last executing test programs:

994.500648ms ago: executing program 1 (id=1631):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb6", 0x408}], 0x1}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

934.803652ms ago: executing program 1 (id=1632):
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x6, 0x6, 0x7fff, 0xc}, 0x8) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r2=>0x0, 0xb, 0x10}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r2, 0xd9400000}, 0x8) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x0, 0x1}, 0x6) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x110, r1, 0x2a3e6000)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x2c, @local, 0x4e20, 0x2, 'lblcr\x00', 0x0, 0x6, 0x6a}, {@empty, 0x4e20, 0x2000, 0xd4a6, 0x81, 0x24bc}}, 0x44) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x329, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8)
socketpair(0x29, 0x1, 0xdaa3, &(0x7f0000000500)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
bind$802154_dgram(r8, &(0x7f0000000540)={0x24, @none={0x0, 0x3}}, 0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x800) (async)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r10=>0xffffffffffffffff})
getsockname$inet(r10, &(0x7f0000000700)={0x2, 0x0, @initdev}, &(0x7f0000000740)=0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6tnl0\x00', <r11=>0x0, 0x2f, 0xb, 0x0, 0x4, 0x0, @mcast1, @local, 0x700, 0x7f28, 0x3, 0xbc}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000880)={'ip_vti0\x00', <r12=>0x0, 0x1, 0x1, 0x81, 0x8, {{0x29, 0x4, 0x2, 0x38, 0xa4, 0x66, 0x0, 0x48, 0x4, 0x0, @rand_addr=0xa73, @multicast1, {[@cipso={0x86, 0x5b, 0x1, [{0x7, 0xe, "7faf5f2742bc37cf9ac3af0a"}, {0x7, 0x6, "f60ef88f"}, {0x7, 0x11, "f26c1ff32389edb022f77dd56c90bd"}, {0x1, 0x3, 'z'}, {0x1, 0x12, "e3590f6b8ad07d6766f0a5f0d910aaf4"}, {0x0, 0x3, 'P'}, {0x6, 0x11, "fd53b7ed1b0065d7627a2972e7c34d"}, {0x6, 0x7, "2d10c0eeb8"}]}, @generic={0x83, 0x12, "198dc2a351658f7b843dcb4301e92fd9"}, @noop, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x1c, 0xe7, 0x1, 0x8, [{@empty, 0x7}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xea}]}]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@delneigh={0x74, 0x1d, 0x200, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r11, 0x40, 0xd, 0x8}, [@NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_VNI={0x8, 0x7, 0xff}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_VNI={0x8, 0x7, 0x7fffffff}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}]}, @NDA_IFINDEX={0x8, 0x8, r12}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x51}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VNI={0x8, 0x7, 0x61db}]}, 0x74}}, 0x4008000)
r13 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_TABLE(r13, 0x29, 0xcf, &(0x7f0000000ac0)=0xfc, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000b00)='ext4_error\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)

934.605462ms ago: executing program 1 (id=1633):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000004c0)="4d5ed663", 0x4}], 0x1}}], 0x2, 0x931766f6319eed40)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x382, 0x0, 0x5, 0x8}, 0x8)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x80, 0x8000}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x64040850)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)

874.415213ms ago: executing program 1 (id=1634):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x8000}) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x18)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x8, <r4=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4, 0x4, 0x8}, 0xc) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async)
recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendfile(r6, r7, 0x0, 0x8) (async)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, r9, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x40448c0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

874.213198ms ago: executing program 1 (id=1635):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000080)={0xd, @remote})

814.69802ms ago: executing program 1 (id=1636):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = accept(r0, &(0x7f0000000080), &(0x7f0000000000)=0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x884)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r0, 0x1)
gettid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40004}}], 0x1, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80))
getgid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = gettid()
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

381.633824ms ago: executing program 2 (id=1644):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000f12f0300000000000000cec38b9f58b2573c005757000080c9db0c689f1514d700000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="040e6b00"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

274.273999ms ago: executing program 2 (id=1645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)

272.152972ms ago: executing program 2 (id=1647):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000400)=""/83, 0x40000000}, 0x20)

210.65572ms ago: executing program 2 (id=1648):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000a00)='syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_mreq(r1, 0x29, 0x372d24b76b22dae7, &(0x7f0000000580)={@empty}, &(0x7f0000000600)=0xffffffeb)
sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="1500030000000000000100009b209279017df26102000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
write(r4, &(0x7f0000000140)="41000200010001", 0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c00018014000300fe80000000000000000000000000002d140004"], 0x1e8}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="020697db5380930f0100000080006a093ae65f2dd16ed16700235633e537ac05df8dd68ae8f015dd2cb66dd322715055ffcc094637e38f2f38728b65f07c659c0cc01b73aff55f84b8d22d488d4fc1fa73145a064815", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0)

210.287265ms ago: executing program 0 (id=1649):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2e0, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x533d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x217}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x51c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8812}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8acc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb9ec2bda}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff60}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd2d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c0c1342}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb2bf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2dd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20048000}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

141.019648ms ago: executing program 2 (id=1650):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x7}, 0x40002102)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r6, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000121540300000000000019e30300060c00078025fe6a40000044ea50979009e037754448d50621dcf2012fab81aa05ec923029e534b75c1b00125861814209000000ceb2552f6bead0185d2bf9897a2cc635401599c17a8dfe04c7c560718bb9654ff8fcc915f0579c5a9f0b65f820e92b5b0bfd28165f5100"/140], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69)
socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket(0x23, 0x80805, 0x0)
getsockopt$llc_int(r9, 0x10c, 0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000000c0)="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", 0xfe)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="170010df670001002cbd7000fcdbeddf0f"], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

136.52347ms ago: executing program 0 (id=1651):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000044)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r4}, 0x20)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r4, 0x6, 0x10, 0x7f}, &(0x7f00000000c0)=0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @private=0xa010101}, {0x301, @local}, 0x28, {0x2, 0x4e23, @multicast1}, 'pim6reg1\x00'})
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x81}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x78, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4885}, 0x0)

129.87087ms ago: executing program 0 (id=1652):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r2, 0x100, 0x8000, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x78}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000ff00280600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0d900209078000000021e1027040400000000000000020000000000"], 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

52.826027ms ago: executing program 0 (id=1653):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb4}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x4020000)

52.381955ms ago: executing program 2 (id=1654):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='kfree_skb\x00', r0, 0x0, 0x10000000004}, 0x18)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x28, r4, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffff}]}]}, 0x28}}, 0x0)

1.391373ms ago: executing program 0 (id=1655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xe, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0xc}]}, 0x1c}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={r1, r2/1000+10000}, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "f314c1f587100d0c2b5b65326623873f1d76986da703d1ec445f0d0ed6710931", "9099b01b8746b7a9c02f4e89e14da5a1309100", "8d5014d9d99679b97d16245e000100000013a04d9e2a00", "fa0e4822b302a98132f2c631f2bc6f8e2401c3e47ec53065b8964db1aeb68136", "64d12b91b222c8b386422bfeedd4d606cb2b1b34888334d87fadfc803ce28566", "c92092fd4dfa3d5b51be5c5a", 0x2, 0x4, 0x8, 0x6, 0xdc5}})

