last executing test programs:

2m29.147205733s ago: executing program 1 (id=11887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfff}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)

2m29.086988957s ago: executing program 1 (id=11888):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0x10, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m29.086485837s ago: executing program 1 (id=11890):
r0 = socket$kcm(0x2d, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc)

2m29.086197381s ago: executing program 1 (id=11891):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)

2m29.026583238s ago: executing program 1 (id=11893):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1)

2m28.957347319s ago: executing program 1 (id=11894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

2m13.967022763s ago: executing program 32 (id=11894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

1m59.214372891s ago: executing program 2 (id=12722):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m59.214233271s ago: executing program 2 (id=12723):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5fe0000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

1m59.188213719s ago: executing program 2 (id=12724):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)

1m59.103465645s ago: executing program 2 (id=12725):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r2, 0xde6bcce13c096341}, 0x14}}, 0x0)

1m59.103312034s ago: executing program 2 (id=12726):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8008}}, 0x14}, 0x1, 0x0, 0x0, 0xc890}, 0x40)

1m59.045134708s ago: executing program 2 (id=12727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m44.011653112s ago: executing program 33 (id=12727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

1m15.589665374s ago: executing program 0 (id=13974):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = epoll_create1(0x80000)
epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001c})

1m15.447489256s ago: executing program 0 (id=13975):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

1m15.40085477s ago: executing program 0 (id=13976):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)="b59c57976ea9d39631c22b81c85eaa866e4b535e1cd2d520a5c18e4ea21c7bf1591edb105e0515aab516a899ce6e8d8b443d184ee948354359c26c3af47a206910c2655c9dbf6e6cec4d88", 0x4b}, {&(0x7f00000000c0)}, {&(0x7f0000000100), 0xfff0}], 0x4, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)

1m15.400276608s ago: executing program 0 (id=13979):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

1m15.339327238s ago: executing program 0 (id=13983):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r0, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)

1m14.199776824s ago: executing program 0 (id=13995):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

59.208630886s ago: executing program 34 (id=13995):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

883.683156ms ago: executing program 4 (id=16046):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async)
sendto(r0, 0x0, 0x0, 0x80, 0x0, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000dcf3490000000000000007850000080000000e00000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)=ANY=[@ANYBLOB="3c00000010000800"/20, @ANYRES32=r8, @ANYBLOB="00030000000000000a000200aaaaaaaaaa34000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="65407cf1a25d800b1a23ff6651a5e4cf213dcc6fe3b03626f8c76f72bfa262f4d699043e691ac36a3cd7fb3c5d64be00c59af55750a670a5506863be4ea0e835b324337a6616b6183b22c2b5b73ae4f08f069354062a2a9ed3d93b0e0211cf26dc656f37b8dc40494eebc8fa176e05f5c10a125e40b064615241dafe0685f07e4bce3e4cdf841a013f9cf705d86fc722946ca13e5654dcaab2be76581ce98b1cbf844344c4eedb29054e8787124dd50000"], 0x3c}}, 0x0) (async, rerun: 64)
socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64)
ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, &(0x7f00000002c0))
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32)
recvmmsg(r2, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x9, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f0000001480)=""/175, 0xaf}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/240, 0xf0}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0) (async, rerun: 32)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

743.243603ms ago: executing program 4 (id=16050):
unshare(0x68040200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="048380cd3db529a9333a7571d1d55b6b074a40a4ac6573812c93c0c1ffa32c578d6fcf5ffe797903e12619801eb2c3172b371cd9909f83e2b081faddd1e8f868", 0x40) (async, rerun: 64)
unshare(0x40020000) (rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/63, 0x3f, <r3=>0x0, &(0x7f0000000280)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r5, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r5) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@remote, @private, <r6=>0x0}, &(0x7f0000000080)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001100020025bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="08000000c80000000400140008000ff1e2000000"], 0x2c}}, 0x0)

667.209335ms ago: executing program 5 (id=16052):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x1f, &(0x7f0000001f80)=ANY=[@ANYBLOB="8520000002000000950000000000000018140000", @ANYRES32=0x0, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000ffffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="1830bdb7afd734dc8e10608235e34ae350df68f670a2776d6759b1f91c906aff058f6863017846a703e1a69071fe5f3720fbd12636562dc691772fd026f327efc2f6cf626a3c923468ac40151908f27a18c99fb016f5a60b84dca18619c358c4016b41b3106976a47e1d89293aa425aee5230aaa7347d8b4a29fbff20782bbdc0b614eca1b467b0263f03114a4ef8170c7a2270d15aad18595f1185816cc46e47ff9bcdcc1ba680e1a6efe3a4fe8b115a36efb06706b68a40548ba5057081264acdefd73cd90abe0936473f0d7cedc6f36a68ce7f86d2ad487d1", @ANYBLOB="0000000000000000a5000000181100"/28, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x1f, &(0x7f0000001f80)=ANY=[@ANYBLOB="8520000002000000950000000000000018140000", @ANYRES32=0x0, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000ffffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="1830bdb7afd734dc8e10608235e34ae350df68f670a2776d6759b1f91c906aff058f6863017846a703e1a69071fe5f3720fbd12636562dc691772fd026f327efc2f6cf626a3c923468ac40151908f27a18c99fb016f5a60b84dca18619c358c4016b41b3106976a47e1d89293aa425aee5230aaa7347d8b4a29fbff20782bbdc0b614eca1b467b0263f03114a4ef8170c7a2270d15aad18595f1185816cc46e47ff9bcdcc1ba680e1a6efe3a4fe8b115a36efb06706b68a40548ba5057081264acdefd73cd90abe0936473f0d7cedc6f36a68ce7f86d2ad487d1", @ANYBLOB="0000000000000000a5000000181100"/28, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r1 = socket(0x1a, 0x80000, 0x1)
shutdown(r1, 0xfffffffffffffffd)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="46e81017356fbba1e4d6631fe61b684c4b6651fbdab30c885509b96f2bd0b12bead520bb925161b9b251c4262695a7fa399fadc2665e41b8a4b5097e3103947507c1b7017b496b0461e8ffaab60c9f43f527a796ba208f7f42c25d4a9aafcae493120972c29772f5f108062ba0933767c751737f5f812d51ed236b0feefaac37fcbc4dfbdeb67120bdb3c53b72b7a4d4469dbc79524e26fa904ca613c80ac1b965c64884828de460c375d0a59b7982345ca4d39fac8843718ac8bcf7e9c8c1390c4228ff790212d7ee3a9e696c742814082cc66b172280015d462a02a9fd1923261710ba1617044c7c9481cb05042a113dc3ab96e32df1ba4586d63c67ba74a5441f4d86466171df384813790b80b168436d23fd6549a014599e446084563fcbd7a683c910e08f6f222345ec0163b56f3d61f6162d956dc1e66bea78dbc01c18e4d743349cff06832a0490eaa280e3993e275f5bdbd16303d7b4d186aa2f78797622a530685f8e6eee598fd0ae4185757e939b593bc1dca04c326727665b21f926397f89b52e4ab6af4b02b77ca27895e62cfdd3a4f220d2e29c5dbada06a9154f7aa8afb54da84177c8fee7af32901aac3288a336de18a3599a92dc5abe70b00ab9d867f8ac3e3335acefbc113b9e4d73d04e4f264a75b81f3c769bbeec9cd5a955e5f2f5009922f45ce8f583ba7656a176193f0fac303a8ddb818a60ce715a5a449005d93e2de47e8d6dda92a2e75f4f6621a395ac976951ac801fc4d96c0eb0bbde88fbea194b099db68b07e29845a8a46ba6f2a523e2d4e1333602e69a74010326bd4bdb91aa029e49ad30e49caad8178666ec6b2eda0b8a1f7f4df0f429814e3f95ca977247d93ad3b8a1137cc3e0c81e80e374e8e477a8c9baa05f6d6f4a9f4f2eaa9c7a8ff210588dbc0e565b98d4fce5e8f7e7ef6cb8c933ba101880569d2e791d0ff782bae24713c7794a9f3df71062cf44cdeb03d41398967916232cb6a44b3ba9d40aab60c6326f912538027d3838e826fd2b57a0bcddb6be739b0ac1cc2d06986b326be478e85262c0e37265cf37411cfb296e9b70b0004473dc1deafb9cccf30df4af5e801d04e303cdfe2de33c8d1db0b8ac3a8557a353dbf4a277669ba5a88486a3f016ed94ecee743b7726f5aa7bec7691349f5f882006bf5db95e82bef7f1a07655ad383b2df7d838ac990aeb3d96d631d8dbb068a48ae0c9259ecdc75d4a66231e032bffff583797a44ca5de6babcce61d9a580ee1de536a63912e6073e30a08bd95cb1d56cfaad041b67cc3185e61fbdc88344dd8263b33dc0898e4ef7a12f3fca26cb39da956a8b5f8094a8013ce368c68f2423ff3c1c2e22779c25eb3bb4493a5c1d91bef95b6c70fdf0c184a203c12872d8e918a4c728107ee6732ddac77595739802f5459c70795701f276a4dcfc89f52eefc78105d1b158485e95d72f26c821fe3905e200ea58e327ae596668e413adadb75940e86d794dce9cc50e6649bf6979241a14fc5f0c78de61b60a3c2198bd4d931c297ca206a1cf5439ee1d37a292219fe77a83576f86e2fee327f7bf8e00d07ac87511cc8b17349182114649eb36d525004d947ebc933795ec69b13a43ec8056b0d09f3752c4790f7b6b5699ca8a13ba72687f8d60984d38455b8ec3bf497b1b7cbd0aef7ff015855c260ff4489b919ea83fe52b942f40313ca869c127cf05da8c72ba5e74bc3a0bdc8ec080a440a05bf03d389e0620bedab422a640e4d4521468b3a3506f5ba7c87a73c3095a0433be5ed23206e67f0e54e224965418c124a98b0abf7f581b28017a9253017db66cc399cb5086e7ee4c952d4614705051999f9b48bd6b3f1c9db4ef042c65474aa6b01ad968bbf0f7d03e6f8a8862079ac5506ddab11911ecd25514ecb873b02dd379a1435fd9957ab38f06d0c7c442b2a678cda95923013c5613ce2e2ddfb16e5f00b7a857f00053f90f9d0ce4ee9f556c02e44a651ae866fdcfde46a8b2a91d2b4f3e04981196bd7c27c6e48e908fb31c2426684405759c77cc525cc0e99742fc4a98f037d4701ea3fee2bf339dbf5f15da3ca4d24f08709524e7aeda4a03e7befb6df5ed0f18d292e4c89ae09a36253ece4136e361a0fc37fd1b54ae8f9da6a9cf1f15b7ceb82b9d2dae8a318b9caee1c6120200029074cdf6061154607ad40b0f4ee5861efffcb3393e5dfb199091ea6bffa5e982fe841427c0d19f4ecc7df35898f6b52e593fde1256e2c544d81033cf64d1f1893ae76b0e0936f01de59f9dbaa60a4b3a6013ef4909f1e94268df0daafaa7250121edd9596636079ff640ebbc6ace83b20638daaf8a3712318d6f15a8419015c13dcee0ce1df356a44808898627d0a97193b6c8a3da0a78416fe6a03778aab69eb36611b615d42c2132b142f3aea9cfb38c588b6af44a0c5efa77cdc4bfaaccb2fba4a0361029092ec484741627d1238ee24016819e98e91e36843e7fdbfd3d4fd381d20e501f34bb2459efa136b0b44409fe348d589a286dc918b2267c29f527bedda0e953be8e7a172e3d8a06073da421d0a5fa9e6fe28c2f70ae8771f9440acb2a089fc7feeeaf5a40fddaa93833ffa3bd6ec85a771284232e825c0c4c47148a00f8589619fc2f491bde829196d8e7f8394c5d22af8b18ef1a3928c555799345982559eb6cf356f8d5a2a7665b2e1cff7e72f6af7ab657e19fe076f51839b2cea3edc9a3a6ac698c241f3081ba5c06c90dfd404896655e3f1d68f750d8f9bb6e661bdd90928e386f4360517ac8744c1966e52886dda86ed3d93a10acf7dcd0efd27c59991219cdbd4988856d17aacd06f4b44d42f507a884309768608cec0be5d01fe4d8375b822b51d36c84640ec3fd5fb9a8e2eebfc46e308e06097ab639d081ca86da1983cfb0c5535b26a40e754662cc83a8874c3dc93d087a2ed8563624c7059d9978b9e663ee7c0c8d6f085cdd5e1ec13aa89924c4891f3f118c99e4fbebaa7a2d08f6b02acceda171c40aff40172e96d2d79588ce2ae1f084a199795cc63f426e770ff5ecfa19781e4b64798008c153b7e68683f8d341924d5fde2c9103a633c83ec982d5d4e8797dba4692e2acc644ac78eb8489cff37402834386fe341c067748b45afddcd81f019c1359df4dbf15df79d4f7077cfe6af8afd9a629e2b05b5e8e7d9ebfbf8594ef30a9e309ba81f690bb53972cd2f1da1572e8d89be7b2c24099a95fb11db6bf490a0e8fc2be83e9ff5078cb68db894c073af2b22a0f05cf7d0f0ff285b1342cafc92e42926bfcbec0e6687e478e8a12f5e356fa29e6a8dcbca1b610c24d53204b525738863b5894267286e07a926e4809baaeebeebf5c6ee06f63bd7eb43a45efc5c0a3e3207903144576cfc8ecf369cb76fbc9cce0f072456141bcb6fba4e7f7c255cb5a02b0ddb241033f769b819b7152563f9388988952a685d0d4e6bdeaca714f81e9ffdbf0baeac2eca16830f4b5c4ded093eaf56c6ea89834906842951aeb6b3bc03a813ea5f251a36536f59d748b3f58e204a7aa82c2d0cddcba1464b626bcc914acd95fc614e66f2e90368abd18f37886f784359d3d24dfcb3c0373946189a1e68927fb68a5f7d87d2a05179832c56ce5de9c147c8d88e81ed92d04148b871c291f279cad157de3cbbfd1d1248caa1e150eb595c0eaa425b7c003e73a90a06dfede23ebd1c45a4a4159b5c3bd375e4d08a62020cb81f4a2324e0ee2ac188e9c3ba8584f5da033c1fdfcba43c0960fa135adb7431c981537851c381a0dc9ec323c9974a909919f1af9cf65d3b05df87a825f905a466c37672df2a80efa89bf338db259c331ebcb5a69e425cf6764664b6d9479f909a19afdb99f09b2b8c0b41ee7b271d8340431566f8258d736b454c801ff7cffb5b5f84e9d7ebf13e8e8f4cf51b3585f810956c9a11e4c51b484534ddcbad0a19e9f97cc341709b434f3abd6155d3c30be78b1aeafceb005f6d7f877d5f29faf341d00f5b5453916a3ab8ca4baa4f46b8e417490550d3415a3ee21b10ee96a862b1ab42da35154c111de6fa3c8a6f556411481c0f8a9aa196a13793c45a19074858b141b580808fecdcbb7210b8c801f71444d6d8dcb9a162daedab8ab3177d55e6d92b98332296a1cfed8920d225c782985065cb61f3f3dfd64c40618d576214acfb251684cffb12617868ea5dae3c6cccd5ca2098c3aa1c999659de2ea213a3295a93a0ea42a05953818496bd6978e4e707153eaacf8d529b49a810fe834c73975c0f852046a50a99c7faecab2cd3f40b8f57eda1f1a20663f189847ea3cbaf616ea2bb06f0916d304063d4da8bb8b9c617c3924750bcf7913c44fc11ab9aad946bd5206f253dae16213b8a26721459195b0662cbae2ad91e2f47ea9525f773e5f1f514a6971ea4c60a7465dd839309b1179e2cde9ec01da0546f69b4cec828375f44cfcfc2d3e8ae3b56fc57dacf92a8d5391356d1fa1219338ad0f97a10cacfa2c5c46aadfae91a4baf3d7c2ce14fadc416e7965034de6b70cfd90c2b82d62ddaace2cca0679deadd2b2d44cc157e5a50a03bb1e00bcf884648f24c60bbf48c17f9ef0187ee6ca483591464b397eea66679736c8e7faaba4d94df71329b41653a8067012b706af15e6c71a74814e68d890bab7c7e82aae9217020e6b0d03ab88201361822e04aa1562a64aa1bd7e96b161440fe63e708b494f73c1b791b53d275f35d83e27c4903d22bbf232e2edbf0aad1ce46fd99a8f462a15a82f56d6fb99d45de4ebcecb9686a2562201a1d0708528b06f96cb267e9fae74012e89d7c022ddbe09d79e210585db6c43d78d9b0b4514941bbd022406836b8b62551ce1162b7318e67e73c34cbe37e351f4032f5e218a81697ac0839cc355b9dd4258e93faf09f4bfce26251c565ad5a496190931e49e9367c6e3608d57da186474c146d309b0520bc40cde78bfb5601bb4e57d03863efd6a9a2eac859500d0c2be1097dc7d1ffac95022f4e98436e670439b53392ca06e15bf50b47b632c0f9c90a5dc0e1b39f8f7a7891e422520bcece221d9d0f82a39afac33f79e0fb355806bebe0143ffb7ff839fbc3a8a382bb5a6935d035ae8b39d2c10351892abe22a4370a2c637ff30f214eb073270ee4f4c8755ea79ff108be7cff0c250aaf1eea306ebca7e75ab0e92f68bdae3a84dcec1cccba16394c6bf23305971734d9c59c76fd7256e1b8972b866f97e3861a3c1df283aabe76d681afc3c92c05a6312ce135a16b318e6d72c4fadb650ce44419b3921672e3fab991c7eeabd0002a534cf62281189c7f36319b9f84f56e5432b7af96017debc4269ae5cf2b652e61a15cb507bcc192773fe275a83a48c0514098d8a390c30b642ddb895fdc9e19abf681d7a938710e20e3eacd281c292f524e26005c5de88b81181ee506f85471a2a6b45582e8a16aab50872a422e82fe4fc3a0f990c9eac6467bd73238d034a77881e189de841d5c23dda50b5c99d7a2776fe1d897357572f4f42abac709795f153e10e35fd588fa2fb0047a30aaf3b64a6d45699bfded536958aec0cf5dd938e789f8ae93be71f73d987234306ada37445785c7df59db21618ed57b8b5ffa1739b03fe43d496a96584b24768b8294b29c48975ee2d781ebb6b72de25bb601d3ac92b81ad21bee4316d8779b9f8cccd59605bf80cda01c23e193ca4d4891a90be1bfce1a04b2e28407473f716432eea1eca984bea90aec1fb3f1b14bf068cdd593a70a761afc8a02ba6e129b5785f1aa6006cc266dc241a2e2cf7752840b7ca6773c6", @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000001d00)=ANY=[@ANYRES64], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
sendmmsg$inet(r4, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x68)
accept(r5, &(0x7f00000002c0)=@ieee802154={0x24, @long}, &(0x7f00000001c0)=0x80) (async)
r6 = accept(r5, &(0x7f00000002c0)=@ieee802154={0x24, @long}, &(0x7f00000001c0)=0x80)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04022bbd7000fddbdf250900000005001300090000001400068008000700", @ANYRES32=0x0, @ANYBLOB="0800060002000000"], 0x30}, 0x1, 0x0, 0x0, 0x2000001}, 0x4)
r8 = accept4(r5, 0x0, 0x0, 0x80800)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r10, @ANYBLOB="08001b20a26abb6ad806e7c429107d699d560900004c"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r10, @ANYBLOB="08001b20a26abb6ad806e7c429107d699d560900004c"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

