last executing test programs:

568.0967ms ago: executing program 1 (id=1750):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
ioctl$TUNSETLINK(r0, 0x400454cc, 0xfffe)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

511.853753ms ago: executing program 2 (id=1754):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
socket$unix(0x1, 0x0, 0x0)
ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d000064000000000000000003000000000400000001000000000000000000"], &(0x7f0000000080)=""/106, 0x3e, 0x6a, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1\x00', <r2=>0x0})
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000edff0000000000000000007d94b23067292c0b9e6637bc2f8649d6364433790ca45100"/50, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x3fff}]}}]}, 0x38}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x1)

451.76862ms ago: executing program 2 (id=1756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x3e, 0x107, 0xfffffffe, 0x2100, {0x1, 0x7c}, [@nested={0xb7, 0x142, 0x0, 0x1, [@typed={0xc, 0x9c, 0x0, 0x0, @u64=0x7}, @generic="fbabe4fd86ee18a68f99bab10489b00d6714aa8117b7cf5c20a2f652fdacf3b26d7db4ad776d724c288b597da4c5f3026c28846f123586641951981330c8087656419887149eb62e9efd6a208663437e6f5ec3acf48ee84194527cd3764de92ff0025dcf29fe3e68611b5b1bbd534f0c5d41595cf278bd862667b77b4370103f75299e103d43f7a81b8489209269478eb1041b1be200ba2cb7ca8e2323c7756655a3b98e725b04"]}, @nested={0xc, 0x2001, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x15, 0x0, 0x0, @u32=0x9}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc004)

450.871905ms ago: executing program 1 (id=1757):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'wg2\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x3, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x16}, 0x48010)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x30}}, 0x4000)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

450.337744ms ago: executing program 2 (id=1758):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x31}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'caif0\x00', <r0=>0x0})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007000390230bd7000fbdbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c00018008"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x1) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x800, <r4=>0x0}, 0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x2, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0x9, 0x5, 0x7, 0xfffffffffffffff8, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x90}], &(0x7f0000000180)='GPL\x00', 0x0, 0x6b, &(0x7f00000001c0)=""/107, 0x41100, 0x4, '\x00', r0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x14, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x8, &(0x7f0000000380)=[r10], &(0x7f00000003c0)=[{0x0, 0x5, 0x2, 0x6}, {0x3, 0x2, 0x4, 0x6}, {0x1, 0x2, 0x0, 0xc}, {0x4, 0x2, 0x0, 0xc}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x0, 0x8}, {0x1, 0x2, 0x6, 0x4}, {0x1, 0x4, 0xf, 0xa}], 0x10, 0x4}, 0x94)

393.346543ms ago: executing program 0 (id=1759):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {0x0, 0x400, 0x2be, 0x80000000000000}, 0x5}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000203010700000000000000000500000508000301080004400000000708070100f7ffff020a8100000087f0b49107e6a99479b020f88dff125b8c6ec4461923ffdc7e870334cbc062e101022934847f2838e92c231a837e47dac7c28d2124ba05129d2b52f5a8857115d3cecf39eae98ea596f14a2a601916875cf9d0f3a5c8ff996b8723e0b8fcd05de1cc8d2049e6198943906e266cc096fe559e7e4f050311b3f16f8ecbc8e18d370953aa4f72d935d68a67949ae3d77d9f5c53f72e169937c643944d1984d455a0d4802a2c49e4a4b76b3ce5d89d514bdc19a750808ff3e90e4f3f3a9b715463b7d2b1d0398629d54eee"], 0x34}}, 0x60)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_PARENT(r6, 0xb702, 0x0)

392.323452ms ago: executing program 1 (id=1760):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0800", 0x4)
getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000280))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

333.618641ms ago: executing program 0 (id=1761):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000040))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x1d4, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfe41}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "61470ddaa4ce22d8cef2e8e83b1d10d82b7bb40323626e17191e2cb6bdc2ccf2563a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x182}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc98}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xde5}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2711, @host}, 0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xaedf}, 0x8)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001020404000008000500", @ANYRES32=r6], 0x50}}, 0x2)

333.061436ms ago: executing program 0 (id=1762):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
unshare(0x6a040000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x804)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
unshare(0x600)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782591dfe7817adb263d64bfc7375e68fdcf931661e39a48632335a659eb9daa52907a92dc55225767e2541ffc463faf51d612d874a01fe284b900dfc3ae07a718985e73a96ed4a67b31c6b0605afd89c2d306fac76c44f381bf9dba32f6ea259d1d51b02987b9e1bd3f39730976f1ddee002cb5d30ba518f5209d473fc8182e71a9531c1fec4a5caddef4734d49a16380f8a375c7cd4bced3999cb43da0b8d87ad5ab9f2d39fb4fc761ecfaaa9c0520a57f3c5fe25fea7df7bba7640f0aeb5e5901bee7f69b10a5485dc57ffa9c5328346a282cad3576d6b815e012865edfd25660ca63f7b67f029e31b8e601640983b5cdbb62616b9285f8054982a56ac5618c321b87234b66b10f827e6a1d3094093b75f73dff52cbe4b86e49f19266416804defe3d5488d5d7a1ec2f0276c57944c8064b1243df01c50f3225e87b7cf474becea28f905dd298e793fee5b996b86395c2cec08a1d85df43d855784502797e9de7d8f2fcd9745b9bd7aab3d4cd46d9e1ad3f6c137e9e78316fe0b8474146b27b3e857de06b3a64aa48bcbd185ea51eb83dece2e374be75167c915191a68", 0x999}], 0x1}}], 0x1, 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8045)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})

273.493451ms ago: executing program 2 (id=1763):
r0 = socket(0x22, 0x2, 0x3)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x80000000, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
socket(0x2c, 0x4, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r4 = accept$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0xd0c5de00, {{0xa, 0x4e20, 0x6, @empty, 0x9cc}}}, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

272.981542ms ago: executing program 1 (id=1764):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000956fd2e60000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r2=>0xffffffffffffffff}, 0x4)
ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

182.014781ms ago: executing program 2 (id=1765):
r0 = socket$inet6(0xa, 0x3, 0x7)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000ff2000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200fef7000020080000000000000000010000000000000044000500fe8000000000000000000000000000aa000000003c0000000a000000e0000001000000000000eaffffffffff05000000000300"/180], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0xc}}], 0x1, 0x85c)
r4 = epoll_create(0x177505d6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2})
ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x2})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x6000000c})

181.549973ms ago: executing program 1 (id=1766):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180600000000000000000000000000008540000022000000850000008b00000095ab862b2b2f63db250379e4073dec7511162650b2f1dd2555d134398abe9c790371fccdd30b97035a93d4a0a6d1a326063e9147b6eac2d9524449dfef203bcf5f3fbd9faa2b743b2de1891f2e447852a2f978fb2522121d3f83abfb48d0e05279bace94"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r7, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700acc7"], 0x44}}, 0x20008884)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000040)={r9}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000780)={r9, @in6={{0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x40}, 0xd431}}}, &(0x7f0000000840)=0x84)
write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x10)
r10 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000740)={&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="391f5fd7c41e313e4030a3875224d4f4f2701a1482691f306798ca1e462e046aabbcec5a5bd74745c6fac6afbb57aa10ca2450004c9b106a96fd69139153234a41e1b6147c7d1eff5289eb96b60d8fd2ba9649316b877eb78789a4c6eaaf5104f2a77334733a3bee4faac0bc51325865", 0x70}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000080)="7b8227737ce565097cb42131021a7a82b0ae32d0a46c7103742551ae0ca4226f192f7e9008b1a988d0005c6cd5996a7631c4d24cb08e6ab3aa8d3a83f078ab", 0x3f}], 0x3, &(0x7f0000000440)=[{0x50, 0xff, 0x10001, "f08d217eea5014fa30295f0f767cecdbb85e645c7ba6641578ce2fef8febf86223efacd5df49638c28e4efbd295ae7dcc2935b61611722d3be5c1cf48c"}, {0xf0, 0x113, 0x895, "ff37dc73037529dc6c6c94e3e0ca69ae67505527ca56c8b25692a7eda8c64812559b2aa71f81d91bc80bb44bbff1fe9cd20edd557b3818be7ce24720a4bced4bdb9fa7c062ae3a4c8e17bdad215758da952c1267a3329c0e07972a88f1e4ea431581ca2aa9a1ee6731b4713db1597930450d7ff02b0aebc4fc67dc824ac42b2b034364dd88ac2b44a600af7f6cb5d70700dd38e30130ee6351cf44fb0e27b1fb12bc961279646c250c7bf63ed32f45f23c4e542533427c9df250f187f5fb30dd3c84aba4b388a2da971b0e77e0d9b631e7947f227c58ab1b4f87bd33"}, {0xe8, 0x6, 0x2, "9ec4882d48860cfa21e9ec82db64279b510270c67e22aff6e4540317f89ec7775b7612b3d2ba2f46f8f23c55d3043a84b43087de97209c127f55cc577be53f22ff43fecb558c45e98ffffd1d3b507ff003e838964e99eae03e94e91cbc484732d88da430cc27d00969822dd5a8f7c72dfd685dc6fc3f45f06c2f75ee62320cb87e43d1a1f549d1623dac7c3edabbfdf0385530282a8a0ef921b166f8dd2e3a2409ac56b0917c9fd654f23551057907f9543fd6eee32f0320dd241b2a3a540fd71827b515a2f7a7120c8f3feb41640cee250682c7"}, {0x70, 0x114, 0x0, "a64d81f81f19c46d6d5b05ad925db5adbe2e0b5389c9ecb3e351dc2b5638428cc79fc7c44bce18c5e51c29088e412bec5e154acf895b79f91477adcc772706cbdcd2e62ebf85813f643d87a844569928dcb7047cf5fd04e7b55f"}, {0x18, 0x29, 0xa, "85fb36"}, {0x28, 0x116, 0x4, "ac18dd15b8196ece7ebc2678232d42835f4a"}], 0x2d8}, 0x20000000)

83.671045ms ago: executing program 1 (id=1767):
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000700)={<r0=>0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x400300, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x40, 0xef2, 0x2, 0x7, 0x8000000, 0xa71, 0x6, 0x1, r0}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0)
pipe(&(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000140)="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"/297, 0x3accf8d5)
vmsplice(r8, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r7)

83.094529ms ago: executing program 0 (id=1768):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="100000002c4001000000004000050000ad113e33d0d527eb47b2c1d6eb148d800059863ac74efd3d9398e0d0dc56643fb113519610cc2dc313e2a85f906a29"], 0x10}, {&(0x7f0000000300)=ANY=[@ANYBLOB="10000000330000000001000000dbdf2567cce7a6e5cefb7f82aeeeab43b6c79788084e033b318f15da689c1016a0a86b5d71bb73ae9d6f23578830323f56c13e66cf696e9b496fbf"], 0x10}], 0x2}, 0x1000) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x9, 0x0) (async)
splice(r3, 0x0, r7, 0x0, 0x80, 0x6) (async)
write$bt_hci(r7, &(0x7f0000000240)=ANY=[@ANYRES16=r2], 0xfffffffffffffecf) (async)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x2, 0xfffffffffffffffd, 0x80000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0xfffffffffffffffd, 0xe0}, 0x0, 0x0) (async)
write(r5, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f000100000008000300"], 0x30}}, 0x40)
pwrite64(r0, &(0x7f0000000080)="a7427501", 0x4, 0xeba) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getpid() (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