0s ago: executing program 0 (id=1656):
r0 = socket(0x4e52a85c9c71948c, 0x80001, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYBLOB="a4f0687d798ab62b55219547c1cca539e594782215970b0818d6afe1a92e432218dfade59de16fea208e64e1bce66ba44178354f2b16be9cbd962892a1b14c70a083", @ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffcc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0xd1)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='xprtrdma_post_recv\x00', r3, 0x0, 0x2619}, 0x72)
close(0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xfffffffffffffdf9, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=r2, @ANYBLOB="c313424700000000280012800a000100801400100a00"/31, @ANYRES16=r3, @ANYRES8=r4], 0x48}}, 0x4014894)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$rds(r5, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0)
sendto(r0, &(0x7f00000002c0)="7d70804a4770f647198bc89880070beb8b2daf5a1e1f8f825962f43f3b2a8ac270a3751b6c2dcdb937d4fea6e44c2bd5a1e59446df61ec71d4f277eacb3072048fd7debc2f845750bf1a5611a5a12e1a75fe3d768a66b307d07f3a53e9514c3272b6c2cc598b8c2da4b17bae772c44ac05e2c5b1086885638a27624d0bf41d773123f9b163b8800c04edd95cc6398a9ae2ff8a0ba3a6f1f42f6d17e1379757a105795fd0a68aefcbacef35c9de2a01ec8a76b2764ff3fae98608b840938c2d453c7ae6eca8db53ad7aa7878dd1c50fada49860c26f7ea60a0648bd7508e1621c7cff9917d85ce05d7f7e01cdea26", 0xee, 0x40, &(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x22002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x59}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r6, 0x8b2c, &(0x7f0000000040))
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4)
socket(0x11, 0x80a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000000000000700000082"], 0x18}}], 0x1, 0x0)
r7 = socket$inet(0x2, 0xa, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f0000000300)=[{&(0x7f00000004c0)="3900000013000347c3e4feff06000000010000004500000025000000198a97402e9b8fa495f10004000400ad000d0000000000000604e032ba1300f931a76e5aa300", 0x42}], 0x1)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2245' (ED25519) to the list of known hosts.
syzkaller login: [   48.719638][ T5835] cgroup: Unknown subsys name 'net'
[   48.826454][ T5835] cgroup: Unknown subsys name 'cpuset'
[   48.830419][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.260087][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.909353][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.924931][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.928263][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.932116][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.953728][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.972883][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.975390][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.978536][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.979134][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.984894][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.989010][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.993709][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.997616][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.001410][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.007589][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.283913][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.289105][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   54.349983][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   54.434536][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.437369][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.439969][ T5844] bridge_slave_0: entered allmulticast mode
[   54.442731][ T5844] bridge_slave_0: entered promiscuous mode
[   54.458175][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.460471][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.464799][ T5844] bridge_slave_1: entered allmulticast mode
[   54.468463][ T5844] bridge_slave_1: entered promiscuous mode
[   54.471713][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.474870][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.477337][ T5852] bridge_slave_0: entered allmulticast mode
[   54.480173][ T5852] bridge_slave_0: entered promiscuous mode
[   54.495282][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.498352][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.501346][ T5852] bridge_slave_1: entered allmulticast mode
[   54.504735][ T5852] bridge_slave_1: entered promiscuous mode
[   54.563699][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.569230][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.576137][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.587744][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.590104][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.596126][ T5848] bridge_slave_0: entered allmulticast mode
[   54.598994][ T5848] bridge_slave_0: entered promiscuous mode
[   54.603604][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.631190][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.633813][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.636165][ T5848] bridge_slave_1: entered allmulticast mode
[   54.638850][ T5848] bridge_slave_1: entered promiscuous mode
[   54.657022][ T5844] team0: Port device team_slave_0 added
[   54.675544][ T5844] team0: Port device team_slave_1 added
[   54.679528][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.684092][ T5852] team0: Port device team_slave_0 added
[   54.687912][ T5852] team0: Port device team_slave_1 added
[   54.703287][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.750619][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.754216][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.763255][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.768558][ T5848] team0: Port device team_slave_0 added
[   54.770976][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.774972][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.783954][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.788209][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.790576][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.799230][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.804268][ T5848] team0: Port device team_slave_1 added
[   54.806726][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.809054][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.817997][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.876838][ T5844] hsr_slave_0: entered promiscuous mode
[   54.880160][ T5844] hsr_slave_1: entered promiscuous mode
[   54.885076][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.888041][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.899161][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.914461][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.916767][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.928558][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.979897][ T5852] hsr_slave_0: entered promiscuous mode
[   54.983904][ T5852] hsr_slave_1: entered promiscuous mode
[   54.987197][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   54.990015][ T5852] Cannot create hsr debugfs directory
[   55.040532][ T5848] hsr_slave_0: entered promiscuous mode
[   55.044118][ T5848] hsr_slave_1: entered promiscuous mode
[   55.047166][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   55.049627][ T5848] Cannot create hsr debugfs directory
[   55.258592][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.267760][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.275977][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.280767][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.311836][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.322671][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.327496][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.332169][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.388767][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.399087][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.406833][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.411895][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.470649][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.481361][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.497014][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   55.510392][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.513048][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.519759][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   55.530434][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.535541][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.537937][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.541191][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.543577][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.556864][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.559387][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.600555][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.624284][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.627016][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.631394][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.633852][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.734247][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.776265][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.806077][ T5848] veth0_vlan: entered promiscuous mode
