last executing test programs:

2m14.388013929s ago: executing program 2 (id=1036):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000002080)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
clock_gettime(0x5, &(0x7f0000000200))
recvmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000003c0)=""/222, 0xde}], 0x2}, 0x80a}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/59, 0x3b}], 0x1, &(0x7f00000004c0)=""/205, 0xcd}, 0x400}, {{&(0x7f0000000240)=@ethernet, 0x80, &(0x7f0000001b40)=[{&(0x7f00000005c0)=""/156, 0x9c}, {&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/252, 0xfc}, {&(0x7f0000001780)=""/65, 0x41}, {&(0x7f0000001800)=""/161, 0xa1}, {&(0x7f00000018c0)=""/221, 0xdd}, {&(0x7f00000019c0)=""/61, 0x3d}, {&(0x7f0000001a00)=""/163, 0xa3}, {&(0x7f0000001ac0)=""/107, 0x6b}], 0xa}}, {{0xfffffffffffffffe, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/207, 0xcf}, {&(0x7f0000001d40)=""/244, 0xf4}], 0x3, &(0x7f0000001e80)=""/29, 0x1d}, 0x13f}], 0x4, 0x10000, &(0x7f0000001fc0)={0x77359400}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x70bd25, 0x25dfdbfd, {0xa, 0x94, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10006}}, 0x1c}}, 0x0)

2m14.381304369s ago: executing program 2 (id=1038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, 0x0, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r9)
sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x3, 0x0, &(0x7f0000000700)="00fdb5", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r12, 0x0, 0xfffffffffffffd2b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000)

2m14.22300907s ago: executing program 0 (id=1040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008041)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="20000000170a01010000000000100000020000009f2c0900010073797a300000"], 0x20}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000040)=0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)

2m13.330138999s ago: executing program 0 (id=1042):
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) (rerun: 32)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000003800)=ANY=[@ANYBLOB="1802000000000000000000000000000185000000d300001b1801000020206925000000c9a72020207b1af8ff00000000bfa100000000000007a2a250255cc7e3e334658896010000f8ffffffb70200850000007b0000009500"/108], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40)={<r8=>0x0, <r9=>0x0})
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x8d43}], 0x1c) (async)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040), 0x6) (async)
ioctl$sock_bt_hci(r11, 0x400448e6, &(0x7f0000000080)="fc") (async)
ioctl$sock_bt_hci(r11, 0x400448e7, &(0x7f0000000080)) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/50, 0x32}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x57}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000002080)=""/115, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/115, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0xfffffffffffffdc7, &(0x7f0000003200)=[{&(0x7f00000009c0)=""/173, 0xa6}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x4, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {0x0}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={r8, r9+10000000})

2m13.32859104s ago: executing program 2 (id=1043):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x0, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xffff}}, @TCA_MATCHALL_ACT={0xfffffffffffffeff}]}}]}, 0x48}}, 0x200448d0)
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
getsockopt$inet_mreqsrc(r3, 0x0, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x38, r4, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}}, 0x20000000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r4, 0x1be380547719fbaf, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5a}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m13.320464441s ago: executing program 0 (id=1044):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)

2m13.179372865s ago: executing program 2 (id=1046):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000007000000000300000000"], 0x0, 0x44}, 0x28)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10)
getuid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
readv(r6, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1)
connect$unix(r5, &(0x7f0000000140)=@abs={0x1}, 0x6e)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m13.178623308s ago: executing program 0 (id=1047):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100007061530224291a5baca799c6e4abe000000000400000800000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x124}}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000002400000085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r3=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in=@local, 0x4e20, 0x3, 0x4e20, 0x8000, 0x2, 0x20, 0x20, 0x4, 0x0, r3}, {0x9, 0xffff, 0x5, 0xb8, 0x4, 0x8, 0x200, 0x5}, {0x80, 0x1, 0x1000000001, 0xeabd}, 0x7, 0x6e6bbc, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0xff}, 0x2, @in6=@loopback, 0x34ff, 0x1, 0x2, 0xb, 0x33, 0xedae, 0x3}}, 0xe8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1", 0xf}], 0x1}}], 0x1, 0x4085)
connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000680)=ANY=[@ANYBLOB='a\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x8c1}, 0x20001800)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0))
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x44}}, 0x0)
r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000005a01000000000000", @ANYRES32=r11, @ANYBLOB="ff0d00b2a300000000efc2010000000000000d46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff}, {0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x6c840}, 0xc0)

2m12.316940647s ago: executing program 0 (id=1050):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3ec}}, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)

2m12.316006618s ago: executing program 2 (id=1051):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f0000000380)=""/34, 0x22}], 0x3}, 0x12000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x10)

2m12.315317551s ago: executing program 0 (id=1052):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x4040090) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

2m12.224661558s ago: executing program 32 (id=1052):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x4040090) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

2m12.177052864s ago: executing program 2 (id=1055):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x117, &(0x7f00000008c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x2, 0x3, 0x109, 0x68, 0x0, 0xef, 0x1, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0xc8, 0x0, 0x9, [0x3ff]}, @cipso={0x86, 0xf, 0x2, [{0x6, 0x9, "b13995a0eb8c53"}]}, @generic={0x89, 0x4, "143e"}]}}, @echo={0x8, 0x0, 0x0, 0x8, 0xa, "4c4522672e9b4359736b43971d2b48ac06b14ff28a2b293296b2ec249821692ddb86252343edcd84ee706cedf4d1dd2703d6f6038dbdd6e81352e0870fe611249d7e15a2482ff7d4f1784d90efb17893ee095bba242a9b65a06be8eb77e713ba84d6f166f3dd7d01e0c7e49ded67e4b7aab7be807f16ad9f249a8761ce6c59828d1e212a10e79bf413878d881b21eb70a689397d66df6110e1254b62642ba22272385119278e16153eba2516e840644c5694b3301e2ea3b5d39bf08382c1da46eeab4f9db7164996e9a38df499d04014bf"}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="55d108b4f917494e72a173100a961f9d8c5c212dda13d8c1a5b07b7a7c0498a535445041b653dd7198cc8babb008c3ae9ec03ad5d35c16a76416df550c3dc4fb3a3f"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x40)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
socket$netlink(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2m12.176555471s ago: executing program 33 (id=1055):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x117, &(0x7f00000008c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x2, 0x3, 0x109, 0x68, 0x0, 0xef, 0x1, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0xc8, 0x0, 0x9, [0x3ff]}, @cipso={0x86, 0xf, 0x2, [{0x6, 0x9, "b13995a0eb8c53"}]}, @generic={0x89, 0x4, "143e"}]}}, @echo={0x8, 0x0, 0x0, 0x8, 0xa, "4c4522672e9b4359736b43971d2b48ac06b14ff28a2b293296b2ec249821692ddb86252343edcd84ee706cedf4d1dd2703d6f6038dbdd6e81352e0870fe611249d7e15a2482ff7d4f1784d90efb17893ee095bba242a9b65a06be8eb77e713ba84d6f166f3dd7d01e0c7e49ded67e4b7aab7be807f16ad9f249a8761ce6c59828d1e212a10e79bf413878d881b21eb70a689397d66df6110e1254b62642ba22272385119278e16153eba2516e840644c5694b3301e2ea3b5d39bf08382c1da46eeab4f9db7164996e9a38df499d04014bf"}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="55d108b4f917494e72a173100a961f9d8c5c212dda13d8c1a5b07b7a7c0498a535445041b653dd7198cc8babb008c3ae9ec03ad5d35c16a76416df550c3dc4fb3a3f"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x40)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
socket$netlink(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

24.900242119s ago: executing program 1 (id=2425):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000180)={r5, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r12, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

24.771870045s ago: executing program 1 (id=2428):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000040000000600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x1000, 0x9, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="4d7e00000000fdffffff2a00000008002f000000000008000200", @ANYRES32=r11, @ANYBLOB="060006000300000006000400ffff0000"], 0x34}, 0x4, 0x700000000000000, 0x0, 0x8010}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x57fecb8d5ddce07b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x24000001)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r12, 0x29, 0x4e, 0x0, &(0x7f0000000040))
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250700000008000100030000000800010001000000080005000000000008000500020000000a00040077"], 0x4c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0)

24.619090377s ago: executing program 1 (id=2431):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'wg1\x00', 0x10})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff9500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='afs_notify_call\x00', r1}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='\a', @ANYRES16=r5, @ANYBLOB="010727bd70000000000016000000"], 0x14}}, 0x14)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4)

23.746820634s ago: executing program 1 (id=2435):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={<r3=>0x0, 0x1}, &(0x7f0000000040)=0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x7, 0x5}, 0x8)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000300)=0x80000000, 0x4)

23.622501873s ago: executing program 1 (id=2437):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x38}}, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xfb5)
r1 = socket(0x8, 0x803, 0xfffffffa)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

23.572158745s ago: executing program 1 (id=2438):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x24, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000)

23.539891317s ago: executing program 34 (id=2438):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x24, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000)

1.500468319s ago: executing program 4 (id=2824):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18)
r7 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080))
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)='INV', 0x3}], 0x1}, 0x40440c2)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x40, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r8}, &(0x7f0000000040), &(0x7f0000000280)=r3}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500010000004000128008000100736974003400028008000300ffffffff0600100006000000050004000100000006000f0000000000060012004e23000008000100", @ANYRES32=r6, @ANYBLOB="74bc47370fed4a1e00df7c648a9f43c43e88f3fd93d94f9eaa62c294ff0f8295559f38ec858361b80400b8318a27f762aceb72e6161b4bdc64cf18dc5d66b1659582a20979fb42c803bd737b927488546aa7c062a47205113c4ef7823647ae6cdecfe1a0feee3de02dd858ec1dfad9ffeebb016da092e8044288ad5cb1193822f4159ac01e1c54ed1cd3a064e222e5551db50a9e494632b2a9aee697937d458ee9c4d1620cf42dcfc4801e6e32555befde28bc1a798f54ca274584c49e31b4dd70e97b950740a875b2db6b2ec263c5b3dfc62f508b625e8d2b0e4c57769ab7b0120b3fed60ad8463c172bed729766c3828d0cec45812d0e71fc65878f80addcef135d74788fcde03eb6122b6068074fff5bb67c56c7c12795caa4d5d78aa265ebca9b781814381e6bb3bbcaeeb5e5b3e196ae81b76833418e01fe30a"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='contention_begin\x00'}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000380001070018370366dc12b06d90fa"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000000})
socket$nl_xfrm(0x10, 0x3, 0x6)

1.130848976s ago: executing program 4 (id=2831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x44, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "468bd48ed14485a2"}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc940df8ae754ae2"}, 0x7}}]}, 0x44}}, 0x0) (async, rerun: 64)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (rerun: 64)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.129969273s ago: executing program 3 (id=2832):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010043000400018010000280060001"], 0x28}, 0x1, 0x0, 0x0, 0x200000a0}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r3)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013001a800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffa, @mcast2}, 0xfffffffffffffe7f)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d)
getsockopt$inet_opts(r7, 0x0, 0x4, 0x0, &(0x7f0000000040))
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
r8 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}, [@TCA_NETEM_RATE={0x14, 0x6, {0x400, 0xd79, 0x2, 0x4}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r11, &(0x7f0000000480), 0x2e9, 0x0)
sendmmsg$inet(r6, &(0x7f0000001600)=[{{&(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x10)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r12 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r12, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

1.040494611s ago: executing program 3 (id=2833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc840)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x10)

1.039964172s ago: executing program 3 (id=2834):
unshare(0x6a040000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e20, 0x9, @loopback, 0x10000}, {0xa, 0x4e24, 0xa4, @mcast2, 0x5}, 0x1, {[0x80000000, 0x8000, 0x0, 0x3, 0x1, 0x7, 0xfffffff9, 0x1]}}, 0x5c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r4}, 0x20)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000380)='tasks\x00', 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000043}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r11 = socket(0x10, 0x3, 0x0)
unshare(0x10000000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r5, 0x20, &(0x7f00000006c0)={&(0x7f0000000880)=""/137, 0x89, <r12=>0x0, &(0x7f0000000a40)=""/194, 0xc2}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xf, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000f40)=""/4096, 0x0, 0x10, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x5, 0x10, 0x4}, 0x10, r12, r10, 0x2, &(0x7f0000000780)=[r6, r5, r5], &(0x7f0000000940)=[{0x3, 0x3, 0x8, 0x8}, {0x4, 0x4, 0x10, 0x3}], 0x10, 0x6}, 0x94)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000"], 0x30}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

1.038915635s ago: executing program 4 (id=2836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffff38000000000000000000000000000aaff020000000000000000000000000001042065586000"], 0xfdef)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_emit_ethernet(0x77, &(0x7f0000000300)=ANY=[@ANYBLOB="f7a0c0391355d1070400f302080047440069000000400d88907800000000e0000002940400009404010000004e24004d907848dbea7a3b5317093db165629db9eb33eba9b0897cc754888d08f97964d142c7b3d9cdf66cd1296dc213487249a04811bbfa7c89bc31cc89097b3bddb70c5722b40255912f"], 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xc}, {0x1c, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x5, 0x2, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000811}, 0x160400c5)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1d96}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

828.885731ms ago: executing program 4 (id=2839):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r0], 0x44}}, 0x0)

760.047737ms ago: executing program 4 (id=2841):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000c009900060000000d0000000800c400f7ffffff0800c30081ffffff"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10040001}, 0x801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9cd213c9566c00648d6751b081bbdaf758d47b", @ANYRES16=0x0, @ANYBLOB="010001000000ffffffff390000000c009900330000000900000018000d801400008005000700010000000500040002000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x20004090)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r9, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)={0x160, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20008801}, 0x4011)
unshare(0x14000000)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
r11 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r11, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r11, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

759.667361ms ago: executing program 3 (id=2842):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
pread64(r2, &(0x7f00000002c0)=""/90, 0x5a, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

660.796202ms ago: executing program 4 (id=2844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x3, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x5}, 0x18)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r4, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}, 0x1c)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

589.888142ms ago: executing program 3 (id=2846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041)
ioctl$SIOCNRDECOBS(r1, 0x89e2)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

530.317635ms ago: executing program 3 (id=2848):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f2331d0fd09627bca133f0c700b1d100142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="00006203ffffffffffffffffffffffff08004a00002000002000fc2f"], 0x32)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310428bd7000fdffffff1600000018000180140002006e6574646576736900"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
close(0x3)

240.42586ms ago: executing program 5 (id=2853):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/74, 0x124000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x6, r2, 0x37, r0}, 0x10)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f00000004c0)={r1})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r7, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "98a5e23844"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "519ed3841831b885067bda438fa46bc1"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "5843a928e1479aa93b25e5"}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "eda540c6b2a0eceb"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20)

176.122909ms ago: executing program 5 (id=2854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10)
getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, &(0x7f00000009c0))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000500)='wlan1\x00', 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1d8, r9, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x3b}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x180, 0x3, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x78, 0x2, "b898859d12a1ae6acdd5e1aca48a11609cb55c2558325d753e03ca02c8e4824ed97e51103ce97622f16e8ee99fd1dce70373be87e4d7822788d4ce5f847c392dd38893cf14fa61f54cddda38056726ae144fcfa6bcb5edf78db1fc48ea7dc7ffcf4d9c4d6e1d496414f22bc4c8bedb9e0a0b02d8"}}, {0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x15, 0x1, "703e8870282bdb2854aeffbb282eed74a2"}}, {0xe4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xdf, 0x1, "2b9d2c7dffa0855c4d547af1fc1067338b93c06feac28dd1428f23d87a8689ea8951421f6e0af4e505ab96f21710018f7baff7f6d371454a48d658747a5825a9b61d4225376983d9750f14070382352275b66d3b2293d0e421cb967f2019c7964248ca68f3242b6486ad6c0c7e008e43efdd7439ad7816312f4c6790ea1682b33fc67d06ac23ab82ca525c3212c1ae7bd197659d4d16e4b887a711308c6bda7703accb67e3bc376d3f6b374bc822c9525198a48585a8e298556b15769da7214bea3e11ae54a7f68c04d33d85c062f086ce586e08d762cfc5aa5a7f"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa21}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1\x00', <r12=>0x0})
r13 = socket(0xa, 0x80000, 0x3)
setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x10, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x5, 0x1, 0x4}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x2d}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2510000000050035000600000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="fbeeaf651b1618e5c0115daa2cc8a428b486db0abd2033a932faaf10b8fa14e8b4052a8b080a700f3b9b4b9aaff40dfd6664c39778083c806a1fc408aa3c7913b8609eb0766ac6aa7210eda38d38031d2f86344c67bdfd37c87fdc"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000004)

