892772][ T6647] tipc: Enabled bearer <udp:s>, priority 10
[   83.138986][ T6672] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   83.143009][ T6672] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   83.145887][ T6672] netlink: 120 bytes leftover after parsing attributes in process `syz.1.187'.
[   83.149648][ T6672] netlink: 'syz.1.187': attribute type 27 has an invalid length.
[   83.159856][ T6672] geneve3: left promiscuous mode
[   83.237890][ T6688] netlink: 'syz.0.189': attribute type 39 has an invalid length.
[   83.349903][ T6694] IPVS: ip_vs_add_dest(): server weight less than zero
[   83.374539][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   83.444463][ T5316] tipc: Node number set to 2130706433
[   83.449031][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'.
[   83.457666][ T6702] wg2: left allmulticast mode
[   83.478194][ T6702] nicvf0: left promiscuous mode
[   83.486346][ T5882] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.490598][ T5882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[   83.493621][ T5882] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.496839][ T5882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[   83.500424][ T5882] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.504950][ T5882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[   83.508215][ T5882] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.511550][ T5882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[   83.549987][ T6704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.559022][ T6704] syzkaller0: entered promiscuous mode
[   83.561219][ T6704] syzkaller0: entered allmulticast mode
[   83.595806][ T6704] tipc: Resetting bearer <eth:syzkaller0>
[   83.611728][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'.
[   83.616831][ T6703] tipc: Resetting bearer <eth:syzkaller0>
[   83.628019][ T6703] tipc: Disabling bearer <eth:syzkaller0>
[   83.960450][ T6723] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.200'.
[   84.424499][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   85.464436][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   85.869252][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[   86.197895][ T6824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.217'.
[   86.207169][ T6824] sctp: [Deprecated]: syz.1.217 (pid 6824) Use of int in max_burst socket option.
[   86.207169][ T6824] Use struct sctp_assoc_value instead
[   86.430051][   T47] cfg80211: failed to load regulatory.db
[   86.504444][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   86.597117][ T6834] tipc: New replicast peer: 0.0.0.0
[   86.599519][ T6834] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.614749][ T6834] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   86.899475][ T6860] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   86.902145][ T6860] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   86.908924][ T6862] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   86.912219][ T6860] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   86.969146][ T6862] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.049225][ T6867] bond2: (slave geneve4): making interface the new active one
[   87.053462][ T6867] bond2: (slave geneve4): Enslaving as an active interface with an up link
[   87.057749][ T5745] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.061200][ T5745] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.077042][ T5745] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.080353][ T5745] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.121011][ T6862] netlink: 'syz.1.227': attribute type 23 has an invalid length.
[   87.136632][ T6872] __nla_validate_parse: 4 callbacks suppressed
[   87.136645][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[   87.177677][ T6872] geneve2: entered promiscuous mode
[   87.179707][ T6872] geneve2: entered allmulticast mode
[   87.195560][ T5745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[   87.198349][ T5745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[   87.201072][ T5745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[   87.217312][ T5745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[   87.267443][ T6879] netlink: 236 bytes leftover after parsing attributes in process `syz.0.233'.
[   87.270634][ T6879] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   87.307020][ T6876] netlink: 'syz.1.232': attribute type 5 has an invalid length.
[   87.317577][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   87.380932][ T5745] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[   87.384074][ T5745] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[   87.435285][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'.
[   87.476941][ T5745] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[   87.480220][ T6885] syzkaller1: entered promiscuous mode
[   87.482816][ T6885] syzkaller1: entered allmulticast mode
[   87.544570][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   87.564278][ T5745] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[   87.568077][ T6886] netlink: 'syz.1.234': attribute type 1 has an invalid length.
[   87.619654][ T6886] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.635499][ T6883] tap0: tun_chr_ioctl cmd 1074812118
[   87.715323][ T5316] tipc: Node number set to 2607503936
[   87.913341][ T6904] netlink: 96 bytes leftover after parsing attributes in process `syz.1.238'.
[   88.191214][ T6912] netlink: 'syz.2.240': attribute type 21 has an invalid length.
[   88.196950][ T6912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.240'.
[   88.226380][ T6914] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   88.259184][ T6914] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.453646][ T6920] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   88.508596][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'.
[   88.582218][ T6924] netlink: 'syz.2.243': attribute type 1 has an invalid length.
[   88.584956][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   88.635843][ T6924] bond3: entered promiscuous mode
[   88.638035][ T6924] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.655862][ T6928] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.658944][ T6928] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   88.663164][ T6928] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   88.674116][ T6928] bond3: (slave wireguard0): making interface the new active one
[   88.677409][ T6928] wireguard0: entered promiscuous mode
[   88.686188][ T6928] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   88.703849][ T6924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.706577][ T6924] IPv6: NLM_F_CREATE should be set when creating new route
[   88.709423][ T6924] IPv6: NLM_F_CREATE should be set when creating new route
[   88.713027][ T6924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.723086][ T6924] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[   88.729905][ T6924] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[   88.906231][ T6942] netlink: 'syz.1.247': attribute type 1 has an invalid length.
[   88.945554][ T6942] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.073800][ T6950] bond0: entered promiscuous mode
[   89.076052][ T6950] bond_slave_0: entered promiscuous mode
[   89.078162][ T6950] bond_slave_1: entered promiscuous mode
[   89.081257][ T6950] batadv0: entered promiscuous mode
[   89.085627][ T6950] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   89.089493][ T6950] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   89.093149][ T6950] 8021q: adding VLAN 0 to HW filter on device hsr1
[   89.317907][ T6967] netlink: 'syz.1.253': attribute type 1 has an invalid length.
[   89.321776][ T6967] netlink: 244 bytes leftover after parsing attributes in process `syz.1.253'.
[   89.348519][ T5316] IPVS: starting estimator thread 0...
[   89.434450][ T6972] IPVS: using max 63 ests per chain, 151200 per kthread
[   89.624390][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   89.803687][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'.
[   90.035449][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   90.252448][ T7006] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   90.407678][ T7011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.664560][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   91.573989][ T7033] batman_adv: batadv0: Adding interface: macsec0
[   91.577047][ T7033] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.588148][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.592492][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.597222][ T7033] batman_adv: batadv0: Interface activated: macsec0
[   91.625136][ T7033] geneve5: entered promiscuous mode
[   91.704692][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   92.505713][   T27] wlan0: Trigger new scan to find an IBSS to join
[   92.521358][ T7045] __nla_validate_parse: 5 callbacks suppressed
[   92.521373][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.277'.
[   92.657876][ T7065] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[   92.744479][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   92.836601][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'.
[   92.869083][ T7084] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[   92.876835][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'.
[   92.891105][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'.
[   92.893860][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'.
[   92.900382][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'.
[   92.907196][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'.
[   92.914005][ T7087] netlink: 68 bytes leftover after parsing attributes in process `syz.0.285'.
[   92.943473][ T7087] netlink: 'syz.0.285': attribute type 4 has an invalid length.
[   92.945851][ T7087] netlink: 244 bytes leftover after parsing attributes in process `syz.0.285'.
[   93.001530][ T7099] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[   93.038162][ T7099] bond5: entered promiscuous mode
[   93.040622][ T7099] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.060425][ T7101] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.062887][ T7101] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[   93.066640][ T7101] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   93.077093][ T7101] bond5: (slave wireguard0): making interface the new active one
[   93.079478][ T7101] wireguard0: entered promiscuous mode
[   93.082580][ T7101] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[   93.087918][ T7099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.090212][ T7099] IPv6: NLM_F_CREATE should be set when creating new route
[   93.092918][ T7099] IPv6: NLM_F_CREATE should be set when creating new route
[   93.104703][ T7099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.111484][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'.
[   93.115453][ T7107] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.314416][ T7136] geneve3: entered promiscuous mode
[   93.316345][ T7136] geneve3: entered allmulticast mode
[   93.319824][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.322500][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.325776][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.329149][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.453565][ T7145] netlink: 'syz.1.295': attribute type 21 has an invalid length.
[   93.794698][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   94.148083][ T7171] netlink: 'syz.2.306': attribute type 10 has an invalid length.
[   94.153113][ T7171] batman_adv: batadv0: Adding interface: virt_wifi0
[   94.156088][ T7171] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.166847][ T7171] batman_adv: batadv0: Interface activated: virt_wifi0
[   94.278155][ T7174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.281553][ T7174] syzkaller0: entered promiscuous mode
[   94.287009][ T7174] syzkaller0: entered allmulticast mode
[   94.301920][ T7174] tipc: Resetting bearer <eth:syzkaller0>
[   94.331194][ T7178] netlink: 'syz.2.308': attribute type 30 has an invalid length.
[   94.331460][ T7174] batman_adv: batadv0: Interface deactivated: macsec0
[   94.353339][ T7174] batman_adv: batadv0: Removing interface: macsec0
[   94.361077][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.437529][ T7173] tipc: Resetting bearer <eth:syzkaller0>
[   94.460394][ T7173] tipc: Disabling bearer <eth:syzkaller0>
[   94.675543][ T7198] lo: entered allmulticast mode
[   94.712483][ T7198] lo: left allmulticast mode
[   94.737236][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.766393][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.777840][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.785117][ T7208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   94.792415][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.825684][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   95.036732][ T7222] sctp: [Deprecated]: syz.2.320 (pid 7222) Use of int in max_burst socket option.
[   95.036732][ T7222] Use struct sctp_assoc_value instead
[   95.551525][  T157] wlan0: Trigger new scan to find an IBSS to join
[   95.874504][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   95.997176][ T7239] netlink: 'syz.2.325': attribute type 39 has an invalid length.
[   96.064827][ T7240] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   96.068377][ T7240] netlink: 'syz.2.325': attribute type 5 has an invalid length.
[   96.078002][ T7240] vlan2: entered allmulticast mode
[   96.726924][ T7276] bridge_slave_1: left allmulticast mode
[   96.729317][ T7276] bridge_slave_1: left promiscuous mode
[   96.731624][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.829665][ T7276] bridge_slave_0: left allmulticast mode
[   96.832119][ T7276] bridge_slave_0: left promiscuous mode
[   96.834989][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.904598][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   96.920827][ T7275] syzkaller1: entered promiscuous mode
[   96.923233][ T7275] syzkaller1: entered allmulticast mode
[   97.024760][ T7280] IPVS: Scheduler module ip_vs_sip not found
[   97.229906][ T7298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.465198][ T7304] Illegal XDP return value 4294967274 on prog  (id 213) dev N/A, expect packet loss!