[   55.821316][ T5848] veth1_vlan: entered promiscuous mode
[   55.841203][ T5844] veth0_vlan: entered promiscuous mode
[   55.849743][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.859554][ T5844] veth1_vlan: entered promiscuous mode
[   55.890125][ T5848] veth0_macvtap: entered promiscuous mode
[   55.907144][ T5848] veth1_macvtap: entered promiscuous mode
[   55.913552][ T5844] veth0_macvtap: entered promiscuous mode
[   55.927093][ T5844] veth1_macvtap: entered promiscuous mode
[   55.934515][ T5852] veth0_vlan: entered promiscuous mode
[   55.940158][ T5852] veth1_vlan: entered promiscuous mode
[   55.956626][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.968389][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.978644][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.990272][ T5720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.998604][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.003988][ T5720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.011103][ T5720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.016104][ T5720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.024346][ T5851] Bluetooth: hci2: command tx timeout
[   56.024352][ T5850] Bluetooth: hci1: command tx timeout
[   56.033834][ T5851] Bluetooth: hci0: command tx timeout
[   56.042509][ T5720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.047323][ T5852] veth0_macvtap: entered promiscuous mode
[   56.053916][ T5720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.060348][ T5720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.068218][ T5852] veth1_macvtap: entered promiscuous mode
[   56.073730][ T5720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.103686][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.125028][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.159413][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.168895][  T708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.172680][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.178535][  T708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.179801][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.201324][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.247156][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.251139][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.267118][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.272482][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.325309][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.328669][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.345718][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.355242][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.357949][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.414390][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.419077][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.445803][ T5915] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   56.596777][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.622162][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.641487][ T5932] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8'.
[   56.648473][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'.
[   56.651495][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'.
[   56.995997][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'.
[   57.218208][ T5986] Zero length message leads to an empty skb
[   57.296740][ T5997] macvlan2: entered allmulticast mode
[   57.299751][ T5997] veth1_vlan: entered allmulticast mode
[   57.308795][ T5997] veth1_vlan: left allmulticast mode
[   57.422443][ T6007] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   57.601353][ T6010] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.610007][ T6010] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   57.696514][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'.
[   57.880538][ T6034] IPVS: nq: FWM 3 0x00000003 - no destination available
[   57.883071][   T47] IPVS: starting estimator thread 0...
[   57.885516][    C1] IPVS: nq: FWM 3 0x00000003 - no destination available
[   57.973502][ T6035] IPVS: using max 82 ests per chain, 196800 per kthread
[   58.103467][ T5851] Bluetooth: hci0: command tx timeout
[   58.103978][ T5850] Bluetooth: hci2: command tx timeout
[   58.113162][ T5850] Bluetooth: hci1: command tx timeout
[   58.321622][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.0.50'.
[   58.631521][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'.
[   58.771941][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   58.775674][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   59.271156][ T6153] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   59.691222][ T6164] bridge1: entered promiscuous mode
[   59.733063][ T6164] bridge1: entered allmulticast mode
[   59.858908][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'.
[   59.904584][ T6176] vlan2: entered allmulticast mode
[   60.001679][ T6190] netlink: del zone limit has 4 unknown bytes
[   60.183175][ T5850] Bluetooth: hci1: command tx timeout
[   60.184182][ T5851] Bluetooth: hci0: command tx timeout
[   60.185422][ T5850] Bluetooth: hci2: command tx timeout
[   60.240414][ T6210] netlink: 'syz.1.87': attribute type 5 has an invalid length.
[   60.271609][ T5786] IPVS: starting estimator thread 0...
[   60.276392][ T6216] IPVS: nq: FWM 3 0x00000003 - no destination available
[   60.278900][    C0] IPVS: nq: FWM 3 0x00000003 - no destination available
[   60.367453][ T6217] IPVS: using max 82 ests per chain, 196800 per kthread
[   60.457907][ T6238] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   60.463945][ T6235] tipc: Started in network mode
[   60.465619][ T6235] tipc: Node identity 569b2c21f9a5, cluster identity 4711
[   60.473480][ T6235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.476193][ T6237] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   60.482413][ T6235] tipc: Resetting bearer <eth:syzkaller0>
[   61.473609][   T24] tipc: Node number set to 2940087329
[   61.660137][ T6227] tipc: Disabling bearer <eth:syzkaller0>
[   61.802344][ T6296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.961792][ T6312] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   61.968465][ T6312] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   62.041578][ T6321] __nla_validate_parse: 17 callbacks suppressed
[   62.041587][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'.
[   62.058568][ T6327] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[   62.065951][ T6327] IPVS: set_ctl: invalid protocol: 171 172.30.0.1:20004
[   62.146249][ T6335] openvswitch: netlink: Duplicate or invalid key (type 0).
[   62.149330][ T6335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.160960][ T6335] syz_tun: entered allmulticast mode
[   62.167579][ T6335] dvmrp6: entered allmulticast mode
[   62.182551][ T6334] syz_tun: left allmulticast mode
[   62.185145][ T6334] dvmrp6: left allmulticast mode
[   62.254174][ T6344] xt_HMARK: proto mask must be zero with L3 mode
[   62.264103][ T5846] Bluetooth: hci0: command tx timeout
[   62.265916][ T5846] Bluetooth: hci1: command tx timeout
[   62.274096][ T5846] Bluetooth: hci2: command tx timeout
[   62.426926][ T6345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'.
[   62.429937][ T6345] netlink: 216 bytes leftover after parsing attributes in process `syz.0.133'.
[   62.869957][ T6375] netlink: 'syz.2.147': attribute type 5 has an invalid length.
[   63.105736][ T6382] netlink: 'syz.0.149': attribute type 13 has an invalid length.
[   63.239966][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   63.247327][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'.
[   63.250872][ T6393] netlink: 38 bytes leftover after parsing attributes in process `syz.1.151'.
[   63.406554][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   63.464328][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   63.684631][ T6418] netlink: 88 bytes leftover after parsing attributes in process `syz.1.159'.
[   63.807465][ T6434] netlink: 164 bytes leftover after parsing attributes in process `syz.2.164'.
[   64.301386][ T6471] bridge_slave_1: left allmulticast mode
[   64.306068][ T6471] bridge_slave_1: left promiscuous mode
[   64.309816][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.332718][ T6471] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   64.353391][ T5846] Bluetooth: hci2: command tx timeout
[   64.639030][ T6508] IPVS: set_ctl: invalid protocol: 135 172.20.20.61:19962
[   64.774544][ T6530] IPVS: nq: FWM 3 0x00000003 - no destination available
[   64.777683][ T5909] IPVS: starting estimator thread 0...
[   64.785970][    C0] IPVS: nq: FWM 3 0x00000003 - no destination available
[   64.894165][ T6532] IPVS: using max 82 ests per chain, 196800 per kthread
[   65.184091][ T6585] netlink: zone id is out of range
[   65.187356][ T6585] netlink: zone id is out of range
[   65.190927][ T6585] netlink: zone id is out of range
[   65.192738][ T6585] netlink: zone id is out of range
[   65.195903][ T6585] netlink: zone id is out of range
[   65.197811][ T6585] netlink: zone id is out of range
[   65.199572][ T6585] netlink: zone id is out of range
[   65.280918][ T6600] netlink: 'syz.0.216': attribute type 2 has an invalid length.
[   65.288371][ T6600] netlink: 'syz.0.216': attribute type 2 has an invalid length.