553.870079ms ago: executing program 3 (id=16053):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
writev(r1, &(0x7f0000004d40)=[{&(0x7f00000039c0)}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet(0x2, 0x2, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x1000}, 0x28)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r4, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r3, 0x1}, 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x18}, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r0, 0x0, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)

552.692089ms ago: executing program 5 (id=16054):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x6)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r9, r7})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0)
r10 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40)

413.436534ms ago: executing program 5 (id=16055):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@raw=[@alu={0x7, 0x1, 0x8, 0x3, 0xa, 0x80}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x4b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x9d, &(0x7f0000000580)=""/157, 0x40f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xd, 0x1, 0x7f}, 0x10, 0x26fa4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r12], 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

412.852338ms ago: executing program 3 (id=16056):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0x4, 0x4)
socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0x4, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4) (async)

242.129411ms ago: executing program 5 (id=16057):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x4, 0x544b, {{0x3c, 0x4, 0x0, 0x38, 0xf0, 0x65, 0x0, 0xc3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x99, 0x1, 0x8, [{@broadcast, 0x3}, {@rand_addr=0x64010102, 0x9}]}, @cipso={0x86, 0x33, 0x1, [{0x2, 0x10, "75bdd68cbe4b8c18986ee6f36e0e"}, {0x5, 0xa, "5d1335317c597fe7"}, {0x0, 0x10, "507d57a1943c9151ae032a7f5024"}, {0x2, 0x3, '~'}]}, @timestamp_addr={0x44, 0x4c, 0x2f, 0x1, 0x7, [{@rand_addr=0x64010101}, {@multicast1, 0x9}, {@multicast2, 0xfffffffe}, {@remote, 0x218}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x700000}, {@loopback, 0xfff}, {@multicast1, 0x9}, {@empty, 0x8}]}, @ssrr={0x89, 0x17, 0x66, [@rand_addr=0x64010100, @multicast1, @broadcast, @rand_addr=0x64010101, @private=0xa010100]}, @rr={0x7, 0x27, 0xbe, [@empty, @remote, @remote, @multicast1, @rand_addr=0x64010102, @multicast2, @loopback, @multicast2, @loopback]}, @lsrr={0x83, 0xb, 0xb5, [@dev={0xac, 0x14, 0x14, 0x21}, @broadcast]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000700)={'erspan0\x00', <r5=>0x0, 0x8000, 0x40, 0x4, 0x544b, {{0x3c, 0x4, 0x0, 0x38, 0xf0, 0x65, 0x0, 0xc3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x99, 0x1, 0x8, [{@broadcast, 0x3}, {@rand_addr=0x64010102, 0x9}]}, @cipso={0x86, 0x33, 0x1, [{0x2, 0x10, "75bdd68cbe4b8c18986ee6f36e0e"}, {0x5, 0xa, "5d1335317c597fe7"}, {0x0, 0x10, "507d57a1943c9151ae032a7f5024"}, {0x2, 0x3, '~'}]}, @timestamp_addr={0x44, 0x4c, 0x2f, 0x1, 0x7, [{@rand_addr=0x64010101}, {@multicast1, 0x9}, {@multicast2, 0xfffffffe}, {@remote, 0x218}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x700000}, {@loopback, 0xfff}, {@multicast1, 0x9}, {@empty, 0x8}]}, @ssrr={0x89, 0x17, 0x66, [@rand_addr=0x64010100, @multicast1, @broadcast, @rand_addr=0x64010101, @private=0xa010100]}, @rr={0x7, 0x27, 0xbe, [@empty, @remote, @remote, @multicast1, @rand_addr=0x64010102, @multicast2, @loopback, @multicast2, @loopback]}, @lsrr={0x83, 0xb, 0xb5, [@dev={0xac, 0x14, 0x14, 0x21}, @broadcast]}]}}}}})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100002000000000000060e0000000000", @ANYRES32=0x0, @ANYBLOB="8304050000000000240012800b00010065727370616e00001400028008000100", @ANYRES32=r5, @ANYBLOB="080015001d2f0700"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100002000000000000060e0000000000", @ANYRES32=0x0, @ANYBLOB="8304050000000000240012800b00010065727370616e00001400028008000100", @ANYRES32=r5, @ANYBLOB="080015001d2f0700"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x200080d0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000340)=""/49, &(0x7f0000000440)=0x31)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000600)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2000ecd0ba8b6c514f0200000200fe71a4b50255d6e097470000000041e0ffffff", @ANYRES32=0x0], 0x20}], 0x1, 0x0) (async)
sendmmsg$inet_sctp(r7, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2000ecd0ba8b6c514f0200000200fe71a4b50255d6e097470000000041e0ffffff", @ANYRES32=0x0], 0x20}], 0x1, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50f3ffff040a01080000000000000000030000080c000240000000000000000508000b400000000408000540fffffffd08000540fffffffe0a000700726f7574650000000900030073797a3000000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000880)={0x1000, <r12=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="30001cbe19bc7721fa00003800000000000000", @ANYRES32=r12, @ANYRES64=0x0], 0x20)
close(r11)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0)