[   97.558560][ T7310] __nla_validate_parse: 21 callbacks suppressed
[   97.558576][ T7310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.343'.
[   97.565886][ T7310] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   97.777602][ T7312] netlink: 'syz.1.344': attribute type 39 has an invalid length.
[   97.944605][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   97.974064][ T7324] netlink: 'syz.0.347': attribute type 2 has an invalid length.
[   98.007474][ T7327] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   98.019342][ T7327] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[   98.021908][ T7327] netlink: 17 bytes leftover after parsing attributes in process `syz.1.348'.
[   98.033237][ T7327] pim6reg1: entered promiscuous mode
[   98.035220][ T7327] pim6reg1: entered allmulticast mode
[   98.275477][ T7330] macsec1: entered promiscuous mode
[   98.277563][ T7330] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   98.282648][ T7330] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   98.507486][   T40] wlan0: Trigger new scan to find an IBSS to join
[   98.673363][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'.
[   98.677911][ T7354] netlink: 'syz.2.355': attribute type 5 has an invalid length.
[   98.682604][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.355'.
[   98.693237][ T7354] geneve4: entered promiscuous mode
[   98.695764][ T7354] geneve4: entered allmulticast mode
[   98.698979][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   98.702038][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   98.705960][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   98.709082][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   98.828343][ T7360] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.836955][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'.
[   98.851437][ T7360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.357'.
[   98.896875][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'.
[   98.984598][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   99.435853][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.441966][ T7396] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   99.485128][ T7396] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   99.541219][ T7396] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   99.898396][ T7408] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  100.024523][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  101.064697][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  102.104455][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  103.144459][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  104.184505][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  105.234547][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  106.264546][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  107.314529][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  108.344693][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  109.384484][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  110.424448][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  111.464485][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  112.514458][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  113.544541][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  114.584542][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  115.624494][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  116.664474][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  117.704588][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  118.744592][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  119.784513][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  120.824451][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  121.864521][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  122.904492][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  123.944528][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  124.994499][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  126.024503][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  127.064461][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  128.104495][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  128.615297][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[  128.618227][ T7437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.369'.
[  128.636098][ T7436] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.640225][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.370'.
[  128.657958][ T7438] geneve4: entered promiscuous mode
[  128.661477][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  128.664187][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  128.671337][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  128.674272][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  128.708199][  T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.711512][  T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.724403][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'.
[  128.835091][ T7455] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  128.896964][ T7457] netlink: 'syz.0.376': attribute type 12 has an invalid length.
[  129.144720][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  129.627160][ T7466] bond0: default FDB implementation only supports local addresses
[  129.646344][ T7468] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[  129.671198][ T7468] 8021q: adding VLAN 0 to HW filter on device bond5
[  129.852657][ T7487] unknown channel width for channel at 909000KHz?
[  129.857523][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'.
[  129.994845][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.389'.
[  130.020723][ T7505] geneve2: left promiscuous mode
[  130.022726][ T7505] geneve2: left allmulticast mode
[  130.031347][ T7505] geneve3: left promiscuous mode
[  130.033348][ T7505] geneve3: left allmulticast mode
[  130.043762][ T7505] geneve4: left promiscuous mode
[  130.047221][ T5882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  130.050313][ T5882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  130.056495][ T5882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  130.059319][ T5882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  130.178877][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[  130.184503][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  130.237130][ T7531] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[  130.267130][ T7531] 8021q: adding VLAN 0 to HW filter on device bond6
[  130.312180][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'.
[  130.317693][ T7536] hsr_slave_0: left promiscuous mode
[  130.320531][ T7536] hsr_slave_1: left promiscuous mode
[  130.482290][ T7549] netlink: 'syz.1.397': attribute type 11 has an invalid length.
[  130.812666][ T7572] netlink: 192 bytes leftover after parsing attributes in process `syz.1.401'.
[  130.816603][ T7574] netlink: 192 bytes leftover after parsing attributes in process `syz.1.401'.
[  130.988711][ T7583] bond5: left promiscuous mode
[  130.993823][ T7583] wireguard0: left promiscuous mode
[  131.008658][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.011686][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.017667][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.020923][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.224412][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  131.255370][ T7601] nicvf0: entered promiscuous mode
[  131.261478][   T13] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20001 - 0
[  131.265172][   T13] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20001 - 0
[  131.268690][   T13] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20001 - 0
[  131.282588][   T13] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20001 - 0
[  132.264654][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  132.270059][ T7637] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[  132.314595][ T7637] team0: Port device dummy0 added
[  132.517193][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.519326][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.304555][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  133.351126][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.355762][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.359367][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.364173][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.488776][ T7702] batman_adv: batadv0: Adding interface: dummy0
[  133.491240][ T7702] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  133.504140][ T7702] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  133.556320][ T7710] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  134.344581][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  134.608600][ T7731] __nla_validate_parse: 9 callbacks suppressed
[  134.608610][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'.
[  135.384400][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  136.424456][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  137.464374][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  137.487692][ T7735] netlink: 26176 bytes leftover after parsing attributes in process `syz.0.443'.
[  137.539621][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'.
[  137.544640][ T7741] netlink: 'syz.2.445': attribute type 30 has an invalid length.
[  137.561312][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.565221][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'.
[  137.568942][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.573680][ T7741] netlink: 'syz.2.445': attribute type 30 has an invalid length.
[  137.578004][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.592698][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.662902][ T7746] syzkaller1: entered promiscuous mode
[  137.666759][ T7746] syzkaller1: entered allmulticast mode
[  137.671744][ T7746] netlink: 244 bytes leftover after parsing attributes in process `syz.2.447'.
[  137.931900][ T7764] netlink: 348 bytes leftover after parsing attributes in process `syz.2.450'.
[  137.985196][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.2.451'.
[  138.260774][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'.
[  138.264246][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'.
[  138.504613][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  138.607304][ T7817] ieee802154 phy0 wpan0: encryption failed: -22
[  138.623075][ T7810] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[  138.646062][ T7810] syz_tun: entered allmulticast mode
[  138.653881][ T5882] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.655177][ T7810] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  138.660496][ T5882] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.664099][ T5882] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.666195][ T7810] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  138.684498][ T5882] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.699981][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[  138.750271][ T7806] syz_tun: left allmulticast mode
[  139.333318][ T7859] netlink: 'syz.1.467': attribute type 1 has an invalid length.
[  139.356835][ T7859] 8021q: adding VLAN 0 to HW filter on device bond8
[  139.544537][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  139.803314][ T7882] gtp0: entered promiscuous mode
[  139.807684][ T7882] __nla_validate_parse: 4 callbacks suppressed
[  139.807695][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[  139.944047][ T7890] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  140.273859][ T7907] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925)
[  140.278258][ T7907] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  140.286697][ T7909] netlink: 'syz.2.479': attribute type 4 has an invalid length.
[  140.404266][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.407573][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.416970][ T7911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.584623][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  140.706107][ T7936] ip6gre1: entered allmulticast mode
[  140.876101][ T7945] syzkaller1: entered promiscuous mode
[  140.878228][ T7945] syzkaller1: entered allmulticast mode
[  140.947012][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.490'.
[  141.051726][ T7953] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  141.129856][ T7958] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  141.162806][ T5881] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.166121][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.169138][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  141.172152][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20001 - 0
[  141.184586][ T5881] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.188436][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.192238][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  141.198078][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20001 - 0
[  141.203513][ T5881] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.211896][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.219206][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  141.225157][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20001 - 0
[  141.231420][ T5881] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.235864][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  141.239685][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  141.243234][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20001 - 0
[  141.624445][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  141.666248][ T7970] netlink: 'syz.2.495': attribute type 6 has an invalid length.
[  141.953541][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.956441][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.036509][ T7983] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  142.042317][ T7983] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  142.273177][ T7997] netlink: 'syz.1.503': attribute type 13 has an invalid length.
[  142.283894][ T7997] netlink: 'syz.1.503': attribute type 17 has an invalid length.
[  142.317315][ T7998] netlink: 'syz.2.502': attribute type 39 has an invalid length.
[  142.377821][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.382125][ T7997] 8021q: adding VLAN 0 to HW filter on device team0
[  142.391803][ T7997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.472601][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[  142.525442][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.652435][ T8019] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  142.664538][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  142.683557][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[  142.701624][ T8021] validate_nla: 1 callbacks suppressed
[  142.701687][ T8021] netlink: 'syz.2.509': attribute type 1 has an invalid length.
[  142.715145][ T8022] netlink: 'syz.2.509': attribute type 13 has an invalid length.
[  142.719597][ T8022] gretap0: refused to change device tx_queue_len
[  142.722388][ T8022] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  142.953551][ T8045] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  142.984861][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  143.194780][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'.
[  143.198276][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'.
[  143.201961][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'.
[  143.207793][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.520'.
[  143.332583][ T8066] netlink: 7 bytes leftover after parsing attributes in process `syz.2.522'.
[  143.530290][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'.
[  143.704476][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  143.744994][ T8083] netlink: 'syz.2.526': attribute type 10 has an invalid length.
[  143.751413][ T8083] batman_adv: batadv0: Interface activated: virt_wifi0
[  143.859860][ T8092] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0
[  144.191724][ T8118] netlink: 'syz.2.535': attribute type 58 has an invalid length.
[  144.282597][ T8127] netlink: 'syz.2.539': attribute type 13 has an invalid length.
[  144.291249][ T8127] netlink: 'syz.2.539': attribute type 13 has an invalid length.
[  144.473265][ T8139] netlink: 'syz.2.542': attribute type 1 has an invalid length.