[   65.291853][ T6581] netlink: 'syz.1.212': attribute type 13 has an invalid length.
[   65.297935][ T6581] netlink: 'syz.1.212': attribute type 17 has an invalid length.
[   65.412342][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.573784][  T974] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[   65.583283][  T974] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   66.325199][ T6621] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   66.400311][ T6700] Bluetooth: MGMT ver 1.23
[   67.060872][ T6753] syz.1.272 (6753) used greatest stack depth: 19736 bytes left
[   67.201658][ T6781] bridge_slave_0: left allmulticast mode
[   67.205255][ T6781] bridge_slave_0: left promiscuous mode
[   67.209088][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.215448][ T6781] bridge_slave_1: left allmulticast mode
[   67.217322][ T6781] bridge_slave_1: left promiscuous mode
[   67.219852][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.228052][ T6781] bond0: (slave bond_slave_0): Releasing backup interface
[   67.232802][ T6781] bond0: (slave bond_slave_1): Releasing backup interface
[   67.241684][ T6781] team0: Port device team_slave_0 removed
[   67.252353][ T6781] team0: Port device team_slave_1 removed
[   67.255390][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.257769][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.260972][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.265273][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.338871][ T6796] __nla_validate_parse: 24 callbacks suppressed
[   67.338881][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'.
[   67.385428][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'.
[   67.515372][ T6829] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   67.543609][ T5846] Bluetooth: hci0: command 0x0401 tx timeout
[   67.573249][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'.
[   67.635353][ T6842] netlink: 'syz.1.296': attribute type 16 has an invalid length.
[   67.638506][ T6842] netlink: 'syz.1.296': attribute type 17 has an invalid length.
[   67.850371][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'.
[   67.942700][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.034947][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'.
[   68.442328][ T6956] netlink: 'syz.0.330': attribute type 1 has an invalid length.
[   68.750137][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   68.750150][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   68.759637][ T6988] veth1_macvtap: left promiscuous mode
[   68.776733][ T6986] netlink: 'syz.1.339': attribute type 12 has an invalid length.
[   68.780111][ T6986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.339'.
[   68.825770][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'.
[   68.880341][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'.
[   68.915362][ T7008] netlink: 'syz.1.346': attribute type 2 has an invalid length.
[   68.950762][ T7011] xfrm1: entered promiscuous mode
[   68.952464][ T7011] xfrm1: entered allmulticast mode
[   69.040233][ T7015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.097422][ T7015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.163901][ T7015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.225055][ T7015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.295274][ T5720] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.308822][ T5720] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.320048][ T5720] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.328384][ T5720] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.442778][ T7025] netlink: 'syz.1.353': attribute type 1 has an invalid length.
[   69.586543][ T7018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.707908][ T7057] net_ratelimit: 25 callbacks suppressed
[   69.707917][ T7057] IPVS: nq: FWM 3 0x00000003 - no destination available
[   69.712072][    C0] IPVS: nq: FWM 3 0x00000003 - no destination available
[   69.903706][ T7083] IPVS: nq: FWM 3 0x00000003 - no destination available
[   69.906032][    C0] IPVS: nq: FWM 3 0x00000003 - no destination available
[   70.986898][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.989674][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.996707][ T7181] x_tables: ip_tables: udp match: only valid for protocol 17
[   71.006399][ T7181] netlink: 'syz.2.409': attribute type 11 has an invalid length.
[   71.690175][ T7217] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   72.390758][ T7264] tipc: Enabling of bearer <et:g> rejected, media not registered
[   72.626774][ T7279] netlink: 'syz.1.444': attribute type 1 has an invalid length.
[   72.650373][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.664742][ T7279] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.667697][ T7279] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   72.672225][ T7279] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   72.726209][ T7283] veth7: entered promiscuous mode
[   72.733769][ T7300] __nla_validate_parse: 18 callbacks suppressed
[   72.733778][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[   72.742101][ T7283] bond1: (slave veth7): Enslaving as an active interface with a down link
[   72.768176][ T7279] erspan0: entered allmulticast mode
[   72.782331][ T7279] bond1: (slave erspan0): making interface the new active one
[   72.792149][ T7279] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   72.868727][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'.
[   73.539963][ T7344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.465'.
[   73.572762][ T7346] team0: No ports can be present during mode change
[   73.575598][ T7346] team0: No ports can be present during mode change
[   73.578109][ T7346] team0: No ports can be present during mode change
[   73.580570][ T7346] team0: No ports can be present during mode change
[   73.584695][ T7346] team0: No ports can be present during mode change
[   73.587991][ T7346] team0: No ports can be present during mode change
[   73.591435][ T7346] team0: No ports can be present during mode change
[   73.594764][ T7346] team0: No ports can be present during mode change
[   73.597166][ T7346] team0: No ports can be present during mode change
[   73.599614][ T7346] team0: No ports can be present during mode change
[   73.604924][ T7346] team0: No ports can be present during mode change
[   73.607734][ T7346] team0: No ports can be present during mode change
[   73.610448][ T7346] team0: No ports can be present during mode change
[   73.616512][ T7346] team0: No ports can be present during mode change
[   73.619246][ T7346] team0: No ports can be present during mode change
[   73.621836][ T7346] team0: No ports can be present during mode change
[   73.626497][ T7346] team0: No ports can be present during mode change
[   73.629826][ T7346] team0: No ports can be present during mode change
[   73.638305][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[   73.641644][ T7346] team0: No ports can be present during mode change
[   73.647465][ T7346] team0: No ports can be present during mode change
[   73.650271][ T7346] team0: No ports can be present during mode change
[   73.654540][ T7346] team0: No ports can be present during mode change
[   73.658059][ T7346] team0: No ports can be present during mode change
[   73.660713][ T7346] team0: No ports can be present during mode change
[   73.671374][ T7346] team0: No ports can be present during mode change
[   73.674609][ T7346] team0: No ports can be present during mode change
[   73.676834][ T7346] team0: No ports can be present during mode change
[   73.679012][ T7346] team0: No ports can be present during mode change
[   73.681220][ T7346] team0: No ports can be present during mode change
[   73.685045][ T7346] team0: No ports can be present during mode change
[   73.689703][ T7346] team0: No ports can be present during mode change
[   73.692020][ T7346] team0: No ports can be present during mode change
[   73.694842][ T7346] team0: No ports can be present during mode change
[   73.701194][ T7352] IPVS: nq: FWM 3 0x00000003 - no destination available
[   73.708241][    C1] IPVS: nq: FWM 3 0x00000003 - no destination available
[   74.452721][ T7406] IPVS: nq: FWM 3 0x00000003 - no destination available
[   74.457580][    C0] IPVS: nq: FWM 3 0x00000003 - no destination available
[   74.732447][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'.
[   74.771311][ T7441] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[   74.811165][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.832116][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.834596][ T7441] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.839248][ T7441] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   74.891673][ T7445] veth9: entered promiscuous mode
[   74.901826][ T7447] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[   74.905190][ T7445] bond2: (slave veth9): Enslaving as an active interface with a down link
[   74.908450][ T7447] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[   74.914061][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.501'.
[   74.917447][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.966120][ T7447] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[   74.995284][ T7447] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.026051][ T7447] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   75.156325][ T7471] netlink: 'syz.2.511': attribute type 4 has an invalid length.