144.745307ms ago: executing program 5 (id=2855):
r0 = socket$inet6(0xa, 0x2, 0xfff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"])
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000001400ec00fc02"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

60.504232ms ago: executing program 5 (id=2856):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r0=>0x0})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r0, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r1], 0x44}}, 0x0)

59.379562ms ago: executing program 5 (id=2857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x8, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000180)={'veth0_to_bond\x00', @ifru_settings={0x6f, 0x4, @raw_hdlc=&(0x7f0000000140)}})
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x2, @local, 0x4e21, 0x4, 'lblcr\x00', 0x8, 0xd7, 0x1a}, 0x2c)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x144, 0x32, 0x10, 0x70bd29, 0x25dfdbfd, {0x7}, [@nested={0xc1, 0x58, 0x0, 0x1, [@generic="8480ac5e3749e6cef740e5f86f45ce826b5802c610cc01b53faf161aae293b5e648c730eb5551f11b35293c6b52b3e7ce95c8e1134460533e0c1dafb83f882", @generic="cdbeb18d144acb6a1949edd24d0b0602fa789719db7e4029386debe89f671b8744987125854aec", @generic="1b07dc3d4e3852e12679c1fbc878a05a6f3dcb808d8cbf737f7952bd245e9e28708535411525aca5bf854c7b6aa7291df5f214ac0632356bedc6dcf6a1ba460e767d6d15e7874d483ea8e39b1928df", @typed={0x8, 0x4a, 0x0, 0x0, @fd=r1}]}, @nested={0x62, 0x7c, 0x0, 0x1, [@nested={0x4, 0x1a}, @generic="38245fae238875952362921a69aed5363d66cd3257131829", @generic="bcdb3361e78c6df1cf4f0a2ef0d8af00b887a077dbaaaa8e5f479902511b35d91d4ebdcf393ca982b0a7ddfa8b915b644260f8576a16ba8060d1c2c4ebf6dc6fc2f1"]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x5}]}, 0x144}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000810)
r2 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000440))
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={<r4=>r1})
sendfile(r3, r4, 0x0, 0x8)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x468, 0x3f3, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x14, [0x9, 0xfffffffa, 0x92, 0x7, 0x4, 0x1, 0x6bc, 0xd, 0x10, 0x7, 0x3, 0x8, 0x4, 0x400, 0x0, 0xfffff801, 0x7ff, 0x7ff, 0x9, 0x6, 0xc5c7, 0x9, 0x89, 0x3, 0x9, 0x2, 0x3a3, 0x2, 0xffffffff, 0xfffffffa, 0x5, 0x1, 0xbc, 0x3, 0x6, 0xf, 0x6, 0x560, 0x2, 0xf, 0x800, 0xb7, 0x5, 0x0, 0x7, 0x9, 0x3, 0x2, 0x1, 0x3, 0x1, 0x9, 0x8, 0x0, 0x55, 0x5000000, 0x0, 0x9, 0x3, 0xd7d, 0x2, 0x8, 0x6], [0x8, 0x4641f255, 0x8, 0xf, 0x6, 0xa, 0x2, 0x4, 0x3, 0x6, 0x8000, 0xff, 0xffffff7f, 0xff, 0x3, 0x7fff, 0x1, 0x8, 0x2, 0xff, 0x2, 0x0, 0x37, 0xe, 0x5, 0xfffffff8, 0x2e2, 0x5, 0xdb, 0x2, 0x7, 0x8, 0x0, 0x1, 0xb, 0x4, 0x7fffffff, 0x2, 0x1, 0x8fce, 0x80000000, 0x3, 0x4, 0x32, 0x101, 0xffff, 0x3, 0x1, 0x5, 0xffffffdf, 0x200, 0x7ff, 0xec4, 0x7fff, 0x9, 0xffffffff, 0x2, 0xffff7fff, 0x6, 0x3ff, 0x80000000, 0x6, 0x6, 0xec], [0xe, 0x7, 0x2, 0x80000001, 0xfffffff9, 0x1, 0xd2, 0x7f, 0x7, 0x5, 0x7, 0x0, 0x8, 0xff, 0x5d, 0x10001, 0x6, 0x2, 0xffff510a, 0x7, 0x5, 0x9, 0xa8, 0xfffffff7, 0xb, 0x4, 0x3f, 0x81, 0x1, 0x3, 0xfa, 0x4daa, 0x10, 0x8, 0x6, 0x4, 0x5, 0x8, 0x5a1f2290, 0x4000, 0xd, 0xe, 0x6, 0x1, 0x7f, 0x8, 0x6, 0x7, 0x2, 0x1, 0x1, 0x400, 0x9, 0x6, 0x9, 0x10, 0xfffffffc, 0x8, 0xe9, 0xe069, 0x800, 0x7ff, 0xfffffffa, 0x2], [0x7, 0x3, 0xe1e, 0x0, 0x8b4, 0x9, 0x2, 0xff, 0x7, 0x5, 0x6, 0xfffff3cf, 0x7, 0x2, 0x7fff, 0x7, 0x0, 0x9f05, 0x3, 0x0, 0x2dfb9c66, 0x43, 0xb76e, 0xbb4, 0xfffffff0, 0x1, 0x8, 0x401, 0x7f, 0x79, 0xb3a, 0x2, 0x7, 0x7, 0x2, 0x3, 0x80, 0x0, 0x79, 0x6, 0x28, 0x3, 0x5, 0x4, 0x434, 0x2, 0x81, 0xa, 0x400, 0x6, 0x0, 0x0, 0x800, 0x471d, 0x10000, 0x10000, 0x6, 0x5, 0x6, 0x4, 0xb, 0x1, 0x59, 0xc], 0x46, ['batadv_slave_0\x00', '$!-$&$@\'-/-\x00', ']\x00', 'lblcr\x00', 'lblcr\x00', 'lblcr\x00', 'batadv_slave_0\x00', 'lblcr\x00', '*\x00']}, [""]}, 0x468}, 0x1, 0x0, 0x0, 0x40004}, 0x48014)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000a80), 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00'})
getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000b00), 0x4)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000b40))
ppoll(&(0x7f0000000b80)=[{r3, 0x1044}, {r0, 0x4600}], 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)={[0x7]}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000f80)={<r5=>0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, [0x1ff, 0x1000000000000000, 0x9, 0x1, 0x7, 0x8, 0xe, 0x9, 0x5, 0x8, 0xfe, 0xfffffffffffffff0, 0x2, 0x0, 0x100000000]}, &(0x7f0000001080)=0x100)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001500)={0x1, 0x200, 0xb, 0xfffffffc, <r6=>0x0}, &(0x7f0000001540)=0x10)
sendmmsg$inet_sctp(r4, &(0x7f0000001600)=[{&(0x7f0000000c40)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000c80)="a4dac95c7b2f4cf2f6803cdcc69b44db4ceef9c8529dc9a24aa2f0b038f5a52cd87eafcda3539a4353cb1c25868749ed104987c51fd284d084589694eb462fb1511fac24c23f9c584c5f28958490f83ad20e13fda20fced3d2a17c202c259e9fe6ca9a9d9e48e34474425632031db07a09dfeff16d44db6590edd6df485ab115e93b6097201a3b7e3f6561d31962a8a8b9c399a566d466b91aa225225d7e8717a5543348ef07279025599bd78ea420b745f6d7b054003daee9abd7efce62050e26ccd415", 0xc4}, {&(0x7f0000000d80)="0300df22d2abb0d3a76fcc130f28b7060cf67392d5701e419c6078df3c56b0c6569c5dd37fb3c6e63256a2d3b5b11145e96a5622f27ec8801eb4dc5127754eef79c5d1e36ac81e7a15e6a9bafd2056dde25ab323d9784f8a0b62dcddd6ca4e6b7fb6b803975537974b31d1769211c6740fd29264412c76eca6b96f86d5ded7db09c0d30d78e11030c19c077e5e27758e7ded8f73f46d47d140d69897e7cb809fd0f03e481c80138f9d5acd3dea9c8bc4adb0d05cd3214750e33f9f85c56550da868f7ebe4714f8e2a20bfaaa9b07c12d9f9db7feff406cf5fa95735ff93a83573b87bdcad48648419f32487cf54c6e525d", 0xf1}, {&(0x7f0000000e80)="bd87518a2b3353070540b151a36489260d31eafec91a4f0515fc1f5fc319ed944d69022290e954f3149fa3cfc3eae533b36d769200c4e6dbefe31d71cb5d7bfd6fe3328fa9eb5b64f9e27b46aceeee", 0x4f}, {&(0x7f0000000f00)="a09b4bed22015971a0e985f9fe6d32732c1b4a1d5c84da762bace9e8a5b0e782746c8efd25a2a4ea7cf0ad1493892ac8cf252a", 0x33}], 0x4, &(0x7f00000010c0)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x0, 0x10000, 0x2, 0x1000, 0x5, 0xffff, 0x5, r5}}], 0x30, 0x20008050}, {&(0x7f0000001100)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001140)="8c1303e9d59fc30bb8fa1f293057c5dda32a39afc118c13860a962a3ea651bd119e347d38b17306cac927c37a25c7a7b2105c411cd06dd61f954b0d28c0be8133df1ae017bcc8e597c352e7e12dd2cf975fc20", 0x53}, {&(0x7f00000011c0)="e213c6e0089d94e2b3f4770642cabb7e566384516a55c1382104e4891abd85fa0ca62b37f015d9a3767844b8a8717139919caca7b246a1a9dd0e22594811eed0b39c437d73f3e131ed9ef4babd05463b401646e16821070972bbbaca61797c60a1903c82a7d94768261f5e0a89c142f4a7b881a602dd6397fcd02b992b1b0a3391e8abc523a3a5614f827d6849850be3af17ede65dd83b56277a011aa50c40", 0x9f}, {&(0x7f0000001280)="34dd4141e4a730e48eda7494c180d1ee7b394868546e73b7dbde9d2f1d29a7c84c694bc38eb97ed20f8d2903ca101dd734800926bdd7f9693a1b05d7bde00a450b50613f2287902ee89898c4d5b4e2cc4516c57c30080957f6708057edd630873bf77bdb6c00b2f52d16986cd303a03b8466ca8e969250e568a4228c", 0x7c}], 0x3, &(0x7f0000001340)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x7, 0xffffffff, 0x4}}], 0x20, 0x4000001}, {&(0x7f0000001380)=@in6={0xa, 0x4e24, 0x6, @empty, 0xcae}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000013c0)="dc4c8f89f6b87519562f8ddf2c95ce8c48d199368194e68282cb74f90fc1127d47c3031cf19100d7d701a2aa0a3ac06d16e9c0b4853d346a1fe78527deb2c29bfe8f65ec2cacec0f085078c59213a9323a406e1c1168802e53c921ed39f28d120846f742076d1ea84f3898a7194cc6e12a40da632f12ae4ca533902260dd26d019cde3adc350c45ca02a5c956bfa5a56f7b0e2e9815b21ac3232de552066c55984953c01e5e60ab4f3b26469c8af77ada31884afc356e79fb0b8e20a0e4b6ac4af980c9605427ab4a912806a92ef14599fb96f81eab4c061177da2160ed0cf67ab84ede626bf05e067766058dca7734b11", 0xf1}], 0x1, &(0x7f0000001580)=[@init={0x18, 0x84, 0x0, {0xf0, 0x7, 0x9, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x15a3, 0x6, 0xc, 0x26, 0x4, 0xad, 0xffffff7b, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x80, 0x4044}], 0x3, 0x4000)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r7, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000001800)={0xffffffff, 0x81, 0x4, 0x10001, 0x8}, 0x14)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000001840)={r5, 0x3e, "ad21d12f236e7e80e24fc06445ee99be8049987d42234400794b339445cf114360690559c27e044647d13956f608c962ec5c8a8e428fcedbbe63a429ec38"}, &(0x7f00000018c0)=0x46)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001900), 0xffffffffffffffff)

0s ago: executing program 5 (id=2858):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000300)=""/176, 0xb0, 0x80, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000fc18ffff73010800000000009500"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r7, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x6, 0x0, 0x800000}]}]}, 0xfc}}, 0x4000004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r12, 0xb703, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