[  144.496708][ T8139] bond7: entered promiscuous mode
[  144.498758][ T8139] 8021q: adding VLAN 0 to HW filter on device bond7
[  144.522819][ T8139] 8021q: adding VLAN 0 to HW filter on device bond7
[  144.525391][ T8139] bond7: (slave wireguard2): The slave device specified does not support setting the MAC address
[  144.528822][ T8139] bond7: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  144.536451][ T8139] bond7: (slave wireguard2): making interface the new active one
[  144.539771][ T8139] wireguard2: entered promiscuous mode
[  144.543402][ T8139] bond7: (slave wireguard2): Enslaving as an active interface with an up link
[  144.553607][ T8139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.556556][ T8139] IPv6: NLM_F_CREATE should be set when creating new route
[  144.559234][ T8139] IPv6: NLM_F_CREATE should be set when creating new route
[  144.562501][ T8139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.615402][ T8139] bond7: (slave wireguard3): The slave device specified does not support setting the MAC address
[  144.622277][ T8139] bond7: (slave wireguard3): Enslaving as a backup interface with an up link
[  144.744472][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  144.745758][ T8157] openvswitch: netlink: Flow key attr not present in new flow.
[  144.781910][ T8154] netlink: 'syz.0.546': attribute type 1 has an invalid length.
[  144.783716][ T8163] netlink: 'syz.2.548': attribute type 22 has an invalid length.
[  144.793950][ T8163] netlink: 'syz.2.548': attribute type 22 has an invalid length.
[  144.794969][ T5882] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.800880][ T5882] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.807118][ T5882] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.812999][ T5882] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.866809][ T8168] __nla_validate_parse: 11 callbacks suppressed
[  144.866824][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.549'.
[  145.029537][   T54] Bluetooth: hci2: link tx timeout
[  145.031961][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.036855][   T54] Bluetooth: hci2: link tx timeout
[  145.038997][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.047878][ T5858] Bluetooth: hci2: link tx timeout
[  145.050063][ T5858] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.053121][ T5858] Bluetooth: hci2: link tx timeout
[  145.057613][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.058024][ T8187] IPVS: stopping backup sync thread 6641 ...
[  145.061541][ T5858] Bluetooth: hci2: link tx timeout
[  145.065785][ T5858] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.068963][ T5858] Bluetooth: hci2: link tx timeout
[  145.071047][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.075044][ T5858] Bluetooth: hci2: link tx timeout
[  145.077137][ T5858] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.084886][ T5858] Bluetooth: hci2: link tx timeout
[  145.086952][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.089922][ T5858] Bluetooth: hci2: link tx timeout
[  145.091830][ T5858] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.094888][ T5858] Bluetooth: hci2: link tx timeout
[  145.096876][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.099834][ T8190] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  145.386098][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.388603][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.717606][ T8228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.562'.
[  145.722624][ T8230] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  145.784494][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  145.920762][ T8237] macsec0: entered promiscuous mode
[  145.923888][ T8237] macsec0: entered allmulticast mode
[  145.930488][ T8236] veth1_macvtap: entered allmulticast mode
[  145.932495][ T8236] macsec0: left promiscuous mode
[  145.934174][ T8236] macsec0: left allmulticast mode
[  145.937238][ T8236] veth1_macvtap: left allmulticast mode
[  145.973813][ T8240] 8021q: adding VLAN 0 to HW filter on device bond9
[  145.990747][ T8240] bond9: entered promiscuous mode
[  145.991204][ T8236] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.997385][ T8236] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.030364][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.566'.
[  146.035574][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.566'.
[  146.372960][ T8256] tipc: Started in network mode
[  146.377242][ T8256] tipc: Node identity fe16d2a685a5, cluster identity 4711
[  146.380778][ T8256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.432413][ T8256] syzkaller0: entered promiscuous mode
[  146.434500][ T8256] syzkaller0: entered allmulticast mode
[  146.437196][ T8256] tipc: Resetting bearer <eth:syzkaller0>
[  146.824605][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  146.942109][ T8282] bond10: entered promiscuous mode
[  146.944846][ T8282] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.965200][ T8282] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.971786][ T8282] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address
[  146.976268][ T8282] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  146.986631][ T8282] bond10: (slave wireguard1): making interface the new active one
[  146.989180][ T8282] wireguard1: entered promiscuous mode
[  146.991753][ T8282] bond10: (slave wireguard1): Enslaving as an active interface with an up link
[  147.015826][ T8282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.019030][ T8282] IPv6: NLM_F_CREATE should be set when creating new route
[  147.021462][ T8282] IPv6: NLM_F_CREATE should be set when creating new route
[  147.034773][ T8282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.038524][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  147.043820][ T8255] tipc: Resetting bearer <eth:syzkaller0>
[  147.064760][ T5858] Bluetooth: hci2: command 0x0406 tx timeout
[  147.484422][   T47] tipc: Node number set to 2075382438
[  147.874513][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  148.253038][ T8255] tipc: Disabling bearer <eth:syzkaller0>
[  148.257819][ T8282] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  148.286017][ T8297] netlink: 56 bytes leftover after parsing attributes in process `syz.0.579'.
[  148.375603][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[  148.416282][   T13] tipc: Left network mode
[  148.904503][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  149.154248][ T5858] Bluetooth: hci2: command 0x0406 tx timeout
[  149.262739][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[  149.266919][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[  149.694039][ T8351] validate_nla: 5 callbacks suppressed
[  149.694055][ T8351] netlink: 'syz.0.590': attribute type 1 has an invalid length.
[  149.801341][ T8358] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  149.944397][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  150.067340][ T8360] syzkaller1: entered promiscuous mode
[  150.069603][ T8360] syzkaller1: entered allmulticast mode
[  150.216736][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[  150.245657][ T8372] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  150.310492][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'.
[  150.361400][ T8373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'.
[  150.420471][ T8378] geneve5: entered promiscuous mode
[  150.422156][ T8378] geneve5: entered allmulticast mode
[  150.425765][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  150.450842][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  150.465936][ T5882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  150.468586][ T5882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  150.594123][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  150.599414][ T8395] netlink: 'syz.0.600': attribute type 14 has an invalid length.
[  150.611555][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[  150.624079][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  150.626014][ T8397] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  150.631797][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[  150.634204][ T8395] netlink: 'syz.0.600': attribute type 14 has an invalid length.
[  150.644772][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'.
[  150.705665][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[  150.713797][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'.
[  150.988926][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  151.440050][ T8453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  151.783601][ T8460] netlink: 'syz.0.616': attribute type 12 has an invalid length.
[  151.789891][ T8460] netlink: 'syz.0.616': attribute type 12 has an invalid length.
[  152.034468][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  152.105688][ T8471] 8021q: adding VLAN 0 to HW filter on device bond2
[  152.130254][ T8471] bond2: (slave geneve5): Enslaving as an active interface with an up link
[  152.133679][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.139809][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.142655][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.155147][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.383301][ T8494] ieee802154 phy0 wpan0: encryption failed: -90
[  152.787813][ T8525] netlink: 'syz.0.627': attribute type 10 has an invalid length.
[  152.790857][ T8525] batman_adv: batadv0: Removing interface: dummy0
[  152.799636][ T8525] team0: Port device dummy0 added
[  152.873928][ T8531] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  153.064503][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  153.133202][ T8552] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  153.268235][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.276489][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.279487][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.282468][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.010059][ T8568] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[  154.104498][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  154.461842][ T8610] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  154.492424][ T8610] bond11: entered promiscuous mode
[  154.495806][ T8610] bond11: entered allmulticast mode
[  154.514099][ T8610] bridge0: entered promiscuous mode
[  154.515939][ T8610] bridge0: entered allmulticast mode
[  154.524956][ T8610] bond11: (slave bridge0): making interface the new active one
[  154.527584][ T8610] bond11: (slave bridge0): Enslaving as an active interface with an up link
[  154.621426][ T8625] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[  154.623971][ T8625] netlink: 'syz.0.650': attribute type 11 has an invalid length.
[  154.687088][ T8625] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.703162][ T8625] bond3: entered promiscuous mode
[  154.918412][ T8649] validate_nla: 3 callbacks suppressed
[  154.918425][ T8649] netlink: 'syz.2.658': attribute type 39 has an invalid length.
[  154.931634][ T8649] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  154.936665][ T8651] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  154.942220][ T8649] netlink: 'syz.2.658': attribute type 5 has an invalid length.
[  154.969357][ T8649] vlan2: entered allmulticast mode
[  154.991991][ T8651] 8021q: adding VLAN 0 to HW filter on device bond4
[  155.154457][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  155.322785][ T8675] netlink: 'syz.0.668': attribute type 62 has an invalid length.
[  155.330927][ T8676] __nla_validate_parse: 23 callbacks suppressed
[  155.330987][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.665'.
[  155.338980][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.665'.
[  155.345557][ T8676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.665'.
[  155.379968][ T8678] netlink: 71 bytes leftover after parsing attributes in process `syz.0.669'.
[  155.385396][ T8678] netlink: 'syz.0.669': attribute type 39 has an invalid length.
[  155.454008][ T8683] netlink: 'syz.0.671': attribute type 13 has an invalid length.
[  155.460809][ T8683] netlink: 'syz.0.671': attribute type 17 has an invalid length.
[  155.783411][ T8698] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  156.098532][ T8710] netlink: 'syz.2.678': attribute type 39 has an invalid length.
[  156.102922][ T8710] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.109771][ T8710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.678'.
[  156.113177][ T8710] netlink: 43 bytes leftover after parsing attributes in process `syz.2.678'.
[  156.117018][ T8710] netlink: 'syz.2.678': attribute type 5 has an invalid length.
[  156.120066][ T8710] netlink: 43 bytes leftover after parsing attributes in process `syz.2.678'.
[  156.135405][ T8710] vlan2: entered allmulticast mode
[  156.184622][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  156.452154][ T8718] bridge2: entered promiscuous mode
[  156.800152][ T8731] bond3: left promiscuous mode
[  157.224498][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  157.838195][ T8764] nft_compat: unsupported protocol 0
[  157.888579][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'.
[  157.892599][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'.
[  157.928767][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'.
[  158.264506][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  158.398230][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.804814][ T5316] IPVS: starting estimator thread 0...
[  158.894566][ T8815] IPVS: using max 53 ests per chain, 127200 per kthread
[  159.071358][ T8833] 8021q: adding VLAN 0 to HW filter on device bond12
[  159.090475][   T12] IPVS: stop unused estimator thread 0...
[  159.192888][ T8852] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  159.314386][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  159.647176][ T8891] netlink: 'syz.2.721': attribute type 1 has an invalid length.