241.718097ms ago: executing program 3 (id=16058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000030000000e0000000000000700cb95640e0000000200ff00000000000000000000000000010000000900000004000000080000000100000000000009d20ad2194f0000001000"], &(0x7f00000001c0)=""/101, 0x57, 0x65, 0x1, 0x1}, 0x28)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0x3, @mcast2, 0x2}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x40080, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r1, 0x80, 0x700, 0xe, 0x4, {{0xc, 0x4, 0x1, 0x16, 0x30, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xf7, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x9}, {@empty, 0xb87a}, {@loopback, 0x3}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x98, '\x00', r1, r2, 0x5, 0x4, 0x1}, 0x50)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}], 0x38)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000040)={{0x2, 0x4e22, @empty}, {0x1}, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'})
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x63, r1, 0x3ff}, 0xc)

176.211589ms ago: executing program 3 (id=16059):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8300, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2200, 0x0)
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYRESHEX=r1], 0x366)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x59, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7af}, 0x48)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd", @ANYBLOB="10000000000000001c001280a534cc"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x801, 0x0, 0x0) (async)
sendto$inet6(r3, 0x0, 0x0, 0x801, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x4, 0x7e) (async)
r5 = socket$inet6(0xa, 0x4, 0x7e)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) (async)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r6=>0x0})
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) (async)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
close(r5)

175.67495ms ago: executing program 5 (id=16060):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x4) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040010) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r7, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) (async, rerun: 64)
r10 = socket$rds(0x15, 0x5, 0x0) (rerun: 64)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x14002, 0x1}}], 0x18}, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r11 = socket$kcm(0x10, 0x2, 0x0)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r12, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
setsockopt$inet6_int(r12, 0x29, 0xce, 0x0, 0x0) (async)
sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

175.399709ms ago: executing program 5 (id=16061):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4048001)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0)
getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)

170.801317ms ago: executing program 4 (id=16062):
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt(r1, 0x9, 0xa345, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0xfffffffd)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0xfffffffd) (async)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8) (async)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8) (async)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x1) (async)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$inet(0xa, 0x801, 0x84) (async)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r9, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
listen(r8, 0x8008)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0x4}, @IFLA_IFALIAS={0x14, 0x14, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054)

71.965321ms ago: executing program 3 (id=16063):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x13)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

70.750962ms ago: executing program 4 (id=16064):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01030000000000000000070000090900020073797a31000000000900010073797a300000000024000380200000800800034000000001"], 0xd4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000001c0)=0x2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r7, {0xf1df85ce98222457, 0xfff1}, {0xffff, 0x2}, {0x0, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4)
sendmsg$unix(r9, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xc}, {0xffffffffffffffff, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20)
ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000280))
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r13}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r12}, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180))
r14 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

70.406422ms ago: executing program 3 (id=16065):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) (async)

3.566672ms ago: executing program 4 (id=16066):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCDELRT(r0, 0x400448c9, &(0x7f0000008d40)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, @l2tp={0x2, 0x0, @loopback, 0x4}, @ethernet={0x1, @link_local}, 0x800, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0xfffffffffffffffb, 0x1})

0s ago: executing program 4 (id=16067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f0000000c80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120004000000000000000000000006000000000000000000000000000000fc02000000000000000000000000000000000000000000000000000000000000030005000000000002004e20ac1414aa0000000000000000070019"], 0xc8}}, 0x0)
listen(0xffffffffffffffff, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000065fef33ad5b37029456f5c7fbd6840ffbb9917ba13a479d5854df1a91a23a9864a10e12fd9c0d655b4815d23da82602fab147b063fa97d5291c0dc2ebf35f427393084182ba9a64343ceb2f3fcf77a048f506e692ab203551389a0df4f0e9a053729a75b8d53720000000000000089656d25515b643b207067f31cd06620d48216f6b419d6def9048fa07d3f90bc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000340)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r6=>0x0, 0x29, 0xf6, 0xa1, 0x400, 0x3, @mcast2, @mcast1, 0x40, 0x700, 0x5, 0x8001}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e0d4e0a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r10, 0x0, 0x0, 0x8, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', <r11=>0x0})
socket(0x26, 0x3, 0x3) (async)
r12 = socket$pppoe(0x18, 0x1, 0x0) (async)
r13 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) (async)
connect$pppoe(r13, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r13, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x104, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xd}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x172}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000054) (async)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