[   75.205118][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[   75.217106][ T7478] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   75.879089][ T7523] netlink: 80 bytes leftover after parsing attributes in process `syz.0.523'.
[   76.043944][ T7478] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   76.799221][ T7585] openvswitch: netlink: Unknown key attributes 2
[   77.313955][ T5846] Bluetooth: hci0: command 0x0401 tx timeout
[   77.460168][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'.
[   77.547227][ T7660] netlink: 92 bytes leftover after parsing attributes in process `syz.0.564'.
[   77.555976][ T7660] netlink: 'syz.0.564': attribute type 13 has an invalid length.
[   77.559285][ T7660] netlink: 'syz.0.564': attribute type 17 has an invalid length.
[   77.598659][ T7660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.022769][ T7714] __nla_validate_parse: 1 callbacks suppressed
[   78.022782][ T7714] netlink: 96 bytes leftover after parsing attributes in process `syz.0.583'.
[   78.180449][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[   78.193698][ T7732] IPVS: Unknown mcast interface: vcan0
[   78.310449][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[   78.481995][   T33] audit: type=1804 audit(1756954950.619:2): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.594" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1151 res=1 errno=0
[   78.490625][   T33] audit: type=1800 audit(1756954950.619:3): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.594" name="cgroup.controllers" dev="tmpfs" ino=1151 res=0 errno=0
[   78.499423][   T33] audit: type=1800 audit(1756954950.639:4): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.594" name="cgroup.controllers" dev="tmpfs" ino=1151 res=0 errno=0
[   78.579569][ T7765] netlink: 786 bytes leftover after parsing attributes in process `syz.1.595'.
[   78.582761][ T7745] infiniband syz!: set active
[   78.589297][ T7745] infiniband syz!: added team_slave_0
[   78.654479][ T7745] RDS/IB: syz!: added
[   78.663700][ T7745] smc: adding ib device syz! with port count 1
[   78.666916][ T7745] smc:    ib device syz! port 1 has pnetid 
[   78.821375][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.600'.
[   79.186060][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'.
[   79.217016][ T7813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.610'.
[   79.362811][ T7816] syzkaller1: entered promiscuous mode
[   79.366094][ T7816] syzkaller1: entered allmulticast mode
[   79.719734][ T7831] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.886803][ T7848] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[   79.932193][ T7848] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.941362][ T7848] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[   79.972351][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'.
[   79.983434][ T7848] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[   80.059100][ T7847] bond3 (unregistering): Released all slaves
[   80.077175][ T7848] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   80.096351][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[   80.257888][ T7867] syzkaller0: entered promiscuous mode
[   80.260329][ T7867] syzkaller0: entered allmulticast mode
[   80.265268][ T5875] syzkaller0: tun_net_xmit 70
[   80.267699][ T7867] syzkaller0: tun_chr_ioctl cmd 1074025677
[   80.270306][ T7867] syzkaller0: Linktype set failed because interface is up
[   80.537043][ T7882] bond1: (slave wlan0): Releasing active interface
[   80.569037][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.635'.
[   80.587697][ T7882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.668024][ T7884] vti0: entered promiscuous mode
[   80.988664][ T7894] netlink: 'syz.2.641': attribute type 2 has an invalid length.
[   81.127132][ T7898] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[   81.226777][   T10] cfg80211: failed to load regulatory.db
[   81.617194][ T7939] openvswitch: netlink: Flow actions attr not present in new flow.
[   99.067585][ T7996] __nla_validate_parse: 20 callbacks suppressed
[   99.067595][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'.
[   99.074569][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.666'.
[   99.078232][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'.
[   99.081934][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.666'.
[   99.086931][ T7996] netlink: 5 bytes leftover after parsing attributes in process `syz.1.666'.
[   99.092125][ T7996] netlink: 'syz.1.666': attribute type 16 has an invalid length.
[   99.095442][ T7996] netlink: 'syz.1.666': attribute type 17 has an invalid length.
[   99.141749][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.157031][ T8000] IPv6: NLM_F_REPLACE set, but no existing node found!
[   99.221877][ T7996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.229057][ T7996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.416707][ T5720] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.420154][ T5720] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.425089][ T5720] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.428530][ T5720] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.555810][ T8012] netlink: 60 bytes leftover after parsing attributes in process `syz.1.672'.
[   99.561058][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[   99.598358][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'.
[   99.632742][ T8014] delete_channel: no stack
[   99.761154][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'.
[   99.887777][ T8035] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   99.908675][ T8041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.680'.
[  100.007615][ T8055] netlink: 'syz.2.688': attribute type 20 has an invalid length.
[  100.021658][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.027680][ T8055] netlink: 'syz.2.688': attribute type 20 has an invalid length.
[  100.032154][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.037898][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.042843][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.055970][ T8055] netlink: 'syz.2.688': attribute type 20 has an invalid length.
[  100.089756][ T8061] netlink: 'syz.2.689': attribute type 3 has an invalid length.
[  100.105037][ T8061] syz_tun: entered allmulticast mode
[  100.123311][ T8064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.126748][ T8064] batadv_slave_0: entered allmulticast mode
[  100.171956][ T8060] syz_tun: left allmulticast mode
[  100.208673][ T8070] syzkaller1: entered promiscuous mode
[  100.210919][ T8070] syzkaller1: entered allmulticast mode
[  100.217152][ T8070] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  100.394103][ T8076] netlink: 'syz.2.692': attribute type 12 has an invalid length.
[  101.329871][ T8125] netlink: 'syz.2.710': attribute type 9 has an invalid length.
[  102.079180][ T8137] netlink: 'syz.0.715': attribute type 10 has an invalid length.
[  102.090254][ T8137] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  103.166848][ T8211] netlink: 'syz.2.732': attribute type 1 has an invalid length.
[  104.366586][ T8276] __nla_validate_parse: 9 callbacks suppressed
[  104.366600][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.757'.
[  104.501562][ T8281] netlink: 'syz.1.759': attribute type 1 has an invalid length.
[  104.507888][ T8281] netlink: 'syz.1.759': attribute type 12 has an invalid length.
[  104.611444][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'.
[  105.497591][ T8345] IPVS: set_ctl: invalid protocol: 96 0.0.0.0:20004
[  105.640614][ T8357] netlink: 'syz.2.786': attribute type 1 has an invalid length.
[  105.778079][ T8369] netlink: 348 bytes leftover after parsing attributes in process `syz.2.791'.
[  105.795044][ T8369] netlink: 'syz.2.791': attribute type 1 has an invalid length.
[  105.891301][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[  106.078382][ T8389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.797'.
[  106.314072][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'.
[  106.350623][ T8416] netlink: 'syz.0.808': attribute type 23 has an invalid length.
[  106.437086][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'.
[  106.511996][ T8431] ieee802154 phy0 wpan0: encryption failed: -22
[  106.576080][ T8436] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  106.951017][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[  107.021897][ T8480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.835'.
[  107.040062][ T8480] pim6reg1: entered promiscuous mode
[  107.053765][ T8480] pim6reg1: entered allmulticast mode
[  107.057092][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'.
[  107.059882][ T8484] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  107.069078][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.152601][ T8491] openvswitch: netlink: IP tunnel dst address not specified
[  107.165924][ T8494] netlink: 'syz.1.842': attribute type 29 has an invalid length.
[  107.170275][ T8494] netlink: 'syz.1.842': attribute type 29 has an invalid length.
[  107.175452][ T8495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.178288][ T8494] netlink: 'syz.1.842': attribute type 29 has an invalid length.
[  107.183238][ T8495] syzkaller1: entered promiscuous mode
[  107.185633][ T8495] syzkaller1: entered allmulticast mode