[  159.688879][ T8891] 8021q: adding VLAN 0 to HW filter on device bond8
[  159.740446][ T8900] !: renamed from dummy0
[  159.860025][ T8904] 8021q: adding VLAN 0 to HW filter on device bond9
[  160.344430][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  160.382984][ T8945] __nla_validate_parse: 9 callbacks suppressed
[  160.382999][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.732'.
[  160.520868][ T8947] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0
[  160.741902][ T8955] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  160.793711][ T5882] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.800890][ T5882] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.806964][ T5882] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.811474][ T8959] netlink: 80 bytes leftover after parsing attributes in process `syz.1.737'.
[  160.818252][ T5882] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.120664][ T8985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.740'.
[  161.290665][ T8994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.745'.
[  161.384500][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  161.469361][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.473721][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.539000][ T9013] validate_nla: 1 callbacks suppressed
[  161.539017][ T9013] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  161.556614][ T9013] netlink: 172 bytes leftover after parsing attributes in process `syz.1.747'.
[  161.760051][ T9025] netlink: 'syz.1.753': attribute type 13 has an invalid length.
[  161.826675][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  161.829503][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  161.836335][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  161.839041][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  161.850116][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  161.879837][ T9035] IPVS: Error joining to the multicast group
[  161.889971][ T9037] netlink: 48 bytes leftover after parsing attributes in process `syz.1.756'.
[  161.941596][ T9040] netlink: 'syz.2.757': attribute type 13 has an invalid length.
[  161.951358][ T9040] netlink: 'syz.2.757': attribute type 17 has an invalid length.
[  161.978908][ T9043] netlink: 'syz.0.759': attribute type 39 has an invalid length.
[  162.011453][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.016125][ T9040] 8021q: adding VLAN 0 to HW filter on device team0
[  162.021720][ T9040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.119073][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'.
[  162.148654][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  162.151447][ T9058] netlink: 'syz.1.761': attribute type 5 has an invalid length.
[  162.155722][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'.
[  162.182916][ T9040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.424422][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  162.528014][ T9082] netlink: 'syz.0.768': attribute type 5 has an invalid length.
[  162.721120][ T9089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.723732][ T9089] syzkaller0: entered promiscuous mode
[  162.727461][ T9089] syzkaller0: entered allmulticast mode
[  162.743726][ T9089] tipc: Resetting bearer <eth:syzkaller0>
[  162.753199][ T9088] tipc: Resetting bearer <eth:syzkaller0>
[  162.774187][ T9088] tipc: Disabling bearer <eth:syzkaller0>
[  162.884014][ T9096] netlink: 'syz.0.773': attribute type 30 has an invalid length.
[  162.897474][ T5882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.897662][ T9096] netlink: 'syz.0.773': attribute type 30 has an invalid length.
[  162.900286][ T5882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.900308][ T5882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.900322][ T5882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.192090][ T9103] bond11: (slave bridge0): Releasing backup interface
[  163.464434][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  163.676071][ T9119] netlink: 'syz.2.778': attribute type 14 has an invalid length.
[  163.727551][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.731454][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.738214][ T9126] bond9: left promiscuous mode
[  163.740072][ T9126] bond10: left promiscuous mode
[  163.741948][ T9126] wireguard1: left promiscuous mode
[  163.744660][ T9126] geneve5: left promiscuous mode
[  163.746716][ T9126] bond11: left promiscuous mode
[  163.749580][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.753603][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.869640][ T9136] can: request_module (can-proto-0) failed.
[  164.231928][ T9165] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  164.237876][ T9165] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  164.301597][ T9172] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  164.407949][ T5882] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.411669][ T5882] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.419139][ T5882] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.422801][ T5882] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.504598][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  165.087343][ T9236] 8021q: adding VLAN 0 to HW filter on device bond13
[  165.115378][ T9236] 8021q: adding VLAN 0 to HW filter on device bond14
[  165.471899][ T9253] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[  165.476596][ T9253] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[  165.544496][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  165.553636][ T9261] bond15: entered promiscuous mode
[  165.555707][ T9261] 8021q: adding VLAN 0 to HW filter on device bond15
[  165.572716][ T9261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.576080][ T9261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.089533][ T9292] __nla_validate_parse: 20 callbacks suppressed
[  166.089549][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'.
[  166.096467][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'.
[  166.418716][ T9305] veth0: entered promiscuous mode
[  166.421648][ T9305] batadv_slave_0: entered promiscuous mode
[  166.426348][ T9305] openvswitch: netlink: Key type 16383 is out of range max 32
[  166.434591][ T9304] batadv_slave_0: left promiscuous mode
[  166.436989][ T9304] veth0: left promiscuous mode
[  166.510624][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[  166.513755][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[  166.539864][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'.
[  166.559229][ T9316] validate_nla: 6 callbacks suppressed
[  166.559239][ T9316] netlink: 'syz.1.826': attribute type 39 has an invalid length.
[  166.564594][ T9316] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  166.568475][ T9316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.826'.
[  166.575353][ T9316] netlink: 43 bytes leftover after parsing attributes in process `syz.1.826'.
[  166.580568][ T9316] netlink: 'syz.1.826': attribute type 5 has an invalid length.
[  166.584105][ T9316] netlink: 43 bytes leftover after parsing attributes in process `syz.1.826'.
[  166.587910][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  166.599098][ T9316] netlink: 148 bytes leftover after parsing attributes in process `syz.1.826'.
[  166.638928][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'.
[  166.739283][ T9337] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  166.743629][ T9339] netlink: 'syz.1.833': attribute type 39 has an invalid length.
[  166.825496][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.831954][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.835882][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.839441][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.904658][ T9355] veth0_to_bridge: entered promiscuous mode
[  166.907834][ T9354] veth0_to_bridge: left promiscuous mode
[  167.564089][ T9378] geneve5: left allmulticast mode
[  167.566777][ T9378] bond11: left allmulticast mode
[  167.591669][ T9378] bond15: left promiscuous mode
[  167.624611][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  167.950622][ T9388] macsec1: entered promiscuous mode
[  167.952690][ T9388] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  167.958622][ T9388] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  168.129123][ T9396] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  168.170415][ T9396] 8021q: adding VLAN 0 to HW filter on device bond16
[  168.412978][ T9422] netlink: 'syz.1.855': attribute type 13 has an invalid length.
[  168.417644][ T9422] netlink: 'syz.1.855': attribute type 17 has an invalid length.
[  168.500899][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.506459][ T9422] 8021q: adding VLAN 0 to HW filter on device team0
[  168.517673][ T9422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.526414][ T1092] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  168.664504][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  169.291397][ T9480] netlink: 'syz.1.872': attribute type 1 has an invalid length.
[  169.422704][ T9493] tun0: tun_chr_ioctl cmd 1074025675
[  169.424925][ T9493] tun0: persist enabled
[  169.427161][ T9493] tun0: tun_chr_ioctl cmd 1074025675
[  169.429542][ T9493] tun0: persist disabled
[  169.433651][ T9492] tun0: tun_chr_ioctl cmd 1074025675
[  169.445354][ T9492] tun0: persist enabled
[  169.488079][ T9501] netlink: 'syz.1.878': attribute type 3 has an invalid length.
[  169.497174][ T9501] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  169.523851][ T9501] 8021q: adding VLAN 0 to HW filter on device bond17
[  169.535874][ T9501] bond17: entered promiscuous mode
[  169.596978][ T9510] geneve6: entered promiscuous mode
[  169.704605][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  170.063999][ T9526] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  170.069802][ T9526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.481263][ T9557] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  171.266773][ T9589] __nla_validate_parse: 49 callbacks suppressed
[  171.266784][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'.
[  171.272037][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'.
[  171.392430][ T9599] Bluetooth: MGMT ver 1.23
[  171.784554][    C1] net_ratelimit: 1 callbacks suppressed
[  171.784582][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  171.953363][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.956577][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.246420][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'.
[  172.249049][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[  172.252765][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  172.259105][ T9659] validate_nla: 3 callbacks suppressed
[  172.259118][ T9659] netlink: 'syz.0.913': attribute type 15 has an invalid length.
[  172.273047][ T9657] batman_adv: batadv0: Removing interface: virt_wifi0
[  172.288317][ T5881] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  172.291642][ T5881] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  172.299885][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[  172.312729][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'.
[  172.317193][ T9659] netlink: 'syz.0.913': attribute type 15 has an invalid length.
[  172.337309][ T5881] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  172.341096][ T5881] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  172.394003][ T9669] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  172.508890][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  172.642985][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'.
[  172.824616][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  172.876763][ T9704] netlink: 'syz.2.924': attribute type 39 has an invalid length.
[  173.006645][ T9716] netlink: 256 bytes leftover after parsing attributes in process `syz.1.926'.
[  173.265835][ T9734] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[  173.637545][ T9743] geneve5: entered promiscuous mode
[  173.640094][ T5882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.643188][ T5882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.647261][ T5882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.655314][ T5882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.666001][ T9743] netlink: 'syz.2.932': attribute type 1 has an invalid length.
[  173.770074][ T9753] netlink: 'syz.2.934': attribute type 10 has an invalid length.
[  173.864858][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  174.076000][ T9774] netlink: 'syz.2.939': attribute type 13 has an invalid length.
[  174.078334][ T9774] netlink: 'syz.2.939': attribute type 17 has an invalid length.
[  174.141792][ T9774] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.147466][ T9774] 8021q: adding VLAN 0 to HW filter on device team0
[  174.154238][ T9774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.170218][ T9779] netlink: 'syz.0.941': attribute type 20 has an invalid length.
[  174.171882][ T9780] syzkaller1: entered promiscuous mode
[  174.176864][ T9781] netlink: 'syz.0.941': attribute type 20 has an invalid length.
[  174.177900][ T9780] syzkaller1: entered allmulticast mode
[  174.192004][ T9780] team0: Port device geneve0 added
[  174.221122][ T5881] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.225513][ T5881] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.233137][ T5881] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.237092][ T5881] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.328402][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.436214][ T9797] 8021q: adding VLAN 0 to HW filter on device bond18
[  174.904619][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  175.494928][ T9831] syzkaller1: entered promiscuous mode
[  175.498482][ T9831] syzkaller1: entered allmulticast mode
[  175.944474][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  176.095392][ T9853] IPVS: set_ctl: invalid protocol: 109 172.20.20.187:20003
[  176.116096][ T9858] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  176.266711][ T9862] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  176.289068][ T9862] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  176.479999][ T9886] __nla_validate_parse: 30 callbacks suppressed
[  176.480013][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'.