1.421978ms ago: executing program 0 (id=1769):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000040))
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x1d4, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfe41}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "61470ddaa4ce22d8cef2e8e83b1d10d82b7bb40323626e17191e2cb6bdc2ccf2563a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x182}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc98}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xde5}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0xc000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2711, @host}, 0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xaedf}, 0x8)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001060404000008000500", @ANYRES32=r6], 0x50}}, 0x2)

818.896µs ago: executing program 2 (id=1770):
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/81, &(0x7f0000000000)=0x51)
sendto$inet6(r0, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

0s ago: executing program 0 (id=1771):
r0 = socket$inet6(0xa, 0x1, 0x84)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x84) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) (async)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36600' (ED25519) to the list of known hosts.
syzkaller login: [   48.639919][ T5768] cgroup: Unknown subsys name 'net'
[   48.767608][ T5768] cgroup: Unknown subsys name 'cpuset'
[   48.774774][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.702848][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.658344][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.658685][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.663272][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.665479][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.669174][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.671801][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.675409][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.677568][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.680337][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.682905][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.685964][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.693590][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.694212][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.697609][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.700855][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.007707][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   56.139672][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   56.192483][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.250217][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.254488][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.258086][ T5836] bridge_slave_0: entered allmulticast mode
[   56.262913][ T5836] bridge_slave_0: entered promiscuous mode
[   56.292930][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.296134][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.300168][ T5836] bridge_slave_1: entered allmulticast mode
[   56.305058][ T5836] bridge_slave_1: entered promiscuous mode
[   56.373839][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.377244][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.381127][ T5840] bridge_slave_0: entered allmulticast mode
[   56.385633][ T5840] bridge_slave_0: entered promiscuous mode
[   56.394342][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.405617][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.409409][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.413710][ T5840] bridge_slave_1: entered allmulticast mode
[   56.417645][ T5840] bridge_slave_1: entered promiscuous mode
[   56.423424][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.479781][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.483228][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.486548][ T5845] bridge_slave_0: entered allmulticast mode
[   56.491700][ T5845] bridge_slave_0: entered promiscuous mode
[   56.496348][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.499429][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.503315][ T5845] bridge_slave_1: entered allmulticast mode
[   56.507592][ T5845] bridge_slave_1: entered promiscuous mode
[   56.527102][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.536158][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.555392][ T5836] team0: Port device team_slave_0 added
[   56.581256][ T5836] team0: Port device team_slave_1 added
[   56.599519][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.633845][ T5840] team0: Port device team_slave_0 added
[   56.637784][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.643950][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.646897][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.658176][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.665998][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.668937][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.679612][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.686314][ T5840] team0: Port device team_slave_1 added
[   56.743505][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.745939][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.755392][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.760332][ T5845] team0: Port device team_slave_0 added
[   56.764888][ T5845] team0: Port device team_slave_1 added
[   56.779902][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.782747][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.794043][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.847865][ T5836] hsr_slave_0: entered promiscuous mode
[   56.852400][ T5836] hsr_slave_1: entered promiscuous mode
[   56.869917][ T5840] hsr_slave_0: entered promiscuous mode
[   56.874106][ T5840] hsr_slave_1: entered promiscuous mode
[   56.876567][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   56.878565][ T5840] Cannot create hsr debugfs directory
[   56.881325][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.884028][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.894044][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.906558][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.908893][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.918705][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.999448][ T5845] hsr_slave_0: entered promiscuous mode
[   57.002119][ T5845] hsr_slave_1: entered promiscuous mode
[   57.004524][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   57.006564][ T5845] Cannot create hsr debugfs directory
[   57.257376][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.273644][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.283434][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.295435][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.318060][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.334846][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.352702][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.369259][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.380951][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.397211][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.406977][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.415975][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.466699][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.507540][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   57.520884][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.540865][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.543924][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.558554][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   57.582792][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.585690][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.594357][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.597210][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.602607][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.605421][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.684444][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.708881][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.722472][ T5232] Bluetooth: hci0: command tx timeout
[   57.726340][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.728899][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.749103][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.751702][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.791911][ T5232] Bluetooth: hci1: command tx timeout
[   57.792179][ T5838] Bluetooth: hci2: command tx timeout
[   57.857696][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.875052][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.923638][ T5840] veth0_vlan: entered promiscuous mode
[   57.947071][ T5840] veth1_vlan: entered promiscuous mode
[   57.959161][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.986956][ T5836] veth0_vlan: entered promiscuous mode
[   58.002935][ T5836] veth1_vlan: entered promiscuous mode
[   58.020339][ T5840] veth0_macvtap: entered promiscuous mode
[   58.037859][ T5840] veth1_macvtap: entered promiscuous mode
[   58.064809][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.071965][ T5845] veth0_vlan: entered promiscuous mode
[   58.075916][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.087960][ T5845] veth1_vlan: entered promiscuous mode
[   58.092128][ T5836] veth0_macvtap: entered promiscuous mode
[   58.100327][ T5868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.108853][ T5836] veth1_macvtap: entered promiscuous mode
[   58.117485][ T5868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.121337][ T5868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.127416][ T5868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.152723][ T5845] veth0_macvtap: entered promiscuous mode
[   58.172668][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.181773][ T5845] veth1_macvtap: entered promiscuous mode
[   58.196837][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.209635][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.225788][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.228901][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.238468][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.248282][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.253406][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.275039][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.275673][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.278202][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.298184][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.314998][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.317966][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.379944][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.392220][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.396193][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.404333][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.423183][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.426157][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.447519][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.457013][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.464480][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.512095][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.522703][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.750016][ T5929] macvtap0: mtu less than device minimum
[   58.770829][ T5929] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.774722][ T5929] .70: renamed from hsr0 (while UP)
[   58.782091][ T5929] .70: entered allmulticast mode
[   58.783836][ T5929] hsr_slave_0: entered allmulticast mode
[   58.788001][ T5929] hsr_slave_1: entered allmulticast mode
[   58.793106][ T5929] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   58.883526][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.915851][ T5941] netlink: 'syz.1.8': attribute type 13 has an invalid length.
[   58.920949][ T5941] netlink: 'syz.1.8': attribute type 17 has an invalid length.
[   59.006226][ T5941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.417288][ T5970] vlan2: entered promiscuous mode
[   59.419814][ T5970] vlan2: entered allmulticast mode
[   59.422871][ T5970] hsr_slave_1: entered allmulticast mode
[   59.624519][ T5980] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   59.705864][ T5987] netlink: 9 bytes leftover after parsing attributes in process `syz.2.17'.
[   59.709264][ T5987] .70: renamed from hsr0 (while UP)
[   59.719339][ T5987] .70: entered allmulticast mode
[   59.727108][ T5987] hsr_slave_0: entered allmulticast mode
[   59.729360][ T5987] hsr_slave_1: entered allmulticast mode
[   59.732377][ T5987] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   59.800766][ T5838] Bluetooth: hci0: command tx timeout
[   59.815835][ T5989] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   59.820785][ T5989] netlink: 168 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.824438][ T5989] NCSI netlink: No device for ifindex 0
[   59.872783][ T5838] Bluetooth: hci1: command tx timeout
[   59.873076][ T5232] Bluetooth: hci2: command tx timeout
[   60.024625][ T6011] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24'.
[   60.130311][ T6013] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET)
[   60.384324][ T6032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.435741][ T6030] syzkaller0: entered promiscuous mode
[   60.438131][ T6030] syzkaller0: entered allmulticast mode