ority 0
[  112.043129][T10188] syzkaller0: entered promiscuous mode
[  112.044966][T10188] syzkaller0: entered allmulticast mode
[  112.048263][T10188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.048285][T10189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.058415][T10188] tipc: Resetting bearer <eth:syzkaller0>
[  112.061761][T10187] tipc: Resetting bearer <eth:syzkaller0>
[  112.065874][T10187] tipc: Disabling bearer <eth:syzkaller0>
[  112.110982][T10191] bridge0: entered allmulticast mode
[  112.126965][T10191] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[  112.156034][T10191] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.171561][T10191] bond0: (slave ip6gretap2): making interface the new active one
[  112.187985][T10191] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  112.207692][T10191] veth11: entered promiscuous mode
[  112.211973][T10191] bond0: (slave veth11): Enslaving as an active interface with a down link
[  112.221128][T10191] erspan0: entered allmulticast mode
[  112.574497][T10221] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  112.765877][T10247] __nla_validate_parse: 121 callbacks suppressed
[  112.765895][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'.
[  112.858172][T10251] tap0: tun_chr_ioctl cmd 1074025678
[  112.860309][T10251] tap0: group set to 0
[  112.910479][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'.
[  112.914347][T10257] netlink: 'syz.3.1228': attribute type 6 has an invalid length.
[  112.919080][T10251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.925110][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'.
[  112.940521][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'.
[  112.997435][T10264] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1230'.
[  113.078636][T10273] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  113.135069][T10280] bridge_slave_0: left allmulticast mode
[  113.137206][T10280] bridge_slave_0: left promiscuous mode
[  113.139599][T10280] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.147781][T10280] bridge_slave_1: left allmulticast mode
[  113.149950][T10280] bridge_slave_1: left promiscuous mode
[  113.164470][T10280] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.174081][T10280] bond0: (slave bond_slave_0): Releasing backup interface
[  113.180478][T10280] bond0: (slave bond_slave_1): Releasing backup interface
[  113.190332][T10280] team0: Port device team_slave_0 removed
[  113.197032][T10280] team0: Port device team_slave_1 removed
[  113.203301][T10280] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.205965][T10280] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.209354][T10280] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.211954][T10280] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.220430][T10280] bond2: (slave gretap1): Releasing active interface
[  113.243550][T10280] team0: Mode changed to "loadbalance"
[  113.331690][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'.
[  113.337768][T10305] sctp: [Deprecated]: syz.4.1242 (pid 10305) Use of int in max_burst socket option deprecated.
[  113.337768][T10305] Use struct sctp_assoc_value instead
[  113.367444][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'.
[  113.370940][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'.
[  113.517150][T10318] lo speed is unknown, defaulting to 1000
[  113.542136][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'.
[  113.766880][T10332] netlink: 'syz.3.1250': attribute type 1 has an invalid length.
[  113.769996][T10332] netlink: 'syz.3.1250': attribute type 2 has an invalid length.
[  113.885810][T10347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1254'.
[  114.377158][T10381] 8021q: adding VLAN 0 to HW filter on device bond14
[  114.380320][T10381] team0: Port device bond14 added
[  114.438772][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.585387][T10394] netlink: 'syz.4.1267': attribute type 1 has an invalid length.
[  133.099525][ T5872] bond0 (unregistering): Released all slaves
[  133.106287][ T5872] bond1 (unregistering): Released all slaves
[  133.113123][ T5872] bond2 (unregistering): Released all slaves
[  133.119699][ T5872] bond3 (unregistering): Released all slaves
[  133.127041][ T5872] bond4 (unregistering): Released all slaves
[  133.137804][ T5872] bond5 (unregistering): Released all slaves
[  133.147690][ T5872] bond6 (unregistering): Released all slaves
[  133.154918][ T5872] bond7 (unregistering): Released all slaves
[  133.161408][ T5872] bond8 (unregistering): Released all slaves
[  133.207046][ T5872] tipc: Disabling bearer <udp:syz2>
[  133.209261][ T5872] tipc: Disabling bearer <udp:syz0>
[  133.211772][ T5872] tipc: Left network mode
[  133.237667][ T5872] IPVS: stopping backup sync thread 8641 ...
[  133.550474][ T5872] hsr_slave_0: left promiscuous mode
[  133.553740][ T5872] team0: left promiscuous mode
[  134.030130][ T5872] IPVS: stop unused estimator thread 0...
[  141.506522][T10414] __nla_validate_parse: 8 callbacks suppressed
[  141.506576][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'.
[  141.511637][T10417] syzkaller0: entered allmulticast mode
[  141.545332][T10418] syzkaller0: entered promiscuous mode
[  141.547686][T10418] syzkaller0: entered allmulticast mode
[  141.657768][T10422] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1277'.
[  141.709770][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1279'.
[  141.751201][T10430] batman_adv: batadv0: Adding interface: dummy0
[  141.755618][T10430] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.765413][T10430] batman_adv: batadv0: Interface activated: dummy0
[  141.773727][T10430] batadv0: mtu less than device minimum
[  141.776292][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.779840][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.784285][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.787313][T10435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1281'.
[  141.787783][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.794758][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.798735][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.802590][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.806604][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.811013][T10430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  141.831983][T10440] batman_adv: batadv0: Adding interface: ip6gretap1
[  141.835110][T10440] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.845277][T10440] batman_adv: batadv0: Interface activated: ip6gretap1
[  141.858427][T10442] netlink: 'syz.1.1283': attribute type 1 has an invalid length.
[  141.875227][T10442] 8021q: adding VLAN 0 to HW filter on device bond15
[  141.898677][T10442] 8021q: adding VLAN 0 to HW filter on device bond15
[  141.900969][T10442] bond15: (slave vcan1): The slave device specified does not support setting the MAC address
[  141.905316][T10442] bond15: (slave vcan1): Error -95 calling set_mac_address
[  141.941974][T10442] macvlan2: entered promiscuous mode
[  141.958123][T10442] macvlan2: entered allmulticast mode
[  141.961121][T10442] bond15: entered promiscuous mode
[  141.964038][T10442] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  141.969634][T10442] bond15: left promiscuous mode
[  141.989736][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'.
[  142.013512][T10458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1287'.
[  142.018517][T10459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1287'.
[  142.091994][T10471] netlink: 'syz.1.1291': attribute type 10 has an invalid length.
[  142.149115][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'.
[  142.152641][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'.
[  142.155756][T10479] netlink: 'syz.1.1293': attribute type 5 has an invalid length.
[  142.232997][T10484] syzkaller0: entered promiscuous mode
[  142.235027][T10484] syzkaller0: entered allmulticast mode
[  142.436418][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1297'.
[  142.965953][T10504] netlink: 'syz.4.1300': attribute type 1 has an invalid length.
[  143.139762][T10514] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  143.379242][T10531] netlink: 'syz.1.1309': attribute type 1 has an invalid length.
[  143.394664][T10531] 8021q: adding VLAN 0 to HW filter on device bond16
[  143.411006][T10531] 8021q: adding VLAN 0 to HW filter on device bond16
[  143.422929][T10531] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  143.428145][T10531] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  143.618524][T10540] bond3: entered promiscuous mode
[  143.620499][T10540] 8021q: adding VLAN 0 to HW filter on device bond3
[  143.909231][T10580] netlink: 'syz.4.1322': attribute type 21 has an invalid length.
[  143.913364][T10580] netlink: 'syz.4.1322': attribute type 5 has an invalid length.
[  144.265752][T10617] bridge0: port 1(erspan0) entered blocking state
[  144.267862][T10617] bridge0: port 1(erspan0) entered disabled state
[  144.270119][T10617] erspan0: entered allmulticast mode
[  144.272759][T10617] erspan0: entered promiscuous mode
[  144.448707][T10642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.453205][T10642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.508380][T10643] netlink: 'syz.4.1341': attribute type 21 has an invalid length.
[  144.517455][ T5854] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.520999][ T5854] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.527506][ T5854] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.531192][ T5854] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.555521][T10650] netlink: 'syz.1.1343': attribute type 1 has an invalid length.
[  144.561945][T10650] netlink: 'syz.1.1343': attribute type 2 has an invalid length.
[  144.608458][T10658] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.668592][T10703] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.696408][T10703] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.726599][T10704] sit0: left promiscuous mode
[  145.738555][T10704] bridge0: port 1(erspan0) entered blocking state
[  145.741009][T10704] bridge0: port 1(erspan0) entered forwarding state
[  145.746649][T10704] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.754018][T10703] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.785362][T10703] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.797669][T10707] tipc: Started in network mode
[  145.799493][T10707] tipc: Node identity 62002c0441a4, cluster identity 4711
[  145.802001][T10707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.806710][T10707] syzkaller0: entered promiscuous mode
[  145.808443][T10707] syzkaller0: entered allmulticast mode
[  145.816328][T10705] tipc: Resetting bearer <eth:syzkaller0>
[  145.821771][T10705] tipc: Disabling bearer <eth:syzkaller0>
[  146.150554][ T5872] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.160564][ T5854] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.167591][ T5854] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.174396][ T5854] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.217071][T10739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.225303][T10739] syzkaller0: entered promiscuous mode
[  146.227309][T10739] syzkaller0: entered allmulticast mode
[  146.236677][T10738] tipc: Resetting bearer <eth:syzkaller0>
[  146.240514][T10738] tipc: Disabling bearer <eth:syzkaller0>
[  146.296367][T10745] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.355396][T10755] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  146.359640][T10755] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  146.878427][T10770] __nla_validate_parse: 26 callbacks suppressed
[  146.878441][T10770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1378'.
[  146.883553][T10770] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1378'.
[  146.964857][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'.
[  147.016738][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'.
[  147.033389][T10779] syzkaller1: entered promiscuous mode
[  147.035523][T10779] syzkaller1: entered allmulticast mode
[  147.226207][T10782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.291956][T10795] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1385'.
[  147.325984][T10797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.328845][T10797] syzkaller0: entered promiscuous mode
[  147.330998][T10797] syzkaller0: entered allmulticast mode
[  147.340654][T10798] tipc: Resetting bearer <eth:syzkaller0>
[  147.426219][T10796] tipc: Resetting bearer <eth:syzkaller0>
[  147.429879][T10796] tipc: Disabling bearer <eth:syzkaller0>
[  147.504487][T10803] syzkaller1: entered promiscuous mode
[  147.506758][T10803] syzkaller1: entered allmulticast mode
[  147.511846][T10803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.516873][T10803] D: renamed from syzkaller0
[  147.519636][T10803] tipc: Disabling bearer <eth:syzkaller0>
[  147.870341][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'.
[  148.011376][T10826] validate_nla: 9 callbacks suppressed
[  148.011393][T10826] netlink: 'syz.4.1397': attribute type 11 has an invalid length.
[  148.048081][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'.
[  148.051636][T10829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1398'.
[  148.053901][T10824] siw: device registration error -23
[  148.086174][T10833] sctp: [Deprecated]: syz.3.1399 (pid 10833) Use of int in maxseg socket option.
[  148.086174][T10833] Use struct sctp_assoc_value instead
[  148.117378][T10838] netlink: 'syz.3.1400': attribute type 1 has an invalid length.
[  148.128108][T10838] bond6: entered promiscuous mode
[  148.130258][T10838] 8021q: adding VLAN 0 to HW filter on device bond6
[  148.139452][T10838] 8021q: adding VLAN 0 to HW filter on device bond6
[  148.142246][T10838] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  148.145892][T10838] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  148.151204][T10838] bond6: (slave wireguard0): making interface the new active one
[  148.155289][T10838] wireguard0: entered promiscuous mode
[  148.158471][T10838] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  148.165265][T10838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.167971][T10838] IPv6: NLM_F_CREATE should be set when creating new route
[  148.170627][T10838] IPv6: NLM_F_CREATE should be set when creating new route
[  148.173611][T10838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.181670][T10838] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[  148.190123][T10838] bond6: (slave wireguard1): Enslaving as a backup interface with an up link
[  148.206111][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1402'.
[  148.258857][T10852] net_ratelimit: 32 callbacks suppressed
[  148.258871][T10852] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  148.298075][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1407'.
[  148.480804][T10880] xt_policy: too many policy elements
[  148.543681][T10888] netlink: 'syz.3.1415': attribute type 3 has an invalid length.
[  148.965711][T10913] netlink: 'syz.3.1423': attribute type 13 has an invalid length.
[  148.968388][T10913] netlink: 'syz.3.1423': attribute type 17 has an invalid length.
[  148.998365][T10913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.150503][T10929] erspan0: left allmulticast mode
[  149.155302][T10929] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  149.371703][T10951] netlink: 'syz.1.1431': attribute type 4 has an invalid length.
[  149.537063][T10970] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.761182][T10992] netlink: 'syz.1.1442': attribute type 10 has an invalid length.
[  149.925979][T11010] netlink: 'syz.4.1446': attribute type 5 has an invalid length.
[  150.840352][T11041] netlink: 'syz.3.1455': attribute type 10 has an invalid length.
[  150.858487][T11041] 8021q: adding VLAN 0 to HW filter on device team0
[  150.867397][T11041] bond0: (slave team0): Enslaving as an active interface with an up link
[  150.990986][T11066] netlink: 'syz.3.1464': attribute type 1 has an invalid length.
[  151.116443][T11079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.123346][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.127222][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.130387][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.133935][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.622688][T11033] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  151.914990][T11110] 8021q: adding VLAN 0 to HW filter on device bond18
[  151.918054][T11110] __nla_validate_parse: 23 callbacks suppressed
[  151.918063][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'.
[  151.918067][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'.
[  151.926766][T11114] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003
[  152.001423][T11126] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1479'.
[  152.056367][T11131] bridge3: entered promiscuous mode
[  152.058146][T11131] bridge3: entered allmulticast mode
[  152.061369][T11131] team0: Port device bridge3 added
[  152.188511][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1486'.
[  152.194882][T11150] sctp: [Deprecated]: syz.1.1488 (pid 11150) Use of int in max_burst socket option.
[  152.194882][T11150] Use struct sctp_assoc_value instead
[  152.203867][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'.
[  152.206988][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'.
[  152.270137][T11156] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  152.320571][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'.
[  152.326171][T11164] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  152.480087][T11174] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1493'.
[  152.727178][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'.
[  152.731515][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'.
[  152.866274][T11184] xfrm0: entered promiscuous mode
[  152.868053][T11184] xfrm0: entered allmulticast mode
[  152.874029][ T5233] Bluetooth: hci0: command 0x0c20 tx timeout
[  153.059571][T11201] validate_nla: 7 callbacks suppressed
[  153.059582][T11201] netlink: 'syz.3.1502': attribute type 83 has an invalid length.
[  153.247556][T11217] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  154.200887][T11244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  154.439798][T11256] bond0: (slave team0): Releasing backup interface
[  154.448153][T11256] batman_adv: batadv0: Interface deactivated: dummy0
[  154.451059][T11256] batman_adv: batadv0: Removing interface: dummy0
[  154.467284][T11256] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  154.469829][T11256] batman_adv: batadv0: Removing interface: ip6gretap1
[  154.475836][T11256] bond6: (slave wireguard0): Releasing backup interface
[  154.478549][T11256] wireguard0: left promiscuous mode
[  154.480700][T11256] bond6: (slave wireguard1): making interface the new active one
[  154.484165][T11256] wireguard1: entered promiscuous mode
[  154.491077][T11256] bond6: (slave wireguard1): Releasing backup interface
[  154.494713][T11256] wireguard1: left promiscuous mode
[  154.504979][T11256] team0: Port device bridge3 removed
[  154.763705][T11262] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  155.420335][T11291] netlink: 'syz.1.1527': attribute type 1 has an invalid length.
[  155.434818][T11291] 8021q: adding VLAN 0 to HW filter on device bond19
[  155.868199][T11299] netlink: 'syz.3.1528': attribute type 3 has an invalid length.
[  156.382529][ T5233] Bluetooth: hci2: command tx timeout
[  156.546493][T11316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.549405][T11316] syzkaller0: entered promiscuous mode
[  156.551407][T11316] syzkaller0: entered allmulticast mode
[  156.559972][T11316] tipc: Resetting bearer <eth:syzkaller0>