[  176.557949][ T9890] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.969'.
[  176.646633][ T9898] bond10: entered promiscuous mode
[  176.649232][ T9898] 8021q: adding VLAN 0 to HW filter on device bond10
[  176.659010][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'.
[  176.678743][ T9898] 8021q: adding VLAN 0 to HW filter on device bond10
[  176.682709][ T9898] bond10: (slave wireguard4): The slave device specified does not support setting the MAC address
[  176.687504][ T9898] bond10: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  176.696284][ T9898] bond10: (slave wireguard4): making interface the new active one
[  176.699421][ T9898] wireguard4: entered promiscuous mode
[  176.703253][ T9898] bond10: (slave wireguard4): Enslaving as an active interface with an up link
[  176.710047][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.711012][ T9904] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  176.712985][ T9898] IPv6: NLM_F_CREATE should be set when creating new route
[  176.719728][ T9898] IPv6: NLM_F_CREATE should be set when creating new route
[  176.725179][ T9898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.794632][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'.
[  176.984615][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  177.223534][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'.
[  177.234234][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'.
[  177.358389][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'.
[  177.361798][ T9941] validate_nla: 5 callbacks suppressed
[  177.361811][ T9941] netlink: 'syz.1.985': attribute type 30 has an invalid length.
[  177.373417][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'.
[  177.377246][ T9941] netlink: 'syz.1.985': attribute type 30 has an invalid length.
[  177.383162][ T5881] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.383588][ T9942] netlink: 'syz.2.983': attribute type 10 has an invalid length.
[  177.389497][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.983'.
[  177.399792][ T5881] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.411356][ T5881] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.416697][ T5881] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.526625][ T9948] syzkaller1: entered promiscuous mode
[  177.534254][ T9948] syzkaller1: entered allmulticast mode
[  177.723844][ T9959] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  177.923970][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'.
[  177.928301][ T9971] netlink: 'syz.2.993': attribute type 19 has an invalid length.
[  178.024611][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  178.378383][ T9979] syzkaller1: entered promiscuous mode
[  178.380461][ T9979] syzkaller1: entered allmulticast mode
[  178.485277][ T9983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.861018][ T9997] geneve6: entered promiscuous mode
[  178.863219][ T9997] geneve6: entered allmulticast mode
[  178.870065][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.881210][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  178.884805][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.887975][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  178.890931][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.894238][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  178.910537][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.913616][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  179.064433][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  179.391818][T10036] netlink: 'syz.2.1012': attribute type 39 has an invalid length.
[  179.772409][ T5881] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  179.782552][ T5881] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  179.788629][ T5881] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  179.792343][ T5881] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  180.114450][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  180.148577][T10067] netlink: 'syz.1.1022': attribute type 39 has an invalid length.
[  180.158354][T10067] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  180.162026][T10067] netlink: 'syz.1.1022': attribute type 5 has an invalid length.
[  180.172757][T10067] vlan2: entered allmulticast mode
[  180.174774][T10067] bridge_slave_0: entered allmulticast mode
[  180.350627][T10089] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  180.653698][T10113] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  180.725960][T10117] netlink: 'syz.0.1036': attribute type 13 has an invalid length.
[  180.803004][T10128] netlink: 'syz.2.1035': attribute type 10 has an invalid length.
[  181.144590][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  182.194564][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  182.254905][T10198] sctp: [Deprecated]: syz.0.1057 (pid 10198) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.254905][T10198] Use struct sctp_sack_info instead
[  182.265439][T10199] sctp: [Deprecated]: syz.0.1057 (pid 10199) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.265439][T10199] Use struct sctp_sack_info instead
[  182.439719][T10211] netlink: 'syz.1.1055': attribute type 39 has an invalid length.
[  182.510320][T10214] openvswitch: netlink: Tunnel attr 16 has unexpected len 12 expected 0
[  182.721082][T10224] gre3: entered allmulticast mode
[  182.726771][T10224] __nla_validate_parse: 18 callbacks suppressed
[  182.726788][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'.
[  183.132582][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'.
[  183.136436][T10239] netlink: 'syz.1.1065': attribute type 5 has an invalid length.
[  183.139606][T10239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'.
[  183.152618][T10239] geneve6: entered promiscuous mode
[  183.155984][T10239] geneve6: entered allmulticast mode
[  183.161381][ T5882] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  183.166008][ T5882] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  183.171237][ T5882] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  183.184745][ T5882] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  183.224452][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  183.569364][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'.
[  183.959953][T10283] syzkaller1: entered promiscuous mode
[  183.961680][T10283] syzkaller1: entered allmulticast mode
[  184.020548][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1081'.
[  184.219500][T10304] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  184.264582][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  184.270082][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'.
[  184.273683][T10308] netlink: 'syz.2.1085': attribute type 5 has an invalid length.
[  184.285882][T10308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'.
[  184.348439][T10315] geneve7: entered promiscuous mode
[  184.432103][T10322] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  184.441315][T10321] gretap2: entered allmulticast mode
[  184.458019][T10322] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  184.480884][T10322] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  184.508640][T10322] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  184.534870][T10322] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  184.556744][T10322] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  184.695143][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  184.965102][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.970822][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.137166][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1094'.
[  185.314592][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  186.344468][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  187.020371][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1105'.
[  187.051616][T10410] 8021q: adding VLAN 0 to HW filter on device bond20
[  187.060389][T10410] bond20: entered promiscuous mode
[  187.384458][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  187.817628][T10440] __nla_validate_parse: 1 callbacks suppressed
[  187.817645][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1114'.
[  187.873049][T10449] validate_nla: 28 callbacks suppressed
[  187.873065][T10449] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  187.910966][T10449] 8021q: adding VLAN 0 to HW filter on device bond21
[  187.921892][T10449] bond21: entered promiscuous mode
[  187.971950][T10452] IPVS: stopping backup sync thread 9904 ...
[  188.424467][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  188.563923][T10473] netlink: 'syz.2.1121': attribute type 39 has an invalid length.
[  188.567509][T10472] openvswitch: netlink: Key type 6927 is out of range max 32
[  188.570247][T10474] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1121'.
[  188.573282][T10474] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1121'.
[  188.576380][T10474] netlink: 'syz.2.1121': attribute type 5 has an invalid length.
[  188.579267][T10474] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1121'.
[  188.719562][T10477] geneve2: left promiscuous mode
[  188.721492][T10477] geneve3: left promiscuous mode
[  188.723439][T10477] bond3: left promiscuous mode
[  188.725918][T10477] wireguard0: left promiscuous mode
[  188.728148][T10477] geneve4: left promiscuous mode
[  188.729741][T10477] geneve4: left allmulticast mode
[  188.731778][T10477] nicvf0: left promiscuous mode
[  188.733538][T10477] bond7: left promiscuous mode
[  188.735158][T10477] wireguard2: left promiscuous mode
[  188.737130][T10477] bridge2: left promiscuous mode
[  188.739049][T10477] geneve5: left promiscuous mode
[  188.740716][T10477] bond10: left promiscuous mode
[  188.742192][T10477] wireguard4: left promiscuous mode
[  188.746477][T10477] geneve6: left promiscuous mode
[  188.748071][T10477] geneve6: left allmulticast mode
[  188.759352][T10477] gre3: left allmulticast mode
[  188.761669][T10477] gretap2: left allmulticast mode
[  188.767633][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  188.773996][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  188.778455][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  188.782182][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  188.814152][T10480] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  188.991423][T10495] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  189.051665][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1126'.
[  189.058148][T10495] 8021q: adding VLAN 0 to HW filter on device bond45
[  189.174173][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'.
[  189.178447][T10503] bridge_slave_1: left allmulticast mode
[  189.180230][T10503] bridge_slave_1: left promiscuous mode
[  189.182125][T10503] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.188325][T10503] bridge_slave_0: left promiscuous mode
[  189.190974][T10503] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.418442][T10506] geneve7: entered promiscuous mode
[  189.420131][T10506] geneve7: entered allmulticast mode
[  189.422768][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 34847 - 0
[  189.429853][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 55448 - 0
[  189.438460][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 34847 - 0
[  189.441926][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 55448 - 0
[  189.446117][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 34847 - 0
[  189.449320][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 55448 - 0
[  189.452779][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 34847 - 0
[  189.456855][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 55448 - 0
[  189.464439][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  189.556569][T10514] netlink: 'syz.2.1131': attribute type 13 has an invalid length.
[  189.624082][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 34847 - 0
[  189.628402][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 55448 - 0
[  189.631452][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 34847 - 0
[  189.637941][ T5881] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 55448 - 0
[  189.640855][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 34847 - 0
[  189.651895][ T5881] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 55448 - 0
[  189.664663][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 34847 - 0
[  189.667642][ T5881] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 55448 - 0
[  189.699896][T10519] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  189.750881][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'.
[  189.756054][T10523] netlink: 'syz.2.1135': attribute type 12 has an invalid length.
[  189.759106][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'.
[  189.761968][T10523] netlink: 'syz.2.1135': attribute type 12 has an invalid length.
[  189.839755][ T5882] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.845477][ T5882] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.848168][ T5882] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  189.850767][ T5882] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.853429][ T5882] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.856437][ T5882] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  189.863017][ T5882] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.866029][ T5882] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.868657][ T5882] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  189.872125][T10528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.874675][ T5882] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  189.877670][ T5882] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.880418][ T5882] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  189.883407][T10528] syzkaller0: entered promiscuous mode
[  189.885404][T10528] syzkaller0: entered allmulticast mode
[  189.902391][T10527] tipc: Resetting bearer <eth:syzkaller0>
[  189.919587][T10527] tipc: Disabling bearer <eth:syzkaller0>
[  190.030864][T10542] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  190.065812][T10545] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1143'.
[  190.069350][T10547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1143'.
[  190.076026][T10545] netlink: 'syz.2.1143': attribute type 1 has an invalid length.
[  190.091160][T10545] 8021q: adding VLAN 0 to HW filter on device bond46
[  190.100321][T10545] bond46: (slave gretap3): making interface the new active one
[  190.103485][T10545] bond46: (slave gretap3): Enslaving as an active interface with an up link
[  190.268993][T10561] IPVS: Error connecting to the multicast addr
[  190.504611][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  190.905253][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.066862][T10569] netlink: 'syz.1.1148': attribute type 13 has an invalid length.