[   60.719049][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.723578][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.727967][ T6048] bridge0: entered promiscuous mode
[   60.730066][ T6048] bridge0: entered allmulticast mode
[   60.808913][ T6052] warning: `syz.1.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.954477][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'.
[   60.968543][ T6060] xfrm1: entered promiscuous mode
[   60.974971][ T6060] xfrm1: entered allmulticast mode
[   61.005550][ T6062] Bluetooth: MGMT ver 1.23
[   61.098531][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'.
[   61.193867][ T6075] syzkaller0: entered promiscuous mode
[   61.196024][ T6075] syzkaller0: entered allmulticast mode
[   61.540272][ T6094] Zero length message leads to an empty skb
[   61.580505][ T6098] bridge0: entered promiscuous mode
[   61.708876][ T6104] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.744975][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   61.748765][ T6105] netlink: 'syz.0.57': attribute type 5 has an invalid length.
[   61.752344][ T6105] netlink: 48 bytes leftover after parsing attributes in process `syz.0.57'.
[   61.766154][ T6105] geneve2: entered promiscuous mode
[   61.768543][ T6105] geneve2: entered allmulticast mode
[   61.774019][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   61.789891][ T6104] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.800242][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   61.870849][ T5232] Bluetooth: hci0: command tx timeout
[   61.953549][ T5232] Bluetooth: hci1: command tx timeout
[   61.953591][ T5838] Bluetooth: hci2: command tx timeout
[   62.053284][ T6118] openvswitch: netlink: IP tunnel dst address not specified
[   62.237405][ T6128] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   62.241241][ T6128] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   63.115824][ T6141] netlink: 'syz.1.70': attribute type 11 has an invalid length.
[   63.119448][ T6141] netlink: 'syz.1.70': attribute type 4 has an invalid length.
[   63.123536][ T6141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.70'.
[   63.175770][ T6104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.181854][ T6104] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   63.242900][ T6104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.266554][ T6104] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   63.287426][ T6145] netlink: 'syz.2.71': attribute type 11 has an invalid length.
[   63.291420][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.71'.
[   63.375124][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   63.381458][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   63.408683][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   63.418027][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   63.441028][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   63.444604][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   63.464788][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   63.467991][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   63.492775][ T6155] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   63.575551][ T6155] veth3: entered promiscuous mode
[   63.634602][ T6160] xfrm1: left promiscuous mode
[   63.636861][ T6160] xfrm1: left allmulticast mode
[   63.707025][ T6165] vlan2: entered promiscuous mode
[   63.724698][ T6165] vlan2: entered allmulticast mode
[   63.793356][ T6170] __nla_validate_parse: 3 callbacks suppressed
[   63.793366][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   63.800004][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[   63.953611][ T5838] Bluetooth: hci0: command tx timeout
[   63.966991][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.032312][ T5838] Bluetooth: hci2: command tx timeout
[   64.042725][ T5838] Bluetooth: hci1: command tx timeout
[   64.157705][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'.
[   64.519856][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   64.525860][ T6229] ksmbd: Unknown IPC event: 3, ignore.
[   65.211566][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'.
[   65.344407][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'.
[   65.348509][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'.
[   65.599916][ T6271] netlink: 'syz.1.115': attribute type 13 has an invalid length.
[   65.603564][ T6271] netlink: 'syz.1.115': attribute type 17 has an invalid length.
[   65.610522][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.613564][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.617383][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.620743][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.624434][ T6271] bridge0: left promiscuous mode
[   65.626544][ T6271] bridge0: left allmulticast mode
[   65.631848][ T6271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.645223][ T6268] ip6erspan0: entered promiscuous mode
[   65.647285][ T6268] ip6erspan0: entered allmulticast mode
[   65.745026][ T6281] pim6reg: entered allmulticast mode
[   65.829132][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[   65.941745][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[   65.975979][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.979260][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.096848][ T6306] netlink: 'syz.2.127': attribute type 2 has an invalid length.
[   66.101735][ T6306] netlink: 'syz.2.127': attribute type 5 has an invalid length.
[   66.145165][ T6312] netlink: 'syz.1.130': attribute type 2 has an invalid length.
[   66.590984][ T6339] openvswitch: netlink: EtherType 0 is less than min 600
[   66.692921][ T6348] bridge_slave_0: left allmulticast mode
[   66.695410][ T6348] bridge_slave_0: left promiscuous mode
[   66.698101][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.705224][ T6348] bridge_slave_1: left allmulticast mode
[   66.707699][ T6348] bridge_slave_1: left promiscuous mode
[   66.710470][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.723408][ T6348] bond0: (slave bond_slave_0): Releasing backup interface
[   66.733665][ T6348] bond0: (slave bond_slave_1): Releasing backup interface
[   66.753321][ T6348] team0: Port device team_slave_0 removed
[   66.761578][ T6348] team0: Port device team_slave_1 removed
[   66.764695][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.767973][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.774442][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.777947][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.809054][ T6348] bridge0: left promiscuous mode
[   66.812398][    C0] Illegal XDP return value 16128 on prog  (id 28) dev lo, expect packet loss!
[   66.824848][ T6348] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.296355][ T6390] syzkaller1: entered promiscuous mode
[   67.298862][ T6390] syzkaller1: entered allmulticast mode
[   68.436242][ T6420] dummy0: entered promiscuous mode
[   68.438266][ T6420] vlan4: entered promiscuous mode
[   68.501321][ T6425] tipc: Started in network mode
[   68.503452][ T6425] tipc: Node identity 6699b3f31f58, cluster identity 4711
[   68.506577][ T6425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.519269][ T6425] syzkaller0: entered promiscuous mode
[   68.523851][ T6425] syzkaller0: entered allmulticast mode
[   68.543591][ T6425] tipc: Resetting bearer <eth:syzkaller0>
[   68.549643][ T6424] tipc: Resetting bearer <eth:syzkaller0>
[   68.584397][ T6424] tipc: Disabling bearer <eth:syzkaller0>
[   68.606153][ T6431] syz_tun: entered allmulticast mode
[   68.616258][ T6431] dvmrp8: entered allmulticast mode
[   68.625986][ T6431] syz_tun: left allmulticast mode
[   68.628997][ T6431] dvmrp8: left allmulticast mode
[   68.732855][ T6437] netlink: 'syz.1.170': attribute type 23 has an invalid length.
[   68.869196][ T6445] netlink: 'syz.2.176': attribute type 39 has an invalid length.
[   69.013992][ T6447] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.030883][ T6447] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   69.035000][ T5872] IPVS: starting estimator thread 0...
[   69.121015][ T6448] IPVS: using max 41 ests per chain, 98400 per kthread
[   69.592331][ T6468] vlan2: entered promiscuous mode
[   69.595065][ T6468] vlan2: entered allmulticast mode
[   70.526963][ T6508] __nla_validate_parse: 3 callbacks suppressed
[   70.526976][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[   70.540036][ T6506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.545621][ T6506] syzkaller0: entered promiscuous mode
[   70.548225][ T6506] syzkaller0: entered allmulticast mode
[   70.563705][ T6506] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   70.597038][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'.
[   70.636802][ T6505] tipc: Resetting bearer <eth:syzkaller0>
[   70.658853][ T6505] tipc: Disabling bearer <eth:syzkaller0>
[   70.864846][ T6536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.203'.
[   70.941516][ T6537] netlink: 'syz.0.204': attribute type 5 has an invalid length.
[   70.999502][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'.
[   71.168729][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.171984][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.894786][ T6562] vxcan1 speed is unknown, defaulting to 1000
[   71.898707][ T6562] vxcan1 speed is unknown, defaulting to 1000
[   71.903859][ T6562] vxcan1 speed is unknown, defaulting to 1000
[   72.036518][ T6562] infiniband syz2: set active
[   72.039382][ T5310] vxcan1 speed is unknown, defaulting to 1000
[   72.042237][ T6562] infiniband syz2: added vxcan1
[   72.077936][ T6562] RDS/IB: syz2: added
[   72.079997][ T6562] smc: adding ib device syz2 with port count 1
[   72.083028][ T6562] smc:    ib device syz2 port 1 has pnetid 
[   72.086562][ T5310] vxcan1 speed is unknown, defaulting to 1000
[   72.091666][ T6562] vxcan1 speed is unknown, defaulting to 1000
[   72.168767][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[   72.180842][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[   72.248828][ T6574] netlink: 48 bytes leftover after parsing attributes in process `syz.1.215'.
[   72.257569][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   72.314964][ T6562] vxcan1 speed is unknown, defaulting to 1000
[   72.383020][ T6578] tipc: Started in network mode
[   72.386843][ T6578] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[   72.390332][ T6578] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   72.525260][ T6562] vxcan1 speed is unknown, defaulting to 1000
[   72.762793][ T6586] gretap0: entered promiscuous mode
[   72.765597][ T6586] gretap0: entered allmulticast mode
[   73.207671][ T6618] bridge_slave_0: left allmulticast mode
[   73.209834][ T6618] bridge_slave_0: left promiscuous mode
[   73.213973][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.219992][ T6618] bridge_slave_1: left allmulticast mode
[   73.223493][ T6618] bridge_slave_1: left promiscuous mode
[   73.225937][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.237905][ T6618] bond0: (slave bond_slave_0): Releasing backup interface
[   73.243873][ T6618] bond0: (slave bond_slave_1): Releasing backup interface
[   73.254732][ T6618] team0: Port device team_slave_0 removed
[   73.259009][ T6618] team0: Port device team_slave_1 removed
[   73.262149][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.265246][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.268921][ T6618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.273288][ T6618] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.293694][ T6622] syz_tun: entered allmulticast mode
[   73.300560][ T6623] dvmrp8: entered allmulticast mode
[   73.309104][ T6622] bridge_slave_0: left allmulticast mode
[   73.314713][ T6622] bridge_slave_0: left promiscuous mode
[   73.317334][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.324557][ T6622] bridge_slave_1: left allmulticast mode
[   73.326854][ T6622] bridge_slave_1: left promiscuous mode
[   73.335136][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.350939][ T6622] bond0: (slave bond_slave_0): Releasing backup interface
[   73.359617][ T6622] bond0: (slave bond_slave_1): Releasing backup interface
[   73.374644][ T6622] team0: Port device team_slave_0 removed
[   73.385303][ T6622] team0: Port device team_slave_1 removed
[   73.388461][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.392246][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.396507][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.399570][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.419483][ T6627] netlink: 'syz.2.228': attribute type 10 has an invalid length.
[   73.453892][ T6627] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.462348][ T6623] syz_tun: left allmulticast mode
[   73.464530][ T6623] dvmrp8: left allmulticast mode
[   73.780168][ T6642] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   73.894012][ T6647] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.236'.
[   73.898194][ T6647] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.958512][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[   74.139398][ T6663] netlink: 'syz.0.239': attribute type 9 has an invalid length.
[   74.372565][ T5868] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   74.798794][ T5905] IPVS: starting estimator thread 0...
[   74.900460][ T6717] IPVS: using max 80 ests per chain, 192000 per kthread
[   75.419425][ T6751] geneve2: entered promiscuous mode
[   75.422681][ T6751] geneve2: entered allmulticast mode
[   75.447078][ T6743] vxcan1 speed is unknown, defaulting to 1000