T32717] lo speed is unknown, defaulting to 1000
[  401.169017][T32751] sctp: [Deprecated]: syz.0.11762 (pid 32751) Use of struct sctp_assoc_value in delayed_ack socket option.
[  401.169017][T32751] Use struct sctp_sack_info instead
[  401.180292][T32717] lo speed is unknown, defaulting to 1000
[  401.225085][ T6035] lo speed is unknown, defaulting to 1000
[  401.259793][T32717] lo speed is unknown, defaulting to 1000
[  401.347196][T32753] netlink: 'syz.1.11768': attribute type 1 has an invalid length.
[  401.350328][T32753] __nla_validate_parse: 12 callbacks suppressed
[  401.350336][T32753] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11768'.
[  401.467045][T32761] team0: left promiscuous mode
[  401.469303][T32761] veth0_to_team: left promiscuous mode
[  401.471139][T32761] veth0_to_team: left allmulticast mode
[  401.474888][T32761] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  401.477527][T32761] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  401.484015][T32761] ip6tnl6: left promiscuous mode
[  401.487776][T32761] ip6tnl6: left allmulticast mode
[  401.489864][T32761] hsr0: left allmulticast mode
[  401.491608][T32761] hsr_slave_0: left allmulticast mode
[  401.493844][T32761] hsr_slave_1: left allmulticast mode
[  401.496598][T32761] hsr0: left promiscuous mode
[  401.498677][T32761] macvlan4: left promiscuous mode
[  401.500277][T32761] macvlan4: left allmulticast mode
[  401.729578][  T300] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11775'.
[  401.779673][  T304] netlink: 'syz.1.11777': attribute type 1 has an invalid length.
[  402.227103][  T350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.326204][  T361] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11799'.
[  402.496969][  T375] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  402.500301][  T375] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  402.503652][  T375] tipc: Resetting bearer <eth:syzkaller0>
[  402.739431][  T386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11813'.
[  403.809902][  T437] netlink: set zone limit has 4 unknown bytes
[  404.018607][   T33] audit: type=1800 audit(1756508212.700:12): pid=456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11839" name="memory.events" dev="tmpfs" ino=19278 res=0 errno=0
[  404.953824][  T486] netlink: 'syz.0.11854': attribute type 3 has an invalid length.
[  404.953901][  T485] netlink: 'syz.2.11853': attribute type 8 has an invalid length.
[  404.960903][  T485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11853'.
[  404.969857][  T485] bond0: entered promiscuous mode
[  404.972736][  T485] bond0: left promiscuous mode
[  405.159650][  T508] netlink: 'syz.2.11865': attribute type 1 has an invalid length.
[  405.162682][  T508] netlink: 'syz.2.11865': attribute type 6 has an invalid length.
[  405.175664][  T508] netlink: 'syz.2.11865': attribute type 3 has an invalid length.
[  405.463652][  T555] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.467475][  T555] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  405.470006][  T555] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  405.509497][  T562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11891'.
[  405.513019][  T562] netem: change failed
[  405.536392][  T565] lo speed is unknown, defaulting to 1000
[  405.544554][  T565] lo speed is unknown, defaulting to 1000
[  405.965810][  T613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11914'.
[  405.969427][  T613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11914'.
[  405.971988][  T615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11915'.
[  405.978649][  T615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11915'.
[  406.016382][  T619] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  406.080455][  T627] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  406.156728][  T636] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.160288][  T636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  406.210165][  T636] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.214129][  T636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  406.259472][  T636] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.263530][  T636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  406.308195][  T636] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.311747][  T636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  406.387412][T14353] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  406.391280][T14353] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  406.398758][T14353] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  406.402160][T14353] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  406.409794][T14353] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.412465][T14353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  406.418912][T14353] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.421592][T14353] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  407.853691][  T678] netlink: 'syz.0.11939': attribute type 39 has an invalid length.
[  408.064018][  T695] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  408.111094][  T693] __nla_validate_parse: 2 callbacks suppressed
[  408.111110][  T693] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11945'.
[  408.273468][  T718] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11955'.
[  408.308117][  T720] lo speed is unknown, defaulting to 1000
[  408.310853][  T720] lo speed is unknown, defaulting to 1000
[  409.011932][  T799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11989'.
[  410.278862][  T843] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  410.284301][  T843] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  410.659711][  T848] syzkaller1: entered promiscuous mode
[  410.662070][  T848] syzkaller1: entered allmulticast mode
[  412.435314][  T943] lo speed is unknown, defaulting to 1000
[  412.438299][  T943] lo speed is unknown, defaulting to 1000
[  413.101120][  T975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12060'.
[  413.152109][  T977] tipc: Resetting bearer <eth:syzkaller0>
[  413.157469][  T977] A link change request failed with some changes committed already. Interface bond5 may have been left with an inconsistent configuration, please check.
[  413.244693][  T981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12063'.
[  413.309508][  T996] netlink: 'syz.2.12068': attribute type 1 has an invalid length.
[  413.323186][  T996] 8021q: adding VLAN 0 to HW filter on device bond19
[  413.336979][  T996] bond19: (slave bridge0): making interface the new active one
[  413.340639][  T996] bond19: (slave bridge0): Enslaving as an active interface with an up link
[  413.352110][  T996] bond19: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  414.427790][ T1026] bridge7: entered allmulticast mode
[  414.610279][ T1050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12085'.
[  414.849285][ T1096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.054342][ T1125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12108'.
[  415.353630][ T1163] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12126'.
[  416.333712][ T1187] netlink: 'syz.2.12137': attribute type 4 has an invalid length.
[  416.339210][ T1187] netlink: 'syz.2.12137': attribute type 4 has an invalid length.
[  416.369883][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12138'.
[  416.713308][ T1231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12157'.
[  416.779568][ T1237] lo speed is unknown, defaulting to 1000
[  416.782539][ T1237] lo speed is unknown, defaulting to 1000
[  417.127826][ T1268] netlink: 'syz.2.12174': attribute type 10 has an invalid length.
[  417.207166][ T1280] syzkaller1: entered promiscuous mode
[  417.208794][ T1280] syzkaller1: entered allmulticast mode
[  417.233821][ T1282] netlink: 'syz.0.12179': attribute type 66 has an invalid length.
[  418.876137][ T1329] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  418.880745][ T1329] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  418.883913][ T1329] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  418.888272][ T1329] tipc: Resetting bearer <eth:syzkaller0>
[  419.167619][ T1352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.273373][ T1365] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12213'.
[  419.466336][   T61] block nbd2: Possible stuck request ffff888022aaa800: control (read@0,4096B). Runtime 60 seconds
[  420.155118][ T1387] block nbd3: server does not support multiple connections per device.
[  420.159348][ T1387] block nbd3: shutting down sockets
[  420.187049][ T1389] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12225'.
[  420.194113][ T1389] batadv3: entered promiscuous mode
[  420.196462][ T1389] batadv3: entered allmulticast mode
[  420.337041][ T1398] netlink: 'syz.2.12228': attribute type 5 has an invalid length.
[  420.398010][ T1405] lo speed is unknown, defaulting to 1000
[  420.400687][ T1405] lo speed is unknown, defaulting to 1000
[  420.531196][ T1418] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12238'.
[  420.534786][ T1418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12238'.
[  420.539485][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12238'.
[  420.800885][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  420.803520][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  420.808461][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  420.811622][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  420.814348][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  420.854844][ T1436] lo speed is unknown, defaulting to 1000
[  420.857866][ T1436] lo speed is unknown, defaulting to 1000
[  420.992062][ T1436] chnl_net:caif_netlink_parms(): no params data found
[  421.027396][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.029834][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.032182][ T1436] bridge_slave_0: entered allmulticast mode
[  421.035821][ T1436] bridge_slave_0: entered promiscuous mode
[  421.039436][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.042233][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.045852][ T1436] bridge_slave_1: entered allmulticast mode
[  421.049073][ T1436] bridge_slave_1: entered promiscuous mode
[  421.068340][ T1436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.073842][ T1436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.092146][ T1436] team0: Port device team_slave_0 added
[  421.095587][ T1436] team0: Port device team_slave_1 added
[  421.112303][ T1436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.115609][ T1436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.125468][ T1436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  421.129614][ T1436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  421.131790][ T1436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.140733][ T1436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  421.155148][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  421.163886][ T1436] hsr_slave_0: entered promiscuous mode
[  421.167119][ T1436] hsr_slave_1: entered promiscuous mode
[  421.169700][ T1436] debugfs: 'hsr0' already exists in 'hsr'
[  421.172031][ T1436] Cannot create hsr debugfs directory
[  421.291945][ T1436] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  421.299684][ T1436] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  421.312144][ T1436] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  421.318257][ T1436] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  421.390815][ T1436] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.413283][ T1436] 8021q: adding VLAN 0 to HW filter on device team0
[  421.427207][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.430205][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.434805][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.437748][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.530017][ T1465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12251'.
[  421.533922][ T1465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12251'.
[  421.538335][ T1465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12251'.
[  421.541818][ T1465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12251'.
[  421.572211][ T1436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  421.599794][ T1436] veth0_vlan: entered promiscuous mode
[  421.607963][ T1436] veth1_vlan: entered promiscuous mode
[  421.629351][ T1436] veth0_macvtap: entered promiscuous mode
[  421.633863][ T1436] veth1_macvtap: entered promiscuous mode
[  421.644653][ T1436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.656550][ T1436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.664979][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.668477][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.672574][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.676782][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.734426][ T1844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.745671][ T1844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.768114][ T1844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.770994][ T1844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.022079][ T1490] syzkaller0: entered promiscuous mode
[  422.024137][ T1490] syzkaller0: entered allmulticast mode
[  422.030689][ T1492] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  422.110766][ T1494] netlink: 19 bytes leftover after parsing attributes in process `syz.2.12264'.
[  422.825264][ T5846] Bluetooth: hci3: command tx timeout
[  423.086555][ T1571] geneve4: entered promiscuous mode
[  423.090555][T14353] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  423.093848][T14353] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  423.099959][T14353] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  423.103278][T14353] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  423.160010][ T1582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  423.457948][ T1606] bridge_slave_0: default FDB implementation only supports local addresses
[  423.733588][ T1624] netlink: 'syz.2.12326': attribute type 39 has an invalid length.
[  424.599296][ T1689] __nla_validate_parse: 5 callbacks suppressed
[  424.599312][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12355'.
[  424.849281][ T1703] gretap1: entered allmulticast mode
[  424.907220][ T5846] Bluetooth: hci3: command tx timeout
[  425.059692][ T1724] netlink: 'syz.3.12370': attribute type 1 has an invalid length.
[  425.088313][ T1719] lo speed is unknown, defaulting to 1000
[  425.094303][ T1724] 8021q: adding VLAN 0 to HW filter on device bond1
[  425.099759][ T1719] lo speed is unknown, defaulting to 1000
[  425.123295][ T1724] veth3: entered promiscuous mode
[  425.128709][ T1724] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  425.383842][ T1747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12381'.
[  425.595277][ T1768] netem: change failed
[  425.960496][ T1805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12406'.
[  425.969241][ T1797] netlink: 'syz.3.12405': attribute type 1 has an invalid length.
[  425.972382][ T1797] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12405'.
[  426.307994][ T1831] netlink: 'syz.0.12420': attribute type 13 has an invalid length.
[  426.467394][ T1831] tipc: Resetting bearer <eth:syzkaller0>
[  426.626094][ T1831] ip6gretap0: left allmulticast mode
[  426.647711][ T9852] lo speed is unknown, defaulting to 1000
[  426.650089][ T9852] syz2: Port: 1 Link DOWN
[  426.656691][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.659901][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  426.678205][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.681497][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  426.684850][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.689444][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  426.692863][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  426.697855][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  426.721966][ T1835] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  426.996113][ T5846] Bluetooth: hci3: command tx timeout
[  427.044095][ T1858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12432'.
[  427.114394][ T1860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.150634][ T1862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12435'.
[  427.341310][ T1881] netlink: 'syz.2.12443': attribute type 1 has an invalid length.
[  427.344337][ T1881] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12443'.
[  427.372018][ T1881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12443'.
[  427.444266][ T1889] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.12448'.
[  427.450008][ T1889] netlink: zone id is out of range
[  427.452058][ T1889] netlink: zone id is out of range
[  427.453799][ T1889] netlink: zone id is out of range