[  191.069922][T10569] netlink: 'syz.1.1148': attribute type 17 has an invalid length.
[  191.105227][T10569] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.109399][T10569] 8021q: adding VLAN 0 to HW filter on device team0
[  191.116708][T10569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.248856][T10569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.544402][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  191.658699][T10596] syzkaller1: entered promiscuous mode
[  191.660993][T10596] syzkaller1: entered allmulticast mode
[  192.226605][   T12] bond0: (slave bond_slave_0): interface is now down
[  192.230161][   T12] bond0: (slave bond_slave_1): interface is now down
[  192.230250][T10618] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.236621][T10618] 8021q: adding VLAN 0 to HW filter on device team0
[  192.242063][T10618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.246124][ T5882] bond0: (slave bond_slave_0): interface is now down
[  192.250012][ T5882] bond0: (slave bond_slave_1): interface is now down
[  192.255653][ T5882] bond0: now running without any active interface!
[  192.372582][T10619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.584478][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  192.953384][T10629] __nla_validate_parse: 4 callbacks suppressed
[  192.953401][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'.
[  192.973945][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  192.977886][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'.
[  192.982857][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  193.004955][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  193.008325][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  193.098356][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1165'.
[  193.540637][T10665] validate_nla: 2 callbacks suppressed
[  193.540653][T10665] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  193.571153][T10665] bond22: entered promiscuous mode
[  193.574109][T10665] 8021q: adding VLAN 0 to HW filter on device bond22
[  193.604723][T10665] 8021q: adding VLAN 0 to HW filter on device bond22
[  193.608309][T10665] bond22: (slave wireguard4): The slave device specified does not support setting the MAC address
[  193.612626][T10665] bond22: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  193.621459][T10665] bond22: (slave wireguard4): making interface the new active one
[  193.624821][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  193.627727][T10665] wireguard4: entered promiscuous mode
[  193.631982][T10665] bond22: (slave wireguard4): Enslaving as an active interface with an up link
[  193.640238][T10665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  193.643266][T10665] IPv6: NLM_F_CREATE should be set when creating new route
[  193.646273][T10665] IPv6: NLM_F_CREATE should be set when creating new route
[  193.650972][T10665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  193.731711][T10673] openvswitch: netlink: EtherType 50a is less than min 600
[  193.947297][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.487228][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'.
[  194.546006][T10689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'.
[  194.591955][T10691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.674410][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  194.698068][T10693] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[  194.714613][T10693] netlink: 'syz.1.1181': attribute type 5 has an invalid length.
[  194.720735][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1181'.
[  194.752251][T10696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1182'.
[  194.857127][T10698] syzkaller1: entered promiscuous mode
[  194.858938][T10698] syzkaller1: entered allmulticast mode
[  195.250816][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.255389][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.376685][T10727] netlink: 'syz.2.1186': attribute type 5 has an invalid length.
[  195.379617][T10727] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1186'.
[  195.384092][T10727] netlink: 'syz.2.1186': attribute type 13 has an invalid length.
[  195.387254][T10727] netlink: 'syz.2.1186': attribute type 17 has an invalid length.
[  195.407643][T10727] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.411206][T10727] 8021q: adding VLAN 0 to HW filter on device team0
[  195.417318][T10727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.437100][T10729] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  195.550503][T10727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.676377][T10738] netlink: 'syz.1.1188': attribute type 10 has an invalid length.
[  195.704437][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  195.733796][T10739] netlink: 'syz.1.1188': attribute type 10 has an invalid length.
[  195.755646][T10738] team0: Port device 0! added
[  195.760097][T10739] team0: Failed to send port change of device 0! via netlink (err -105)
[  195.774946][T10739] team0: Failed to send options change via netlink (err -105)
[  195.778135][T10739] team0: Failed to send port change of device 0! via netlink (err -105)
[  195.786657][T10739] team0: Port device 0! removed
[  195.799889][T10739] bond0: (slave 0!): Enslaving as an active interface with an up link
[  196.147462][T10744] netlink: 'syz.1.1190': attribute type 31 has an invalid length.
[  196.179717][T10747] netlink: 'syz.2.1189': attribute type 10 has an invalid length.
[  196.182158][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1189'.
[  196.286945][T10757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'.
[  196.433397][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.438069][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.441011][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.453213][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.583730][T10781] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  196.616908][T10779] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000
[  196.744489][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  196.838544][T10798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.891322][T10798] syzkaller0: entered promiscuous mode
[  196.895297][T10798] syzkaller0: entered allmulticast mode
[  196.899676][T10798] tipc: Resetting bearer <eth:syzkaller0>
[  197.077679][T10819] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  197.077882][T10818] IPVS: stopping backup sync thread 10819 ...
[  197.668622][T10797] tipc: Resetting bearer <eth:syzkaller0>
[  197.794377][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  198.834420][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  198.886868][T10797] tipc: Disabling bearer <eth:syzkaller0>
[  198.891943][T10834] @0: renamed from bond_slave_1
[  198.993642][T10840] __nla_validate_parse: 13 callbacks suppressed
[  198.993656][T10840] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1212'.
[  199.163109][T10853] geneve7: entered promiscuous mode
[  199.170232][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.172912][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.185217][ T5882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.188152][ T5882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.257617][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  199.261729][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  199.266741][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  199.271700][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  199.276887][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  199.591875][T10869] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1219'.
[  199.622773][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'.
[  199.753463][T10861] chnl_net:caif_netlink_parms(): no params data found
[  199.864369][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  199.940012][T10861] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.942369][T10861] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.956134][T10861] bridge_slave_0: entered allmulticast mode
[  199.968139][T10861] bridge_slave_0: entered promiscuous mode
[  199.981173][T10861] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.983795][T10861] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.986602][T10861] bridge_slave_1: entered allmulticast mode
[  199.990042][T10861] bridge_slave_1: entered promiscuous mode
[  200.025861][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.030618][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.063516][T10861] team0: Port device team_slave_0 added
[  200.071864][T10861] team0: Port device team_slave_1 added
[  200.102138][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.105233][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.115784][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.120799][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.123353][T10908] ieee802154 phy1 wpan1: encryption failed: -22
[  200.126556][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.135417][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.188101][T10861] hsr_slave_0: entered promiscuous mode
[  200.192487][T10861] hsr_slave_1: entered promiscuous mode
[  200.410765][ T1272] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0
[  200.420632][ T1272] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  200.481946][T10861] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  200.493724][T10861] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  200.506971][T10861] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  200.512898][T10861] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  200.561859][T10861] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.564881][T10861] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.618746][T10861] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.632418][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.650065][T10861] 8021q: adding VLAN 0 to HW filter on device team0
[  200.662899][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.666649][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.671489][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1230'.
[  200.685766][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.688601][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.689110][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'.
[  200.734025][T10927] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  200.744245][T10928] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  200.831717][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.868106][T10938] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  200.880707][T10940] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1234'.
[  200.881614][T10861] veth0_vlan: entered promiscuous mode
[  200.900558][T10861] veth1_vlan: entered promiscuous mode
[  200.914540][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  200.928841][T10861] veth0_macvtap: entered promiscuous mode
[  200.937433][T10861] veth1_macvtap: entered promiscuous mode
[  200.956743][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.967958][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.975471][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.980569][T10946] validate_nla: 3 callbacks suppressed
[  200.980585][T10946] netlink: 'syz.2.1235': attribute type 39 has an invalid length.
[  200.982336][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.989821][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.998079][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.075808][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.084719][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.126583][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.129710][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.288837][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'.
[  201.292755][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'.
[  201.305035][ T5858] Bluetooth: hci3: command tx timeout
[  201.332242][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  201.708981][T10978] netlink: 'syz.2.1241': attribute type 1 has an invalid length.
[  201.733537][T10978] 8021q: adding VLAN 0 to HW filter on device bond47
[  201.802407][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'.
[  201.862408][T10993] netlink: 'syz.1.1242': attribute type 1 has an invalid length.
[  201.903420][T10993] bond26: (slave gretap1): making interface the new active one
[  201.907186][T10993] bond26: (slave gretap1): Enslaving as an active interface with an up link
[  201.954483][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  201.975183][T10998] trusted_key: syz.2.1245 sent an empty control message without MSG_MORE.
[  202.151813][T11007] tipc: Started in network mode
[  202.153937][T11007] tipc: Node identity , cluster identity 4711
[  202.160092][T11007] tipc: Failed to obtain node identity
[  202.162498][T11007] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.197163][T11008] syzkaller0: entered promiscuous mode
[  202.199375][T11008] syzkaller0: entered allmulticast mode
[  202.994536][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  203.007692][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034afa000: rx timeout, send abort
[  203.012727][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034afa000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  203.387646][ T5858] Bluetooth: hci3: command tx timeout
[  203.426270][T11012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.429741][T11013] veth0: entered promiscuous mode
[  203.431762][T11013] veth0: entered allmulticast mode
[  203.436115][T11015] syzkaller0: mtu less than device minimum
[  203.447184][T11011] tipc: Disabling bearer <eth:syzkaller0>
[  203.532295][T11022] syzkaller0: entered promiscuous mode
[  203.535952][T11022] syzkaller0: entered allmulticast mode
[  203.542268][T11023] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  203.661024][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.670152][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.673026][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.684428][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.012817][T11048] ..0: renamed from hsr0
[  204.017301][T11048] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  204.020512][T11048] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.023649][T11048] ..0: entered allmulticast mode
[  204.029119][T11048] hsr_slave_0: entered allmulticast mode
[  204.030894][T11048] hsr_slave_1: entered allmulticast mode
[  204.034366][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  204.046760][T11048] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  204.051549][ T5882] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.057523][ T5882] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.060768][ T5882] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.063424][ T5882] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.074817][ T5882] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.077982][ T5882] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.081043][ T5882] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.084653][ T5882] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.221483][T11062] __nla_validate_parse: 7 callbacks suppressed
[  204.221498][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'.
[  204.239761][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'.
[  204.307402][T11060] bond0: default FDB implementation only supports local addresses
[  204.522413][   T40] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  204.529936][T11078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.562876][T11083] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.1267'.