[   76.167976][ T6794] __nla_validate_parse: 1 callbacks suppressed
[   76.168016][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[   76.590215][ T6820] netlink: 'syz.0.284': attribute type 3 has an invalid length.
[   76.600337][ T6820] netlink: 'syz.0.284': attribute type 1 has an invalid length.
[   76.606397][ T6820] netlink: 'syz.0.284': attribute type 1 has an invalid length.
[   76.612019][ T6820] netlink: 'syz.0.284': attribute type 6 has an invalid length.
[   76.619598][ T6820] netlink: 'syz.0.284': attribute type 3 has an invalid length.
[   76.720586][ T5310] IPVS: starting estimator thread 0...
[   76.820484][ T6828] IPVS: using max 81 ests per chain, 194400 per kthread
[   77.142332][ T6850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.145600][ T6850] syzkaller0: entered promiscuous mode
[   77.148099][ T6850] syzkaller0: entered allmulticast mode
[   77.164863][ T6850] tipc: Resetting bearer <eth:syzkaller0>
[   77.173156][ T6849] tipc: Resetting bearer <eth:syzkaller0>
[   77.184296][ T6849] tipc: Disabling bearer <eth:syzkaller0>
[   77.357416][ T6862] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   77.504443][ T6874] netlink: 'syz.1.302': attribute type 3 has an invalid length.
[   77.625256][ T6892] netlink: 452 bytes leftover after parsing attributes in process `syz.0.308'.
[   78.034919][ T6930] tipc: Started in network mode
[   78.036754][ T6930] tipc: Node identity 42abeb57e081, cluster identity 4711
[   78.039798][ T6930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.042691][ T6930] syzkaller0: entered promiscuous mode
[   78.044837][ T6930] syzkaller0: entered allmulticast mode
[   78.049214][ T6930] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   78.062752][ T6930] tipc: Resetting bearer <eth:syzkaller0>
[   78.065921][ T6929] tipc: Resetting bearer <eth:syzkaller0>
[   78.081886][ T6929] tipc: Disabling bearer <eth:syzkaller0>
[   78.105210][ T6934] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[   78.108522][ T6934] netlink: 'syz.2.322': attribute type 2 has an invalid length.
[   78.265039][ T6947] netlink: 'syz.2.327': attribute type 3 has an invalid length.
[   78.268522][ T6947] netlink: 'syz.2.327': attribute type 3 has an invalid length.
[   78.526104][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[   78.529342][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[   78.591420][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'.
[   78.665534][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.668175][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.706758][ T6984] sctp: [Deprecated]: syz.2.341 (pid 6984) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.706758][ T6984] Use struct sctp_sack_info instead
[   78.766726][ T6990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.343'.
[   78.768398][ T6984] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   78.777132][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'.
[   78.789002][ T6984] sctp: [Deprecated]: syz.2.341 (pid 6984) Use of int in max_burst socket option.
[   78.789002][ T6984] Use struct sctp_assoc_value instead
[   78.805236][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'.
[   78.911847][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.347'.
[   78.928898][ T7008] tap0: tun_chr_ioctl cmd 1074025677
[   78.933435][ T7008] tap0: linktype set to 776
[   78.938893][ T7008] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.348'.
[   79.037861][ T7019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.041423][ T7019] syzkaller0: entered promiscuous mode
[   79.043782][ T7019] syzkaller0: entered allmulticast mode
[   79.060077][ T7019] tipc: Resetting bearer <eth:syzkaller0>
[   79.063888][ T7018] tipc: Resetting bearer <eth:syzkaller0>
[   79.077543][ T7018] tipc: Disabling bearer <eth:syzkaller0>
[   79.415750][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.419628][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.427218][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.430477][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.489313][ T7065] netlink: 'syz.2.368': attribute type 11 has an invalid length.
[   79.960312][ T7097] syzkaller0: entered promiscuous mode
[   79.964677][ T7097] syzkaller0: entered allmulticast mode
[   80.268707][ T7129] syzkaller0: entered promiscuous mode
[   80.273688][ T7129] syzkaller0: entered allmulticast mode
[   80.277565][ T7128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.282697][ T7128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.288241][ T7128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.295036][ T7128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.305608][ T7128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.306995][ T7132] xt_socket: unknown flags 0xd0
[   80.347776][ T7128] tipc: Resetting bearer <eth:syzkaller0>
[   80.361493][ T7128] tipc: Disabling bearer <eth:syzkaller0>
[   80.372779][ T7135] lo speed is unknown, defaulting to 1000
[   80.376258][ T7135] lo speed is unknown, defaulting to 1000
[   80.379587][ T7135] lo speed is unknown, defaulting to 1000
[   80.387366][ T7135] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.394585][ T7135] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   80.422610][ T7135] lo speed is unknown, defaulting to 1000
[   80.425432][ T7135] lo speed is unknown, defaulting to 1000
[   80.428032][ T7135] lo speed is unknown, defaulting to 1000
[   80.674094][ T7161] sctp: [Deprecated]: syz.0.403 (pid 7161) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.674094][ T7161] Use struct sctp_sack_info instead
[   81.060982][ T7195] pimreg: tun_chr_ioctl cmd 2147767506
[   81.206856][ T7207] __nla_validate_parse: 18 callbacks suppressed
[   81.206864][ T7207] netlink: 248 bytes leftover after parsing attributes in process `syz.2.422'.
[   81.296058][ T7214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.315296][ T7214] tipc: Disabling bearer <eth:syzkaller0>
[   81.380534][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[   81.444558][ T7231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.431'.
[   81.462664][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.431'.
[   81.465743][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.431'.
[   81.514850][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'.
[   81.519636][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'.
[   81.606625][ T7244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.734076][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.441'.
[   81.814535][ T7264] IPVS: sh: FWM 3 0x00000003 - no destination available
[   81.885206][ T7275] IPVS: sh: FWM 3 0x00000003 - no destination available
[   81.997995][ T7283] netlink: 76 bytes leftover after parsing attributes in process `syz.2.451'.
[   82.098189][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'.
[   82.163619][ T7295] validate_nla: 35 callbacks suppressed
[   82.163630][ T7295] netlink: 'syz.2.455': attribute type 4 has an invalid length.
[   82.168282][ T7295] netlink: 'syz.2.455': attribute type 4 has an invalid length.
[   82.332050][ T7311] netlink: 'syz.1.460': attribute type 1 has an invalid length.
[   82.334847][ T7311] netlink: 'syz.1.460': attribute type 4 has an invalid length.
[   82.510467][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[   82.546963][ T7330] sctp: [Deprecated]: syz.2.466 (pid 7330) Use of int in maxseg socket option.
[   82.546963][ T7330] Use struct sctp_assoc_value instead
[   82.667489][ T7344] delete_channel: no stack
[   82.991942][ T7375] vxcan1 speed is unknown, defaulting to 1000
[   83.159767][ T7375] lo speed is unknown, defaulting to 1000
[   83.244564][ T7392] netlink: 'syz.2.491': attribute type 13 has an invalid length.
[   83.247546][ T7392] netlink: 'syz.2.491': attribute type 17 has an invalid length.
[   83.264952][ T7392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.564447][ T7421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.591702][ T7420] tipc: Disabling bearer <eth:syzkaller0>
[   83.596422][ T7419] netlink: 'syz.1.499': attribute type 7 has an invalid length.
[   83.600215][ T7419] netlink: 'syz.1.499': attribute type 8 has an invalid length.
[   84.593019][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[   84.978824][ T7480] IPVS: sh: FWM 3 0x00000003 - no destination available
[   85.012032][ T7478] netlink: 'syz.1.518': attribute type 13 has an invalid length.
[   85.017054][ T7478] netlink: 'syz.1.518': attribute type 17 has an invalid length.
[   85.024000][ T7478] gretap0: left promiscuous mode
[   85.026412][ T7478] gretap0: left allmulticast mode
[   85.034326][ T7478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.284309][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.289586][ T7501] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   85.300722][ T7500] vlan4: entered allmulticast mode
[   85.302907][ T7500] veth1: entered allmulticast mode
[   85.305277][ T7500] veth1: entered promiscuous mode
[   85.308169][ T7500] veth1: left promiscuous mode
[   85.312352][ T7500] bond1: (slave vlan4): making interface the new active one
[   85.316049][ T7500] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   85.323090][ T7500] veth1: entered promiscuous mode
[   85.325413][ T7500] vlan4: entered promiscuous mode
[   85.327927][ T7500] bond1: (slave vlan4): Enslaving as an active interface with an up link
[   85.424563][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.432390][ T7512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.596055][ T7528] trusted_key: syz.2.537 sent an empty control message without MSG_MORE.
[   86.405478][ T7564] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   86.409771][ T7564] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   86.417068][ T7564] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   86.520348][   T10] cfg80211: failed to load regulatory.db
[   86.726301][ T7582] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.734478][ T7582] __nla_validate_parse: 20 callbacks suppressed
[   86.734498][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'.
[   86.769478][ T1721] vxcan1 speed is unknown, defaulting to 1000
[   86.772525][   T47] lo speed is unknown, defaulting to 1000
[   87.118751][ T7605] vxcan1 speed is unknown, defaulting to 1000
[   87.236284][ T7605] lo speed is unknown, defaulting to 1000
[   87.641507][ T7630] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.872641][ T7640] validate_nla: 7 callbacks suppressed
[   87.872656][ T7640] netlink: 'syz.0.574': attribute type 1 has an invalid length.
[   88.038081][ T7644] bridge0: port 1(erspan0) entered blocking state
[   88.053491][ T7644] bridge0: port 1(erspan0) entered disabled state
[   88.062557][ T7644] erspan0: entered allmulticast mode
[   88.073203][ T7644] erspan0: entered promiscuous mode
[   88.079847][ T7644] erspan0: left allmulticast mode
[   88.082158][ T7644] erspan0: left promiscuous mode
[   88.085075][ T7644] bridge0: port 1(erspan0) entered disabled state
[   88.282979][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[   88.552052][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.648309][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'.
[   88.678326][ T7674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.587'.
[   88.733291][ T7677] netlink: 'syz.2.588': attribute type 1 has an invalid length.
[   88.771512][ T7677] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.775900][ T7677] bond2: (slave bond3): making interface the new active one
[   88.779682][ T7677] bond2: (slave bond3): Enslaving as an active interface with an up link
[   89.196730][ T7698] netlink: 'syz.0.594': attribute type 13 has an invalid length.
[   89.200100][ T7698] netlink: 'syz.0.594': attribute type 17 has an invalid length.
[   89.234305][ T7698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.416606][ T7703] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[   89.420300][ T7703] batadv_slave_1: entered promiscuous mode
[   89.423155][ T7702] batadv_slave_1: left promiscuous mode
[   89.605035][ T7708] netlink: 'syz.1.598': attribute type 13 has an invalid length.
[   89.608354][ T7708] netlink: 'syz.1.598': attribute type 17 has an invalid length.
[   89.616307][ T7708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.652984][ T7708] vxcan1 speed is unknown, defaulting to 1000
[   89.692163][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'.
[   89.697618][ T7709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.800673][ T7708] lo speed is unknown, defaulting to 1000
[   90.032440][ T7716] vxcan1 speed is unknown, defaulting to 1000
[   90.066509][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[   90.174191][ T7716] lo speed is unknown, defaulting to 1000
[   90.310933][ T7722] netlink: 'syz.2.601': attribute type 13 has an invalid length.
[   90.314214][ T7722] netlink: 'syz.2.601': attribute type 17 has an invalid length.
[   90.322083][ T7722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.449911][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.603'.
[   90.820092][ T7739] netlink: 'syz.1.607': attribute type 1 has an invalid length.
[   90.931985][ T7741] netlink: 256 bytes leftover after parsing attributes in process `syz.1.608'.
[   91.116846][ T7748] netlink: 'syz.1.611': attribute type 13 has an invalid length.
[   91.125733][ T7748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.308320][ T7754] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   91.314978][ T7754] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   91.321601][ T7754] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   91.457258][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.617'.