[  156.565699][T11315] tipc: Resetting bearer <eth:syzkaller0>
[  156.571310][T11315] tipc: Disabling bearer <eth:syzkaller0>
[  156.658174][T11326] nft_compat: unsupported protocol 0
[  156.743642][T11337] netlink: 'syz.1.1542': attribute type 4 has an invalid length.
[  156.807915][T11350] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.855442][T11350] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.896326][T11350] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.910271][T11355] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  156.930892][T11350] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.003755][T11357] netlink: 'syz.3.1550': attribute type 62 has an invalid length.
[  157.006833][ T5854] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.021753][ T5854] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.024727][ T5854] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.027214][ T5854] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.059517][T11361] __nla_validate_parse: 14 callbacks suppressed
[  157.059527][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'.
[  157.059893][T11365] tipc: New replicast peer: 255.255.255.255
[  157.067238][T11365] tipc: Enabled bearer <udp:syz2>, priority 10
[  157.069659][T11361] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1552'.
[  157.179128][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'.
[  157.541429][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'.
[  157.619573][T11403] bond0: (slave ip6gretap2): Releasing active interface
[  157.622186][T11403] bond0: (slave ip6gretap2): the permanent HWaddr of slave - 1a:79:17:ec:0c:5f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  157.629819][T11403] bond0: (slave veth11): Releasing active interface
[  157.636102][T11403] team0: Port device bond14 removed
[  157.657607][T11405] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  157.662145][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'.
[  157.666877][T11406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.669921][T11406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  157.788971][T11425] netlink: 'syz.1.1568': attribute type 2 has an invalid length.
[  157.918708][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'.
[  157.971242][T11439] netlink: 'syz.1.1571': attribute type 2 has an invalid length.
[  157.978548][T11439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.988882][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1571'.
[  157.992211][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1571'.
[  158.020760][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'.
[  158.055633][T11443] syzkaller1: entered promiscuous mode
[  158.057413][T11443] syzkaller1: entered allmulticast mode
[  158.063481][   T24] tipc: Node number set to 597961732
[  158.514951][T11445] netlink: 'syz.3.1574': attribute type 3 has an invalid length.
[  158.630319][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  158.910602][T11478] syz.3.1584 uses old SIOCAX25GETINFO
[  159.440697][T11492] syzkaller1: entered promiscuous mode
[  159.443532][T11492] syzkaller1: entered allmulticast mode
[  159.513852][T11497] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.516831][T11496] IPVS: stopping backup sync thread 11497 ...
[  159.704187][T11515] netlink: 'syz.3.1594': attribute type 1 has an invalid length.
[  159.728757][T11515] bond7: (slave bridge6): making interface the new active one
[  159.732128][T11515] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  159.835682][T11525] bridge0: entered promiscuous mode
[  159.935464][T11538] batadv_slave_0: entered promiscuous mode
[  160.029232][T11541] macvlan2: entered allmulticast mode
[  160.031499][T11541] veth1_vlan: entered allmulticast mode
[  160.034784][T11541] bridge0: port 1(macvlan2) entered blocking state
[  160.037578][T11541] bridge0: port 1(macvlan2) entered disabled state
[  160.702987][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  160.745296][T11564] smc: net device bond0 applied user defined pnetid SYZ2
[  160.755003][T11564] smc: removing net device bond0 with user defined pnetid SYZ2
[  160.757621][T11564] bond0 (unregistering): Released all slaves
[  160.874767][T11571] netlink: 'syz.3.1611': attribute type 1 has an invalid length.
[  160.887795][T11571] smc: adding net device bond0 with user defined pnetid SYZ2
[  160.890984][T11571] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.908615][T11571] veth5: entered promiscuous mode
[  161.171567][T11580] can: request_module (can-proto-4) failed.
[  161.265318][T11590] netlink: 'syz.3.1617': attribute type 10 has an invalid length.
[  161.267990][T11590] bridge0: left promiscuous mode
[  161.298278][T11592] netlink: 'syz.3.1618': attribute type 1 has an invalid length.
[  161.317154][T11592] 8021q: adding VLAN 0 to HW filter on device bond8
[  161.340927][T11592] veth7: entered promiscuous mode
[  161.365717][T11598] netlink: 'syz.3.1619': attribute type 10 has an invalid length.
[  161.523860][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810b11d400: rx timeout, send abort
[  161.527293][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b11d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  161.569473][T11613] IPVS: Error connecting to the multicast addr
[  161.575115][T11613] bridge_slave_0: entered allmulticast mode
[  161.627461][T11613] 8021q: adding VLAN 0 to HW filter on device bond20
[  161.630344][T11613] bridge0: port 2(bond20) entered blocking state
[  161.633065][T11613] bridge0: port 2(bond20) entered disabled state
[  161.635188][T11613] bond20: entered allmulticast mode
[  161.637684][T11613] bond20: entered promiscuous mode
[  161.639538][T11613] macvlan2: entered promiscuous mode
[  161.749691][T11625] syzkaller1: entered allmulticast mode
[  161.754323][T11625] syzkaller1: left allmulticast mode
[  161.759141][T11625] netlink: 'syz.1.1626': attribute type 2 has an invalid length.
[  161.943934][T11645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.000151][T11645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.037388][T11645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.151005][T11645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.155146][T11652] __nla_validate_parse: 47 callbacks suppressed
[  162.155161][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'.
[  162.161238][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'.
[  162.164796][T11652] netlink: 'syz.1.1635': attribute type 12 has an invalid length.
[  162.167664][T11652] netlink: 'syz.1.1635': attribute type 11 has an invalid length.
[  162.203839][T10930] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.211789][T10930] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.220083][T10930] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.228871][T10930] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.271520][T11661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.293349][T11662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.311086][T11671] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1640'.
[  162.352212][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'.
[  162.362199][T11674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1641'.
[  162.404594][T11669] netlink: 'syz.4.1639': attribute type 4 has an invalid length.
[  162.418228][T11669] IPVS: length: 24 != 55320
[  162.479202][T11686] netlink: 786 bytes leftover after parsing attributes in process `syz.3.1645'.
[  162.500255][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  162.507442][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  162.512229][   T24] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[  162.516066][T11680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1643'.
[  162.521081][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  162.564232][T11694] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1647'.
[  162.650131][T11703] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1651'.
[  162.705682][T11713] erspan0: left allmulticast mode
[  162.707950][T11713] erspan0: left promiscuous mode
[  162.713206][T11713] bridge0: port 1(erspan0) entered disabled state
[  162.731880][T11713] bond0: (slave team0): Releasing backup interface
[  162.779294][T11716] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  162.795712][T11713] 8021q: adding VLAN 0 to HW filter on device team0
[  162.800084][T11713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.846982][T11728] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1658'.
[  162.894720][T11737] sctp: [Deprecated]: syz.3.1662 (pid 11737) Use of int in max_burst socket option deprecated.
[  162.894720][T11737] Use struct sctp_assoc_value instead
[  162.942081][T11743] kthread_run failed with err -4
[  162.943706][T11740] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  162.943816][T11739] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  163.017523][T11759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.019677][T11759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.023383][T11760] syzkaller0: entered promiscuous mode
[  163.025094][T11760] syzkaller0: entered allmulticast mode
[  163.027638][T11759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.032711][T11759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.058522][T11760] tipc: Resetting bearer <eth:syzkaller0>
[  163.064707][T11760] tipc: Disabling bearer <eth:syzkaller0>
[  163.097537][T11769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.189982][T11774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.199693][T11772] tipc: Disabling bearer <eth:syzkaller0>
[  163.407038][T11807] syzkaller1: entered promiscuous mode
[  163.409071][T11807] syzkaller1: entered allmulticast mode
[  163.480454][T11813] team0: Mode changed to "loadbalance"
[  163.676442][T11829] validate_nla: 6 callbacks suppressed
[  163.676457][T11829] netlink: 'syz.4.1686': attribute type 1 has an invalid length.
[  163.695749][T11829] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.706762][T11828] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.709927][T11828] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  163.715251][T11828] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  163.758166][T11829] veth9: entered promiscuous mode
[  163.762127][T11829] bond2: (slave veth9): Enslaving as an active interface with a down link
[  164.241442][ T5879] IPVS: starting estimator thread 0...
[  164.342610][T11867] IPVS: using max 92 ests per chain, 220800 per kthread
[  164.481422][T11869] bridge0: left allmulticast mode
[  164.495655][T11869] bridge_slave_0: left allmulticast mode
[  164.504853][T11869] bond11: left promiscuous mode
[  164.515330][T11869] veth11: left promiscuous mode
[  164.527042][T11869] veth1_vlan: left allmulticast mode
[  164.533922][T10930] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.537019][T10930] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.542451][T10930] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.546694][T10930] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.257307][T11906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.272875][T11906] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.531685][T11929] wg1: entered promiscuous mode
[  165.533749][T11929] wg1: entered allmulticast mode
[  166.047870][T11958] netlink: 'syz.4.1727': attribute type 27 has an invalid length.
[  166.055583][T11958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.091396][T11960] xfrm0: left promiscuous mode
[  166.095727][T11960] mac80211_hwsim hwsim51 wlan0: left promiscuous mode
[  166.101791][T11960] veth9: left promiscuous mode
[  166.109730][T11960] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  166.177074][T11963] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.214353][T11963] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.228434][T11964] netlink: 'syz.4.1729': attribute type 5 has an invalid length.
[  166.233941][T11964] geneve3: entered promiscuous mode
[  166.235701][T11964] geneve3: entered allmulticast mode
[  166.238098][ T5854] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  166.240753][ T5854] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  166.255512][T11963] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.258745][T11963] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  166.320003][T11963] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  166.324798][T11963] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  166.383470][T10930] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.386189][T10930] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  166.395218][T10930] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.397821][T10930] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  166.404937][T10930] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.407964][T10930] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  166.414610][T10930] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.417794][T11975] netlink: 'syz.1.1733': attribute type 2 has an invalid length.
[  166.419822][T10930] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  166.445024][T11978] syzkaller1: entered promiscuous mode
[  166.447194][T11978] syzkaller1: entered allmulticast mode
[  166.455109][T11980] syzkaller0: entered promiscuous mode
[  166.457042][T11980] syzkaller0: entered allmulticast mode
[  166.670542][T11986] netlink: 'syz.1.1736': attribute type 4 has an invalid length.
[  166.674047][T11986] netlink: 'syz.1.1736': attribute type 4 has an invalid length.
[  166.681941][T11986] IPVS: length: 24 != 55320
[  166.867015][T11994] vlan4: entered allmulticast mode
[  166.868795][T11994] bond22: entered allmulticast mode
[  167.117993][T12002] netlink: 'syz.1.1743': attribute type 16 has an invalid length.
[  167.121112][T12002] netlink: 'syz.1.1743': attribute type 17 has an invalid length.
[  167.363102][T12004] __nla_validate_parse: 158 callbacks suppressed
[  167.363113][T12004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1744'.
[  167.368885][T12004] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1744'.
[  167.372825][T12004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1744'.
[  167.427353][T12006] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1745'.
[  167.577851][T12011] netlink: 'syz.3.1746': attribute type 3 has an invalid length.
[  167.580963][T12011] netlink: 'syz.3.1746': attribute type 1 has an invalid length.
[  167.584898][T12011] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1746'.
[  167.976202][T12015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.156631][T12028] xt_limit: Overflow, try lower: 604147548/4200216962
[  168.245985][T12034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1751'.
[  168.249071][T12034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1751'.
[  168.273798][T12036] syz_tun: entered promiscuous mode
[  168.275915][T12036] syz_tun: entered allmulticast mode
[  169.193493][T12091] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1770'.
[  169.248640][T12095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1771'.
[  169.261414][T12100] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.265803][T12100] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  169.306409][T12100] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.309628][T12100] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  169.375816][T12100] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.379626][T12100] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  169.417251][T12100] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.420996][T12100] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  169.461872][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'.
[  169.470703][T12111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.475578][T12111] syzkaller0: entered promiscuous mode
[  169.477549][T12111] syzkaller0: entered allmulticast mode
[  169.494835][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.499099][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  169.502561][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.505485][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  169.516715][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.523822][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  169.527519][T12108] tipc: Resetting bearer <eth:syzkaller0>
[  169.533223][T12108] tipc: Disabling bearer <eth:syzkaller0>
[  169.544468][ T5872] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.547938][ T5872] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  169.638649][T12132] netlink: 'syz.4.1783': attribute type 12 has an invalid length.
[  169.820137][T12143] vlan2: entered allmulticast mode
[  169.821929][T12143] bond0: entered allmulticast mode
[  170.462831][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  170.625827][T12164] netlink: 'syz.1.1791': attribute type 4 has an invalid length.
[  170.817694][T12185] macvlan2: entered promiscuous mode
[  170.819994][T12173] netlink: 'syz.1.1793': attribute type 1 has an invalid length.
[  170.823002][T12173] netlink: 'syz.1.1793': attribute type 4 has an invalid length.
[  170.825698][T12173] netlink: 'syz.1.1793': attribute type 1 has an invalid length.
[  170.828237][T12173] netlink: 'syz.1.1793': attribute type 4 has an invalid length.
[  170.974803][T12193] netlink: 'syz.1.1799': attribute type 1 has an invalid length.
[  170.985259][T12193] 8021q: adding VLAN 0 to HW filter on device bond23
[  171.000274][T12193] 8021q: adding VLAN 0 to HW filter on device bond23
[  171.002837][T12193] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[  171.007192][T12193] bond23: (slave vxcan3): Error -95 calling set_mac_address
[  171.040569][T12199] team0: entered promiscuous mode
[  171.232049][T12223] siw: device registration error -23
[  171.265926][T12227] !: renamed from dummy0
[  171.506121][T12257] tc_dump_action: action bad kind
[  171.924400][T12290] pim6reg: entered allmulticast mode
[  171.935614][T12290] pim6reg: left allmulticast mode
[  172.071017][T12301] netlink: 'syz.1.1826': attribute type 142 has an invalid length.
[  172.538882][T12314] syzkaller0: entered promiscuous mode
[  172.540671][T12314] syzkaller0: entered allmulticast mode
[  172.636338][T12316] __nla_validate_parse: 17 callbacks suppressed
[  172.636349][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'.
[  172.641469][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'.
[  172.671137][T12318] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1832'.
[  172.675734][T12318] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1832'.
[  172.678693][T12318] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1832'.
[  172.699675][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1833'.
[  172.750553][T12332] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  172.756146][T12332] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  172.880732][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1839'.
[  172.887938][T12346] dummy0: entered promiscuous mode
[  172.889878][T12346] macvtap1: entered promiscuous mode
[  172.891922][T12346] macvtap1: entered allmulticast mode
[  172.894049][T12346] dummy0: entered allmulticast mode
[  172.897046][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1839'.
[  172.900289][T12346] dummy0: left allmulticast mode
[  172.902197][T12346] dummy0: left promiscuous mode
[  172.999890][T12351] netlink: 'syz.4.1842': attribute type 1 has an invalid length.
[  173.002881][T12351] netlink: 'syz.4.1842': attribute type 3 has an invalid length.
[  173.005883][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1842'.
[  173.796380][T12377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1849'.
[  173.901479][T12390] 8021q: adding VLAN 0 to HW filter on device bond24