[  427.458262][ T1889] netlink: get zone limit has 8 unknown bytes
[  427.598313][ T1907] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12455'.
[  427.970484][ T1929] Bluetooth: MGMT ver 1.23
[  428.191403][ T1940] netlink: 'syz.2.12469': attribute type 39 has an invalid length.
[  428.377077][ T1953] lo speed is unknown, defaulting to 1000
[  428.379983][ T1953] lo speed is unknown, defaulting to 1000
[  428.629230][ T1977] netlink: 'syz.0.12485': attribute type 8 has an invalid length.
[  428.970850][ T2019] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  428.973227][ T2019] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  429.077689][ T5846] Bluetooth: hci3: command tx timeout
[  429.167464][ T2045] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  429.203490][ T2045] bridge_slave_0: left allmulticast mode
[  429.214427][ T2045] bridge_slave_0: left promiscuous mode
[  429.218933][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.224346][ T2045] bridge_slave_1: left allmulticast mode
[  429.229817][ T2045] bridge_slave_1: left promiscuous mode
[  429.232939][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.248306][ T2045] bond0: (slave bond_slave_0): Releasing backup interface
[  429.259509][ T2045] bond0: (slave bond_slave_1): Releasing backup interface
[  429.275626][ T2045] team0: Port device team_slave_0 removed
[  429.281877][ T2045] team0: Port device team_slave_1 removed
[  429.284841][ T2045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  429.289051][ T2045] batman_adv: batadv0: Removing interface: batadv_slave_0
[  429.293083][ T2045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  429.296986][ T2045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.308828][ T2056] netlink: 'syz.3.12516': attribute type 10 has an invalid length.
[  429.313040][ T2045] bond1: (slave veth3): Releasing backup interface
[  429.327794][ T2056] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  429.339110][ T2056] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.352256][ T2056] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  429.372453][ T2045] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  429.381659][ T2045] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  429.648969][ T2091] __nla_validate_parse: 6 callbacks suppressed
[  429.648989][ T2091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12535'.
[  429.670185][ T2091] nbd: socks must be embedded in a SOCK_ITEM attr
[  430.528176][ T2121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12545'.
[  430.619320][ T2129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12549'.
[  430.622551][ T2129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12549'.
[  430.748063][ T2141] _Z`Ԁ@S: entered promiscuous mode
[  430.820040][ T2151] netlink: 'syz.0.12559': attribute type 4 has an invalid length.
[  431.145220][ T5846] Bluetooth: hci3: command tx timeout
[  431.266421][ T2207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  431.384034][ T2215] lo speed is unknown, defaulting to 1000
[  431.391639][ T2215] lo speed is unknown, defaulting to 1000
[  431.679232][ T2250] netlink: 'syz.3.12606': attribute type 15 has an invalid length.
[  432.130970][ T2298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12629'.
[  432.209961][ T2308] syzkaller1: entered promiscuous mode
[  432.212334][ T2308] syzkaller1: entered allmulticast mode
[  432.370530][ T2320] syzkaller0: entered promiscuous mode
[  432.372917][ T2320] syzkaller0: entered allmulticast mode
[  432.483948][ T2326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.575251][ T2332] rdma_op ffff8881089e09f0 conn xmit_rdma 0000000000000000
[  432.708596][ T2354] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12655'.
[  433.033799][ T2369] netlink: 'syz.3.12662': attribute type 1 has an invalid length.
[  433.037346][ T2369] netlink: 'syz.3.12662': attribute type 1 has an invalid length.
[  433.041092][ T2366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12661'.
[  433.044628][ T2366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12661'.
[  433.045342][ T2369] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12662'.
[  433.499273][ T2402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12675'.
[  433.612000][ T2417] lo speed is unknown, defaulting to 1000
[  433.617068][ T2417] lo speed is unknown, defaulting to 1000
[  434.574182][   T33] audit: type=1800 audit(1756508243.240:13): pid=2455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12693" name="memory.events" dev="tmpfs" ino=22111 res=0 errno=0
[  434.994075][ T2488] __nla_validate_parse: 1 callbacks suppressed
[  434.994096][ T2488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12705'.
[  435.035424][ T2491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12706'.
[  435.038881][ T2491] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12706'.
[  435.143588][ T2504] netlink: 'syz.2.12710': attribute type 7 has an invalid length.
[  435.270942][ T2530] netlink: 'syz.0.12719': attribute type 11 has an invalid length.
[  436.108761][ T2585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12740'.
[  436.111670][ T2585] nbd: socks must be embedded in a SOCK_ITEM attr
[  436.167874][ T2594] tipc: Started in network mode
[  436.170004][ T2594] tipc: Node identity f22714df9366, cluster identity 4711
[  436.172950][ T2594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.178621][ T2594] syzkaller0: entered promiscuous mode
[  436.180967][ T2594] syzkaller0: entered allmulticast mode
[  436.203605][ T2594] sch_fq: defrate 257 ignored.
[  436.207153][ T2594] tipc: Resetting bearer <eth:syzkaller0>
[  436.211156][ T2589] tipc: Resetting bearer <eth:syzkaller0>
[  436.216786][ T2589] tipc: Disabling bearer <eth:syzkaller0>
[  436.310050][ T2610] netlink: 'syz.3.12749': attribute type 9 has an invalid length.
[  436.312862][ T2610] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12749'.
[  436.406873][ T9852] hid-generic 0005:16C0:0009.0003: unknown main item tag 0x0
[  436.418984][ T9852] hid-generic 0005:16C0:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  436.469796][ T2637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12760'.
[  436.562880][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12766'.
[  436.571607][T32688] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.576795][T32688] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.577097][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12766'.
[  436.580049][T32688] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.586946][T32688] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.697994][ T2662] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12768'.
[  436.701626][ T2662] bridge_slave_0: entered allmulticast mode
[  436.988742][ T2679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12774'.
[  437.378318][ T2694] macvtap0: entered promiscuous mode
[  437.380354][ T2694] dummy0: entered promiscuous mode
[  437.382469][ T2694] macvtap0: entered allmulticast mode
[  437.384580][ T2694] dummy0: entered allmulticast mode
[  437.390195][ T2694] dummy0: left allmulticast mode
[  437.391963][ T2694] dummy0: left promiscuous mode
[  438.410252][ T2763] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  439.140005][ T2804] lo speed is unknown, defaulting to 1000
[  439.142759][ T2804] lo speed is unknown, defaulting to 1000
[  439.470446][ T2810] lo speed is unknown, defaulting to 1000
[  439.473222][ T2810] lo speed is unknown, defaulting to 1000
[  439.868271][ T2831] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  439.874523][ T2831] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  440.342815][ T2846] __nla_validate_parse: 4 callbacks suppressed
[  440.342841][ T2846] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12832'.
[  440.349857][ T2846] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12832'.
[  440.353572][ T2846] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12832'.
[  440.367873][ T2846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12832'.
[  440.566010][ T2857] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  440.672194][ T2869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.984562][ T2898] lo speed is unknown, defaulting to 1000
[  440.989771][ T2898] lo speed is unknown, defaulting to 1000
[  441.926079][ T2923] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  442.055757][ T2933] netlink: 'syz.0.12858': attribute type 13 has an invalid length.
[  442.289877][ T2945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.139132][ T2981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12879'.
[  443.244095][ T2985] netlink: 'syz.3.12881': attribute type 1 has an invalid length.
[  443.311305][ T2989] syzkaller0: entered promiscuous mode
[  443.313159][ T2989] syzkaller0: entered allmulticast mode
[  443.480686][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12890'.
[  443.529459][ T3009] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12892'.
[  443.617420][ T3017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.620652][ T3017] syzkaller0: entered promiscuous mode
[  443.622968][ T3017] syzkaller0: entered allmulticast mode
[  443.630880][ T3017] tipc: Resetting bearer <eth:syzkaller0>
[  443.634157][ T3015] tipc: Resetting bearer <eth:syzkaller0>
[  443.638430][ T3015] tipc: Disabling bearer <eth:syzkaller0>
[  444.244582][ T3087] netlink: 236 bytes leftover after parsing attributes in process `syz.0.12924'.
[  444.248460][ T3087] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12924'.
[  444.391648][ T3099] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.399208][ T3099] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  445.769866][ T3173] netlink: 'syz.3.12960': attribute type 1 has an invalid length.
[  445.772953][ T3173] netlink: 'syz.3.12960': attribute type 1 has an invalid length.
[  446.813222][ T3212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12970'.
[  446.939459][ T3220] geneve2: entered promiscuous mode
[  447.087942][T14353] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  447.155143][ T3236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12979'.
[  447.954474][ T3246] lo speed is unknown, defaulting to 1000
[  447.958119][ T3246] lo speed is unknown, defaulting to 1000
[  448.172981][ T3259] lo speed is unknown, defaulting to 1000
[  448.176270][ T3259] lo speed is unknown, defaulting to 1000
[  449.549325][   T61] block nbd2: Possible stuck request ffff888022aaa800: control (read@0,4096B). Runtime 90 seconds
[  449.637769][ T3287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12995'.
[  449.784891][ T5871] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  449.823303][ T3308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13002'.
[  449.826847][ T3308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13002'.
[  449.830326][ T3308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13002'.
[  449.834039][ T3308] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13002'.
[  449.876438][ T3310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13003'.
[  449.880567][ T3312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13004'.
[  450.334457][ T3343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13018'.
[  450.498521][ T3354] netlink: 'syz.3.13023': attribute type 9 has an invalid length.
[  450.501846][ T3354] netlink: 'syz.3.13023': attribute type 9 has an invalid length.
[  450.776634][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  450.779855][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  450.783402][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  450.788961][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  450.792951][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  450.824196][ T3364] lo speed is unknown, defaulting to 1000
[  450.828104][ T3364] lo speed is unknown, defaulting to 1000
[  451.098635][ T3364] chnl_net:caif_netlink_parms(): no params data found
[  451.191685][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.194699][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.199003][ T3364] bridge_slave_0: entered allmulticast mode
[  451.203736][ T3364] bridge_slave_0: entered promiscuous mode
[  451.212337][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.216582][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.219733][ T3364] bridge_slave_1: entered allmulticast mode
[  451.223744][ T3364] bridge_slave_1: entered promiscuous mode
[  451.260903][ T3364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.270246][ T3364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.323366][ T3364] team0: Port device team_slave_0 added
[  451.329114][ T3364] team0: Port device team_slave_1 added
[  451.353086][ T3364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.357498][ T3364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.374997][ T3364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.379742][ T3364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.383036][ T3364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.393015][ T3364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.440286][ T3364] hsr_slave_0: entered promiscuous mode
[  451.443257][ T3364] hsr_slave_1: entered promiscuous mode
[  451.446738][ T3364] debugfs: 'hsr0' already exists in 'hsr'
[  451.448946][ T3364] Cannot create hsr debugfs directory
[  451.566155][ T3364] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  451.574561][ T3364] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  451.582302][ T3364] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  451.591481][ T3364] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  451.641780][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.644595][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.647688][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.650427][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.714668][ T3364] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.728181][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.731486][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.741022][ T3364] 8021q: adding VLAN 0 to HW filter on device team0
[  451.749666][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.752481][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.764196][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.767206][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.848622][ T3417] __nla_validate_parse: 2 callbacks suppressed
[  451.848643][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13044'.
[  451.852824][ T3414] vlan0: entered promiscuous mode
[  451.856649][ T3414] dummy0: entered promiscuous mode
[  451.898515][ T3420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13045'.
[  451.902740][ T3420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13045'.
[  451.906250][ T3420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13045'.
[  451.931012][ T3420] bond0: (slave wlan1): Releasing backup interface
[  451.992104][ T3364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.077734][ T3434] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13050'.
[  452.136933][ T3364] veth0_vlan: entered promiscuous mode
[  452.148892][ T3364] veth1_vlan: entered promiscuous mode
[  452.169635][ T3364] veth0_macvtap: entered promiscuous mode
[  452.176266][ T3364] veth1_macvtap: entered promiscuous mode
[  452.186626][ T3364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.192398][ T3448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13055'.
[  452.196101][ T3364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.203325][T14353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.211102][T14353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.214178][T14353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.219618][T14353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.316440][ T2634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.319437][ T2634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.333726][ T2634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.344163][ T2634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.421344][ T3463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13060'.
[  452.511274][ T3473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13063'.
[  452.523085][ T3473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13063'.
[  452.825206][ T5236] Bluetooth: hci4: command tx timeout
[  453.021917][ T3509] IPv6: NLM_F_CREATE should be specified when creating new route
[  453.182650][ T3531] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.13089'.
[  454.132780][ T3559] netlink: 'syz.4.13100': attribute type 1 has an invalid length.
[  454.136287][ T3559] NCSI netlink: No device for ifindex 813332851
[  454.242204][ T3569] sctp: [Deprecated]: syz.3.13105 (pid 3569) Use of struct sctp_assoc_value in delayed_ack socket option.
[  454.242204][ T3569] Use struct sctp_sack_info instead