[   91.462307][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'.
[   91.554721][ T7773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.671825][ T7783] IPVS: sh: FWM 3 0x00000003 - no destination available
[   91.704340][ T7786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.707533][ T7786] syzkaller0: entered promiscuous mode
[   91.709364][ T7786] syzkaller0: entered allmulticast mode
[   91.728717][ T7786] tipc: Resetting bearer <eth:syzkaller0>
[   91.763004][ T7789] bond4: entered promiscuous mode
[   92.086465][ T7800] bridge0: port 1(erspan0) entered blocking state
[   92.089570][ T7800] bridge0: port 1(erspan0) entered disabled state
[   92.092838][ T7800] erspan0: entered allmulticast mode
[   92.096717][ T7800] erspan0: entered promiscuous mode
[   92.100582][ T7800] bridge0: port 1(erspan0) entered blocking state
[   92.103381][ T7800] bridge0: port 1(erspan0) entered forwarding state
[   92.110250][ T7800] erspan0: left allmulticast mode
[   92.112875][ T7800] erspan0: left promiscuous mode
[   92.114674][ T7800] bridge0: port 1(erspan0) entered disabled state
[   92.292767][ T7806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.438699][ T7809] IPVS: sh: FWM 3 0x00000003 - no destination available
[   92.515411][ T7784] tipc: Resetting bearer <eth:syzkaller0>
[   92.527977][ T7784] tipc: Disabling bearer <eth:syzkaller0>
[   92.558754][ T7817] __nla_validate_parse: 4 callbacks suppressed
[   92.558768][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[   92.563962][ T7815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.568642][ T7817] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   92.569341][ T7815] syzkaller0: entered promiscuous mode
[   92.573771][ T7815] syzkaller0: entered allmulticast mode
[   92.573840][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.593092][ T7815] tipc: Resetting bearer <eth:syzkaller0>
[   92.599128][ T7814] tipc: Resetting bearer <eth:syzkaller0>
[   92.613379][ T7814] tipc: Disabling bearer <eth:syzkaller0>
[   92.681763][ T7825] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   92.686004][ T7824] IPVS: stopping backup sync thread 7825 ...
[   92.698932][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'.
[   92.703600][ T7827] bridge_slave_0: entered promiscuous mode
[   92.816599][ T7840] bond0: (slave wlan1): Releasing backup interface
[   92.985429][ T7858] validate_nla: 6 callbacks suppressed
[   92.985438][ T7858] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[   93.035179][ T7858] bond2 (unregistering): Released all slaves
[   93.114385][ T7873] netlink: 72 bytes leftover after parsing attributes in process `syz.0.653'.
[   93.129159][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[   93.209947][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'.
[   93.948440][ T7886] netlink: 'syz.0.656': attribute type 12 has an invalid length.
[   94.038642][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[   94.423555][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[   94.434034][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'.
[   94.461303][ T7926] vxcan1 speed is unknown, defaulting to 1000
[   94.468776][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'.
[   94.657472][ T7926] lo speed is unknown, defaulting to 1000
[   94.989519][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'.
[   95.188195][ T7969] netlink: 'syz.0.679': attribute type 11 has an invalid length.
[   95.378663][ T7977] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   95.489104][ T7987] netlink: 'syz.0.685': attribute type 12 has an invalid length.
[   95.539149][ T7989] net_ratelimit: 3 callbacks suppressed
[   95.539163][ T7989] Dead loop on virtual device ip6_vti0, fix it urgently!
[   95.546504][ T7989] Dead loop on virtual device ip6_vti0, fix it urgently!
[   95.549822][ T7989] Dead loop on virtual device ip6_vti0, fix it urgently!
[   95.555381][ T7989] Dead loop on virtual device ip6_vti0, fix it urgently!
[   95.558630][ T7989] Dead loop on virtual device ip6_vti0, fix it urgently!
[   95.562132][ T7989] Dead loop on virtual device ip6_vti0, fix it urgently!
[   95.594491][ T7991] openvswitch: netlink: Message has 8 unknown bytes.
[   96.058505][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[   96.474170][ T8039] netlink: 'syz.0.700': attribute type 13 has an invalid length.
[   96.476743][ T8039] netlink: 'syz.0.700': attribute type 17 has an invalid length.
[   96.488719][ T8039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.511639][ T8041] vxcan1 speed is unknown, defaulting to 1000
[   96.591913][ T5868] vlan4: left promiscuous mode
[   96.694088][ T8041] lo speed is unknown, defaulting to 1000
[   96.786758][ T8061] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.931725][ T8070] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   96.937160][ T8076] netlink: 'syz.0.711': attribute type 13 has an invalid length.
[   96.939839][ T8076] netlink: 'syz.0.711': attribute type 17 has an invalid length.
[   96.950617][ T8076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.175823][ T8105] syzkaller1: entered promiscuous mode
[   97.177743][ T8105] syzkaller1: entered allmulticast mode
[   98.813246][ T8201] __nla_validate_parse: 5 callbacks suppressed
[   98.813260][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'.
[   98.819808][ T8201] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[   98.854091][ T8205] netlink: 'syz.0.752': attribute type 28 has an invalid length.
[   98.858320][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.751'.
[   98.861717][ T8201] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   98.882157][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[   99.016491][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'.
[   99.065898][ T8233] netlink: 'syz.2.761': attribute type 21 has an invalid length.
[   99.069117][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[   99.079802][ T8233] netlink: 'syz.2.761': attribute type 21 has an invalid length.
[   99.079822][ T5869] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.082841][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[   99.089542][ T5869] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.093461][ T5869] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.096860][ T5869] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.471817][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'.
[   99.471861][ T8256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'.
[   99.546048][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[   99.891164][ T5869] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   99.999194][ T8284] netlink: 'syz.1.777': attribute type 13 has an invalid length.
[  100.002074][ T8284] netlink: 'syz.1.777': attribute type 17 has an invalid length.
[  100.622151][ T8271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.849944][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'.
[  100.901575][ T8326] netlink: 'syz.0.786': attribute type 13 has an invalid length.
[  100.904224][ T8326] netlink: 'syz.0.786': attribute type 17 has an invalid length.
[  100.909817][ T8326] net_ratelimit: 4 callbacks suppressed
[  100.909823][ T8326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.399622][ T8366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  101.485128][ T8370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  101.490280][ T8370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.493160][ T8370] syzkaller0: entered promiscuous mode
[  101.495259][ T8370] syzkaller0: entered allmulticast mode
[  101.504725][ T8370] tipc: Resetting bearer <eth:syzkaller0>
[  101.507846][ T8370] delete_channel: no stack
[  101.513388][ T8369] tipc: Resetting bearer <eth:syzkaller0>
[  101.521719][ T8369] tipc: Disabling bearer <eth:syzkaller0>
[  101.612077][ T8376] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[  101.713264][ T8384] netlink: 'syz.0.812': attribute type 1 has an invalid length.
[  101.727907][ T8384] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.774431][ T8387] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2)
[  101.906718][ T8401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.293708][ T8428] vxcan1 speed is unknown, defaulting to 1000
[  102.450205][ T8428] lo speed is unknown, defaulting to 1000
[  102.772716][ T8469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.540205][ T8485] xfrm1: entered promiscuous mode
[  103.542514][ T8485] xfrm1: entered allmulticast mode
[  103.683441][ T8488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.863574][ T8493] tap0: tun_chr_ioctl cmd 1074025677
[  103.865500][ T8493] tap0: linktype set to 776
[  103.869213][ T8494] tap0: tun_chr_ioctl cmd 1074025673
[  103.966166][ T8514] __nla_validate_parse: 14 callbacks suppressed
[  103.966179][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.849'.
[  104.097122][ T8527] netlink: 13 bytes leftover after parsing attributes in process `syz.2.854'.
[  104.100235][ T8527] netlink: 13 bytes leftover after parsing attributes in process `syz.2.854'.
[  104.123735][ T8529] validate_nla: 11 callbacks suppressed
[  104.123749][ T8529] netlink: 'syz.0.853': attribute type 13 has an invalid length.
[  104.129421][ T8529] netlink: 'syz.0.853': attribute type 17 has an invalid length.
[  104.140826][ T8529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.163881][ T8532] netlink: 'syz.2.856': attribute type 1 has an invalid length.
[  104.214292][ T8536] netlink: 72 bytes leftover after parsing attributes in process `syz.2.858'.
[  104.221039][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'.
[  104.318367][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  104.322405][ T8545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.436107][ T8565] vxcan1 speed is unknown, defaulting to 1000
[  104.576378][ T8581] netlink: 'syz.0.869': attribute type 10 has an invalid length.
[  104.577818][ T8565] lo speed is unknown, defaulting to 1000
[  104.590619][ T8581] netlink: 2 bytes leftover after parsing attributes in process `syz.0.869'.
[  104.603081][ T8581] team0: entered promiscuous mode
[  104.605257][ T8581] bridge0: port 1(team0) entered blocking state
[  104.607816][ T8581] bridge0: port 1(team0) entered disabled state
[  104.610605][ T8581] team0: entered allmulticast mode
[  105.218992][ T8626] veth5: entered allmulticast mode
[  105.282409][ T8629] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  105.414964][ T8641] syzkaller1: entered promiscuous mode
[  105.416953][ T8641] syzkaller1: entered allmulticast mode
[  105.547573][ T8647] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  105.566878][ T8649] netlink: 'syz.2.890': attribute type 12 has an invalid length.
[  105.579579][ T8649] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.890'.
[  105.643111][ T8660] : renamed from batadv_slave_1 (while UP)
[  105.787997][ T8670] delete_channel: no stack
[  105.854209][ T8684] Bluetooth: MGMT ver 1.23
[  105.982199][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.909'.
[  105.987479][ T8699] ieee802154 phy1 wpan1: encryption failed: -22
[  106.018376][ T8703] netlink: 'syz.2.911': attribute type 1 has an invalid length.
[  106.019239][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.910'.
[  106.027401][ T8701] syzkaller0: entered promiscuous mode
[  106.029349][ T8701] syzkaller0: entered allmulticast mode
[  106.119417][ T8711] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[  106.178723][ T8719] netlink: 'syz.2.919': attribute type 1 has an invalid length.
[  106.402855][ T8753] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  106.489284][ T8762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.898830][ T8799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.870741][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  107.950202][ T8878] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  108.193808][ T8888] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  108.197196][ T8887] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  108.948673][ T8930] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  109.005863][ T8939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.019304][ T8939] : entered promiscuous mode
[  109.191366][ T8966] __nla_validate_parse: 15 callbacks suppressed
[  109.191379][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'.
[  109.234740][ T8962] tc_dump_action: action bad kind
[  109.514908][ T8990] validate_nla: 11 callbacks suppressed
[  109.514920][ T8990] netlink: 'syz.0.1008': attribute type 1 has an invalid length.
[  109.623064][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1014'.
[  109.774067][ T9022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1020'.
[  109.815022][ T9026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.818556][ T9026] syzkaller0: entered promiscuous mode
[  109.822172][ T9026] syzkaller0: entered allmulticast mode
[  109.827236][ T9026] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1022'.
[  109.830818][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'.
[  109.832367][ T9029] tipc: Resetting bearer <eth:syzkaller0>
[  109.838685][ T9025] tipc: Resetting bearer <eth:syzkaller0>
[  109.848020][ T9025] tipc: Disabling bearer <eth:syzkaller0>
[  109.956621][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'.
[  110.004345][ T9047] netlink: 'syz.1.1030': attribute type 7 has an invalid length.
[  110.018622][ T9047] : entered promiscuous mode
[  110.069059][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.159893][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'.