[  107.188321][ T8494] netlink: 'syz.1.842': attribute type 29 has an invalid length.
[  107.190858][ T8494] netlink: 'syz.1.842': attribute type 29 has an invalid length.
[  108.033510][ T8510] tunl0: entered promiscuous mode
[  108.035838][ T8510] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  108.250210][ T8540] batadv_slave_1: entered promiscuous mode
[  108.296259][ T8538] batadv_slave_1: left promiscuous mode
[  108.407703][ T8564] sock: sock_timestamping_bind_phc: sock not bind to device
[  108.422031][ T8569] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  108.766230][ T8596] tipc: Can't bind to reserved service type 0
[  108.976131][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.771287][ T8677] __nla_validate_parse: 5 callbacks suppressed
[  109.771296][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.777445][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.781287][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.784437][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.787536][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.790491][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.793556][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.796584][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.799919][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.804106][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  109.967751][ T8693] validate_nla: 25 callbacks suppressed
[  109.967764][ T8693] netlink: 'syz.0.912': attribute type 83 has an invalid length.
[  110.215691][ T8718] tipc: Started in network mode
[  110.217451][ T8718] tipc: Node identity ffff, cluster identity 4711
[  110.221598][ T8718] tipc: Node number set to 65535
[  110.225059][ T8718] tipc: Cannot configure node identity twice
[  110.589202][ T8774] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  110.722846][ T8795] netlink: 'syz.1.946': attribute type 1 has an invalid length.
[  110.755256][ T8781] netlink: 'syz.1.946': attribute type 1 has an invalid length.
[  111.124461][ T8819] netem: change failed
[  112.164453][ T5786] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  112.169989][ T5786] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  112.172802][ T5786] hid-generic 0005:16BF:5505.0002: reserved main item tag 0xe
[  112.178564][ T5786] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  112.194906][ T8876] netlink: 'syz.2.979': attribute type 10 has an invalid length.
[  112.241229][ T8883] openvswitch: netlink: Flow actions attr not present in new flow.
[  112.331576][ T8893] openvswitch: netlink: Flow actions attr not present in new flow.
[  113.733857][ T8957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.776751][ T8967] netlink: 'syz.1.1011': attribute type 4 has an invalid length.
[  114.011050][ T8993] netlink: 'syz.1.1013': attribute type 10 has an invalid length.
[  114.084392][ T8993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.089578][ T8993] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  114.998992][ T9063] __nla_validate_parse: 41 callbacks suppressed
[  114.999001][ T9063] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1042'.
[  115.365225][ T9078] sctp: [Deprecated]: syz.1.1049 (pid 9078) Use of int in max_burst socket option.
[  115.365225][ T9078] Use struct sctp_assoc_value instead
[  115.392156][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'.
[  115.524381][ T9086] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1053'.
[  115.578124][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'.
[  115.581938][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1055'.
[  115.762869][ T9111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'.
[  115.767769][ T9114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1062'.
[  115.831602][ T9122] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  115.843017][ T9122] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  115.847156][ T9122] netlink: 'syz.2.1064': attribute type 12 has an invalid length.
[  116.231206][ T9154] sctp: [Deprecated]: syz.2.1074 (pid 9154) Use of int in maxseg socket option.
[  116.231206][ T9154] Use struct sctp_assoc_value instead
[  116.389780][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'.
[  116.394083][ T9158] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  116.427848][ T5786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  116.769839][ T5786] hid-generic 0005:10CF:05DF.0003: unknown main item tag 0x0
[  116.781582][ T5786] hid-generic 0005:10CF:05DF.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  116.970562][ T9201] ieee802154 phy0 wpan0: encryption failed: -22
[  116.980712][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'.
[  116.980736][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'.
[  117.023529][ T5786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  117.938030][ T9253] netlink: 'syz.0.1108': attribute type 6 has an invalid length.
[  117.942482][ T9253] netlink: 'syz.0.1108': attribute type 6 has an invalid length.
[  118.063803][ T9263] tipc: Started in network mode
[  118.065565][ T9263] tipc: Node identity e608c2def24d, cluster identity 4711
[  118.068390][ T9263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.074114][ T9263] syzkaller0: entered promiscuous mode
[  118.075982][ T9263] syzkaller0: entered allmulticast mode
[  118.091878][ T9263] tipc: Resetting bearer <eth:syzkaller0>
[  118.096834][ T9263] netlink: 'syz.0.1111': attribute type 83 has an invalid length.
[  118.101254][ T9262] tipc: Resetting bearer <eth:syzkaller0>
[  118.110264][ T9262] tipc: Disabling bearer <eth:syzkaller0>
[  118.601957][ T9293] atomic_op ffff88803c1c4998 conn xmit_atomic 0000000000000000
[  119.269212][ T9307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.273611][ T9307] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  119.276219][ T9307] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  119.279140][ T9307] tipc: Resetting bearer <eth:syzkaller0>
[  119.288542][ T9307] tipc: Resetting bearer <eth:syzkaller0>
[  119.602128][ T9335] vlan2: entered allmulticast mode
[  120.062430][ T9360] __nla_validate_parse: 16 callbacks suppressed
[  120.062444][ T9360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1150'.
[  120.277441][   T40] tipc: Resetting bearer <eth:syzkaller0>
[  120.387976][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'.
[  121.352448][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'.
[  121.545255][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1170'.
[  121.758940][ T9432] : renamed from bond_slave_0 (while UP)
[  121.871928][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1181'.
[  122.562819][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'.
[  122.567647][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'.
[  122.571686][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'.
[  122.577404][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'.
[  122.581353][ T9463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'.
[  122.823200][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.996932][ T9479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.797139][ T9524] netlink: 'syz.2.1210': attribute type 7 has an invalid length.
[  123.800313][ T9524] netlink: 'syz.2.1210': attribute type 8 has an invalid length.
[  124.035813][ T9538] tipc: Resetting bearer <eth:syzkaller0>
[  124.376392][ T9558] netem: incorrect ge model size
[  124.378413][ T9558] netem: change failed
[  124.766996][ T9583] ..0: renamed from hsr0
[  124.796756][ T9583] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  124.813548][ T9583] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  124.829191][ T9583] ..0: entered allmulticast mode
[  124.831634][ T9583] hsr_slave_0: entered allmulticast mode
[  124.847140][ T9583] hsr_slave_1: entered allmulticast mode
[  124.867889][ T9583] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  125.168414][ T9621] __nla_validate_parse: 65 callbacks suppressed
[  125.168424][ T9621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1226'.
[  125.230992][ T9623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'.
[  125.267879][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'.
[  125.271348][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'.
[  125.280547][ T9623] netlink: 'syz.1.1227': attribute type 5 has an invalid length.
[  125.366133][ T9629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.551135][ T9646] netlink: 'syz.0.1236': attribute type 1 has an invalid length.
[  125.561922][ T9646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1236'.
[  125.662801][ T9650] bridge_slave_0: left promiscuous mode
[  125.672078][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.681695][ T9650] bridge_slave_1: left allmulticast mode
[  125.686168][ T9650] bridge_slave_1: left promiscuous mode
[  125.688127][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.693663][ T9650] bond0: (slave 77): Releasing backup interface
[  125.699647][ T9650] bond0: (slave bond_slave_1): Releasing backup interface
[  125.707877][ T9651] netlink: 'syz.0.1238': attribute type 1 has an invalid length.
[  125.711508][ T9650] team0: Port device team_slave_0 removed
[  125.718425][ T9650] team0: Port device team_slave_1 removed