[  204.574255][T11083] nicvf0: entered promiscuous mode
[  204.672960][T11085] netlink: 'syz.3.1268': attribute type 1 has an invalid length.
[  204.679295][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'.
[  204.848238][T11098] IPVS: stopping backup sync thread 11100 ...
[  204.849807][T11100] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  204.866440][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'.
[  205.064657][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  205.215913][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'.
[  205.219309][T11112] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1276'.
[  205.464526][ T5858] Bluetooth: hci3: command tx timeout
[  205.476739][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'.
[  205.479680][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'.
[  205.482516][T11118] netlink: 'syz.3.1279': attribute type 11 has an invalid length.
[  205.486709][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'.
[  205.489476][T11118] netlink: 'syz.3.1279': attribute type 11 has an invalid length.
[  205.613432][T11135] netlink: 'syz.3.1283': attribute type 1 has an invalid length.
[  205.674039][T11137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.677005][T11137] IPv6: NLM_F_CREATE should be set when creating new route
[  205.679916][T11137] IPv6: NLM_F_CREATE should be set when creating new route
[  205.710214][T11137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.814803][T11144] netlink: 'syz.3.1285': attribute type 1 has an invalid length.
[  206.114513][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  206.339519][T11161] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  207.040763][T11204] netlink: 'syz.1.1297': attribute type 1 has an invalid length.
[  207.073269][T11204] 8021q: adding VLAN 0 to HW filter on device bond27
[  207.082890][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.117367][T11211] 8021q: adding VLAN 0 to HW filter on device bond1
[  207.120567][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.134651][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.139685][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.142661][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.145397][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  207.148404][T11217] netlink: 'syz.1.1301': attribute type 1 has an invalid length.
[  207.183210][T11217] 8021q: adding VLAN 0 to HW filter on device bond28
[  207.199564][T11212] bond1: (slave geneve2): making interface the new active one
[  207.203947][T11212] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  207.218780][T11217] bond28: (slave geneve8): making interface the new active one
[  207.223111][T11217] bond28: (slave geneve8): Enslaving as an active interface with an up link
[  207.225183][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.236796][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.245431][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.245502][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.248642][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.254926][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.258591][T11225] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  207.258628][T11223] IPVS: stopping backup sync thread 11225 ...
[  207.283283][T11211] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  207.546259][ T5858] Bluetooth: hci3: command tx timeout
[  207.746683][T11253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.751190][T11253] syzkaller0: entered promiscuous mode
[  207.753283][T11253] syzkaller0: entered allmulticast mode
[  207.773223][T11253] tipc: Resetting bearer <eth:syzkaller0>
[  207.780123][T11251] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  207.785979][T11251] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  207.818536][T11252] tipc: Resetting bearer <eth:syzkaller0>
[  207.837906][T11252] tipc: Disabling bearer <eth:syzkaller0>
[  207.897738][T11256] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  208.184444][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  209.084158][T11313] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.086625][T11313] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.192408][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.205511][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.224514][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  209.303215][   T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.312198][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.315618][   T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.319599][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.328164][   T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.331646][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.342286][   T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.346106][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.607633][T11336] : entered promiscuous mode
[  210.264408][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  210.459242][ T5881] : left promiscuous mode
[  210.499845][T11387] __nla_validate_parse: 7 callbacks suppressed
[  210.499856][T11387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'.
[  210.596716][T11389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1341'.
[  210.600399][T11389] ==================================================================
[  210.603457][T11389] BUG: KASAN: slab-out-of-bounds in xfrm_alloc_spi+0x570/0xf30
[  210.606311][T11389] Read of size 4 at addr ffff888020c71bc4 by task syz.2.1341/11389
[  210.609852][T11389] 
[  210.611187][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.2.1341 Not tainted syzkaller #0 PREEMPT(full) 
[  210.611204][T11389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.611213][T11389] Call Trace:
[  210.611220][T11389]  <TASK>
[  210.611227][T11389]  dump_stack_lvl+0x189/0x250
[  210.611253][T11389]  ? __kasan_check_byte+0x12/0x40
[  210.611269][T11389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.611282][T11389]  ? lock_release+0x4b/0x3e0
[  210.611300][T11389]  ? __virt_addr_valid+0x4a5/0x5c0
[  210.611314][T11389]  print_report+0xca/0x240
[  210.611324][T11389]  ? xfrm_alloc_spi+0x570/0xf30
[  210.611334][T11389]  kasan_report+0x118/0x150
[  210.611349][T11389]  ? xfrm_alloc_spi+0x570/0xf30
[  210.611360][T11389]  xfrm_alloc_spi+0x570/0xf30
[  210.611371][T11389]  ? xfrm_alloc_spi+0x2a0/0xf30
[  210.611385][T11389]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  210.611396][T11389]  ? xfrm_find_acq+0x87/0xa0
[  210.611415][T11389]  xfrm_alloc_userspi+0x70b/0xc90
[  210.611432][T11389]  ? apparmor_capable+0x137/0x1b0
[  210.611447][T11389]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  210.611460][T11389]  ? __nla_parse+0x40/0x60
[  210.611474][T11389]  xfrm_user_rcv_msg+0x7a3/0xab0
[  210.611487][T11389]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  210.611508][T11389]  ? __pfx___mutex_trylock_common+0x10/0x10
[  210.611524][T11389]  ? rcu_is_watching+0x15/0xb0
[  210.611537][T11389]  ? trace_contention_end+0x39/0x120
[  210.611551][T11389]  ? __mutex_lock+0x335/0x1350
[  210.611567][T11389]  netlink_rcv_skb+0x208/0x470
[  210.611584][T11389]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  210.611626][T11389]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.611645][T11389]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.611673][T11389]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.611688][T11389]  xfrm_netlink_rcv+0x79/0x90
[  210.611701][T11389]  netlink_unicast+0x82f/0x9e0
[  210.611716][T11389]  ? __pfx_netlink_unicast+0x10/0x10
[  210.611730][T11389]  ? netlink_sendmsg+0x642/0xb30
[  210.611742][T11389]  ? skb_put+0x11b/0x210
[  210.611759][T11389]  netlink_sendmsg+0x805/0xb30
[  210.611777][T11389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.611793][T11389]  ? aa_sock_msg_perm+0xf1/0x1d0
[  210.611806][T11389]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  210.611820][T11389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.611835][T11389]  __sock_sendmsg+0x21c/0x270
[  210.611849][T11389]  ____sys_sendmsg+0x505/0x830
[  210.611867][T11389]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.611886][T11389]  ? import_iovec+0x74/0xa0
[  210.611904][T11389]  ___sys_sendmsg+0x21f/0x2a0
[  210.611921][T11389]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.611949][T11389]  ? __fget_files+0x2a/0x420
[  210.611960][T11389]  ? __fget_files+0x3a0/0x420
[  210.611974][T11389]  __x64_sys_sendmsg+0x19b/0x260
[  210.611996][T11389]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  210.612015][T11389]  ? rcu_is_watching+0x15/0xb0
[  210.612028][T11389]  ? do_syscall_64+0xbe/0x3b0
[  210.612044][T11389]  do_syscall_64+0xfa/0x3b0
[  210.612058][T11389]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.612071][T11389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.612084][T11389]  ? exc_page_fault+0x9f/0xf0
[  210.612096][T11389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.612109][T11389] RIP: 0033:0x7f8fb9b8eba9
[  210.612122][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.612133][T11389] RSP: 002b:00007f8fbaab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.612149][T11389] RAX: ffffffffffffffda RBX: 00007f8fb9dd5fa0 RCX: 00007f8fb9b8eba9
[  210.612158][T11389] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  210.612167][T11389] RBP: 00007f8fb9c11e19 R08: 0000000000000000 R09: 0000000000000000
[  210.612175][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.612182][T11389] R13: 00007f8fb9dd6038 R14: 00007f8fb9dd5fa0 R15: 00007ffdb11038d8
[  210.612197][T11389]  </TASK>
[  210.612202][T11389] 
[  210.757028][T11389] Allocated by task 1092:
[  210.758702][T11389]  kasan_save_track+0x3e/0x80
[  210.760517][T11389]  __kasan_slab_alloc+0x6c/0x80
[  210.762340][T11389]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  210.764534][T11389]  kmalloc_reserve+0xbd/0x290
[  210.766346][T11389]  __alloc_skb+0x142/0x2d0
[  210.768070][T11389]  skb_copy+0x188/0x800
[  210.769653][T11389]  mac80211_hwsim_tx_frame_no_nl+0xcd3/0x11c0
[  210.772003][T11389]  mac80211_hwsim_tx_frame+0x1b5/0x200
[  210.774111][T11389]  mac80211_hwsim_beacon_tx+0x3f0/0x860
[  210.776325][T11389]  __iterate_interfaces+0x2ab/0x590
[  210.778373][T11389]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  210.781100][T11389]  mac80211_hwsim_beacon+0xbb/0x1c0
[  210.783117][T11389]  __hrtimer_run_queues+0x52c/0xc60
[  210.785130][T11389]  hrtimer_run_softirq+0x187/0x2b0