[  173.910437][T12390] 8021q: adding VLAN 0 to HW filter on device bond24
[  173.914446][T12390] bond24: (slave vxcan3): The slave device specified does not support setting the MAC address
[  173.920266][T12390] bond24: (slave vxcan3): Error -95 calling set_mac_address
[  173.977053][T12390] veth17: entered promiscuous mode
[  173.980948][T12390] bond24: (slave veth17): Enslaving as an active interface with a down link
[  173.987467][T12390] erspan0: entered allmulticast mode
[  174.157021][T12412] ip6_vti0: Master is either lo or non-ether device
[  174.218567][T12416] syzkaller1: entered promiscuous mode
[  174.220441][T12416] syzkaller1: entered allmulticast mode
[  174.327937][T12418] sit0: Master is either lo or non-ether device
[  174.414669][T12425] 8021q: adding VLAN 0 to HW filter on device bond4
[  174.424962][T12425] bond4: (slave gretap1): making interface the new active one
[  174.428845][T12425] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  174.436200][T12425] syz.4.1865 (12425) used greatest stack depth: 18480 bytes left
[  174.465380][T12431] bridge0: port 1(veth0_to_team) entered blocking state
[  174.468355][T12431] bridge0: port 1(veth0_to_team) entered disabled state
[  174.471333][T12431] veth0_to_team: entered allmulticast mode
[  174.474653][T12431] veth0_to_team: entered promiscuous mode
[  174.536208][T12437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.538709][T12437] syzkaller0: entered promiscuous mode
[  174.540888][T12437] syzkaller0: entered allmulticast mode
[  174.546783][T12437] tipc: Resetting bearer <eth:syzkaller0>
[  174.561750][T12438] tipc: Resetting bearer <eth:syzkaller0>
[  174.566711][T12438] tipc: Disabling bearer <eth:syzkaller0>
[  175.256846][T12473] bridge9: the hash_elasticity option has been deprecated and is always 16
[  175.260276][T12473] bridge9: entered allmulticast mode
[  175.285846][T12477] validate_nla: 2 callbacks suppressed
[  175.285862][T12477] netlink: 'syz.1.1879': attribute type 2 has an invalid length.
[  175.291090][T12477] netlink: 'syz.1.1879': attribute type 1 has an invalid length.
[  175.317792][T12480] tipc: Can't bind to reserved service type 2
[  175.324092][T12480] tipc: Failed to remove unknown binding: 66,2,2/0:3741377141/3741377143
[  175.353037][T12483] netlink: 'syz.1.1881': attribute type 1 has an invalid length.
[  175.591569][T12495] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.596043][T12495] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  175.618905][T12495] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.622964][T12495] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  175.715776][T12495] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.719722][T12495] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  175.796219][T12495] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.800148][T12495] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  175.839352][ T5854] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.843201][ T5854] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  175.852076][ T5854] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.855869][ T5854] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  175.866215][ T5854] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.869553][ T5854] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  175.877564][ T5854] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.880820][ T5854] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  176.351469][T12507] netlink: 'syz.1.1888': attribute type 2 has an invalid length.
[  176.360102][T12507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.601396][T12535] netlink: 'syz.3.1899': attribute type 1 has an invalid length.
[  177.357272][T12567] macsec0: entered promiscuous mode
[  177.359037][T12567] ip6gretap0: entered promiscuous mode
[  177.360959][T12567] macsec0: entered allmulticast mode
[  177.363921][T12567] ip6gretap0: entered allmulticast mode
[  177.667782][T12574] netlink: 'syz.3.1910': attribute type 16 has an invalid length.
[  177.694731][T12574] __nla_validate_parse: 24 callbacks suppressed
[  177.694747][T12574] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1910'.
[  177.733580][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'.
[  177.738424][T12576] netlink: 'syz.3.1911': attribute type 4 has an invalid length.
[  177.801944][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'.
[  177.904469][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1917'.
[  178.001859][T12615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1923'.
[  178.006734][T12615] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1923'.
[  178.009125][T12617] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  178.184857][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'.
[  178.193862][T12637] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  178.196546][T12637] team0: Device ipvlan2 is already an upper device of the team interface
[  178.216451][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1931'.
[  178.238464][T12639] 8021q: adding VLAN 0 to HW filter on device bond10
[  178.242016][T12639] bond9: (slave bond10): Enslaving as an active interface with an up link
[  178.249238][T12639] IPv6: Can't replace route, no match found
[  178.257763][ T1270] hid-generic 0005:16C0:0009.0002: unknown main item tag 0x0
[  178.264202][ T1270] hid-generic 0005:16C0:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  178.272222][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'.
[  178.278892][T12639] bond9 (unregistering): (slave bond10): Releasing backup interface
[  178.284830][T12639] bond9 (unregistering): Released all slaves
[  178.294266][T12644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1932'.
[  178.360502][T12648] batadv_slave_0: entered promiscuous mode
[  178.368160][T12650] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  178.427401][T12652] bridge0: entered promiscuous mode
[  178.457964][T12660] openvswitch: netlink: IP tunnel TTL not specified.
[  178.644738][T12669] syzkaller0: entered promiscuous mode
[  178.646521][T12669] syzkaller0: entered allmulticast mode
[  179.507435][T12700] netlink: 'syz.4.1950': attribute type 15 has an invalid length.
[  179.599273][T12673] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  179.628307][T12708] netlink: 'syz.4.1953': attribute type 1 has an invalid length.
[  179.631456][T12708] netlink: 'syz.4.1953': attribute type 2 has an invalid length.
[  179.648176][T12712] delete_channel: no stack
[  179.693125][   T24] IPVS: starting estimator thread 0...
[  179.704657][T12717] veth0_vlan: left promiscuous mode
[  179.707811][T12717] veth0_vlan: entered promiscuous mode
[  179.712218][T12717] team0: Device veth0_vlan failed to register rx_handler
[  179.754578][T12724] ip6gre1: entered promiscuous mode
[  179.764701][T12725] dvmrp8: entered allmulticast mode
[  179.782594][T12720] IPVS: using max 92 ests per chain, 220800 per kthread
[  179.845269][T12723] dvmrp8: left allmulticast mode
[  179.884256][T12739] bond7: (slave bridge6): Releasing active interface
[  179.893402][T12739] team0: Unable to change to the same mode the team is in
[  179.913799][T12742] dvmrp8: entered allmulticast mode
[  179.928858][T12743] dvmrp8: left allmulticast mode
[  180.052178][T12757] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  180.506960][T12799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.510171][T12799] syzkaller0: entered promiscuous mode
[  180.512169][T12799] syzkaller0: entered allmulticast mode
[  180.518360][T12799] tipc: Resetting bearer <eth:syzkaller0>
[  180.521083][T12798] tipc: Resetting bearer <eth:syzkaller0>
[  180.524566][T12798] tipc: Disabling bearer <eth:syzkaller0>
[  180.605925][T12801] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002
[  180.611294][T12801] validate_nla: 2 callbacks suppressed
[  180.611306][T12801] netlink: 'syz.4.1976': attribute type 2 has an invalid length.
[  180.618737][T12801] k*]: entered promiscuous mode
[  180.625997][T12801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.680783][T12803] netlink: 'syz.4.1977': attribute type 83 has an invalid length.
[  181.003610][T12837] sctp: [Deprecated]: syz.3.1986 (pid 12837) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.003610][T12837] Use struct sctp_sack_info instead
[  181.301198][T12867] netlink: 'syz.4.1994': attribute type 23 has an invalid length.
[  181.499060][T12892] netlink: 'syz.1.2000': attribute type 1 has an invalid length.
[  181.517262][T12892] 8021q: adding VLAN 0 to HW filter on device bond25
[  181.527702][T12895] netlink: zone id is out of range
[  181.529947][T12895] netlink: zone id is out of range
[  181.532162][T12895] netlink: zone id is out of range
[  181.535715][T12895] netlink: zone id is out of range
[  181.539060][T12895] netlink: zone id is out of range
[  181.543482][T12895] netlink: zone id is out of range
[  181.555169][T12892] 8021q: adding VLAN 0 to HW filter on device bond25
[  181.558065][T12892] bond25: (slave vxcan3): The slave device specified does not support setting the MAC address
[  181.561207][T12895] netlink: set zone limit has 4 unknown bytes
[  181.568087][T12892] bond25: (slave vxcan3): Error -95 calling set_mac_address
[  181.653669][T12895] netlink: del zone limit has 4 unknown bytes
[  182.046182][T12915] netlink: 'syz.1.2005': attribute type 8 has an invalid length.
[  182.299798][T12936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.315192][T12936] netlink: 'syz.3.2009': attribute type 10 has an invalid length.
[  182.318316][T12936] team0: left promiscuous mode
[  182.356444][T12932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.415997][T12949] netlink: 'syz.3.2016': attribute type 46 has an invalid length.
[  182.759041][T12993] __nla_validate_parse: 158 callbacks suppressed
[  182.759059][T12993] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2027'.
[  182.767519][T12994] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2027'.
[  182.970122][T13016] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.060682][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2037'.
[  183.064370][T13025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2037'.
[  183.094806][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'.
[  183.958993][T13042] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2042'.
[  184.081426][T13051] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  184.085250][T13051] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  184.194277][T13063] nbd: couldn't find a device at index 134217728
[  184.220029][T13065] sctp: [Deprecated]: syz.3.2048 (pid 13065) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.220029][T13065] Use struct sctp_sack_info instead
[  184.235491][T13065] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  184.250442][T13065] bond9: entered promiscuous mode
[  184.252863][T13065] bond9: entered allmulticast mode
[  184.255576][T13065] 8021q: adding VLAN 0 to HW filter on device bond9
[  184.284205][T13075] netlink: 'syz.3.2050': attribute type 3 has an invalid length.
[  184.359014][T13082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.364214][T13082] syzkaller0: entered promiscuous mode
[  184.367624][T13082] syzkaller0: entered allmulticast mode
[  184.399606][T13082] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  184.456919][T13085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2052'.
[  184.460937][T13082] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2052'.
[  184.467020][T13082] tipc: Resetting bearer <eth:syzkaller0>
[  184.469989][T13081] tipc: Resetting bearer <eth:syzkaller0>
[  184.473778][T13081] tipc: Disabling bearer <eth:syzkaller0>
[  184.523208][T13087] netlink: 'syz.3.2053': attribute type 1 has an invalid length.
[  184.539626][T13087] bond11: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  184.550626][T13087] veth9: entered promiscuous mode
[  184.554564][T13087] bond11: (slave veth9): Enslaving as a backup interface with a down link
[  185.416713][T13098] netlink: 'syz.4.2057': attribute type 1 has an invalid length.
[  185.419667][T13098] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2057'.
[  185.451969][T13100] syzkaller1: entered promiscuous mode
[  185.454054][T13100] syzkaller1: entered allmulticast mode
[  185.585245][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'.
[  185.590049][T13110] gtp1: entered promiscuous mode
[  185.814104][T13136] validate_nla: 1 callbacks suppressed
[  185.814124][T13136] netlink: 'syz.1.2068': attribute type 12 has an invalid length.
[  185.933295][T13154] syzkaller1: entered promiscuous mode
[  185.935144][T13154] syzkaller1: entered allmulticast mode
[  186.080583][T13172] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode
[  186.096999][T13175] netlink: 'syz.1.2081': attribute type 8 has an invalid length.
[  186.147985][T13179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.151010][T13179] syzkaller0: entered promiscuous mode
[  186.156693][T13179] syzkaller0: entered allmulticast mode
[  186.170867][T13179] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  186.176655][T13182] netlink: 'syz.1.2084': attribute type 10 has an invalid length.
[  186.183895][T13176] tipc: Resetting bearer <eth:syzkaller0>
[  186.191842][T13176] tipc: Disabling bearer <eth:syzkaller0>
[  186.256381][T13198] bridge7: the hash_elasticity option has been deprecated and is always 16
[  186.394958][T13217] netlink: 'syz.1.2092': attribute type 1 has an invalid length.
[  186.442216][T13217] bond26: (slave gretap3): making interface the new active one
[  186.445734][T13217] bond26: (slave gretap3): Enslaving as an active interface with an up link
[  186.654595][T13248] lo speed is unknown, defaulting to 1000
[  186.664724][T13248] lo speed is unknown, defaulting to 1000
[  186.672913][T13248] lo speed is unknown, defaulting to 1000
[  186.694954][T13248] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  186.704995][T13248] lo speed is unknown, defaulting to 1000
[  186.709589][T13248] lo speed is unknown, defaulting to 1000
[  186.715736][T13248] lo speed is unknown, defaulting to 1000
[  186.718337][T13248] lo speed is unknown, defaulting to 1000
[  186.830907][T13259] bond27: entered promiscuous mode
[  186.834077][T13259] bond27: entered allmulticast mode
[  186.836360][T13259] 8021q: adding VLAN 0 to HW filter on device bond27
[  186.859748][T13264] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.864032][T13264] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  186.906150][T13264] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.910346][T13264] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  186.934992][T13266] lo speed is unknown, defaulting to 1000
[  186.974841][T13264] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.977943][T13264] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  187.027084][T13264] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.030886][T13264] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  187.036612][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  187.121186][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.124068][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  187.131370][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.135343][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  187.142230][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.146788][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  187.156361][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.159589][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  187.840932][T13283] net_ratelimit: 3 callbacks suppressed
[  187.840949][T13283] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  187.946889][T13286] lo speed is unknown, defaulting to 1000
[  188.041573][T13285] __nla_validate_parse: 13 callbacks suppressed
[  188.041591][T13285] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2111'.
[  188.140018][T13285] syz.4.2111: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  188.146969][T13285] CPU: 1 UID: 0 PID: 13285 Comm: syz.4.2111 Not tainted syzkaller #0 PREEMPT(full) 
[  188.146983][T13285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.146989][T13285] Call Trace:
[  188.147001][T13285]  <TASK>
[  188.147005][T13285]  dump_stack_lvl+0x189/0x250
[  188.147019][T13285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.147028][T13285]  ? __pfx__printk+0x10/0x10
[  188.147038][T13285]  ? lock_release+0x4b/0x3e0
[  188.147049][T13285]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  188.147059][T13285]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  188.147090][T13285]  warn_alloc+0x214/0x310
[  188.147105][T13285]  ? __pfx_warn_alloc+0x10/0x10
[  188.147117][T13285]  ? __get_vm_area_node+0x28f/0x300
[  188.147127][T13285]  ? xskq_create+0xbf/0x170
[  188.147138][T13285]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  188.147154][T13285]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  188.147164][T13285]  ? lock_release+0x4b/0x3e0
[  188.147173][T13285]  ? xsk_setsockopt+0x502/0x8d0
[  188.147183][T13285]  ? __kasan_kmalloc+0x22/0xb0
[  188.147193][T13285]  vmalloc_user_noprof+0xad/0xf0
[  188.147203][T13285]  ? xskq_create+0xbf/0x170
[  188.147213][T13285]  xskq_create+0xbf/0x170
[  188.147223][T13285]  xsk_init_queue+0xb0/0x110
[  188.147233][T13285]  xsk_setsockopt+0x57b/0x8d0
[  188.147242][T13285]  ? __pfx_xsk_setsockopt+0x10/0x10
[  188.147251][T13285]  ? __pfx_aa_sk_perm+0x10/0x10
[  188.147263][T13285]  ? lock_release+0x4b/0x3e0
[  188.147272][T13285]  ? __se_sys_futex+0x36f/0x400
[  188.147282][T13285]  ? aa_sock_opt_perm+0xff/0x1b0
[  188.147289][T13285]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  188.147297][T13285]  ? __pfx_xsk_setsockopt+0x10/0x10
[  188.147309][T13285]  do_sock_setsockopt+0x17c/0x1b0
[  188.147318][T13285]  __x64_sys_setsockopt+0x13f/0x1b0
[  188.147326][T13285]  do_syscall_64+0xfa/0x3b0
[  188.147334][T13285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.147342][T13285]  ? exc_page_fault+0x9f/0xf0
[  188.147358][T13285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.147370][T13285] RIP: 0033:0x7f027298ebe9
[  188.147382][T13285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.147393][T13285] RSP: 002b:00007f02738b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  188.147408][T13285] RAX: ffffffffffffffda RBX: 00007f0272bb5fa0 RCX: 00007f027298ebe9
[  188.147416][T13285] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000012
[  188.147424][T13285] RBP: 00007f0272a11e19 R08: 0000000000000004 R09: 0000000000000000
[  188.147433][T13285] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  188.147441][T13285] R13: 00007f0272bb6038 R14: 00007f0272bb5fa0 R15: 00007fffbdc9eb68
[  188.147457][T13285]  </TASK>
[  188.147462][T13285] Mem-Info:
[  188.243797][T13285] active_anon:15792 inactive_anon:0 isolated_anon:0
[  188.243797][T13285]  active_file:1717 inactive_file:38262 isolated_file:0
[  188.243797][T13285]  unevictable:1768 dirty:141 writeback:0
[  188.243797][T13285]  slab_reclaimable:12005 slab_unreclaimable:88195
[  188.243797][T13285]  mapped:21226 shmem:5437 pagetables:899
[  188.243797][T13285]  sec_pagetables:0 bounce:0
[  188.243797][T13285]  kernel_misc_reclaimable:0
[  188.243797][T13285]  free:236703 free_pcp:26766 free_cma:0
[  188.257412][T13285] Node 0 active_anon:22980kB inactive_anon:0kB active_file:3048kB inactive_file:6608kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35328kB dirty:144kB writeback:0kB shmem:16544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5096kB pagetables:1768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  188.267394][T13285] Node 1 active_anon:40188kB inactive_anon:0kB active_file:3820kB inactive_file:146440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49576kB dirty:420kB writeback:0kB shmem:5204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10044kB pagetables:1828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  188.277778][T13285] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  188.287135][T13285] lowmem_reserve[]: 0 811 811 811 811