[  454.250435][ T3572] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  454.383867][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.387145][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.450177][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.460607][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.578896][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.582478][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.605342][T14353] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.608834][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  454.907361][ T5236] Bluetooth: hci4: command tx timeout
[  454.923265][ T3640] netlink: 'syz.3.13138': attribute type 10 has an invalid length.
[  454.932424][ T3640] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  455.048199][ T3658] gtp0: entered promiscuous mode
[  455.243978][ T3684] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  455.650153][ T3710] netlink: 'syz.0.13172': attribute type 3 has an invalid length.
[  455.968257][ T3722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  455.988850][T29137] udevd[29137]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory
[  455.992748][T29137] udevd[29137]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  456.500778][ T3764] 8021q: adding VLAN 0 to HW filter on device bond20
[  456.985443][ T5236] Bluetooth: hci4: command tx timeout
[  457.612691][ T3799] __nla_validate_parse: 13 callbacks suppressed
[  457.612704][ T3799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13213'.
[  457.621380][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13213'.
[  457.671068][ T3803] tipc: New replicast peer: 255.255.255.255
[  457.673672][ T3803] tipc: Enabled bearer <udp:syz2>, priority 26
[  458.178591][ T3822] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002
[  458.785189][ T9852] tipc: Node number set to 1631655135
[  459.065375][ T5236] Bluetooth: hci4: command tx timeout
[  459.074513][ T3839] tipc: Started in network mode
[  459.078176][ T3839] tipc: Node identity 0a59db3b1079, cluster identity 4711
[  459.081297][ T3839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.088198][ T3839] syzkaller0: entered promiscuous mode
[  459.090607][ T3839] syzkaller0: entered allmulticast mode
[  459.112295][ T3839] tipc: Resetting bearer <eth:syzkaller0>
[  459.118305][ T3838] tipc: Resetting bearer <eth:syzkaller0>
[  459.123389][ T3838] tipc: Disabling bearer <eth:syzkaller0>
[  459.291374][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13229'.
[  459.294345][ T3843] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  459.327512][ T3843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.412754][ T3849] lo speed is unknown, defaulting to 1000
[  459.428087][ T3849] lo speed is unknown, defaulting to 1000
[  459.458711][ T3852] netlink: 'syz.4.13232': attribute type 6 has an invalid length.
[  459.646858][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13239'.
[  459.656618][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13239'.
[  459.666224][ T3865] netlink: 'syz.0.13239': attribute type 13 has an invalid length.
[  459.672805][ T3865] netlink: 'syz.0.13239': attribute type 11 has an invalid length.
[  459.683133][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13240'.
[  459.737492][ T3872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13242'.
[  459.783503][ T3872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13242'.
[  459.948575][ T3887] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.13248'.
[  460.062084][ T3901] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13255'.
[  460.103560][ T3906] netlink: 'syz.0.13254': attribute type 9 has an invalid length.
[  460.118508][ T3906] netlink: 'syz.0.13254': attribute type 6 has an invalid length.
[  460.771864][   T24] IPVS: starting estimator thread 0...
[  460.855135][ T3916] IPVS: using max 92 ests per chain, 220800 per kthread
[  460.863123][ T3918] netlink: 'syz.3.13261': attribute type 4 has an invalid length.
[  460.872265][ T3918] dummy0: mtu less than device minimum
[  461.127997][ T3951] batadv1: entered promiscuous mode
[  461.635054][ T4013] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.560329][ T4096] netlink: 'syz.0.13343': attribute type 6 has an invalid length.
[  462.807818][ T5294] udevd[5294]: worker [28911] /devices/virtual/block/nbd2 is taking a long time
[  463.633866][ T4183] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  463.643973][ T4183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.675138][ T4183] tipc: Resetting bearer <eth:syzkaller0>
[  463.686536][ T4182] tipc: Resetting bearer <eth:syzkaller0>
[  463.693196][ T4182] tipc: Disabling bearer <eth:syzkaller0>
[  463.712251][ T4188] __nla_validate_parse: 6 callbacks suppressed
[  463.712274][ T4188] netlink: 244 bytes leftover after parsing attributes in process `syz.4.13380'.
[  463.794456][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13382'.
[  463.802464][ T4191] macvtap1: entered promiscuous mode
[  463.804349][ T4191] macvtap1: entered allmulticast mode
[  463.807497][ T4191] dummy0: entered allmulticast mode
[  465.001878][ T4295] netlink: 'syz.3.13418': attribute type 13 has an invalid length.
[  465.008425][ T4295] netlink: 'syz.3.13418': attribute type 17 has an invalid length.
[  465.107872][ T4295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  465.140813][ T4298] lo speed is unknown, defaulting to 1000
[  465.143815][ T4298] lo speed is unknown, defaulting to 1000
[  465.157988][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13418'.
[  465.460708][ T4315] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13429'.
[  465.494418][ T4317] netlink: 71 bytes leftover after parsing attributes in process `syz.0.13430'.
[  465.548389][ T4319] lo speed is unknown, defaulting to 1000
[  465.551663][ T4319] lo speed is unknown, defaulting to 1000
[  465.602609][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13433'.
[  465.758121][ T4339] siw: device registration error -23
[  465.836563][ T4349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.071841][ T4377] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  466.075387][ T4376] IPVS: stopping backup sync thread 4377 ...
[  466.107310][ T4382] sit0: entered promiscuous mode
[  466.109103][ T4382] netlink: 'syz.0.13458': attribute type 1 has an invalid length.
[  466.111878][ T4382] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13458'.
[  466.405737][ T5913] syzkaller0: tun_net_xmit 76
[  466.407919][ T5913] syzkaller0: tun_net_xmit 48
[  466.409397][ T4402] syzkaller0: create flow: hash 820038560 index 1
[  466.415740][ T4401] syzkaller0: delete flow: hash 820038560 index 1
[  466.560125][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13472'.
[  466.817889][ T4436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13485'.
[  466.973105][ T4455] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13494'.
[  467.151660][ T4476] erspan0: entered promiscuous mode
[  467.153972][ T4476] macvtap1: entered promiscuous mode
[  467.158290][ T4476] macvtap1: entered allmulticast mode
[  467.160824][ T4476] erspan0: entered allmulticast mode
[  467.427462][ T4514] netlink: 'syz.4.13516': attribute type 4 has an invalid length.
[  467.433386][ T4514] netlink: 'syz.4.13516': attribute type 4 has an invalid length.
[  467.544905][ T4516] bond0: entered allmulticast mode
[  467.547805][ T4516] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.128662][ T4555] delete_channel: no stack
[  468.169755][ T4561] ip6tnl1: entered promiscuous mode
[  468.171869][ T4561] ip6tnl1: entered allmulticast mode
[  468.468545][ T4606] lo speed is unknown, defaulting to 1000
[  468.471127][ T4606] lo speed is unknown, defaulting to 1000
[  468.858797][ T4639] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  468.864568][ T4639] CPU: 0 UID: 0 PID: 4639 Comm: syz.3.13568 Not tainted syzkaller #0 PREEMPT(full) 
[  468.864582][ T4639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  468.864591][ T4639] Call Trace:
[  468.864610][ T4639]  <TASK>
[  468.864616][ T4639]  dump_stack_lvl+0x189/0x250
[  468.864635][ T4639]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.864646][ T4639]  ? __pfx__printk+0x10/0x10
[  468.864657][ T4639]  ? kernfs_root+0x1c/0x230
[  468.864668][ T4639]  ? kernfs_path_from_node+0x2f/0x290
[  468.864677][ T4639]  ? kernfs_path_from_node+0x250/0x290
[  468.864685][ T4639]  ? kernfs_path_from_node+0x2f/0x290
[  468.864694][ T4639]  sysfs_warn_dup+0x8e/0xa0
[  468.864704][ T4639]  sysfs_do_create_link_sd+0xc0/0x110
[  468.864713][ T4639]  device_add_class_symlinks+0x1cf/0x240
[  468.864723][ T4639]  device_add+0x475/0xb50
[  468.864731][ T4639]  wiphy_register+0x1ba6/0x28d0
[  468.864750][ T4639]  ? __pfx_wiphy_register+0x10/0x10
[  468.864761][ T4639]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  468.864774][ T4639]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  468.864786][ T4639]  ieee80211_register_hw+0x3425/0x4080
[  468.864801][ T4639]  ? ieee80211_register_hw+0x1401/0x4080
[  468.864812][ T4639]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  468.864821][ T4639]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  468.864835][ T4639]  ? __hrtimer_setup+0x187/0x210
[  468.864843][ T4639]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  468.864856][ T4639]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  468.864873][ T4639]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  468.864883][ T4639]  ? trace_kmalloc+0x1f/0xd0
[  468.864894][ T4639]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  468.864905][ T4639]  ? kstrndup+0xbf/0x160
[  468.864961][ T4639]  hwsim_new_radio_nl+0xea4/0x1b10
[  468.864975][ T4639]  ? __pfx___nla_validate_parse+0x10/0x10
[  468.864994][ T4639]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  468.865007][ T4639]  ? __nla_parse+0x40/0x60
[  468.865019][ T4639]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  468.865033][ T4639]  genl_family_rcv_msg_doit+0x215/0x300
[  468.865044][ T4639]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  468.865056][ T4639]  ? bpf_lsm_capable+0x9/0x20
[  468.865069][ T4639]  ? security_capable+0x7e/0x2e0
[  468.865083][ T4639]  genl_rcv_msg+0x60e/0x790
[  468.865093][ T4639]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.865101][ T4639]  ? __kasan_slab_alloc+0x6c/0x80
[  468.865112][ T4639]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  468.865121][ T4639]  ? __netlink_lookup+0xbd/0x810
[  468.865128][ T4639]  ? rcu_is_watching+0x15/0xb0
[  468.865138][ T4639]  netlink_rcv_skb+0x208/0x470
[  468.865150][ T4639]  ? __pfx_genl_rcv_msg+0x10/0x10
[  468.865158][ T4639]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.865172][ T4639]  ? lock_release+0x4b/0x3e0
[  468.865184][ T4639]  ? down_read+0x1ad/0x2e0
[  468.865192][ T4639]  genl_rcv+0x28/0x40
[  468.865200][ T4639]  netlink_unicast+0x82f/0x9e0
[  468.865212][ T4639]  ? __pfx_netlink_unicast+0x10/0x10
[  468.865223][ T4639]  ? netlink_sendmsg+0x642/0xb30
[  468.865229][ T4639]  ? skb_put+0x11b/0x210
[  468.865238][ T4639]  netlink_sendmsg+0x805/0xb30
[  468.865246][ T4639]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.865254][ T4639]  ? futex_unqueue+0x22/0x240
[  468.865262][ T4639]  ? aa_sock_msg_perm+0xf1/0x1d0
[  468.865277][ T4639]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  468.865286][ T4639]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.865294][ T4639]  __sock_sendmsg+0x21c/0x270
[  468.865307][ T4639]  ____sys_sendmsg+0x505/0x830
[  468.865317][ T4639]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.865327][ T4639]  ? import_iovec+0x74/0xa0
[  468.865337][ T4639]  ___sys_sendmsg+0x21f/0x2a0
[  468.865345][ T4639]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.865355][ T4639]  ? futex_wait+0x285/0x360
[  468.865371][ T4639]  ? __fget_files+0x2a/0x420
[  468.865378][ T4639]  ? __fget_files+0x3a0/0x420
[  468.865386][ T4639]  __x64_sys_sendmsg+0x19b/0x260
[  468.865395][ T4639]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.865405][ T4639]  ? rcu_is_watching+0x15/0xb0
[  468.865413][ T4639]  ? rcu_is_watching+0x15/0xb0
[  468.865421][ T4639]  do_syscall_64+0xfa/0x3b0
[  468.865429][ T4639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.865438][ T4639]  ? exc_page_fault+0x9f/0xf0
[  468.865450][ T4639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.865459][ T4639] RIP: 0033:0x7f6c0758ebe9
[  468.865469][ T4639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.865476][ T4639] RSP: 002b:00007f6c084cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.865486][ T4639] RAX: ffffffffffffffda RBX: 00007f6c077c5fa0 RCX: 00007f6c0758ebe9
[  468.865493][ T4639] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  468.865498][ T4639] RBP: 00007f6c07611e19 R08: 0000000000000000 R09: 0000000000000000
[  468.865503][ T4639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.865508][ T4639] R13: 00007f6c077c6038 R14: 00007f6c077c5fa0 R15: 00007ffd8e4171a8
[  468.865519][ T4639]  </TASK>
[  469.081717][ T4643] __nla_validate_parse: 6 callbacks suppressed
[  469.081738][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13570'.
[  469.091179][ T4645] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  469.121741][ T4648] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  469.489154][ T4689] netlink: 'syz.3.13592': attribute type 1 has an invalid length.
[  469.524227][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13593'.
[  469.837124][ T4718] netlink: 26 bytes leftover after parsing attributes in process `syz.3.13604'.
[  470.106286][ T4750] tap0: tun_chr_ioctl cmd 1074025677
[  470.108240][ T4750] tap0: linktype set to 800
[  470.518238][ T4795] lo speed is unknown, defaulting to 1000
[  470.521341][ T4795] lo speed is unknown, defaulting to 1000
[  470.819276][ T4824] netlink: 'syz.4.13653': attribute type 21 has an invalid length.
[  471.334490][ T4866] lo speed is unknown, defaulting to 1000
[  471.339398][ T4868] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13672'.
[  471.344446][ T4866] lo speed is unknown, defaulting to 1000
[  471.509448][ T4879] bridge_slave_0: default FDB implementation only supports local addresses
[  471.558768][ T4886] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  471.599813][ T4866] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  471.672887][ T4886] sctp: [Deprecated]: syz.4.13679 (pid 4886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  471.672887][ T4886] Use struct sctp_sack_info instead
[  471.688210][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13679'.
[  471.985865][ T4931] syzkaller1: entered promiscuous mode
[  471.988130][ T4931] syzkaller1: entered allmulticast mode
[  472.035948][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13700'.
[  472.179165][ T4951] netlink: 'syz.0.13708': attribute type 1 has an invalid length.
[  472.253459][ T4951] 8021q: adding VLAN 0 to HW filter on device bond21
[  472.264287][ T4956] 8021q: adding VLAN 0 to HW filter on device bond21
[  472.270874][ T4956] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  472.279059][ T4956] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  472.311918][ T4951] veth21: entered promiscuous mode
[  472.318655][ T4951] bond21: (slave veth21): Enslaving as an active interface with a down link
[  472.330706][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.333385][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.434359][ T4968] netlink: 704 bytes leftover after parsing attributes in process `syz.0.13715'.
[  473.209428][   T33] audit: type=1804 audit(1756508281.890:14): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13722" name="memory.events" dev="tmpfs" ino=895 res=1 errno=0
[  473.223617][   T33] audit: type=1800 audit(1756508281.890:15): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13722" name="memory.events" dev="tmpfs" ino=895 res=0 errno=0
[  473.509034][ T5011] netlink: 'syz.4.13732': attribute type 1 has an invalid length.
[  473.534641][ T5011] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.554294][ T5011] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.557680][ T5011] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  473.562879][ T5011] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  473.573335][ T5012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.577170][ T5012] syzkaller0: entered promiscuous mode
[  473.580447][ T5012] syzkaller0: entered allmulticast mode
[  473.587750][ T5012] tipc: Resetting bearer <eth:syzkaller0>
[  473.590520][ T5010] tipc: Resetting bearer <eth:syzkaller0>
[  473.598884][ T5010] tipc: Disabling bearer <eth:syzkaller0>
[  473.603892][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  473.608626][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  473.805633][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13743'.
[  473.813612][ T5034] syz_tun (unregistering): left promiscuous mode
[  473.971346][ T5061] netlink: 'syz.0.13757': attribute type 1 has an invalid length.