[  125.720734][ T9650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.724695][ T9650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.727544][ T9650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.735699][ T9650] bond0: (slave netdevsim0): Releasing backup interface
[  125.753381][ T5876] syz!: Port: 1 Link DOWN
[  125.782559][ T9650] bond1 (unregistering): Released all slaves
[  125.861721][ T9651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1238'.
[  126.049719][ T9659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.375726][ T9683] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1251'.
[  126.440822][ T9690] netlink: 'syz.1.1254': attribute type 12 has an invalid length.
[  126.448952][ T9690] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1254'.
[  126.638682][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'.
[  126.641726][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'.
[  127.665148][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.025896][ T9774] ieee802154 phy0 wpan0: encryption failed: -22
[  128.488964][ T9798] syzkaller0: entered promiscuous mode
[  128.491718][ T9798] syzkaller0: entered allmulticast mode
[  128.764465][ T9707] Set syz1 is full, maxelem 65536 reached
[  130.391356][ T9948] __nla_validate_parse: 2 callbacks suppressed
[  130.391367][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1340'.
[  130.447691][ T9948] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1340'.
[  130.516214][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  130.735654][ T9989] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1354'.
[  130.810697][ T9995] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  130.819241][ T9995] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  130.881134][T10000] netlink: 'syz.1.1358': attribute type 3 has an invalid length.
[  130.884348][T10000] netlink: 'syz.1.1358': attribute type 3 has an invalid length.
[  131.719938][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'.
[  132.132981][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'.
[  132.136168][T10040] macsec0: entered allmulticast mode
[  132.249975][T10058] syzkaller1: entered promiscuous mode
[  132.251838][T10058] syzkaller1: entered allmulticast mode
[  132.261881][T10060] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  132.344718][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'.
[  132.418121][T10075] netlink: 'syz.0.1381': attribute type 10 has an invalid length.
[  132.426856][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.429003][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.433717][T10075] 8021q: adding VLAN 0 to HW filter on device team0
[  132.441124][T10075] bond0: (slave team0): Enslaving as an active interface with an up link
[  132.530331][T10088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1390'.
[  132.534329][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'.
[  132.537741][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'.
[  132.656769][T10100] netlink: 'syz.2.1394': attribute type 3 has an invalid length.
[  132.659318][T10100] netlink: 'syz.2.1394': attribute type 1 has an invalid length.
[  132.909290][T10116] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  133.109240][T10131] bridge4: the hash_elasticity option has been deprecated and is always 16
[  133.114733][T10131] bridge4: entered allmulticast mode
[  133.245785][T10137] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  133.439671][T10150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.468559][T10155] netlink: 'syz.1.1413': attribute type 1 has an invalid length.
[  133.486098][T10155] 8021q: adding VLAN 0 to HW filter on device bond5
[  133.496891][T10155] 8021q: adding VLAN 0 to HW filter on device bond5
[  133.499228][T10155] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  133.513264][T10155] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  133.524601][T10159] lo: entered allmulticast mode
[  133.530179][T10159] dvmrp8: entered allmulticast mode
[  133.671576][T10158] lo: left allmulticast mode
[  133.673357][T10158] dvmrp8: left allmulticast mode
[  133.772656][T10174] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  133.789102][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.146425][T10209] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  134.151363][T10209] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  134.156414][T10209] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  134.352024][T10229] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  134.362785][T10232] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.406809][T10326] __nla_validate_parse: 12 callbacks suppressed
[  135.406824][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'.
[  135.413727][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  135.413856][T10328] bridge_slave_1: entered promiscuous mode
[  135.427151][T10328] bridge_slave_1: entered allmulticast mode
[  135.435055][T10326] netlink: 'syz.0.1454': attribute type 8 has an invalid length.
[  136.373838][T10358] netlink: 'syz.1.1466': attribute type 2 has an invalid length.
[  136.378467][T10358] netlink: 'syz.1.1466': attribute type 5 has an invalid length.
[  136.434316][T10368] netlink: 'syz.1.1468': attribute type 1 has an invalid length.
[  136.437644][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'.
[  136.438029][T10370] netlink: 'syz.1.1468': attribute type 1 has an invalid length.
[  136.444572][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'.
[  136.490518][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'.
[  136.548207][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'.
[  136.711134][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'.
[  136.711145][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'.
[  136.715894][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'.
[  136.810381][T10391] netlink: 'syz.1.1474': attribute type 28 has an invalid length.
[  136.810821][T10392] netlink: 'syz.1.1474': attribute type 28 has an invalid length.
[  136.907553][T10395] netlink: 'syz.1.1475': attribute type 12 has an invalid length.
[  136.912492][T10395] netlink: 'syz.1.1475': attribute type 29 has an invalid length.
[  136.917495][T10395] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1475'.
[  136.921343][T10395] netlink: 'syz.1.1475': attribute type 3 has an invalid length.
[  136.925333][T10395] netlink: 'syz.1.1475': attribute type 2 has an invalid length.
[  136.928833][T10395] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1475'.
[  137.549289][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  137.659430][T10473] veth0_to_hsr: entered promiscuous mode
[  137.661963][T10473] veth0_to_hsr: entered allmulticast mode
[  138.092645][T10501] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  138.264721][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  138.901639][T10568] geneve1: entered allmulticast mode
[  139.047734][T10586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  139.287597][T10615] tun0: tun_chr_ioctl cmd 1074025672
[  139.289794][T10615] tun0: ignored: set checksum disabled
[  140.222604][ T5846] Bluetooth: hci2: link tx timeout
[  140.225477][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.491928][T10698] __nla_validate_parse: 17 callbacks suppressed
[  140.492143][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1573'.
[  140.841691][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  141.451861][T10745] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1588'.
[  141.457874][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'.
[  141.461734][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'.
[  141.465761][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1588'.
[  141.556118][T10751] validate_nla: 3 callbacks suppressed
[  141.556129][T10751] netlink: 'syz.0.1590': attribute type 12 has an invalid length.
[  141.780628][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  141.783046][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1596'.
[  141.784604][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1597'.
[  141.832595][T10771] netlink: 4164 bytes leftover after parsing attributes in process `syz.2.1596'.
[  142.274487][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  142.439446][T10833] IPVS: Scheduler module ip_vs_sip not found
[  143.078474][T10890] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[  143.620374][T10925] netlink: 'syz.0.1642': attribute type 39 has an invalid length.
[  143.822830][T10941] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  144.039204][T10955] IPVS: Scheduler module ip_vs_sip not found
[  144.085665][T10960] netlink: 'syz.0.1656': attribute type 4 has an invalid length.
Connection to localhost closed by remote host.
[  145.303191][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  145.345994][ T9800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.398063][ T9800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.454503][ T9800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.513523][ T9800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.032469][ T9800] bond0 (unregistering): (slave team0): Releasing backup interface
[  146.038014][ T9800] bond0 (unregistering): Released all slaves
[  146.111590][ T9800] tipc: Left network mode
[  146.447076][ T9800] hsr_slave_0: left promiscuous mode
[  146.449405][ T9800] hsr_slave_1: left promiscuous mode
[  146.457002][ T9800] veth0_macvtap: left promiscuous mode
[  146.459110][ T9800] veth1_vlan: left promiscuous mode