[  188.288937][T13285] Node 0 DMA32 free:341668kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22980kB inactive_anon:0kB active_file:3048kB inactive_file:6608kB unevictable:3536kB writepending:144kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:66892kB local_pcp:18032kB free_cma:0kB
[  188.299570][T13285] lowmem_reserve[]: 0 0 0 0 0
[  188.301036][T13285] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  188.310864][T13285] lowmem_reserve[]: 0 0 854 854 854
[  188.312793][T13285] Node 1 Normal free:131168kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40188kB inactive_anon:0kB active_file:3820kB inactive_file:146440kB unevictable:3536kB writepending:420kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40172kB local_pcp:23556kB free_cma:0kB
[  188.323439][T13285] lowmem_reserve[]: 0 0 0 0 0
[  188.324948][T13285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  188.328905][T13285] Node 0 DMA32: 1*4kB (U) 14*8kB (UME) 1*16kB (E) 1*32kB (U) 60*64kB (UME) 24*128kB (UME) 19*256kB (UM) 10*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 76*4096kB (UM) = 341668kB
[  188.334399][T13285] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  188.339958][T13285] Node 1 Normal: 1342*4kB (UME) 666*8kB (UME) 243*16kB (UME) 424*32kB (UME) 94*64kB (UME) 26*128kB (UME) 20*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 4*2048kB (UM) 17*4096kB (UM) = 131192kB
[  188.345957][T13285] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  188.349001][T13285] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  188.351868][T13285] 45432 total pagecache pages
[  188.354208][T13285] 0 pages in swap cache
[  188.355750][T13285] Free swap  = 124996kB
[  188.357153][T13285] Total swap = 124996kB
[  188.358820][T13285] 786301 pages RAM
[  188.360026][T13285] 0 pages HighMem/MovableOnly
[  188.361622][T13285] 241340 pages reserved
[  188.363353][T13285] 0 pages cma reserved
[  188.698480][T13298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2114'.
[  188.726758][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'.
[  189.487450][T13312] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2118'.
[  189.508512][T13315] netlink: 'syz.4.2119': attribute type 1 has an invalid length.
[  189.514096][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2119'.
[  189.553786][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'.
[  189.619398][T13323] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2122'.
[  189.626639][T13323] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2122'.
[  189.633834][T13322] syzkaller1: entered promiscuous mode
[  189.636030][T13322] syzkaller1: entered allmulticast mode
[  189.641807][T13322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2121'.
[  189.676358][T13329] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2124'.
[  189.758594][T13337] netlink: 'syz.1.2125': attribute type 1 has an invalid length.
[  189.771736][T13337] 8021q: adding VLAN 0 to HW filter on device bond28
[  189.776828][T13337] bond28: (slave wlan0): Opening slave failed
[  189.788074][T13344] 8021q: VLANs not supported on ip6tnl0
[  189.875340][T13352] netlink: 'syz.4.2132': attribute type 1 has an invalid length.
[  189.890810][T13352] bond6: (slave gretap3): making interface the new active one
[  189.893783][T13352] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  189.902178][T13352] 8021q: adding VLAN 0 to HW filter on device bond6
[  190.069126][T13356] netlink: 'syz.4.2133': attribute type 10 has an invalid length.
[  190.075425][T13356] team0: Port device dummy0 added
[  190.078478][T13356] netlink: 'syz.4.2133': attribute type 10 has an invalid length.
[  190.083105][T13356] team0: Port device dummy0 removed
[  190.086651][T13356] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  191.625026][T13395] rdma_op ffff88802df2e1f0 conn xmit_rdma 0000000000000000
[  191.633371][T13395] netlink: 'syz.1.2141': attribute type 10 has an invalid length.
[  192.133892][T13399] netlink: 'syz.4.2143': attribute type 4 has an invalid length.
[  192.137910][T13399] netlink: 'syz.4.2143': attribute type 4 has an invalid length.
[  192.141871][   T10] lo speed is unknown, defaulting to 1000
[  192.144006][   T10] syz1: Port: 1 Link ACTIVE
[  192.147415][T13399] IPVS: length: 24 != 55320
[  192.519380][T13426] pim6reg1: entered promiscuous mode
[  192.521486][T13426] pim6reg1: entered allmulticast mode
[  192.549672][T13427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.553313][T13427] syzkaller0: entered promiscuous mode
[  192.555437][T13427] syzkaller0: entered allmulticast mode
[  192.560704][T13427] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  192.567230][T13427] tipc: Resetting bearer <eth:syzkaller0>
[  192.645182][T13426] 8021q: adding VLAN 0 to HW filter on device bond7
[  192.648075][T13426] team0: Port device bond7 added
[  192.781122][T13441] siw: device registration error -23
[  193.115928][T13460] lo speed is unknown, defaulting to 1000
[  193.148141][T13459] __nla_validate_parse: 38 callbacks suppressed
[  193.148156][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'.
[  193.179577][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2160'.
[  193.323192][T13423] tipc: Resetting bearer <eth:syzkaller0>
[  193.327827][T13423] tipc: Disabling bearer <eth:syzkaller0>
[  193.572089][T13467] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2162'.
[  193.583832][T13467] lo speed is unknown, defaulting to 1000
[  193.634024][T13474] mac80211_hwsim hwsim57 wlan0: entered promiscuous mode
[  193.636335][T13474] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  193.642756][T13475] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  193.934148][T13496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2169'.
[  193.999631][T13505] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2171'.
[  194.068394][T13512] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  194.073170][T13512] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  194.556994][T13538] dvmrp8: entered allmulticast mode
[  194.599182][T13538] dvmrp8: left allmulticast mode
[  194.788293][T13544] lo speed is unknown, defaulting to 1000
[  194.871854][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'.
[  194.875965][T13544] netlink: 'syz.1.2179': attribute type 13 has an invalid length.
[  194.878537][T13544] netlink: 'syz.1.2179': attribute type 17 has an invalid length.
[  194.884441][T13544] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  194.945807][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2180'.
[  194.953024][T13548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.545695][T13561] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2185'.
[  195.796899][T13574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.807087][T13574] syzkaller0: entered promiscuous mode
[  195.808783][T13574] syzkaller0: entered allmulticast mode
[  195.816241][T13574] tipc: Resetting bearer <eth:syzkaller0>
[  195.820214][T13573] tipc: Resetting bearer <eth:syzkaller0>
[  195.825953][T13573] tipc: Disabling bearer <eth:syzkaller0>
[  195.976592][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'.
[  196.003251][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2194'.
[  196.089012][T13600] dvmrp8: entered allmulticast mode
[  196.099340][T13600] lo speed is unknown, defaulting to 1000
[  196.123305][T13600] netlink: 'syz.1.2196': attribute type 23 has an invalid length.
[  196.141662][T13599] dvmrp8: left allmulticast mode
[  196.518841][T13613] netlink: 'syz.3.2200': attribute type 2 has an invalid length.
[  196.997483][T13661] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  197.026551][T13667] netlink: 'syz.1.2216': attribute type 1 has an invalid length.
[  197.029418][T13667] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  197.120846][T13676] lo speed is unknown, defaulting to 1000
[  197.161858][T13679] bridge12: port 1(bond29) entered blocking state
[  197.164743][T13679] bridge12: port 1(bond29) entered disabled state
[  197.167735][T13679] bond29: entered allmulticast mode
[  197.171378][T13679] bond29: entered promiscuous mode
[  197.301238][T13693] gtp0: entered promiscuous mode
[  197.380896][T13697] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001
[  197.383589][T13696] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001
[  197.512178][T13706] netlink: 'syz.3.2226': attribute type 8 has an invalid length.
[  197.815551][ T5312] lo speed is unknown, defaulting to 1000
[  197.815612][   T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.821172][   T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  197.822406][ T5312] syz1: Port: 1 Link DOWN
[  197.828966][   T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.837240][   T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  197.840505][   T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.844877][   T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  197.848218][   T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  197.851543][   T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  197.877446][T13731] lo speed is unknown, defaulting to 1000
[  198.149942][T13749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.167319][T13748] tipc: Disabling bearer <eth:syzkaller0>
[  198.331083][T13759] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  198.409587][T13759] infiniband syz!: set down
[  198.411535][T13759] infiniband syz!: added team_slave_0
[  198.427391][T13759] RDS/IB: syz!: added
[  198.429026][T13759] smc: adding ib device syz! with port count 1
[  198.431138][T13759] smc:    ib device syz! port 1 has pnetid 
[  198.688844][T13771] pimreg: entered allmulticast mode
[  198.711870][T13773] __nla_validate_parse: 18 callbacks suppressed
[  198.711887][T13773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2245'.
[  198.864142][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  198.925464][T13792] 8021q: adding VLAN 0 to HW filter on device bond30
[  198.930192][T13792] team0: Port device bond30 added
[  198.950743][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'.
[  198.956815][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'.
[  198.966496][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'.
[  198.970519][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'.
[  198.984934][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'.
[  199.010818][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'.
[  199.017138][T13804] openvswitch: netlink: Unknown nsh attribute 0
[  199.020906][T13804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.025553][T13798] 8021q: adding VLAN 0 to HW filter on device bond31
[  199.030353][T13798] team0: Port device bond31 added
[  199.279388][T13820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2257'.
[  199.286495][T13820] sctp: [Deprecated]: syz.1.2257 (pid 13820) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.286495][T13820] Use struct sctp_sack_info instead
[  199.318852][T13823] netlink: 'syz.1.2258': attribute type 5 has an invalid length.
[  199.322185][T13822] netlink: 'syz.1.2258': attribute type 5 has an invalid length.
[  199.441780][T13828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2260'.
[  199.591573][T13831] netlink: 'syz.4.2261': attribute type 9 has an invalid length.
[  199.600024][T13831] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2261'.
[  199.819082][T13852] lo speed is unknown, defaulting to 1000
[  200.064424][T13866] veth0_to_team: left allmulticast mode
[  200.066582][T13866] veth0_to_team: left promiscuous mode
[  200.069542][T13866] bridge0: port 1(veth0_to_team) entered disabled state
[  200.094046][T13876] netlink: 'syz.3.2276': attribute type 7 has an invalid length.
[  200.096889][T13876] netlink: 'syz.3.2276': attribute type 8 has an invalid length.
[  200.150466][T13876] batadv0: entered promiscuous mode
[  200.154222][T13876] batadv0: left promiscuous mode
[  200.239869][T13883] netlink: 'syz.3.2278': attribute type 7 has an invalid length.
[  200.495342][T13903] batadv_slave_1: entered promiscuous mode
[  200.507650][T13905] batadv_slave_1: left promiscuous mode
[  200.965135][T13931] netlink: 'syz.4.2294': attribute type 1 has an invalid length.
[  201.055607][T13933] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.061262][T13933] 8021q: adding VLAN 0 to HW filter on device team0
[  201.160918][T13933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.167668][   T10] lo speed is unknown, defaulting to 1000
[  201.169892][   T10] syz1: Port: 1 Link ACTIVE
[  201.179462][T13937] lo speed is unknown, defaulting to 1000
[  201.345837][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.399405][T13946] lo speed is unknown, defaulting to 1000
[  201.669547][T13956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.674168][T13956] syzkaller0: entered promiscuous mode
[  201.676568][T13956] syzkaller0: entered allmulticast mode
[  201.685037][T13956] tipc: Resetting bearer <eth:syzkaller0>
[  201.689798][T13955] tipc: Resetting bearer <eth:syzkaller0>
[  201.697416][T13955] tipc: Disabling bearer <eth:syzkaller0>
[  202.160131][T13976] validate_nla: 4 callbacks suppressed
[  202.160143][T13976] netlink: 'syz.4.2310': attribute type 12 has an invalid length.
[  202.247493][T13983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.267405][T13984] syzkaller0: entered promiscuous mode
[  202.269200][T13984] syzkaller0: entered allmulticast mode
[  202.271292][T13984] tipc: Resetting bearer <eth:syzkaller0>
[  202.275998][T13982] tipc: Resetting bearer <eth:syzkaller0>
[  202.320845][T13982] tipc: Disabling bearer <eth:syzkaller0>
[  202.425804][T14003] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.429785][T14003] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  202.500478][T14012] lo speed is unknown, defaulting to 1000
[  202.756803][T14029] netlink: 'syz.1.2319': attribute type 10 has an invalid length.
[  202.926340][T14035] IPVS: Scheduler module ip_vs_sip not found
[  203.024591][T14047] netlink: 'syz.3.2323': attribute type 1 has an invalid length.
[  203.027509][T14047] netlink: 'syz.3.2323': attribute type 2 has an invalid length.
[  203.030040][T14047] netlink: 'syz.3.2323': attribute type 1 has an invalid length.
[  203.180311][T14060] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  203.188758][T14061] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  203.193180][T14060] sock: sock_timestamping_bind_phc: sock not bind to device
[  203.215759][T14066] TCP: TCP_TX_DELAY enabled
[  203.234262][T14070] netlink: 'syz.3.2329': attribute type 1 has an invalid length.
[  203.326270][T14078] lo speed is unknown, defaulting to 1000
[  203.543944][T14114] sctp: [Deprecated]: syz.3.2342 (pid 14114) Use of int in maxseg socket option.
[  203.543944][T14114] Use struct sctp_assoc_value instead
[  203.755541][T14136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.766319][T14135] tipc: Resetting bearer <eth:syzkaller0>
[  203.795101][T14135] tipc: Disabling bearer <eth:syzkaller0>
[  203.831250][T14147] __nla_validate_parse: 28 callbacks suppressed
[  203.831261][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'.
[  203.836330][T14146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'.
[  204.045006][T14176] erspan0: left allmulticast mode
[  204.048650][T14176] syz_tun: left promiscuous mode
[  204.050248][T14176] syz_tun: left allmulticast mode
[  204.055999][T14176] wg1: left promiscuous mode
[  204.057474][T14176] wg1: left allmulticast mode
[  204.060301][T14176] batadv_slave_0: left promiscuous mode
[  204.069253][T14176] veth17: left promiscuous mode
[  204.072247][T14176] bridge9: left allmulticast mode
[  204.074983][T14176] ip6gretap0: left allmulticast mode
[  204.076823][T14176] ip6gretap0: left promiscuous mode
[  204.078801][T14176] macsec0: left promiscuous mode
[  204.080602][T14176] macsec0: left allmulticast mode
[  204.085453][T14176] gtp1: left promiscuous mode
[  204.090949][T14176] mac80211_hwsim hwsim57 wlan0: left promiscuous mode
[  204.100890][T14176] bond27: left promiscuous mode
[  204.102545][T14176] bond27: left allmulticast mode
[  204.124682][T14181] lo speed is unknown, defaulting to 1000
[  204.143523][T14177] lo speed is unknown, defaulting to 1000
[  204.373533][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'.
[  204.376959][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'.
[  204.395432][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'.
[  204.395452][ T7139] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  204.398289][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'.
[  204.401012][ T7139] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  204.419597][ T7139] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  204.449547][ T7139] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  204.566745][T14207] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2367'.
[  204.711595][T14222] bridge0: port 3(veth0_to_team) entered blocking state
[  204.719051][T14222] bridge0: port 3(veth0_to_team) entered disabled state
[  204.721368][T14222] veth0_to_team: entered allmulticast mode
[  204.725720][T14222] veth0_to_team: entered promiscuous mode
[  204.728467][T14223] veth0_to_team: left allmulticast mode
[  204.730366][T14223] veth0_to_team: left promiscuous mode
[  204.735997][T14223] bridge0: port 3(veth0_to_team) entered disabled state
[  204.757269][T14227] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2372'.
[  204.760094][T14227] netlink: 'syz.1.2372': attribute type 1 has an invalid length.
[  204.764217][T14227] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2372'.
[  204.782073][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'.
[  204.970432][T14238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.973521][T14238] syzkaller0: entered promiscuous mode
[  204.975436][T14238] syzkaller0: entered allmulticast mode
[  204.980994][T14238] tipc: Resetting bearer <eth:syzkaller0>
[  204.988685][T14237] tipc: Resetting bearer <eth:syzkaller0>
[  204.993048][T14237] tipc: Disabling bearer <eth:syzkaller0>
[  205.264980][T14274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.267296][T14274] IPv6: NLM_F_CREATE should be set when creating new route
[  205.269640][T14274] IPv6: NLM_F_CREATE should be set when creating new route
[  205.272083][T14274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.373079][T14288] netlink: 'syz.4.2391': attribute type 16 has an invalid length.
[  205.375623][T14288] netlink: 'syz.4.2391': attribute type 17 has an invalid length.
[  205.449204][ T5312] lo speed is unknown, defaulting to 1000
[  205.451106][   T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.453939][ T5312] syz1: Port: 1 Link DOWN
[  205.456170][   T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.458770][   T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.461989][   T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.518293][T14299] veth0_macvtap: left promiscuous mode
[  206.227019][T14333] blkio.reset_stats is deprecated
[  206.231483][T14337] syzkaller0: entered promiscuous mode
[  206.239863][T14337] syzkaller0: entered allmulticast mode
[  206.369834][T14340] netlink: 'syz.4.2406': attribute type 21 has an invalid length.
[  206.623061][T14355] 8021q: adding VLAN 0 to HW filter on device bond12
[  206.627436][T14355] bond12: (slave wlan0): Opening slave failed
[  206.633070][T14355] vlan4: entered allmulticast mode
[  206.634916][T14355] veth1: entered allmulticast mode
[  206.638083][T14355] bond12: (slave vlan4): making interface the new active one