[  110.222760][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'.
[  110.227280][ T9064] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1036'.
[  110.231775][ T9064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1036'.
[  110.325210][ T9082] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  110.332992][ T9082] batadv_slave_1: entered promiscuous mode
[  110.343582][ T9081] batadv_slave_1: left promiscuous mode
[  110.371974][ T9086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.390164][ T9087] netlink: 'syz.1.1045': attribute type 13 has an invalid length.
[  110.393209][ T9087] netlink: 'syz.1.1045': attribute type 17 has an invalid length.
[  110.405245][ T9087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.573929][ T9110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.577492][ T9110] syzkaller0: entered promiscuous mode
[  110.579362][ T9110] syzkaller0: entered allmulticast mode
[  110.596236][ T9109] tipc: Resetting bearer <eth:syzkaller0>
[  110.613162][ T9109] tipc: Disabling bearer <eth:syzkaller0>
[  111.025606][ T9140] dvmrp0: entered allmulticast mode
[  111.546633][ T9160] vxcan1 speed is unknown, defaulting to 1000
[  111.629892][ T9160] lo speed is unknown, defaulting to 1000
[  112.071577][ T9189] netlink: 'syz.2.1081': attribute type 5 has an invalid length.
[  112.482033][ T9244] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  112.557757][ T9233] syz.2.1101 (9233) used greatest stack depth: 19624 bytes left
[  112.894553][ T9268] netlink: 'syz.2.1111': attribute type 13 has an invalid length.
[  112.897384][ T9268] netlink: 'syz.2.1111': attribute type 17 has an invalid length.
[  112.903809][ T9268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.399460][ T9310] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  113.953293][ T9363] bond1: option mode: unable to set because the bond device is up
[  113.974998][ T9363] team0: left allmulticast mode
[  113.977340][ T9363] bridge0: port 1(team0) entered disabled state
[  114.417867][ T9387] netlink: 'syz.1.1154': attribute type 13 has an invalid length.
[  114.420863][ T9387] netlink: 'syz.1.1154': attribute type 17 has an invalid length.
[  114.428010][ T9387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.636956][ T9392] __nla_validate_parse: 21 callbacks suppressed
[  114.636977][ T9392] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1157'.
[  114.643735][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1157'.
[  114.647461][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'.
[  114.670518][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'.
[  114.674427][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'.
[  114.683218][ T9395] syz_tun: entered promiscuous mode
[  114.686593][ T9395] syz_tun: left promiscuous mode
[  115.172435][ T9450] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1179'.
[  115.205535][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1180'.
[  115.296032][ T9460] netlink: 'syz.0.1183': attribute type 1 has an invalid length.
[  115.328697][ T9460] bond3: entered promiscuous mode
[  115.331517][ T9460] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.338025][ T9460] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1183'.
[  115.347829][ T9460] batadv1: entered promiscuous mode
[  115.350124][ T9460] batadv1: entered allmulticast mode
[  115.354076][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv1
[  115.358632][ T9460] bond3: (slave batadv1): making interface the new active one
[  115.363043][ T9460] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  115.369737][ T9464] netlink: 'syz.2.1184': attribute type 13 has an invalid length.
[  115.373332][ T9464] netlink: 'syz.2.1184': attribute type 17 has an invalid length.
[  115.378876][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1183'.
[  115.383500][ T9460] nbd: couldn't find a device at index 16842762
[  115.386393][ T9464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.485518][ T9470] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1187'.
[  115.765904][ T9490] netlink: 'syz.0.1195': attribute type 13 has an invalid length.
[  115.768536][ T9490] netlink: 'syz.0.1195': attribute type 17 has an invalid length.
[  115.782630][ T9490] team0: left promiscuous mode
[  115.785746][ T9490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.865177][ T9492] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  116.061701][ T9513] nbd: must specify at least one socket
[  116.473707][   T33] audit: type=1800 audit(1756818225.977:2): pid=9545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1214" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2462 res=0 errno=0
[  116.630097][ T9548] vxcan1 speed is unknown, defaulting to 1000
[  116.843223][ T9548] lo speed is unknown, defaulting to 1000
[  117.235878][ T9565] netlink: 'syz.0.1217': attribute type 4 has an invalid length.
[  117.271046][   T47] lo speed is unknown, defaulting to 1000
[  117.273129][   T47] syz1: Port: 1 Link DOWN
[  118.050117][ T9545] Set syz1 is full, maxelem 65536 reached
[  118.103123][ T9585] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  118.121015][ T9586] netlink: 'syz.0.1224': attribute type 13 has an invalid length.
[  118.124982][ T9586] netlink: 'syz.0.1224': attribute type 17 has an invalid length.
[  118.146540][ T9586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.158054][   T10] lo speed is unknown, defaulting to 1000
[  118.167090][   T10] syz1: Port: 1 Link ACTIVE
[  118.232805][ T9590] team0: Mode changed to "activebackup"
[  118.315442][ T9607] pim6reg1: entered promiscuous mode
[  118.317434][ T9607] pim6reg1: entered allmulticast mode
[  118.517520][ T5869] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  118.672355][ T9648] netlink: 'syz.0.1242': attribute type 13 has an invalid length.
[  118.675294][ T9648] netlink: 'syz.0.1242': attribute type 17 has an invalid length.
[  118.686711][ T9648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.927933][ T9673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.930700][ T9673] syzkaller0: entered promiscuous mode
[  118.932935][ T9673] syzkaller0: entered allmulticast mode
[  118.940105][ T9673] tipc: Resetting bearer <eth:syzkaller0>
[  118.952054][ T9672] tipc: Resetting bearer <eth:syzkaller0>
[  118.967370][ T9672] tipc: Disabling bearer <eth:syzkaller0>
[  119.196409][ T9686] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  119.294236][ T9694] : entered promiscuous mode
[  119.609973][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.616415][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.659478][ T9718] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  119.818742][ T9724] __nla_validate_parse: 14 callbacks suppressed
[  119.818751][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  120.112020][ T9742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.158403][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'.
[  120.164361][ T9744] netlink: 'syz.2.1275': attribute type 11 has an invalid length.
[  120.499694][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1280'.
[  120.504063][ T9759] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1280'.
[  120.509178][ T9759] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1280'.
[  120.519453][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'.
[  121.174445][ T9756] validate_nla: 2 callbacks suppressed
[  121.174458][ T9756] netlink: 'syz.0.1280': attribute type 1 has an invalid length.
[  121.178949][ T9756] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1280'.
[  121.182500][ T9757] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1280'.
[  121.292060][ T9771] netlink: 'syz.0.1283': attribute type 2 has an invalid length.
[  121.294708][ T9771] netlink: 'syz.0.1283': attribute type 1 has an invalid length.
[  121.310261][ T9776] delete_channel: no stack
[  121.319336][ T9773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.325265][ T9773] syzkaller0: entered promiscuous mode
[  121.327430][ T9773] syzkaller0: entered allmulticast mode
[  121.349796][ T9773] tipc: Resetting bearer <eth:syzkaller0>
[  121.362649][ T9772] tipc: Resetting bearer <eth:syzkaller0>
[  121.374510][ T9772] tipc: Disabling bearer <eth:syzkaller0>
[  121.464903][ T9788] netlink: 'syz.1.1291': attribute type 3 has an invalid length.
[  121.577386][ T9801] netlink: 'syz.0.1294': attribute type 13 has an invalid length.
[  121.581349][ T9801] netlink: 'syz.0.1294': attribute type 17 has an invalid length.
[  121.590580][ T9801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.684510][ T9817] veth0: entered promiscuous mode
[  121.687832][ T9817] batadv_slave_0: entered promiscuous mode
[  121.691577][ T9817] hsr1: entered promiscuous mode
[  121.809555][ T9831] tipc: Failed to remove unknown binding: 66,1,1/0:2540175290/2540175292
[  121.814215][ T9831] tipc: Failed to remove unknown binding: 66,1,1/0:2540175290/2540175292
[  121.817138][ T9831] tipc: Failed to remove unknown binding: 66,1,1/0:2540175290/2540175292
[  121.866241][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'.
[  121.869305][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'.
[  121.897436][ T9843] xt_limit: Overflow, try lower: 271964/0
[  122.061531][ T9856] x_tables: ip_tables: udp match: only valid for protocol 17
[  122.064610][ T9860] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  122.202663][ T9868] batadv_slave_1: entered promiscuous mode
[  122.209379][   T33] audit: type=1800 audit(1756818231.717:3): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1318" name="memory.events" dev="tmpfs" ino=2697 res=0 errno=0
[  122.228876][ T9867] batadv_slave_1: left promiscuous mode
[  122.549179][ T9884] netlink: 'syz.1.1322': attribute type 13 has an invalid length.
[  122.553141][ T9884] netlink: 'syz.1.1322': attribute type 17 has an invalid length.
[  122.563388][ T9884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.810096][ T9906] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  122.913818][ T9913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.938725][ T9913] syzkaller0: entered promiscuous mode
[  122.941332][ T9913] syzkaller0: entered allmulticast mode
[  122.943882][ T9913] tipc: Resetting bearer <eth:syzkaller0>
[  122.954883][ T9912] tipc: Resetting bearer <eth:syzkaller0>
[  123.818892][ T9912] tipc: Disabling bearer <eth:syzkaller0>
[  123.934441][ T9927] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  123.971309][ T9931] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  124.239129][ T9952] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  124.461097][ T9979] block nbd0: server does not support multiple connections per device.
[  124.469728][ T9979] block nbd0: shutting down sockets
[  125.449307][T10104] vxcan1 speed is unknown, defaulting to 1000
[  125.455653][T10118] __nla_validate_parse: 16 callbacks suppressed
[  125.455665][T10118] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1379'.
[  125.488969][T10118] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.511661][T10118] bond2: (slave gretap2): making interface the new active one
[  125.517038][T10118] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  125.523861][T10118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1379'.
[  125.543278][T10118] syz.1.1379 (10118) used greatest stack depth: 18992 bytes left
[  125.779649][T10104] lo speed is unknown, defaulting to 1000
[  125.906627][T10147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1386'.
[  125.985290][T10155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.993842][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'.
[  126.080063][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'.
[  126.084126][T10161] bridge_slave_0: entered promiscuous mode
[  126.088843][T10161] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1391'.
[  126.142691][T10166] netlink: 880 bytes leftover after parsing attributes in process `syz.2.1393'.
[  126.207263][T10175] tipc: Enabled bearer <eth:gre0>, priority 10
[  126.302925][T10186] tc_dump_action: action bad kind
[  126.411124][T10203] dvmrp8: entered allmulticast mode
[  126.415281][T10203] dvmrp8: left allmulticast mode
[  126.453516][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  126.456488][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'.
[  126.459552][T10208] validate_nla: 5 callbacks suppressed
[  126.459559][T10208] netlink: 'syz.2.1408': attribute type 14 has an invalid length.
[  126.464102][T10208] netlink: 'syz.2.1408': attribute type 13 has an invalid length.
[  126.507705][T10212] netlink: 'syz.1.1410': attribute type 1 has an invalid length.
[  126.529983][T10212] bond3: (slave bridge3): making interface the new active one
[  126.533235][T10212] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  126.553093][T10210] tc_dump_action: action bad kind
[  126.665545][T10231] netlink: 'syz.1.1414': attribute type 13 has an invalid length.
[  126.669117][T10231] netlink: 'syz.1.1414': attribute type 17 has an invalid length.
[  126.681475][T10231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.691754][T10233] netlink: 'syz.0.1416': attribute type 13 has an invalid length.
[  126.694335][T10233] netlink: 'syz.0.1416': attribute type 17 has an invalid length.
[  126.703376][T10233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.708361][T10226] bridge_slave_0: default FDB implementation only supports local addresses
[  126.802433][T10235] netlink: 5768 bytes leftover after parsing attributes in process `syz.2.1417'.
[  127.022180][T10260] netlink: 'syz.0.1425': attribute type 13 has an invalid length.
[  127.025915][T10260] netlink: 'syz.0.1425': attribute type 17 has an invalid length.