[  146.461117][ T9800] veth0_vlan: left promiscuous mode
[  146.758685][   T27] smc: removing ib device syz!
[  147.357098][ T9800] IPVS: stop unused estimator thread 0...
[  147.436423][ T9800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.439918][ T9800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.514942][ T9800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.518805][ T9800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.562646][ T9800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.568417][ T9800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.611652][ T9800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.616495][ T9800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.163338][ T9800] bond0 (unregistering): Released all slaves
[  148.231534][ T9800] bond1 (unregistering): Released all slaves
[  148.314718][ T9800] tipc: Left network mode
[  148.435445][ T9800] hsr_slave_0: left promiscuous mode
[  148.437838][ T9800] hsr_slave_1: left promiscuous mode
[  148.452392][ T9800] veth1_macvtap: left promiscuous mode
[  148.455911][ T9800] veth0_macvtap: left promiscuous mode
[  148.457998][ T9800] veth1_vlan: left promiscuous mode
[  148.459720][ T9800] veth0_vlan: left promiscuous mode
[  149.100462][ T9800] IPVS: stop unused estimator thread 0...
[  149.108957][ T9800] ------------[ cut here ]------------
[  149.110909][ T9800] WARNING: CPU: 1 PID: 9800 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  149.115038][ T9800] Modules linked in:
[  149.117426][ T9800] CPU: 1 UID: 0 PID: 9800 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  149.120975][ T9800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.124659][ T9800] Workqueue: netns cleanup_net
[  149.126399][ T9800] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  149.128370][ T9800] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7b 7e 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 3c e1 f7 e8 c4 0d 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 0d 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  149.135296][ T9800] RSP: 0018:ffffc90006427898 EFLAGS: 00010293
[  149.137613][ T9800] RAX: ffffffff8a229dcc RBX: ffff888112462440 RCX: ffff888107611cc0
[  149.140397][ T9800] RDX: 0000000000000000 RSI: ffffffff8dba85e4 RDI: ffff888107611cc0
[  149.143289][ T9800] RBP: ffffc900064279b0 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  149.145901][ T9800] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: ffffffff8f631d40
[  149.148475][ T9800] R13: 1ffff92000c84f40 R14: ffff8881124638c0 R15: dffffc0000000000
[  149.151141][ T9800] FS:  0000000000000000(0000) GS:ffff8881a3c16000(0000) knlGS:0000000000000000
[  149.154331][ T9800] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  149.156521][ T9800] CR2: 0000562c3886f000 CR3: 00000000276b6000 CR4: 00000000000006f0
[  149.159246][ T9800] Call Trace:
[  149.160398][ T9800]  <TASK>
[  149.161377][ T9800]  xfrm_net_exit+0x2d/0x70
[  149.163150][ T9800]  ops_undo_list+0x49a/0x990
[  149.164676][ T9800]  ? __pfx_ops_undo_list+0x10/0x10
[  149.166659][ T9800]  ? do_raw_spin_unlock+0x4d/0x240
[  149.168537][ T9800]  cleanup_net+0x4c5/0x800
[  149.170175][ T9800]  ? __pfx_cleanup_net+0x10/0x10
[  149.172010][ T9800]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.174548][ T9800]  ? process_scheduled_works+0x9ef/0x17b0
[  149.176646][ T9800]  ? process_scheduled_works+0x9ef/0x17b0
[  149.178717][ T9800]  process_scheduled_works+0xae1/0x17b0
[  149.180755][ T9800]  ? __pfx_process_scheduled_works+0x10/0x10
[  149.183359][ T9800]  worker_thread+0x8a0/0xda0
[  149.185088][ T9800]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.187435][ T9800]  ? __kthread_parkme+0x7b/0x200
[  149.189229][ T9800]  kthread+0x711/0x8a0
[  149.190696][ T9800]  ? __pfx_worker_thread+0x10/0x10
[  149.192575][ T9800]  ? __pfx_kthread+0x10/0x10
[  149.194736][ T9800]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.196779][ T9800]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.198678][ T9800]  ? __pfx_kthread+0x10/0x10
[  149.200467][ T9800]  ret_from_fork+0x3fc/0x770
[  149.202197][ T9800]  ? __pfx_ret_from_fork+0x10/0x10
[  149.204594][ T9800]  ? __switch_to_asm+0x39/0x70
[  149.206338][ T9800]  ? __switch_to_asm+0x33/0x70
[  149.208068][ T9800]  ? __pfx_kthread+0x10/0x10
[  149.209745][ T9800]  ret_from_fork_asm+0x1a/0x30
[  149.211518][ T9800]  </TASK>
[  149.212733][ T9800] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  149.215527][ T9800] CPU: 1 UID: 0 PID: 9800 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  149.218997][ T9800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.222943][ T9800] Workqueue: netns cleanup_net
[  149.224781][ T9800] Call Trace:
[  149.225992][ T9800]  <TASK>
[  149.227104][ T9800]  dump_stack_lvl+0x99/0x250
[  149.228564][ T9800]  ? __asan_memcpy+0x40/0x70
[  149.230041][ T9800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.231709][ T9800]  ? __pfx__printk+0x10/0x10
[  149.233156][ T9800]  vpanic+0x281/0x750
[  149.234432][ T9800]  ? __pfx__printk+0x10/0x10
[  149.235979][ T9800]  ? __pfx_vpanic+0x10/0x10
[  149.237509][ T9800]  ? is_bpf_text_address+0x292/0x2b0
[  149.239374][ T9800]  panic+0xb9/0xc0
[  149.240673][ T9800]  ? __pfx_panic+0x10/0x10
[  149.242232][ T9800]  __warn+0x31b/0x4b0
[  149.243787][ T9800]  ? xfrm_state_fini+0x26d/0x2f0
[  149.245617][ T9800]  ? xfrm_state_fini+0x26d/0x2f0
[  149.247547][ T9800]  report_bug+0x2be/0x4f0
[  149.249226][ T9800]  ? xfrm_state_fini+0x26d/0x2f0
[  149.251037][ T9800]  ? xfrm_state_fini+0x26d/0x2f0
[  149.252947][ T9800]  ? xfrm_state_fini+0x26f/0x2f0
[  149.255022][ T9800]  handle_bug+0x84/0x160
[  149.256632][ T9800]  exc_invalid_op+0x1a/0x50
[  149.258486][ T9800]  asm_exc_invalid_op+0x1a/0x20
[  149.260096][ T9800] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  149.261868][ T9800] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 7b 7e 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 3c e1 f7 e8 c4 0d 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 0d 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  149.269056][ T9800] RSP: 0018:ffffc90006427898 EFLAGS: 00010293
[  149.271310][ T9800] RAX: ffffffff8a229dcc RBX: ffff888112462440 RCX: ffff888107611cc0
[  149.274251][ T9800] RDX: 0000000000000000 RSI: ffffffff8dba85e4 RDI: ffff888107611cc0
[  149.277302][ T9800] RBP: ffffc900064279b0 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  149.280304][ T9800] R10: dffffc0000000000 R11: fffffbfff1f47147 R12: ffffffff8f631d40
[  149.282800][ T9800] R13: 1ffff92000c84f40 R14: ffff8881124638c0 R15: dffffc0000000000
[  149.285516][ T9800]  ? xfrm_state_fini+0x26c/0x2f0
[  149.287180][ T9800]  ? xfrm_state_fini+0x26c/0x2f0
[  149.288796][ T9800]  xfrm_net_exit+0x2d/0x70
[  149.290270][ T9800]  ops_undo_list+0x49a/0x990
[  149.291899][ T9800]  ? __pfx_ops_undo_list+0x10/0x10
[  149.293666][ T9800]  ? do_raw_spin_unlock+0x4d/0x240
[  149.295432][ T9800]  cleanup_net+0x4c5/0x800
[  149.296944][ T9800]  ? __pfx_cleanup_net+0x10/0x10
[  149.298660][ T9800]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.300431][ T9800]  ? process_scheduled_works+0x9ef/0x17b0
[  149.302363][ T9800]  ? process_scheduled_works+0x9ef/0x17b0
[  149.304221][ T9800]  process_scheduled_works+0xae1/0x17b0
[  149.306073][ T9800]  ? __pfx_process_scheduled_works+0x10/0x10
[  149.308239][ T9800]  worker_thread+0x8a0/0xda0
[  149.309778][ T9800]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.311897][ T9800]  ? __kthread_parkme+0x7b/0x200
[  149.313546][ T9800]  kthread+0x711/0x8a0
[  149.314918][ T9800]  ? __pfx_worker_thread+0x10/0x10
[  149.316568][ T9800]  ? __pfx_kthread+0x10/0x10
[  149.318082][ T9800]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.319728][ T9800]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.321380][ T9800]  ? __pfx_kthread+0x10/0x10
[  149.323197][ T9800]  ret_from_fork+0x3fc/0x770
[  149.324889][ T9800]  ? __pfx_ret_from_fork+0x10/0x10
[  149.326902][ T9800]  ? __switch_to_asm+0x39/0x70
[  149.328632][ T9800]  ? __switch_to_asm+0x33/0x70
[  149.330176][ T9800]  ? __pfx_kthread+0x10/0x10
[  149.331715][ T9800]  ret_from_fork_asm+0x1a/0x30
[  149.333305][ T9800]  </TASK>
[  149.335023][ T9800] Kernel Offset: disabled
[  149.336427][ T9800] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:03:41  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44cfb RBX=1ffff11026cc7f61 RCX=ffff888024b28000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002dff7e0 RSP=ffffc90002dff660
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44ce3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3140ba1440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=2f6463706368642f 6e75722f7261762f
XMM02=65746174732d6b6f 6f682f6463706368 XMM03=6874652e666e6f63 2e766c6f7365722f
XMM04=0000000000000000 00000000000000ff XMM05=6769652e66635f63 2e006b6e69652e2f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00ff000000000000 XMM09=6874652e666e6f63 2e766c6f7365722f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006427030
R8 =ffff888106a58237 R9 =1ffff11020d4b046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8c7 R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562c3886f000 CR3=00000000276b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000031 0000000031310030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff0000ff00 XMM09=6c6c696b66722f33 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