[  210.787160][T11389]  handle_softirqs+0x286/0x870
[  210.789042][T11389]  __irq_exit_rcu+0xca/0x1f0
[  210.790887][T11389]  irq_exit_rcu+0x9/0x30
[  210.792545][T11389]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  210.794758][T11389]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  210.797001][T11389] 
[  210.797951][T11389] Freed by task 64:
[  210.799445][T11389]  kasan_save_track+0x3e/0x80
[  210.801295][T11389]  kasan_save_free_info+0x46/0x50
[  210.803294][T11389]  __kasan_slab_free+0x5b/0x80
[  210.805188][T11389]  kmem_cache_free+0x18f/0x400
[  210.807093][T11389]  skb_release_data+0x62d/0x7c0
[  210.809012][T11389]  sk_skb_reason_drop+0x127/0x170
[  210.811005][T11389]  ieee80211_iface_work+0xb30/0x12d0
[  210.813108][T11389]  cfg80211_wiphy_work+0x2bb/0x470
[  210.815156][T11389]  process_scheduled_works+0xae1/0x17b0
[  210.817354][T11389]  worker_thread+0x8a0/0xda0
[  210.819222][T11389]  kthread+0x711/0x8a0
[  210.820859][T11389]  ret_from_fork+0x439/0x7d0
[  210.822695][T11389]  ret_from_fork_asm+0x1a/0x30
[  210.824594][T11389] 
[  210.825554][T11389] The buggy address belongs to the object at ffff888020c71880
[  210.825554][T11389]  which belongs to the cache skbuff_small_head of size 704
[  210.831070][T11389] The buggy address is located 132 bytes to the right of
[  210.831070][T11389]  allocated 704-byte region [ffff888020c71880, ffff888020c71b40)
[  210.836446][T11389] 
[  210.837363][T11389] The buggy address belongs to the physical page:
[  210.839286][T11389] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20c70
[  210.841901][T11389] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  210.844750][T11389] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  210.847145][T11389] page_type: f5(slab)
[  210.848601][T11389] raw: 00fff00000000040 ffff888100ef0c80 ffffea0000c32200 dead000000000002
[  210.851619][T11389] raw: 0000000000000000 0000000000120012 00000000f5000000 0000000000000000
[  210.854989][T11389] head: 00fff00000000040 ffff888100ef0c80 ffffea0000c32200 dead000000000002
[  210.857810][T11389] head: 0000000000000000 0000000000120012 00000000f5000000 0000000000000000
[  210.860687][T11389] head: 00fff00000000002 ffffea0000831c01 00000000ffffffff 00000000ffffffff
[  210.864019][T11389] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  210.867040][T11389] page dumped because: kasan: bad access detected
[  210.869176][T11389] page_owner tracks the page as allocated
[  210.871383][T11389] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10861, tgid 10861 (syz-executor), ts 200627078357, free_ts 196857107714
[  210.879389][T11389]  post_alloc_hook+0x240/0x2a0
[  210.881267][T11389]  get_page_from_freelist+0x21e4/0x22c0
[  210.883381][T11389]  __alloc_frozen_pages_noprof+0x181/0x370
[  210.885718][T11389]  alloc_pages_mpol+0x232/0x4a0
[  210.887646][T11389]  allocate_slab+0x8a/0x370
[  210.889463][T11389]  ___slab_alloc+0xbeb/0x1420
[  210.891346][T11389]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  210.893270][T11389]  kmalloc_reserve+0xbd/0x290
[  210.894843][T11389]  __alloc_skb+0x142/0x2d0
[  210.896322][T11389]  rtmsg_fib+0xea/0x4c0
[  210.897726][T11389]  fib_table_insert+0xd64/0x1b50
[  210.899303][T11389]  fib_magic+0x2c4/0x390
[  210.900924][T11389]  fib_add_ifaddr+0x3fb/0x5f0
[  210.902809][T11389]  fib_netdev_event+0x382/0x490
[  210.904658][T11389]  notifier_call_chain+0x1b6/0x3e0
[  210.906641][T11389]  __dev_notify_flags+0x18d/0x2e0
[  210.908408][T11389] page last free pid 5881 tgid 5881 stack trace:
[  210.910436][T11389]  __free_frozen_pages+0xbc4/0xd30
[  210.912134][T11389]  free_large_kmalloc+0x13a/0x1f0
[  210.913869][T11389]  ops_undo_list+0x856/0x990
[  210.915326][T11389]  cleanup_net+0x4c5/0x800
[  210.916645][T11389]  process_scheduled_works+0xae1/0x17b0
[  210.918295][T11389]  worker_thread+0x8a0/0xda0
[  210.919672][T11389]  kthread+0x711/0x8a0
[  210.921042][T11389]  ret_from_fork+0x439/0x7d0
[  210.922536][T11389]  ret_from_fork_asm+0x1a/0x30
[  210.924200][T11389] 
[  210.925006][T11389] Memory state around the buggy address:
[  210.926811][T11389]  ffff888020c71a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  210.929346][T11389]  ffff888020c71b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  210.931878][T11389] >ffff888020c71b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  210.934331][T11389]                                            ^
[  210.936294][T11389]  ffff888020c71c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  210.938746][T11389]  ffff888020c71c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  210.941484][T11389] ==================================================================
[  210.944916][T11389] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  210.947620][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.2.1341 Not tainted syzkaller #0 PREEMPT(full) 
[  210.951137][T11389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.955077][T11389] Call Trace:
[  210.956359][T11389]  <TASK>
[  210.957538][T11389]  dump_stack_lvl+0x99/0x250
[  210.959342][T11389]  ? __asan_memcpy+0x40/0x70
[  210.961181][T11389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.963241][T11389]  ? __pfx__printk+0x10/0x10
[  210.965050][T11389]  vpanic+0x281/0x750
[  210.966624][T11389]  ? __pfx_vpanic+0x10/0x10
[  210.968414][T11389]  ? irqentry_exit+0x74/0x90
[  210.970229][T11389]  panic+0xb9/0xc0
[  210.971761][T11389]  ? __pfx_panic+0x10/0x10
[  210.973548][T11389]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  210.975898][T11389]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.978171][T11389]  ? xfrm_alloc_spi+0x570/0xf30
[  210.980065][T11389]  check_panic_on_warn+0x89/0xb0
[  210.981970][T11389]  ? xfrm_alloc_spi+0x570/0xf30
[  210.983871][T11389]  end_report+0x78/0x160
[  210.985592][T11389]  kasan_report+0x129/0x150
[  210.987415][T11389]  ? xfrm_alloc_spi+0x570/0xf30
[  210.989354][T11389]  xfrm_alloc_spi+0x570/0xf30
[  210.991193][T11389]  ? xfrm_alloc_spi+0x2a0/0xf30
[  210.993121][T11389]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  210.995133][T11389]  ? xfrm_find_acq+0x87/0xa0
[  210.996935][T11389]  xfrm_alloc_userspi+0x70b/0xc90
[  210.998905][T11389]  ? apparmor_capable+0x137/0x1b0
[  211.000935][T11389]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  211.003149][T11389]  ? __nla_parse+0x40/0x60
[  211.004905][T11389]  xfrm_user_rcv_msg+0x7a3/0xab0
[  211.006878][T11389]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  211.008973][T11389]  ? __pfx___mutex_trylock_common+0x10/0x10
[  211.011334][T11389]  ? rcu_is_watching+0x15/0xb0
[  211.013281][T11389]  ? trace_contention_end+0x39/0x120
[  211.015402][T11389]  ? __mutex_lock+0x335/0x1350
[  211.017311][T11389]  netlink_rcv_skb+0x208/0x470
[  211.019256][T11389]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  211.021369][T11389]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  211.023413][T11389]  ? netlink_deliver_tap+0x2e/0x1b0
[  211.025390][T11389]  ? netlink_deliver_tap+0x2e/0x1b0
[  211.027236][T11389]  xfrm_netlink_rcv+0x79/0x90
[  211.029047][T11389]  netlink_unicast+0x82f/0x9e0
[  211.030929][T11389]  ? __pfx_netlink_unicast+0x10/0x10
[  211.033051][T11389]  ? netlink_sendmsg+0x642/0xb30
[  211.035017][T11389]  ? skb_put+0x11b/0x210
[  211.036479][T11389]  netlink_sendmsg+0x805/0xb30
[  211.038108][T11389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  211.039912][T11389]  ? aa_sock_msg_perm+0xf1/0x1d0
[  211.041580][T11389]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  211.043410][T11389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  211.045282][T11389]  __sock_sendmsg+0x21c/0x270
[  211.046810][T11389]  ____sys_sendmsg+0x505/0x830
[  211.048272][T11389]  ? __pfx_____sys_sendmsg+0x10/0x10
[  211.049971][T11389]  ? import_iovec+0x74/0xa0
[  211.051512][T11389]  ___sys_sendmsg+0x21f/0x2a0
[  211.052984][T11389]  ? __pfx____sys_sendmsg+0x10/0x10
[  211.054729][T11389]  ? __fget_files+0x2a/0x420
[  211.056478][T11389]  ? __fget_files+0x3a0/0x420
[  211.058291][T11389]  __x64_sys_sendmsg+0x19b/0x260
[  211.060169][T11389]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  211.061957][T11389]  ? rcu_is_watching+0x15/0xb0
[  211.063647][T11389]  ? do_syscall_64+0xbe/0x3b0
[  211.065115][T11389]  do_syscall_64+0xfa/0x3b0
[  211.066538][T11389]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.068169][T11389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.070150][T11389]  ? exc_page_fault+0x9f/0xf0
[  211.071869][T11389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.073933][T11389] RIP: 0033:0x7f8fb9b8eba9
[  211.075417][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.081268][T11389] RSP: 002b:00007f8fbaab1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  211.083997][T11389] RAX: ffffffffffffffda RBX: 00007f8fb9dd5fa0 RCX: 00007f8fb9b8eba9
[  211.086506][T11389] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  211.089016][T11389] RBP: 00007f8fb9c11e19 R08: 0000000000000000 R09: 0000000000000000
[  211.091744][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.094396][T11389] R13: 00007f8fb9dd6038 R14: 00007f8fb9dd5fa0 R15: 00007ffdb11038d8
[  211.097033][T11389]  </TASK>
[  211.098719][T11389] Kernel Offset: disabled
[  211.100250][T11389] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:32:05  Registers:
info registers vcpu 0

CPU#0
RAX=b15983c162b69b00 RBX=ffffffff819683f8 RCX=b15983c162b69b00 RDX=0000000000000001
RSI=ffffffff8d9ba15e RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b13f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000028322000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1895612e53
XMM06=0000000000000000 00007f1895612e4d XMM07=0000000000000000 00007f1895612e61
XMM08=0000000000000000 00007f1895612ee7 XMM09=0000000000000000 00007f1895612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900034969f0
R8 =ffff888106cc0237 R9 =1ffff11020d98046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028c8 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8fbaab16c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8fbaab0fc8 CR3=00000000330ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff001a000a 0000010000110208
XMM02=0000ffffffffffff 001a000a00000100 XMM03=00110208001a000a 0000010000110208
XMM04=00007fc82610d100 00007fc8255a7460 XMM05=00007fc8255a7478 00007fc8255a74c0
XMM06=00007fc8255a74b8 00007fc8255a74b0 XMM07=00007fc8255a74a8 00007fc8255a74a0
XMM08=0000000000000000 00007fc825412ee7 XMM09=0000000000000000 00007fc825412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