[  206.641041][T14355] bond12: (slave vlan4): Enslaving as an active interface with an up link
[  207.137590][T10930] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.140908][T10930] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.145069][T10930] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.148624][T10930] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.184004][T14362] lo speed is unknown, defaulting to 1000
[  207.493867][T14375] validate_nla: 1 callbacks suppressed
[  207.493878][T14375] netlink: 'syz.4.2414': attribute type 8 has an invalid length.
[  207.497448][T14377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.653648][T14388] netlink: 'syz.4.2419': attribute type 3 has an invalid length.
[  207.705002][T14392] batadv2: entered promiscuous mode
[  207.725210][T14394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.787801][T14394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.845825][T14404] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  207.876050][T14394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.956228][T14394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.035746][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.058469][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.060914][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.074807][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.120268][T14466] __nla_validate_parse: 27 callbacks suppressed
[  210.120285][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2440'.
[  210.144238][T14466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.148521][T14466] syzkaller0: entered promiscuous mode
[  210.150909][T14466] syzkaller0: entered allmulticast mode
[  210.159666][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.162823][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.169596][T14465] tipc: Resetting bearer <eth:syzkaller0>
[  210.177785][T14465] tipc: Disabling bearer <eth:syzkaller0>
[  210.282821][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  210.285409][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  210.288322][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  210.291814][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  210.295169][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  210.319950][T14470] lo speed is unknown, defaulting to 1000
[  210.335822][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2444'.
[  210.405057][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2444'.
[  210.434637][T14470] chnl_net:caif_netlink_parms(): no params data found
[  210.473052][T14482] dvmrp8: entered allmulticast mode
[  210.475899][T14470] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.478520][T14470] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.480870][T14470] bridge_slave_0: entered allmulticast mode
[  210.484076][T14470] bridge_slave_0: entered promiscuous mode
[  210.487242][T14470] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.489500][T14470] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.491923][T14470] bridge_slave_1: entered allmulticast mode
[  210.494693][T14470] bridge_slave_1: entered promiscuous mode
[  210.509777][T14470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.518020][T14470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.531314][T14482] lo speed is unknown, defaulting to 1000
[  210.532946][T14470] team0: Port device team_slave_0 added
[  210.536710][T14470] team0: Port device team_slave_1 added
[  210.552125][T14486] netlink: 'syz.4.2445': attribute type 23 has an invalid length.
[  210.559246][T14470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.561884][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.574635][T14470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.588282][T14470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.590609][T14470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.601212][T14470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.644701][T14470] hsr_slave_0: entered promiscuous mode
[  210.647302][T14470] hsr_slave_1: entered promiscuous mode
[  210.649567][T14470] debugfs: 'hsr0' already exists in 'hsr'
[  210.651535][T14470] Cannot create hsr debugfs directory
[  210.680578][T14481] dvmrp8: left allmulticast mode
[  210.747568][T14470] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  210.751888][T14470] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  210.767530][T14470] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  210.774673][T14470] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  210.901308][T14470] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.907943][T14501] syzkaller0: entered promiscuous mode
[  210.910263][T14501] syzkaller0: entered allmulticast mode
[  210.917149][T14498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.923305][T14497] tipc: Resetting bearer <eth:syzkaller0>
[  210.926723][T14497] tipc: Disabling bearer <eth:syzkaller0>
[  210.934204][T14470] 8021q: adding VLAN 0 to HW filter on device team0
[  210.945997][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.948709][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.958345][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.961266][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.058340][T14470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.181050][T14470] veth0_vlan: entered promiscuous mode
[  211.186256][T14470] veth1_vlan: entered promiscuous mode
[  211.210018][T14470] veth0_macvtap: entered promiscuous mode
[  211.215980][T14470] veth1_macvtap: entered promiscuous mode
[  211.224588][T14470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.229752][T14470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.237901][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.240531][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.245018][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.248890][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.285296][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.288154][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.307305][T14518] bridge0: port 1(erspan0) entered blocking state
[  211.311521][T14518] bridge0: port 1(erspan0) entered disabled state
[  211.317723][T14518] erspan0: entered allmulticast mode
[  211.319912][T14518] erspan0: entered promiscuous mode
[  211.331747][T14519] erspan0: left allmulticast mode
[  211.336622][T14519] erspan0: left promiscuous mode
[  211.338898][T14519] bridge0: port 1(erspan0) entered disabled state
[  211.347146][ T7262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.349594][ T7262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.387623][T14527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2439'.
[  211.397354][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2439'.
[  211.400127][T14527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2439'.
[  211.407516][T14527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2439'.
[  211.538877][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2456'.
[  211.643884][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2458'.
[  211.651097][T14548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.654458][T14548] syzkaller0: entered promiscuous mode
[  211.656251][T14548] syzkaller0: entered allmulticast mode
[  211.660424][T14548] tipc: Resetting bearer <eth:syzkaller0>
[  211.677187][T14547] tipc: Resetting bearer <eth:syzkaller0>
[  211.680282][T14547] tipc: Disabling bearer <eth:syzkaller0>
[  211.762589][T14563] netlink: 'syz.4.2463': attribute type 1 has an invalid length.
[  211.766950][T14563] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2463'.
[  212.302512][ T5233] Bluetooth: hci1: command tx timeout
[  212.735922][T14585] lo speed is unknown, defaulting to 1000
[  212.835916][T14597] gtp1: entered promiscuous mode
[  213.130665][T14614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.133950][T14614] syzkaller0: entered promiscuous mode
[  213.135647][T14614] syzkaller0: entered allmulticast mode
[  213.154860][T14614] tipc: Resetting bearer <eth:syzkaller0>
[  213.163730][T14613] tipc: Resetting bearer <eth:syzkaller0>
[  213.166580][T14613] tipc: Disabling bearer <eth:syzkaller0>
[  213.378915][T14644] 8021q: adding VLAN 0 to HW filter on device bond8
[  214.081856][T14657] delete_channel: no stack
[  214.140815][T14662] bond0: entered promiscuous mode
[  214.146611][T14662] dummy0: entered promiscuous mode
[  214.149404][T14662] dummy0: left promiscuous mode
[  214.151503][T14662] bond0: left promiscuous mode
[  214.198059][T14664] lo speed is unknown, defaulting to 1000
[  214.382934][ T5233] Bluetooth: hci1: command tx timeout
[  214.614193][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.621852][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.679168][T14715] bridge_slave_0: left allmulticast mode
[  214.682000][T14715] bridge_slave_0: left promiscuous mode
[  214.690965][T14715] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.697845][T14715] bridge_slave_1: left allmulticast mode
[  214.699896][T14715] bridge_slave_1: left promiscuous mode
[  214.705495][T14715] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.709707][T14715] bond0: (slave bond_slave_0): Releasing backup interface
[  214.714417][T14715] bond0: (slave bond_slave_1): Releasing backup interface
[  214.719835][T14715] team0: Port device team_slave_0 removed
[  214.727287][T14715] team0: Port device team_slave_1 removed
[  214.729613][T14715] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.731908][T14715] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.736637][T14715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.738973][T14715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.800167][T14733] lo speed is unknown, defaulting to 1000
[  214.802010][T14733] lo speed is unknown, defaulting to 1000
[  214.813488][T14733] lo speed is unknown, defaulting to 1000
[  214.819822][T14733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  214.837212][T14733] lo speed is unknown, defaulting to 1000
[  214.839794][T14733] lo speed is unknown, defaulting to 1000
[  214.842613][T14733] lo speed is unknown, defaulting to 1000
[  214.846925][T14733] lo speed is unknown, defaulting to 1000
[  214.850249][T14733] lo speed is unknown, defaulting to 1000
[  214.873971][T14733] netlink: 'syz.3.2514': attribute type 4 has an invalid length.
[  214.927505][T14745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.930315][T14745] syzkaller0: entered promiscuous mode
[  214.933246][T14745] syzkaller0: entered allmulticast mode
[  214.948537][T14745] tipc: Resetting bearer <eth:syzkaller0>
[  214.951991][T14744] tipc: Resetting bearer <eth:syzkaller0>
[  214.958430][T14744] tipc: Disabling bearer <eth:syzkaller0>
[  215.122243][T14759] netlink: 'syz.4.2525': attribute type 1 has an invalid length.
[  215.136444][T14759] 8021q: adding VLAN 0 to HW filter on device bond9
[  215.152789][T14759] bond9: (slave geneve5): making interface the new active one
[  215.156014][T14759] bond9: (slave geneve5): Enslaving as an active interface with an up link
[  215.159010][T10930] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.167956][T10930] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.179829][T10930] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.183332][T10930] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.203225][T14768] syzkaller0: entered promiscuous mode
[  215.205710][T14768] syzkaller0: entered allmulticast mode
[  215.211311][T14767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.214036][T14769] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  215.237813][T14769] tipc: Resetting bearer <eth:syzkaller0>
[  215.244603][T14769] tipc: Disabling bearer <eth:syzkaller0>
[  215.425246][T14799] __nla_validate_parse: 19 callbacks suppressed
[  215.425258][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'.
[  215.447360][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'.
[  215.464530][T14795] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  215.467171][T14795] team0: Device ipvlan3 is already an upper device of the team interface
[  215.506252][T14795] openvswitch: netlink: IP tunnel TTL not specified.
[  216.106585][T14840] mac80211_hwsim hwsim51 wlan0: left promiscuous mode
[  216.108869][T14840] geneve3: left promiscuous mode
[  216.110957][T14840] ip6gre1: left promiscuous mode
[  216.116900][T14840] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  216.138258][T14840] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2551'.
[  216.189451][T14838] batadv_slave_1: entered promiscuous mode
[  216.196547][T14837] batadv_slave_1: left promiscuous mode
[  216.263264][T14851] netlink: 'syz.4.2554': attribute type 1 has an invalid length.
[  216.266372][T14851] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2554'.
[  216.316821][T14858] netlink: 'syz.4.2557': attribute type 1 has an invalid length.
[  216.327469][T14858] 8021q: adding VLAN 0 to HW filter on device bond10
[  216.341194][T14858] 8021q: adding VLAN 0 to HW filter on device bond10
[  216.343672][T14858] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  216.348003][T14858] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  216.462991][ T5233] Bluetooth: hci1: command tx timeout
[  216.704201][T14858] veth11: entered promiscuous mode
[  216.708160][T14858] bond10: (slave veth11): Enslaving as an active interface with a down link
[  216.712106][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.717863][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.728288][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.732052][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.811285][T14874] syzkaller0: entered promiscuous mode
[  216.819815][T14874] syzkaller0: entered allmulticast mode
[  216.825208][T14874] tipc: Started in network mode
[  216.827127][T14874] tipc: Node identity ee2de7efe327, cluster identity 4711
[  216.829833][T14874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.839081][T14873] tipc: Resetting bearer <eth:syzkaller0>
[  216.845548][T14873] tipc: Disabling bearer <eth:syzkaller0>
[  216.852793][T14876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.855838][T14876] syzkaller0: entered promiscuous mode
[  216.858055][T14876] syzkaller0: entered allmulticast mode
[  216.866287][T14876] tipc: Resetting bearer <eth:syzkaller0>
[  216.873799][T14875] tipc: Resetting bearer <eth:syzkaller0>
[  216.876587][T14875] tipc: Disabling bearer <eth:syzkaller0>
[  217.007825][T14882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2564'.
[  217.046294][T14884] lo speed is unknown, defaulting to 1000
[  217.112003][T14884] lo speed is unknown, defaulting to 1000
[  217.181899][T14884] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2565'.
[  217.185841][T14889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2566'.
[  217.260889][T14896] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma?
[  217.375390][T14905] lo speed is unknown, defaulting to 1000
[  217.426537][T14905] lo speed is unknown, defaulting to 1000
[  218.218845][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2573'.
[  218.230109][T14916] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2573'.
[  218.299073][T14920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.326649][T14920] syzkaller0: entered promiscuous mode
[  218.328850][T14920] syzkaller0: entered allmulticast mode
[  218.351598][T14920] tipc: Resetting bearer <eth:syzkaller0>
[  218.355418][T14919] tipc: Resetting bearer <eth:syzkaller0>
[  218.389117][T14919] tipc: Disabling bearer <eth:syzkaller0>
[  218.389902][T14922] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2574'.
[  218.493826][T14930] block nbd3: not configured, cannot reconfigure
[  218.535980][T14937] netlink: 'syz.5.2579': attribute type 1 has an invalid length.
[  218.543200][ T5233] Bluetooth: hci1: command tx timeout
[  218.559783][T14944] netlink: 'syz.3.2581': attribute type 10 has an invalid length.
[  218.874620][T14967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.878164][T14967] syzkaller0: entered promiscuous mode
[  218.880091][T14967] syzkaller0: entered allmulticast mode
[  218.892788][T14967] tipc: Resetting bearer <eth:syzkaller0>
[  218.897015][T14966] tipc: Resetting bearer <eth:syzkaller0>
[  218.901833][T14966] tipc: Disabling bearer <eth:syzkaller0>
[  219.216274][T14978] wg1: left promiscuous mode
[  219.218104][T14978] wg1: left allmulticast mode
[  219.260519][T14978] batadv_slave_0: left promiscuous mode
[  219.393662][T14978] gretap1: left promiscuous mode
[  219.405939][T14978] bond3: left promiscuous mode
[  219.420155][T14978] bond6: left promiscuous mode
[  219.425552][T14978] bridge3: left promiscuous mode
[  219.427359][T14978] bridge3: left allmulticast mode
[  219.464142][T14978] veth5: left promiscuous mode
[  219.468669][T14978] veth7: left promiscuous mode
[  219.478283][T14978] vlan2: left allmulticast mode
[  219.479869][T14978] bond0: left allmulticast mode
[  219.483464][T14978] macvlan2: left promiscuous mode
[  219.486225][T14978] macvtap1: left promiscuous mode
[  219.488316][T14978] macvtap1: left allmulticast mode
[  219.496701][T14978] bond9: left promiscuous mode
[  219.499442][T14978] bond9: left allmulticast mode
[  219.506644][T14978] veth9: left promiscuous mode
[  219.530278][T14978] vlan4: left allmulticast mode
[  219.534003][T14978] veth1: left allmulticast mode
[  219.544420][T10930] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.547619][T10930] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.550413][T10930] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.554291][T10930] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  219.971545][T15008] ip_vti0: entered allmulticast mode
[  220.049493][T15010] netlink: 'syz.5.2597': attribute type 1 has an invalid length.
[  220.118423][T15023] netlink: 'syz.4.2601': attribute type 1 has an invalid length.
[  220.135094][T15023] netlink: 'syz.4.2601': attribute type 3 has an invalid length.
[  220.138143][T15023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.172090][T15033] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  220.427029][   T33] audit: type=1800 audit(1756436407.052:3): pid=15049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2609" name="memory.events" dev="tmpfs" ino=206 res=0 errno=0
[  220.466952][T15051] __nla_validate_parse: 11 callbacks suppressed
[  220.466969][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2610'.
[  220.471353][T15053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.483782][T15053] syzkaller0: entered promiscuous mode
[  220.486021][T15053] syzkaller0: entered allmulticast mode
[  220.531603][T15053] tipc: Resetting bearer <eth:syzkaller0>
[  220.537903][T15052] tipc: Resetting bearer <eth:syzkaller0>
[  220.543970][T15052] tipc: Disabling bearer <eth:syzkaller0>
[  221.014020][T15079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2617'.
[  221.140608][T15087] 8021q: adding VLAN 0 to HW filter on device team0
[  221.145715][T15087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.151486][ T1270] lo speed is unknown, defaulting to 1000
[  221.154196][ T1270] syz2: Port: 1 Link ACTIVE
[  221.225653][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2624'.
[  221.290108][T15105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2625'.
[  221.296756][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'.
[  221.354646][T15105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2625'.
[  221.381050][T15110] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2626'.
[  221.447087][T15112] netlink: 'syz.4.2627': attribute type 6 has an invalid length.
[  221.456495][T15112] bond11: entered promiscuous mode
[  221.502832][ T5844] Bluetooth: hci1: command 0x0405 tx timeout
[  221.654227][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2631'.