[  127.038817][T10260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.170214][   T33] audit: type=1107 audit(1756818236.677:4): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  127.240210][T10275] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0
[  127.273313][T10272] netlink: 'syz.2.1428': attribute type 17 has an invalid length.
[  127.287534][T10272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.322643][ T5872] tipc: Node number set to 20905985
[  127.366405][T10284] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  127.432320][T10290] 8021q: VLANs not supported on ipvlan0
[  127.449021][T10292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.586436][T10298] bond8: entered promiscuous mode
[  127.602331][T10300] bond9: entered promiscuous mode
[  127.671373][T10312] vxcan1 speed is unknown, defaulting to 1000
[  127.833005][T10312] lo speed is unknown, defaulting to 1000
[  127.866903][T10315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.075601][T10339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.451087][T10363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  129.271843][T10389] syzkaller0: tun_chr_ioctl cmd 1074812117
[  129.479553][T10406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.640017][T10416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.903860][T10427] vxcan1 speed is unknown, defaulting to 1000
[  130.061896][T10427] lo speed is unknown, defaulting to 1000
[  130.968671][T10493] bond1: (slave wlan0): Releasing active interface
[  130.988644][T10493] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  131.012659][T10493] vlan4: entered promiscuous mode
[  131.058151][T10493] bond1: (slave vlan4): Releasing active interface
[  131.069550][T10493] vlan4: left promiscuous mode
[  131.085048][T10493] veth1: left promiscuous mode
[  131.095552][T10493] bond2: (slave bond3): Releasing backup interface
[  131.448316][T10493] syzkaller0: entered promiscuous mode
[  131.453237][T10493] syzkaller0: entered allmulticast mode
[  131.671288][T10550] validate_nla: 19 callbacks suppressed
[  131.671301][T10550] netlink: 'syz.1.1496': attribute type 1 has an invalid length.
[  131.786620][T10555] netlink: 'syz.1.1497': attribute type 13 has an invalid length.
[  131.789187][T10555] netlink: 'syz.1.1497': attribute type 17 has an invalid length.
[  132.596587][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.621598][T10555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.696494][T10563] __nla_validate_parse: 11 callbacks suppressed
[  132.696507][T10563] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1499'.
[  132.768782][T10571] syzkaller1: entered promiscuous mode
[  132.774302][T10571] syzkaller1: entered allmulticast mode
[  132.970036][T10603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1510'.
[  132.996358][T10603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'.
[  133.062931][T10615] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  133.103985][T10620] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1515'.
[  133.232545][T10631] netlink: 'syz.0.1517': attribute type 13 has an invalid length.
[  133.235399][T10631] netlink: 'syz.0.1517': attribute type 17 has an invalid length.
[  133.263055][T10631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.273985][T10634] Dead loop on virtual device ip6_vti0, fix it urgently!
[  133.333331][T10637] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  133.336464][T10637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1520'.
[  133.504634][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1523'.
[  133.526834][T10656] gretap1: entered promiscuous mode
[  133.542968][T10656] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  133.546047][T10656] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1525'.
[  133.643822][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'.
[  133.652617][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'.
[  133.683295][T10678] netlink: 'syz.2.1530': attribute type 13 has an invalid length.
[  133.685801][T10678] netlink: 'syz.2.1530': attribute type 17 has an invalid length.
[  133.709860][T10678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.723729][T10668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.749717][T10682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'.
[  134.766723][T10747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.769537][T10747] syzkaller0: entered promiscuous mode
[  134.771562][T10747] syzkaller0: entered allmulticast mode
[  134.795432][T10747] tipc: Resetting bearer <eth:syzkaller0>
[  134.799722][T10746] tipc: Resetting bearer <eth:syzkaller0>
[  134.816677][T10754] netlink: 'syz.1.1550': attribute type 13 has an invalid length.
[  134.817252][T10746] tipc: Disabling bearer <eth:syzkaller0>
[  134.833734][T10754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.046944][T10774] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  135.213343][T10785] syzkaller0: entered promiscuous mode
[  135.216512][T10785] syzkaller0: entered allmulticast mode
[  135.234782][T10786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.242391][T10785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.248892][T10784] tipc: Resetting bearer <eth:syzkaller0>
[  135.265554][T10784] tipc: Disabling bearer <eth:syzkaller0>
[  135.415904][T10801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.969244][T10850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.510765][T10906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.836490][T10931] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  136.929273][T10937] validate_nla: 11 callbacks suppressed
[  136.929283][T10937] netlink: 'syz.1.1609': attribute type 13 has an invalid length.
[  136.935183][T10937] netlink: 'syz.1.1609': attribute type 17 has an invalid length.
[  136.965424][T10940] vxcan1 speed is unknown, defaulting to 1000
[  137.059389][T10940] lo speed is unknown, defaulting to 1000
[  137.780792][T10967] net_ratelimit: 3 callbacks suppressed
[  137.780808][T10967] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  137.838618][T10969] __nla_validate_parse: 16 callbacks suppressed
[  137.838634][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'.
[  138.214741][T10994] netlink: 'syz.1.1629': attribute type 11 has an invalid length.
[  138.286540][T10996] vxcan1 speed is unknown, defaulting to 1000
[  138.468679][T10996] lo speed is unknown, defaulting to 1000
[  138.904905][T11010] netlink: 'syz.1.1633': attribute type 2 has an invalid length.
[  138.907870][T11010] netlink: 'syz.1.1633': attribute type 2 has an invalid length.
[  139.034652][T11027] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1638'.
[  139.241454][T11036] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.245168][T11036] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  139.249717][T11036] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  139.288833][T11036] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.293637][T11036] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  139.298316][T11036] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  139.335065][T11036] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.338542][T11036] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  139.343033][T11036] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  139.343719][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'.
[  139.386082][T11036] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  139.389538][T11036] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  139.397503][T11036] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  139.470743][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.473944][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  139.479109][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  139.504670][ T5868] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.508712][ T5868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  139.514436][ T5868] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  139.546753][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.550706][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  139.554542][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  139.558040][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.561905][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  139.565107][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  139.608170][T11068] 8021q: VLANs not supported on sit0
[  139.645418][T11072] pim6reg1: entered promiscuous mode
[  139.648723][T11072] pim6reg1: entered allmulticast mode
[  139.743553][T11080] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  139.753342][T11076] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1655'.
[  139.759702][T11076] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1655'.
[  139.845784][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'.
[  139.855067][T11086] macvtap1: entered promiscuous mode
[  139.856880][T11086] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  139.864931][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'.
[  139.906834][T11098] Bluetooth: MGMT ver 1.23
[  139.912090][T11098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1661'.
[  140.111972][T11104] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  140.116216][T11104] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  140.798070][T11124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1669'.
[  140.805320][T11124] openvswitch: netlink: Flow key attr not present in new flow.
[  141.117568][T11164] netlink: 'syz.2.1684': attribute type 39 has an invalid length.
[  141.117571][T11165] netlink: 'syz.2.1684': attribute type 39 has an invalid length.
[  141.157468][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'.
[  141.253349][T11174] openvswitch: netlink: Flow key attr not present in new flow.
[  141.499376][T11193] nbd: must specify a size in bytes for the device
[  141.508304][T11193] openvswitch: netlink: Flow key attr not present in new flow.
[  141.767005][T11202] vxcan1 speed is unknown, defaulting to 1000
[  141.993797][T11202] lo speed is unknown, defaulting to 1000
[  142.152085][T11232] IPVS: persistence engine module ip_vs_pe_ not found
[  142.314800][T11244] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  142.824792][T11289] bridge_slave_0: default FDB implementation only supports local addresses
[  142.887177][T11295] IPVS: stopping master sync thread 10275 ...
[  142.943789][T11301] __nla_validate_parse: 22 callbacks suppressed
[  142.943805][T11301] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1729'.
[  142.953149][T11301] openvswitch: netlink: Flow key attr not present in new flow.
[  143.005398][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1731'.
[  143.931731][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'.
[  143.935551][T11331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1736'.
[  143.939207][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'.
[  143.955384][T11334] netlink: 'syz.0.1735': attribute type 13 has an invalid length.
[  143.969465][T11334] netlink: 'syz.0.1735': attribute type 17 has an invalid length.
[  143.985120][T11334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.180155][T11349] netlink: 'syz.2.1743': attribute type 12 has an invalid length.
[  144.233699][T11356] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1746'.
[  144.386953][T11378] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1755'.
[  144.393310][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'.
[  144.402821][T11378] bridge0: port 1(batadv2) entered blocking state
[  144.403712][T11380] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1756'.
[  144.408219][T11380] openvswitch: netlink: Flow key attr not present in new flow.
[  144.410711][T11378] bridge0: port 1(batadv2) entered disabled state
[  144.413074][T11378] batadv2: entered allmulticast mode
[  144.423301][T11378] batadv2: entered promiscuous mode
[  144.464512][T11387] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1758'.
[  144.488705][T11392] tun0: tun_chr_ioctl cmd 1074025675
[  144.490911][T11392] tun0: persist enabled
[  144.493099][T11392] tun0: tun_chr_ioctl cmd 1074025675
[  144.495169][T11392] tun0: persist enabled
[  144.577262][T11399] vxcan1 speed is unknown, defaulting to 1000
[  144.588317][T11401] chnl_net:caif_netlink_parms(): no params data found
[  144.736046][T11406] netpci0: tun_chr_ioctl cmd 2147767507
[  144.738723][T11399] lo speed is unknown, defaulting to 1000
[  144.854517][T11418] netlink: 'syz.1.1767': attribute type 13 has an invalid length.
[  144.857359][T11418] netlink: 'syz.1.1767': attribute type 17 has an invalid length.
[  144.863732][T11418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.912168][   T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  144.917008][   T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  144.925022][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.928274][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.936687][T11423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.945518][T11427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.960728][   T47] ------------[ cut here ]------------
[  144.963505][   T47] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  144.968166][   T47] WARNING: CPU: 1 PID: 47 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  144.972397][   T47] Modules linked in:
[  144.974592][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  144.979286][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.983539][   T47] Workqueue: mld mld_ifc_work