[  473.974179][ T5061] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13757'.
[  474.742284][ T5162] netlink: 'syz.4.13804': attribute type 1 has an invalid length.
[  474.745947][ T5162] netlink: 'syz.4.13804': attribute type 2 has an invalid length.
[  474.860590][ T5172] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13808'.
[  475.302141][ T5208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.621088][ T5234] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13833'.
[  475.626939][ T5236] Bluetooth: hci4: command 0x0405 tx timeout
[  475.951515][ T5262] dvmrp8: entered allmulticast mode
[  475.969806][ T5262] lo speed is unknown, defaulting to 1000
[  475.973166][ T5262] lo speed is unknown, defaulting to 1000
[  476.140985][ T5261] dvmrp8: left allmulticast mode
[  476.270477][ T5292] tipc: Resetting bearer <eth:syzkaller0>
[  476.284550][ T5292] tipc: Resetting bearer <eth:syzkaller0>
[  476.298405][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13858'.
[  476.302371][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13858'.
[  476.315957][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13858'.
[  476.321091][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13858'.
[  476.328638][ T5292] tipc: Resetting bearer <eth:syzkaller0>
[  476.565889][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13868'.
[  476.596569][ T5331] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  476.616384][ T5334] netlink: 'syz.3.13869': attribute type 1 has an invalid length.
[  476.619518][ T5334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13869'.
[  476.654332][ T5339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.076490][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13885'.
[  477.099382][ T5392] tc_dump_action: action bad kind
[  477.689417][ T5437] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  477.813550][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13915'.
[  478.056173][ T5481] netlink: 'syz.0.13929': attribute type 10 has an invalid length.
[  478.089352][ T5485] netlink: 'syz.3.13930': attribute type 13 has an invalid length.
[  478.121235][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  478.124909][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  478.145561][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  478.155591][ T5913] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  478.190568][ T5502] netlink: 'syz.4.13936': attribute type 3 has an invalid length.
[  478.503203][ T5540] netlink: 'syz.4.13955': attribute type 1 has an invalid length.
[  479.639657][   T61] block nbd2: Possible stuck request ffff888022aaa800: control (read@0,4096B). Runtime 120 seconds
[  480.143398][ T5611] erspan0: left allmulticast mode
[  480.153893][   T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.157475][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.165320][   T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.168584][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.171560][   T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.174299][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.195970][   T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.210323][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.242478][ T5624] __nla_validate_parse: 3 callbacks suppressed
[  480.242491][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13990'.
[  480.254860][ T5870] IPVS: starting estimator thread 0...
[  480.345139][ T5626] IPVS: using max 92 ests per chain, 220800 per kthread
[  481.079690][ T5689] netlink: 'syz.3.14011': attribute type 10 has an invalid length.
[  481.082798][ T5689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14011'.
[  481.089210][ T5689] team0: Port device geneve0 added
[  481.092397][ T5913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.097957][ T5913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.101401][ T5913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.104521][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.414804][ T5703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14017'.
[  481.446330][ T5705] netlink: 104 bytes leftover after parsing attributes in process `syz.4.14018'.
[  482.923493][ T5752] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  482.928777][ T5752] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  483.281111][ T5780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14043'.
[  483.309790][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14043'.
[  483.480284][ T5805] sch_fq: defrate 0 ignored.
[  483.796932][ T5864] netlink: 'syz.4.14075': attribute type 10 has an invalid length.
[  483.800484][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.807796][ T5864] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  483.883141][ T5876] netlink: 96 bytes leftover after parsing attributes in process `syz.4.14077'.
[  483.889956][ T5876] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14077'.
[  483.954567][ T5886] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14079'.
[  485.130184][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14105'.
[  485.959525][ T5966] __nla_validate_parse: 1 callbacks suppressed
[  485.959542][ T5966] netlink: 9 bytes leftover after parsing attributes in process `syz.4.14109'.
[  485.966611][ T5966] 0: renamed from hsr0
[  485.970969][ T5966] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  485.976134][ T5966] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  485.980487][ T5966] 0: entered allmulticast mode
[  485.982686][ T5966] hsr_slave_0: entered allmulticast mode
[  485.986391][ T5966] hsr_slave_1: entered allmulticast mode
[  485.989608][ T5966] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  486.100845][ T5974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.284142][ T5986] tipc: Failed to remove unknown binding: 66,1,1/0:1182470492/1182470494
[  486.292293][ T5986] tipc: Failed to remove unknown binding: 66,1,1/0:1182470492/1182470494
[  486.311013][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14121'.
[  486.423301][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14126'.
[  486.491297][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14129'.
[  486.599198][ T6024] lo speed is unknown, defaulting to 1000
[  486.601424][ T6024] lo speed is unknown, defaulting to 1000
[  487.454574][ T6041] IPVS: Error connecting to the multicast addr
[  487.519788][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14144'.
[  487.523478][ T6045] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  487.671834][ T6058] lo speed is unknown, defaulting to 1000
[  487.674262][ T6058] lo speed is unknown, defaulting to 1000
[  487.800640][ T6068] netlink: 596 bytes leftover after parsing attributes in process `syz.4.14154'.
[  488.352828][ T6089] lo speed is unknown, defaulting to 1000
[  488.355691][ T6089] lo speed is unknown, defaulting to 1000
[  488.724438][ T6104] netlink: 452 bytes leftover after parsing attributes in process `syz.3.14169'.
[  489.221412][ T6143] netlink: 'syz.4.14187': attribute type 1 has an invalid length.
[  489.224437][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14187'.
[  489.738824][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14207'.
[  489.741602][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14207'.
[  489.749127][ T6187] gretap0: entered promiscuous mode
[  489.751775][ T6187] gretap0: left promiscuous mode
[  490.427603][ T6224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.898188][ T6261] syzkaller1: entered promiscuous mode
[  490.900459][ T6261] syzkaller1: entered allmulticast mode
[  490.991377][ T6263] netlink: 'syz.4.14243': attribute type 1 has an invalid length.
[  491.006044][ T6263] 8021q: adding VLAN 0 to HW filter on device bond2
[  491.014182][ T6263] bond2: (slave dummy0): making interface the new active one
[  491.018907][ T6263] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  491.126193][ T6272] __nla_validate_parse: 1 callbacks suppressed
[  491.126210][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14247'.
[  491.376267][ T6290] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14256'.
[  491.379124][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14256'.
[  491.382039][ T6290] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14256'.
[  491.384788][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14256'.
[  491.388133][ T6290] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14256'.
[  491.423017][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14257'.
[  491.542786][ T6300] netlink: 'syz.4.14261': attribute type 1 has an invalid length.
[  492.081201][ T6352] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  492.539075][ T6371] netlink: 'syz.3.14294': attribute type 1 has an invalid length.
[  493.655402][ T6416] block nbd3: server does not support multiple connections per device.
[  493.658366][ T6416] block nbd3: shutting down sockets
[  493.771574][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14319'.
[  493.831521][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14321'.
[  493.957613][ T6442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14327'.
[  493.987096][ T6446] tipc: Invalid UDP bearer configuration
[  493.987135][ T6446] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  494.322173][ T6459] lo speed is unknown, defaulting to 1000
[  494.325241][ T6459] lo speed is unknown, defaulting to 1000
[  495.113344][ T6470] pim6reg: entered allmulticast mode
[  495.589928][ T6505] netlink: 'syz.4.14354': attribute type 1 has an invalid length.
[  495.612339][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  495.616233][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  495.620173][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  495.623570][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  495.627838][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  495.651755][ T6507] lo speed is unknown, defaulting to 1000
[  495.654726][ T6507] lo speed is unknown, defaulting to 1000
[  495.709481][ T6513] netlink: 'syz.3.14356': attribute type 10 has an invalid length.
[  495.721292][ T6513] team0: Port device dummy0 added
[  495.728377][ T6513] netlink: 'syz.3.14356': attribute type 10 has an invalid length.
[  495.766529][ T6513] team0: Port device dummy0 removed
[  495.772411][ T6513] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  495.819410][ T6507] chnl_net:caif_netlink_parms(): no params data found
[  495.866874][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.869806][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.872721][ T6507] bridge_slave_0: entered allmulticast mode
[  495.885933][ T6507] bridge_slave_0: entered promiscuous mode
[  495.888955][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.891489][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.893940][ T6507] bridge_slave_1: entered allmulticast mode
[  495.897415][ T6507] bridge_slave_1: entered promiscuous mode
[  495.921710][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.927029][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.942167][ T6507] team0: Port device team_slave_0 added
[  495.945872][ T6507] team0: Port device team_slave_1 added
[  495.963659][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  495.966578][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.976084][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  495.980338][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  495.982754][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.991699][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.016855][ T6507] hsr_slave_0: entered promiscuous mode
[  496.019764][ T6507] hsr_slave_1: entered promiscuous mode
[  496.022457][ T6507] debugfs: 'hsr0' already exists in 'hsr'
[  496.024784][ T6507] Cannot create hsr debugfs directory
[  496.124262][ T6507] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  496.132909][ T6507] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  496.145875][ T6507] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  496.152958][ T6507] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  496.169679][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.172266][ T6507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.175419][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.178331][ T6507] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.220791][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.231053][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.234646][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.245068][ T6507] 8021q: adding VLAN 0 to HW filter on device team0
[  496.252005][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.254849][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.262167][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.265215][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.266986][ T6541] netlink: 'syz.4.14364': attribute type 1 has an invalid length.
[  496.280508][ T6541] __nla_validate_parse: 1 callbacks suppressed
[  496.280523][ T6541] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14364'.
[  496.442779][ T6551] netlink: 'syz.4.14367': attribute type 1 has an invalid length.
[  496.457735][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.487186][ T6555] netlink: 'syz.4.14368': attribute type 30 has an invalid length.
[  496.592473][ T6507] veth0_vlan: entered promiscuous mode
[  496.599806][ T6507] veth1_vlan: entered promiscuous mode
[  496.617764][ T6507] veth0_macvtap: entered promiscuous mode
[  496.622062][ T6507] veth1_macvtap: entered promiscuous mode
[  496.630976][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.638639][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.645415][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.652973][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.657967][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.663134][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.668462][ T6576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.673085][ T6576] syzkaller0: entered promiscuous mode
[  496.681527][ T6576] syzkaller0: entered allmulticast mode
[  496.696709][ T6576] tipc: Resetting bearer <eth:syzkaller0>
[  496.719281][ T6575] tipc: Resetting bearer <eth:syzkaller0>
[  496.728517][ T6575] tipc: Disabling bearer <eth:syzkaller0>
[  496.754821][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.760332][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.784378][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.788983][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.123601][ T6601] tipc: Started in network mode
[  497.125547][ T6601] tipc: Node identity 5edd73f52c69, cluster identity 4711
[  497.127838][ T6601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  497.131775][ T6601] syzkaller0: entered promiscuous mode
[  497.133610][ T6601] syzkaller0: entered allmulticast mode
[  497.143145][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[  497.147388][ T6599] tipc: Resetting bearer <eth:syzkaller0>
[  497.152392][ T6599] tipc: Disabling bearer <eth:syzkaller0>
[  497.470482][ T6631] netlink: 176 bytes leftover after parsing attributes in process `syz.3.14398'.
[  497.705230][ T5236] Bluetooth: hci5: command tx timeout
[  498.270516][ T6641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14405'.
[  498.436276][ T6649] netlink: 'syz.4.14408': attribute type 21 has an invalid length.
[  498.567007][ T6666] netlink: 'syz.3.14416': attribute type 17 has an invalid length.
[  498.577541][ T6666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  498.672771][ T6680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14423'.
[  498.903628][ T6701] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14434'.
[  499.202482][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14449'.
[  499.409944][ T6747] netlink: 'syz.3.14454': attribute type 1 has an invalid length.
[  499.413451][ T6747] netlink: 'syz.3.14454': attribute type 6 has an invalid length.
[  499.766989][ T6769] lo speed is unknown, defaulting to 1000
[  499.770019][ T6769] lo speed is unknown, defaulting to 1000
[  499.785610][ T5236] Bluetooth: hci5: command tx timeout
[  500.850197][ T6809] lo speed is unknown, defaulting to 1000
[  500.853276][ T6809] lo speed is unknown, defaulting to 1000
[  501.090912][ T6827] lo speed is unknown, defaulting to 1000
[  501.094017][ T6827] lo speed is unknown, defaulting to 1000
[  501.282181][ T6842] bridge: RTM_NEWNEIGH with invalid ether address
[  501.407989][ T6848] lo speed is unknown, defaulting to 1000
[  501.411273][ T6848] lo speed is unknown, defaulting to 1000
[  501.500678][ T6855] geneve2: entered promiscuous mode
[  501.508879][ T6855] geneve2: entered allmulticast mode
[  501.865552][ T5236] Bluetooth: hci5: command tx timeout
[  501.875877][ T6869] macvtap1: entered allmulticast mode
[  501.878088][ T6869] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode
[  501.881901][ T6869] batman_adv: batadv0: Adding interface: macvtap1