[  221.807960][T15137] lo speed is unknown, defaulting to 1000
[  221.851259][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'.
[  221.896862][T15137] lo speed is unknown, defaulting to 1000
[  222.037189][T15151] netlink: 'syz.5.2638': attribute type 4 has an invalid length.
[  222.044215][T15151] netlink: 'syz.5.2638': attribute type 4 has an invalid length.
[  222.308266][T15158] batadv_slave_1: entered promiscuous mode
[  222.321643][T15152] batadv_slave_1: left promiscuous mode
[  222.485754][T15160] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  222.586493][ T1270] lo speed is unknown, defaulting to 1000
[  222.588731][ T1270] syz2: Port: 1 Link DOWN
[  222.665388][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'.
[  222.670089][T15167] netlink: 'syz.3.2644': attribute type 1 has an invalid length.
[  222.674833][T15167] netlink: 'syz.3.2644': attribute type 1 has an invalid length.
[  223.066953][T15202] 8021q: adding VLAN 0 to HW filter on device bond1
[  223.070168][T15202] bridge0: port 1(bond1) entered blocking state
[  223.072854][T15202] bridge0: port 1(bond1) entered disabled state
[  223.075527][T15202] bond1: entered allmulticast mode
[  223.078973][T15202] bond1: entered promiscuous mode
[  223.121576][T15205] sctp: [Deprecated]: syz.5.2655 (pid 15205) Use of int in max_burst socket option deprecated.
[  223.121576][T15205] Use struct sctp_assoc_value instead
[  223.385115][T15220] 8021q: VLANs not supported on ip_vti0
[  223.582591][ T5844] Bluetooth: hci1: command 0x0405 tx timeout
[  223.648386][T15239] IPVS: Unknown mcast interface: vcan0
[  223.649156][T15238] netlink: 'syz.3.2666': attribute type 1 has an invalid length.
[  223.650629][T15239] IPVS: Unknown mcast interface: vcan0
[  223.656029][T15239] IPVS: Unknown mcast interface: vcan0
[  223.670556][T15239] IPVS: Unknown mcast interface: vcan0
[  223.675748][T15239] IPVS: Unknown mcast interface: vcan0
[  223.683809][T15238] bond13: (slave geneve3): making interface the new active one
[  223.687293][T15238] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  223.693391][T15239] IPVS: Unknown mcast interface: vcan0
[  223.695248][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  223.698116][T15239] IPVS: Unknown mcast interface: vcan0
[  223.700657][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  223.708158][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  223.715539][T15238] 8021q: adding VLAN 0 to HW filter on device bond13
[  223.718195][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  223.806764][T15249] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  223.809586][T15249] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  223.814008][T15249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  224.136616][T15284] netlink: 'syz.3.2678': attribute type 12 has an invalid length.
[  224.236990][T15292] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  224.407852][T15303] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  224.817393][T15320] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  224.820494][T15320] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  224.823585][T15320] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  224.910661][T15328] lo speed is unknown, defaulting to 1000
[  224.965760][T15330] geneve6: entered allmulticast mode
[  224.984912][T15328] lo speed is unknown, defaulting to 1000
[  225.064904][T15334] netlink: 'syz.4.2692': attribute type 4 has an invalid length.
[  225.411567][T15345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.416819][T15345] syzkaller0: entered promiscuous mode
[  225.418884][T15345] syzkaller0: entered allmulticast mode
[  225.482228][T15345] tipc: Resetting bearer <eth:syzkaller0>
[  225.524550][T15344] tipc: Resetting bearer <eth:syzkaller0>
[  225.529020][T15344] tipc: Disabling bearer <eth:syzkaller0>
[  225.915258][T15359] __nla_validate_parse: 24 callbacks suppressed
[  225.915272][T15359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2700'.
[  225.999649][T15364] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2702'.
[  226.240565][T15386] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2709'.
[  226.279362][T15389] ip_vti0: left allmulticast mode
[  226.287189][T15389] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  226.290073][T15389] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  226.328192][T15395] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2712'.
[  226.549265][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2718'.
[  226.551073][T15411] lo speed is unknown, defaulting to 1000
[  226.630644][T15414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2720'.
[  226.641837][T15415] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2718'.
[  226.658346][T15411] lo speed is unknown, defaulting to 1000
[  226.776481][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2725'.
[  226.787560][T15438] IPv6: NLM_F_CREATE should be specified when creating new route
[  226.832049][T15436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  226.983359][T15445] netlink: 676 bytes leftover after parsing attributes in process `syz.5.2729'.
[  226.987486][T15445] netlink: 676 bytes leftover after parsing attributes in process `syz.5.2729'.
[  227.348588][T15495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.351812][T15495] netlink: 'syz.4.2745': attribute type 23 has an invalid length.
[  227.474497][T15501] bond15 (unregistering): Released all slaves
[  227.641062][T15522] macsec1: entered allmulticast mode
[  227.643936][T15522] macvlan1: entered allmulticast mode
[  227.646965][T15522] macvlan1: left allmulticast mode
[  227.657274][T15523] macsec1: entered allmulticast mode
[  227.659642][T15523] macvlan1: entered allmulticast mode
[  227.662787][T15523] macvlan1: left allmulticast mode
[  227.740635][T15526] IPVS: set_ctl: invalid protocol: 31463 100.1.1.2:20003
[  227.896047][T15541] netlink: 'syz.3.2761': attribute type 1 has an invalid length.
[  227.946206][T15549] syzkaller0: refused to change device tx_queue_len
[  227.952875][T15549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.956855][T15549] tipc: Resetting bearer <eth:syzkaller0>
[  227.960159][T15548] tipc: Disabling bearer <eth:syzkaller0>
[  228.102884][T15571] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  228.105898][T15572] netlink: 'syz.4.2771': attribute type 1 has an invalid length.
[  228.287910][T15582] syzkaller0: entered promiscuous mode
[  228.289640][T15582] syzkaller0: entered allmulticast mode
[  228.298864][T15589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.318735][T15587] syzkaller0: entered promiscuous mode
[  228.320458][T15587] syzkaller0: entered allmulticast mode
[  228.334214][T15587] tipc: Resetting bearer <eth:syzkaller0>
[  228.341805][T15587] tipc: Disabling bearer <eth:syzkaller0>
[  228.713627][T15625] netlink: 'syz.3.2787': attribute type 1 has an invalid length.
[  228.736501][T15625] 8021q: adding VLAN 0 to HW filter on device bond16
[  228.757303][T15625] 8021q: adding VLAN 0 to HW filter on device bond16
[  228.760285][T15625] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  228.765601][T15625] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  228.800237][T15631] veth19: entered promiscuous mode
[  228.806301][T15631] bond16: (slave veth19): Enslaving as an active interface with a down link
[  228.813779][T15625] erspan0: entered allmulticast mode
[  228.817363][T15625] bond16: (slave erspan0): making interface the new active one
[  228.820310][T15625] bond16: (slave erspan0): Enslaving as an active interface with an up link
[  230.096132][T15642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.108740][T15642] tipc: Disabling bearer <eth:syzkaller0>
[  230.219933][T15659] netlink: 'syz.5.2797': attribute type 1 has an invalid length.
[  230.817374][T15701] veth21: entered promiscuous mode
[  230.863874][T15700] bond16: (slave erspan0): Releasing active interface
[  231.001994][T15718] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  231.031320][T15709] syzkaller0: entered allmulticast mode
[  231.035258][T15709] syzkaller0 (unregistering): left allmulticast mode
[  231.209870][T15724] syzkaller0: entered allmulticast mode
[  231.214734][T15724] syzkaller0 (unregistering): left allmulticast mode
[  231.267141][T15729] lo speed is unknown, defaulting to 1000
[  231.341843][T15729] lo speed is unknown, defaulting to 1000
[  231.386890][T15744] __nla_validate_parse: 36 callbacks suppressed
[  231.386900][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2828'.
[  231.409976][T15744] macvlan3: entered promiscuous mode
[  231.411720][T15744] bond0: entered promiscuous mode
[  231.416837][T15744] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  231.426764][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'.
[  231.438107][T15746] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2829'.
[  231.442626][T15746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.445267][T15746] syzkaller0: entered promiscuous mode
[  231.447030][T15746] syzkaller0: entered allmulticast mode
[  231.486254][T15749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.496219][ T5886] lo speed is unknown, defaulting to 1000
[  231.502849][ T5886] syz2: Port: 1 Link ACTIVE
[  231.548895][T15754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.552101][T15749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.559876][T15754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.565360][T15754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.568997][T15754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.575404][T15756] syzkaller0: entered promiscuous mode
[  231.577506][T15756] syzkaller0: entered allmulticast mode
[  231.581006][T15754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.587266][T15754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.590226][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.590252][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.598102][T15745] tipc: Resetting bearer <eth:syzkaller0>
[  231.606068][T15745] tipc: Disabling bearer <eth:syzkaller0>
[  231.609562][T15754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.623784][T15756] tipc: Resetting bearer <eth:syzkaller0>
[  231.629168][T15756] tipc: Disabling bearer <eth:syzkaller0>
[  231.661361][T15765] lo speed is unknown, defaulting to 1000
[  231.710197][T15770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.714348][T15770] syzkaller0: entered promiscuous mode
[  231.716604][T15770] syzkaller0: entered allmulticast mode
[  231.727356][T15770] tipc: Resetting bearer <eth:syzkaller0>
[  231.731119][T15769] tipc: Resetting bearer <eth:syzkaller0>
[  231.744028][T15769] tipc: Disabling bearer <eth:syzkaller0>
[  231.777050][T15765] lo speed is unknown, defaulting to 1000
[  231.872130][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2834'.
[  231.882132][T15765] netlink: 'syz.3.2834': attribute type 13 has an invalid length.
[  231.890404][T15765] netlink: 'syz.3.2834': attribute type 17 has an invalid length.
[  231.898138][T15765] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  231.971696][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2843'.
[  231.971737][T15796] bond11: (slave ip6gretap3): Releasing backup interface
[  231.977784][T15796] bond11: (slave ip6gretap3): the permanent HWaddr of slave - 4a:79:e7:b7:89:6b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  231.987480][T15796] bond11: (slave veth9): Releasing backup interface
[  231.991217][T15796] bond12: (slave vlan4): Releasing active interface
[  231.994551][T15796] bond13: (slave geneve3): Releasing active interface
[  231.999272][T15796] bond16: (slave veth19): Releasing active interface
[  232.031280][ T5872] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  232.034261][ T5872] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  232.039787][T15796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  232.047977][ T5872] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  232.051322][ T5872] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  232.111432][T15809] netlink: 'syz.3.2846': attribute type 13 has an invalid length.
[  232.315961][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2850'.
[  232.333529][T15822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2850'.
[  232.359613][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'.
[  232.600452][T15840] geneve2: entered promiscuous mode
[  232.604877][T10930] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.608348][T10930] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.611834][T10930] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.615497][T10930] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.656501][T15844] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20001
[  232.697374][T15846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.700955][T15846] syzkaller0: entered promiscuous mode
[  232.703645][T15846] syzkaller0: entered allmulticast mode
[  232.865540][T15805] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  232.867730][T15805] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  232.873551][T15805] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  232.877606][T15805] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  232.880592][T15805] CPU: 0 UID: 0 PID: 15805 Comm: syz.4.2844 Not tainted syzkaller #0 PREEMPT(full) 
[  232.884867][T15805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.888165][T15805] RIP: 0010:klist_remove+0x14a/0x340
[  232.889895][T15805] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 1e b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 1e b3 f6 49 8b 44 24 58 48 89 44 24 08
[  232.896362][T15805] RSP: 0018:ffffc9000452f820 EFLAGS: 00010202
[  232.898390][T15805] RAX: 000000000000000b RBX: ffff88802e4b9cc0 RCX: 0000000000000000
[  232.900976][T15805] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  232.903510][T15805] RBP: ffffc9000452f908 R08: ffffffff8f89fe03 R09: 1ffffffff1f13fc0
[  232.906454][T15805] R10: dffffc0000000000 R11: fffffbfff1f13fc1 R12: 0000000000000000
[  232.909567][T15805] R13: 1ffff110256a060c R14: ffff88812b503060 R15: dffffc0000000000
[  232.913047][T15805] FS:  00007f02738936c0(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  232.916195][T15805] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  232.918378][T15805] CR2: 000000110c3b5dd5 CR3: 000000011517a000 CR4: 00000000000006f0
[  232.921373][T15805] Call Trace:
[  232.922590][T15805]  <TASK>
[  232.923666][T15805]  ? __pfx_klist_remove+0x10/0x10
[  232.925525][T15805]  ? __pfx_kobject_move+0x10/0x10
[  232.927352][T15805]  ? get_device_parent+0x366/0x3a0
[  232.928989][T15805]  device_move+0x193/0x700
[  232.930376][T15805]  hci_conn_del_sysfs+0xb8/0x170
[  232.931980][T15805]  hci_conn_del+0x9b7/0xd60
[  232.933520][T15805]  hci_conn_hash_flush+0x191/0x230
[  232.935257][T15805]  hci_dev_close_sync+0xaef/0x1330
[  232.937121][T15805]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  232.939205][T15805]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.941472][T15805]  hci_dev_do_close+0x2f/0x90
[  232.943295][T15805]  hci_rfkill_set_block+0x21d/0x2e0
[  232.945346][T15805]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  232.947656][T15805]  rfkill_set_block+0x1d2/0x440
[  232.949496][T15805]  rfkill_fop_write+0x44b/0x570
[  232.951440][T15805]  ? __pfx_rfkill_fop_write+0x10/0x10
[  232.953225][T15805]  ? __pfx_security_file_permission+0x10/0x10
[  232.955301][T15805]  ? rw_verify_area+0x255/0x4d0
[  232.956969][T15805]  ? __pfx_rfkill_fop_write+0x10/0x10
[  232.958760][T15805]  vfs_write+0x27e/0xb30
[  232.960495][T15805]  ? __pfx_vfs_write+0x10/0x10
[  232.962375][T15805]  ? lock_release+0x4b/0x3e0
[  232.964194][T15805]  ? __fget_files+0x2a/0x420
[  232.966026][T15805]  ? __fget_files+0x3a0/0x420
[  232.967949][T15805]  ? __fget_files+0x2a/0x420
[  232.969747][T15805]  ksys_write+0x145/0x250
[  232.971495][T15805]  ? __pfx_ksys_write+0x10/0x10
[  232.973375][T15805]  ? rcu_is_watching+0x15/0xb0
[  232.975246][T15805]  ? rcu_is_watching+0x15/0xb0
[  232.977139][T15805]  do_syscall_64+0xfa/0x3b0
[  232.978847][T15805]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.981060][T15805]  ? exc_page_fault+0x9f/0xf0
[  232.982704][T15805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.984755][T15805] RIP: 0033:0x7f027298ebe9
[  232.986514][T15805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.993411][T15805] RSP: 002b:00007f0273893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  232.995985][T15805] RAX: ffffffffffffffda RBX: 00007f0272bb6090 RCX: 00007f027298ebe9
[  232.999155][T15805] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000008
[  233.001785][T15805] RBP: 00007f0272a11e19 R08: 0000000000000000 R09: 0000000000000000
[  233.004541][T15805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.007077][T15805] R13: 00007f0272bb6128 R14: 00007f0272bb6090 R15: 00007fffbdc9eb68
[  233.010158][T15805]  </TASK>
[  233.011411][T15805] Modules linked in:
[  233.013547][T15805] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  233.022443][T15805] RIP: 0010:klist_remove+0x14a/0x340
[  233.024676][T15805] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 69 1e b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 4a 1e b3 f6 49 8b 44 24 58 48 89 44 24 08
[  233.031160][T15805] RSP: 0018:ffffc9000452f820 EFLAGS: 00010202
[  233.034998][T15805] RAX: 000000000000000b RBX: ffff88802e4b9cc0 RCX: 0000000000000000
[  233.038380][T15805] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  233.041617][T15805] RBP: ffffc9000452f908 R08: ffffffff8f89fe03 R09: 1ffffffff1f13fc0
[  233.045135][T15805] R10: dffffc0000000000 R11: fffffbfff1f13fc1 R12: 0000000000000000
[  233.047865][T15805] R13: 1ffff110256a060c R14: ffff88812b503060 R15: dffffc0000000000
[  233.050578][T15805] FS:  00007f02738936c0(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  233.056431][T15805] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.059176][T15805] CR2: 0000200000001540 CR3: 000000011517a000 CR4: 00000000000006f0
[  233.062533][T15805] Kernel panic - not syncing: Fatal exception
[  233.065284][T15805] Kernel Offset: disabled
[  233.067237][T15805] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:00:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000105e2 RDI=00000000000105e3 RBP=00000000000003f8 RSP=ffffc9000452efb0
R8 =ffff88801f1c0237 R9 =1ffff11003e38046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8de R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f02738936c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3b5dd5 CR3=000000011517a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973
XMM02=8002000c00000000 00000000006e7574 XMM03=5f7a797300020014 800100180000001b
XMM04=0300080c00000040 0500080000000030 XMM05=7a79730001000900 000000317a797300
XMM06=0200090000000040 0a00080000000700 XMM07=0000000000000004 010a090000005400
XMM08=0000000000000000 00007f7d37e12ee7 XMM09=0000000000000000 00007f7d37e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff1100715e24b RBX=0000000000000000 RCX=ffff88810742d640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff888038af1258 RSP=ffffc90002abfa20
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b476540
R12=dffffc0000000000 R13=ffffffff8b476612 R14=ffff88802d92cd80 R15=000000000000024b
RIP=ffffffff8b4766c3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001540 CR3=000000002d884000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973
XMM02=00007f0533f87498 00007f0533f87470 XMM03=00007f0533f874a8 00007f0533f874a0
XMM04=00007f0534aed100 00007f0533f87460 XMM05=00007f0533f87478 00007f0533f874c0
XMM06=00007f0533f874b8 00007f0533f874b0 XMM07=00007f0533f874a8 00007f0533f874a0
XMM08=0000000000000000 00007f0533e12ee7 XMM09=0000000000000000 00007f0533e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