[  144.985467][   T47] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  144.988035][   T47] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 86 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 8d 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  144.995278][   T47] RSP: 0018:ffffc9000075e478 EFLAGS: 00010246
[  144.997369][   T47] RAX: 24ad50b14ec84d00 RBX: 000000000000000c RCX: ffff888104a83980
[  145.000370][   T47] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  145.003747][   T47] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  145.007127][   T47] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888109728f28
[  145.010558][   T47] R13: 0000000000000000 R14: ffff888124b90e40 R15: ffff888124b930d8
[  145.013772][   T47] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  145.017429][   T47] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.020134][   T47] CR2: 0000000000000000 CR3: 000000003dd7c000 CR4: 00000000000006f0
[  145.023596][   T47] Call Trace:
[  145.024945][   T47]  <TASK>
[  145.026150][   T47]  rate_control_send_low+0x194/0x7a0
[  145.028427][   T47]  rate_control_get_rate+0x20b/0x5d0
[  145.030726][   T47]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  145.033045][   T47]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  145.035540][   T47]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  145.038166][   T47]  invoke_tx_handlers_late+0xb6/0x1820
[  145.040566][   T47]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  145.042941][   T47]  ieee80211_tx_dequeue+0x308e/0x4360
[  145.045202][   T47]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  145.047583][   T47]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.049805][   T47]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  145.052420][   T47]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  145.055102][   T47]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.057382][   T47]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  145.059805][   T47]  ? do_raw_spin_unlock+0x4d/0x240
[  145.062036][   T47]  ieee80211_queue_skb+0x1a31/0x21c0
[  145.063942][   T47]  ieee80211_tx+0x297/0x420
[  145.065447][   T47]  ? __pfx_ieee80211_tx+0x10/0x10
[  145.067171][   T47]  ? ieee80211_xmit+0x315/0x400
[  145.069141][   T47]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  145.071386][   T47]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  145.073525][   T47]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  145.075578][   T47]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  145.077898][   T47]  ieee80211_subif_start_xmit+0xe0/0x510
[  145.080104][   T47]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  145.082474][   T47]  ? __pfx_netif_skb_features+0x10/0x10
[  145.084491][   T47]  ? call_rcu+0x6ff/0x9c0
[  145.085866][   T47]  ? __lock_acquire+0xab9/0xd20
[  145.087624][   T47]  dev_hard_start_xmit+0x2d7/0x830
[  145.089466][   T47]  __dev_queue_xmit+0x1b8d/0x3b50
[  145.091444][   T47]  ? register_lock_class+0x51/0x320
[  145.093128][   T47]  ? __dev_queue_xmit+0x27b/0x3b50
[  145.094832][   T47]  ? __pfx___dev_queue_xmit+0x10/0x10
[  145.096755][   T47]  ? read_seqbegin+0x122/0x250
[  145.098377][   T47]  ? neigh_resolve_output+0x438/0x750
[  145.100243][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.102222][   T47]  ? read_seqbegin+0x1ac/0x250
[  145.103843][   T47]  ? __pfx_read_seqbegin+0x10/0x10
[  145.105558][   T47]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.107547][   T47]  ? eth_header+0x11b/0x200
[  145.109185][   T47]  ? __asan_memcpy+0x40/0x70
[  145.110992][   T47]  ip6_finish_output2+0xfb3/0x1480
[  145.112946][   T47]  ? __pfx_ip6_finish_output2+0x10/0x10
[  145.114819][   T47]  ? ip6_mtu+0x7d/0x490
[  145.116224][   T47]  ? ip6_mtu+0x38c/0x490
[  145.117776][   T47]  ? ip6_finish_output+0x2ef/0x4e0
[  145.119715][   T47]  ? ip6_output+0x126/0x550
[  145.121529][   T47]  ip6_output+0x340/0x550
[  145.123108][   T47]  NF_HOOK+0x9e/0x380
[  145.124497][   T47]  ? NF_HOOK+0x101/0x380
[  145.126017][   T47]  ? __pfx_NF_HOOK+0x10/0x10
[  145.127662][   T47]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  145.129748][   T47]  ? do_raw_spin_unlock+0x4d/0x240
[  145.131622][   T47]  ? icmp6_dst_alloc+0x3a5/0x420
[  145.133273][   T47]  ? icmp6_dst_alloc+0x3a5/0x420
[  145.135060][   T47]  mld_sendpack+0x8d4/0xe60
[  145.136792][   T47]  ? mld_sendpack+0x1e7/0xe60
[  145.138652][   T47]  ? __pfx_mld_sendpack+0x10/0x10
[  145.140706][   T47]  mld_ifc_work+0x83e/0xd60
[  145.142503][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.144638][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  145.146872][   T47]  process_scheduled_works+0xae1/0x17b0
[  145.148886][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.150856][   T47]  worker_thread+0x8a0/0xda0
[  145.152469][   T47]  kthread+0x711/0x8a0
[  145.153902][   T47]  ? __pfx_worker_thread+0x10/0x10
[  145.155841][   T47]  ? __pfx_kthread+0x10/0x10
[  145.157349][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.159046][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.160742][   T47]  ? __pfx_kthread+0x10/0x10
[  145.162422][   T47]  ret_from_fork+0x3fc/0x770
[  145.164031][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  145.165797][   T47]  ? __switch_to_asm+0x39/0x70
[  145.167552][   T47]  ? __switch_to_asm+0x33/0x70
[  145.169202][   T47]  ? __pfx_kthread+0x10/0x10
[  145.170933][   T47]  ret_from_fork_asm+0x1a/0x30
[  145.172538][   T47]  </TASK>
[  145.173628][   T47] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  145.176163][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  145.179457][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.183334][   T47] Workqueue: mld mld_ifc_work
[  145.185050][   T47] Call Trace:
[  145.186296][   T47]  <TASK>
[  145.187462][   T47]  dump_stack_lvl+0x99/0x250
[  145.189155][   T47]  ? __asan_memcpy+0x40/0x70
[  145.190669][   T47]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.192366][   T47]  ? __pfx__printk+0x10/0x10
[  145.193889][   T47]  vpanic+0x281/0x750
[  145.195187][   T47]  ? __pfx__printk+0x10/0x10
[  145.196664][   T47]  ? __pfx_vpanic+0x10/0x10
[  145.198124][   T47]  ? is_bpf_text_address+0x292/0x2b0
[  145.199955][   T47]  panic+0xb9/0xc0
[  145.201211][   T47]  ? __pfx_panic+0x10/0x10
[  145.202633][   T47]  __warn+0x31b/0x4b0
[  145.203932][   T47]  ? __rate_control_send_low+0x5df/0x820
[  145.205736][   T47]  ? __rate_control_send_low+0x5df/0x820
[  145.207753][   T47]  report_bug+0x2be/0x4f0
[  145.209388][   T47]  ? __rate_control_send_low+0x5df/0x820
[  145.211475][   T47]  ? __rate_control_send_low+0x5df/0x820
[  145.213396][   T47]  ? __rate_control_send_low+0x5e1/0x820
[  145.215543][   T47]  handle_bug+0x84/0x160
[  145.217254][   T47]  exc_invalid_op+0x1a/0x50
[  145.218964][   T47]  asm_exc_invalid_op+0x1a/0x20
[  145.220659][   T47] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  145.223010][   T47] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 86 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 8d 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  145.230164][   T47] RSP: 0018:ffffc9000075e478 EFLAGS: 00010246
[  145.232519][   T47] RAX: 24ad50b14ec84d00 RBX: 000000000000000c RCX: ffff888104a83980
[  145.235308][   T47] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  145.238109][   T47] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  145.241078][   T47] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888109728f28
[  145.243863][   T47] R13: 0000000000000000 R14: ffff888124b90e40 R15: ffff888124b930d8
[  145.247059][   T47]  ? __rate_control_send_low+0x5de/0x820
[  145.249270][   T47]  rate_control_send_low+0x194/0x7a0
[  145.251357][   T47]  rate_control_get_rate+0x20b/0x5d0
[  145.253332][   T47]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  145.255400][   T47]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  145.257572][   T47]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  145.260022][   T47]  invoke_tx_handlers_late+0xb6/0x1820
[  145.262185][   T47]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  145.264536][   T47]  ieee80211_tx_dequeue+0x308e/0x4360
[  145.266717][   T47]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  145.268955][   T47]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.270951][   T47]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  145.273451][   T47]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  145.276173][   T47]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.278425][   T47]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  145.280808][   T47]  ? do_raw_spin_unlock+0x4d/0x240
[  145.282992][   T47]  ieee80211_queue_skb+0x1a31/0x21c0
[  145.285172][   T47]  ieee80211_tx+0x297/0x420
[  145.287033][   T47]  ? __pfx_ieee80211_tx+0x10/0x10
[  145.289153][   T47]  ? ieee80211_xmit+0x315/0x400
[  145.291152][   T47]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  145.293659][   T47]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  145.296264][   T47]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  145.298895][   T47]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  145.301481][   T47]  ieee80211_subif_start_xmit+0xe0/0x510
[  145.303873][   T47]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  145.306464][   T47]  ? __pfx_netif_skb_features+0x10/0x10
[  145.308765][   T47]  ? call_rcu+0x6ff/0x9c0
[  145.310340][   T47]  ? __lock_acquire+0xab9/0xd20
[  145.312315][   T47]  dev_hard_start_xmit+0x2d7/0x830
[  145.314442][   T47]  __dev_queue_xmit+0x1b8d/0x3b50
[  145.316603][   T47]  ? register_lock_class+0x51/0x320
[  145.318795][   T47]  ? __dev_queue_xmit+0x27b/0x3b50
[  145.320841][   T47]  ? __pfx___dev_queue_xmit+0x10/0x10
[  145.322989][   T47]  ? read_seqbegin+0x122/0x250
[  145.324958][   T47]  ? neigh_resolve_output+0x438/0x750
[  145.327170][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.329336][   T47]  ? read_seqbegin+0x1ac/0x250
[  145.331291][   T47]  ? __pfx_read_seqbegin+0x10/0x10
[  145.333400][   T47]  ? __local_bh_enable_ip+0x12d/0x1c0
[  145.335778][   T47]  ? eth_header+0x11b/0x200
[  145.337676][   T47]  ? __asan_memcpy+0x40/0x70
[  145.339223][   T47]  ip6_finish_output2+0xfb3/0x1480
[  145.340878][   T47]  ? __pfx_ip6_finish_output2+0x10/0x10
[  145.342649][   T47]  ? ip6_mtu+0x7d/0x490
[  145.344085][   T47]  ? ip6_mtu+0x38c/0x490
[  145.345809][   T47]  ? ip6_finish_output+0x2ef/0x4e0
[  145.347649][   T47]  ? ip6_output+0x126/0x550
[  145.349159][   T47]  ip6_output+0x340/0x550
[  145.350548][   T47]  NF_HOOK+0x9e/0x380
[  145.351824][   T47]  ? NF_HOOK+0x101/0x380
[  145.353200][   T47]  ? __pfx_NF_HOOK+0x10/0x10
[  145.354723][   T47]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  145.356619][   T47]  ? do_raw_spin_unlock+0x4d/0x240
[  145.358266][   T47]  ? icmp6_dst_alloc+0x3a5/0x420
[  145.360276][   T47]  ? icmp6_dst_alloc+0x3a5/0x420
[  145.362097][   T47]  mld_sendpack+0x8d4/0xe60
[  145.363585][   T47]  ? mld_sendpack+0x1e7/0xe60
[  145.365229][   T47]  ? __pfx_mld_sendpack+0x10/0x10
[  145.367067][   T47]  mld_ifc_work+0x83e/0xd60
[  145.368623][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.370363][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  145.372261][   T47]  process_scheduled_works+0xae1/0x17b0
[  145.374180][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.376262][   T47]  worker_thread+0x8a0/0xda0
[  145.377931][   T47]  kthread+0x711/0x8a0
[  145.379367][   T47]  ? __pfx_worker_thread+0x10/0x10
[  145.381138][   T47]  ? __pfx_kthread+0x10/0x10
[  145.382622][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.384313][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.386377][   T47]  ? __pfx_kthread+0x10/0x10
[  145.388234][   T47]  ret_from_fork+0x3fc/0x770
[  145.390138][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  145.392204][   T47]  ? __switch_to_asm+0x39/0x70
[  145.394108][   T47]  ? __switch_to_asm+0x33/0x70
[  145.396048][   T47]  ? __pfx_kthread+0x10/0x10
[  145.397986][   T47]  ret_from_fork_asm+0x1a/0x30
[  145.400072][   T47]  </TASK>
[  145.402190][   T47] Kernel Offset: disabled
[  145.404016][   T47] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:04:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff90116ee8 RCX=dffffc0000000000 RDX=ffffffff90116ee8
RSI=ffffffff90ba6d4a RDI=ffffffff8be337a0 RBP=ffffffff90116ee8 RSP=ffffc90003f070f8
R8 =0000000000000001 R9 =ffffffff8172c195 R10=ffffc90003f07218 R11=ffffffff81ac3820
R12=ffffffff895ffd44 R13=ffffffff90116ee8 R14=ffffc90003f071c8 R15=ffffffff90116ee8
RIP=ffffffff8172d3fe RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555582f185c8 CR3=000000003dd7c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f24faf97498 00007f24faf97470 XMM03=00007f24faf974a8 00007f24faf974a0
XMM04=00007f24fbafd100 00007f24faf97460 XMM05=00007f24faf97478 00007f24faf974c0
XMM06=00007f24faf974b8 00007f24faf974b0 XMM07=00007f24faf974a8 00007f24faf974a0
XMM08=0000000000000000 00007f24fae12ee7 XMM09=0000000000000000 00007f24fae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000075dc10
R8 =ffff888107060237 R9 =1ffff11020e0c046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018d1 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003dd7c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f24faf97498 00007f24faf97470 XMM03=00007f24faf974a8 00007f24faf974a0
XMM04=00007f24fbafd100 00007f24faf97460 XMM05=00007f24faf97478 00007f24faf974c0
XMM06=00007f24faf974b8 00007f24faf974b0 XMM07=00007f24faf974a8 00007f24faf974a0
XMM08=0000000000000000 00007f24fae12ee7 XMM09=0000000000000000 00007f24fae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