[  501.884555][ T6869] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.905832][ T6869] batman_adv: batadv0: Interface activated: macvtap1
[  501.939223][ T6875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  501.941604][ T6875] syzkaller0: entered promiscuous mode
[  501.943436][ T6875] syzkaller0: entered allmulticast mode
[  501.952783][ T6875] tipc: Resetting bearer <eth:syzkaller0>
[  501.954712][ T6875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.959663][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[  501.966713][ T6874] tipc: Disabling bearer <eth:syzkaller0>
[  502.209135][ T6886] validate_nla: 1 callbacks suppressed
[  502.209147][ T6886] netlink: 'syz.3.14511': attribute type 1 has an invalid length.
[  502.215096][ T6886] netlink: 'syz.3.14511': attribute type 1 has an invalid length.
[  502.217681][ T6886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14511'.
[  502.279521][ T6910] netlink: 92 bytes leftover after parsing attributes in process `syz.3.14522'.
[  502.318391][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14524'.
[  502.393420][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14532'.
[  502.400280][ T6930] bridge0: entered promiscuous mode
[  502.403869][ T6930] bridge0: port 3(macvlan2) entered blocking state
[  502.406867][ T6930] bridge0: port 3(macvlan2) entered disabled state
[  502.410438][ T6930] macvlan2: entered allmulticast mode
[  502.413199][ T6930] bridge0: entered allmulticast mode
[  502.419480][ T6930] macvlan2: left allmulticast mode
[  502.422044][ T6930] bridge0: left allmulticast mode
[  502.424778][ T6930] bridge0: left promiscuous mode
[  502.783157][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14549'.
[  502.823017][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14553'.
[  503.428904][ T7018] lo speed is unknown, defaulting to 1000
[  503.432997][ T7018] lo speed is unknown, defaulting to 1000
[  503.838536][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14575'.
[  503.841835][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14575'.
[  503.845851][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14575'.
[  503.945985][ T5236] Bluetooth: hci5: command tx timeout
[  504.022110][ T7047] netlink: 'syz.3.14583': attribute type 1 has an invalid length.
[  504.269410][ T7078] netlink: 'syz.3.14599': attribute type 3 has an invalid length.
[  504.272424][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14599'.
[  504.431772][ T7103] netlink: 'syz.4.14607': attribute type 1 has an invalid length.
[  504.439647][ T7103] netlink: 'syz.4.14607': attribute type 2 has an invalid length.
[  504.442787][ T7103] netlink: 'syz.4.14607': attribute type 1 has an invalid length.
[  505.514379][ T7179] lo speed is unknown, defaulting to 1000
[  505.518499][ T7179] lo speed is unknown, defaulting to 1000
[  505.639733][ T7194] netlink: 'syz.4.14649': attribute type 1 has an invalid length.
[  505.680578][ T7194] bond4: (slave gretap1): making interface the new active one
[  505.683807][ T7194] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  505.698992][ T7194] vlan2: entered allmulticast mode
[  505.700917][ T7194] bond4: entered allmulticast mode
[  505.702827][ T7194] gretap1: entered allmulticast mode
[  505.706801][ T7194] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  505.732451][ T7199] lo speed is unknown, defaulting to 1000
[  505.737692][ T7199] lo speed is unknown, defaulting to 1000
[  506.283530][ T7232] batadv_slave_1: entered promiscuous mode
[  506.300402][ T7231] batadv_slave_1: left promiscuous mode
[  506.328424][ T7236] netlink: 'syz.3.14666': attribute type 1 has an invalid length.
[  506.344787][ T7234] bridge_slave_1: left allmulticast mode
[  506.348844][ T7234] bridge_slave_1: left promiscuous mode
[  506.350816][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.354246][ T7234] bridge_slave_0: left allmulticast mode
[  506.356702][ T7234] bridge_slave_0: left promiscuous mode
[  506.358999][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.488868][ T7236] bond2: (slave gretap2): making interface the new active one
[  506.492855][ T7236] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  506.502859][ T7239] bond2: (slave gretap3): Enslaving as an active interface with an up link
[  507.027049][ T7297] netlink: 'syz.4.14694': attribute type 2 has an invalid length.
[  507.577746][ T7347] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  507.651825][ T7355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.660637][ T7357] bridge0: entered promiscuous mode
[  507.662988][ T7357] bridge0: entered allmulticast mode
[  507.702387][ T7363] __nla_validate_parse: 13 callbacks suppressed
[  507.702401][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14719'.
[  507.708770][ T7363] netlink: 120 bytes leftover after parsing attributes in process `syz.4.14719'.
[  507.712640][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14719'.
[  507.741647][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14720'.
[  507.809357][ T7371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.812517][ T7371] syzkaller0: entered promiscuous mode
[  507.814661][ T7371] syzkaller0: entered allmulticast mode
[  507.825351][ T7371] tipc: Resetting bearer <eth:syzkaller0>
[  507.829479][ T7370] tipc: Resetting bearer <eth:syzkaller0>
[  507.835617][ T7370] tipc: Disabling bearer <eth:syzkaller0>
[  507.937641][ T7385] openvswitch: netlink: Multiple metadata blocks provided
[  508.053767][ T7401] nbd: socks must be embedded in a SOCK_ITEM attr
[  508.118405][ T7407] netlink: 48 bytes leftover after parsing attributes in process `syz.5.14741'.
[  508.214092][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14746'.
[  508.217501][ T7416] lo speed is unknown, defaulting to 1000
[  508.222997][ T7416] lo speed is unknown, defaulting to 1000
[  508.258504][ T7421] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  508.896475][ T7448] bridge5: entered allmulticast mode
[  508.924513][ T7449] macvlan2: entered allmulticast mode
[  508.926495][ T7449] veth1_vlan: entered allmulticast mode
[  508.929444][ T7449] veth1_vlan: left allmulticast mode
[  509.157572][ T7461] batman_adv: batadv0: Interface deactivated: macvtap1
[  509.164107][ T7461] mac80211_hwsim hwsim45 wlan0: left allmulticast mode
[  509.185764][ T5913] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.188639][ T5913] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.191415][ T5913] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.202891][ T5913] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.327821][ T7483] v: renamed from ip6_vti0 (while UP)
[  509.705898][   T61] block nbd2: Possible stuck request ffff888022aaa800: control (read@0,4096B). Runtime 150 seconds
[  509.722069][ T7502] netlink: 'syz.3.14784': attribute type 3 has an invalid length.
[  509.867789][ T7504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  509.871374][T32688] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  509.933431][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14785'.
[  510.502426][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14792'.
[  510.564444][ T7527] sctp: [Deprecated]: syz.4.14793 (pid 7527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  510.564444][ T7527] Use struct sctp_sack_info instead
[  510.724066][ T7537] syzkaller0: entered promiscuous mode
[  510.726327][ T7537] syzkaller0: entered allmulticast mode
[  511.463082][ T7585] lo speed is unknown, defaulting to 1000
[  511.467634][ T7585] lo speed is unknown, defaulting to 1000
[  512.440267][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14836'.
[  512.548257][ T7664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14843'.
[  513.633716][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14865'.
[  513.710888][ T7714] geneve4: entered promiscuous mode
[  513.724089][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  513.735802][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  513.739381][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  513.742801][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  513.882324][ T5846] Bluetooth: hci5: command 0x0405 tx timeout
[  514.038643][ T7763] sctp: [Deprecated]: syz.3.14888 (pid 7763) Use of int in maxseg socket option.
[  514.038643][ T7763] Use struct sctp_assoc_value instead
[  514.083848][ T7771] bridge_slave_0: default FDB implementation only supports local addresses
[  514.161642][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14892'.
[  514.374417][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14905'.
[  514.390360][ T7808] lo speed is unknown, defaulting to 1000
[  514.393057][ T7808] lo speed is unknown, defaulting to 1000
[  514.463149][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14911'.
[  514.662611][ T7844] netlink: 'syz.3.14923': attribute type 1 has an invalid length.
[  514.881723][ T7864] lo speed is unknown, defaulting to 1000
[  514.884389][ T7864] lo speed is unknown, defaulting to 1000
[  515.087819][ T7883] lo speed is unknown, defaulting to 1000
[  515.098730][ T7883] lo speed is unknown, defaulting to 1000
[  515.152692][ T7891] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.157907][ T7891] 8021q: adding VLAN 0 to HW filter on device team0
[  515.176857][ T7891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  515.181969][ T7894] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  515.197319][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  515.206570][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  515.210144][   T12] bond0: now running without any active interface!
[  515.244829][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14948'.
[  515.296649][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14948'.
[  515.946054][   T55] Bluetooth: hci5: command 0x0405 tx timeout
[  516.919459][ T8001] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  517.277721][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15008'.
[  517.313093][ T8044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.314325][ T8045] netlink: 'syz.4.15011': attribute type 64 has an invalid length.
[  517.412866][ T8058] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15018'.
[  517.418290][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15018'.
[  517.673925][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15033'.
[  517.743577][ T8091] lo speed is unknown, defaulting to 1000
[  517.748330][ T8091] lo speed is unknown, defaulting to 1000
[  518.068532][ T8128] netlink: zone id is out of range
[  518.071534][ T8128] netlink: zone id is out of range
[  518.074214][ T8128] netlink: zone id is out of range
[  518.081010][ T8128] netlink: zone id is out of range
[  518.085144][ T8128] netlink: zone id is out of range
[  518.087327][ T8128] netlink: zone id is out of range
[  518.089474][ T8128] netlink: zone id is out of range
[  518.367085][ T8154] netlink: 'syz.4.15063': attribute type 3 has an invalid length.
[  518.652333][ T8186] netlink: 'syz.5.15075': attribute type 2 has an invalid length.
[  518.657920][ T8186] : entered promiscuous mode
[  520.011689][ T8231] lo speed is unknown, defaulting to 1000
[  520.022023][ T8231] lo speed is unknown, defaulting to 1000
[  520.345437][ T8246] __nla_validate_parse: 6 callbacks suppressed
[  520.345454][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15099'.
[  520.351654][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15099'.
[  520.588872][ T8265] !: renamed from dummy0 (while UP)
[  520.789617][ T8287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.802988][ T8287] syzkaller0: entered promiscuous mode
[  520.804812][ T8287] syzkaller0: entered allmulticast mode
[  520.818576][ T8287] tipc: Resetting bearer <eth:syzkaller0>
[  520.822247][ T8284] tipc: Resetting bearer <eth:syzkaller0>
[  520.828691][ T8284] tipc: Disabling bearer <eth:syzkaller0>
[  521.119646][ T8301] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.15124'.
[  521.918382][ T8337] lo speed is unknown, defaulting to 1000
[  521.921429][ T8337] lo speed is unknown, defaulting to 1000
[  522.996826][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15164'.
[  523.074814][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15168'.
[  523.170504][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15172'.
[  523.364360][ T8425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.369530][ T8425] syzkaller0: entered promiscuous mode
[  523.372037][ T8425] syzkaller0: entered allmulticast mode
[  523.380918][ T8425] tipc: Resetting bearer <eth:syzkaller0>
[  523.386590][ T8424] tipc: Resetting bearer <eth:syzkaller0>
[  523.392209][ T8424] tipc: Disabling bearer <eth:syzkaller0>
[  523.639284][ T8455] net_ratelimit: 31 callbacks suppressed
[  523.639298][ T8455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.680555][ T8461] netlink: 'syz.4.15194': attribute type 10 has an invalid length.
[  523.683299][ T8461] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15194'.
[  523.687522][ T8461] team0: entered promiscuous mode
[  523.689426][ T8461] team_slave_0: entered promiscuous mode
[  523.691379][ T8461] team_slave_1: entered promiscuous mode
[  523.807662][ T8451] netlink: 'syz.3.15188': attribute type 1 has an invalid length.
[  523.816108][ T8451] netlink: 'syz.3.15188': attribute type 1 has an invalid length.
[  523.818521][ T8451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15188'.
[  523.883115][ T8476] lo speed is unknown, defaulting to 1000
[  523.886696][ T8476] lo speed is unknown, defaulting to 1000
[  523.929249][ T8480] netlink: 'syz.3.15201': attribute type 13 has an invalid length.
[  523.932529][ T8480] netlink: 'syz.3.15201': attribute type 17 has an invalid length.
[  523.941900][ T8480] erspan0: left promiscuous mode
[  523.953255][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.958939][ T8480] 8021q: adding VLAN 0 to HW filter on device team0
[  523.962790][ T8480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  524.160693][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15209'.
[  524.334371][ T8507] netlink: 'syz.3.15214': attribute type 7 has an invalid length.
[  524.390827][ T8513] netlink: 'syz.3.15217': attribute type 21 has an invalid length.
[  524.393465][ T8513] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15217'.
[  524.572096][ T8536] syzkaller1: entered promiscuous mode
[  524.574408][ T8536] syzkaller1: entered allmulticast mode
[  524.664110][ T8550] netlink: 'syz.4.15235': attribute type 2 has an invalid length.
[  524.833650][ T8568] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  524.906247][ T8581] netlink: 'syz.3.15250': attribute type 29 has an invalid length.
[  525.286347][ T8621] netlink: 'syz.5.15268': attribute type 9 has an invalid length.
[  525.916302][ T8652] vlan2: entered promiscuous mode
[  525.918104][ T8652] vlan2: entered allmulticast mode
[  525.960378][ T8652] __nla_validate_parse: 8 callbacks suppressed
[  525.960396][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15282'.
[  526.065894][ T8668] bond2: (slave dummy0): Releasing active interface
[  526.072749][ T8668] bond0: (slave bond_slave_0): Releasing backup interface
[  526.078137][ T8668] bond0: (slave bond_slave_1): Releasing backup interface
[  526.080981][ T8668] team_slave_0: left promiscuous mode
[  526.083598][ T8668] team0: Port device team_slave_0 removed
[  526.092002][ T8668] team_slave_1: left promiscuous mode
[  526.095954][ T8668] team0: Port device team_slave_1 removed
[  526.101231][ T8668] bond0: (slave batadv_slave_0): Releasing backup interface
[  526.104343][ T8668] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.111743][ T8668] batman_adv: batadv0: Removing interface: macvtap1
[  526.119100][ T8668] bond4: (slave gretap1): Releasing active interface
[  526.126058][ T8668] gretap1: left allmulticast mode
[  526.137458][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15294'.
[  526.145504][ T8677] dummy0: entered promiscuous mode
[  526.147718][ T8677] macvtap1: entered promiscuous mode
[  526.149910][ T8677] macvtap1: entered allmulticast mode
[  526.151996][ T8677] dummy0: entered allmulticast mode
[  526.156894][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15294'.
[  526.163630][ T8677] dummy0: left allmulticast mode
[  526.166489][ T8677] dummy0: left promiscuous mode
[  526.214738][ T8668] team0: Mode changed to "loadbalance"
[  526.276355][ T8687] TCP: TCP_TX_DELAY enabled
[  526.379114][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15306'.
[  526.583485][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15317'.
[  526.587734][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15317'.
[  526.592094][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15317'.
[  526.595761][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15317'.
[  526.599386][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15317'.
[  526.602994][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15317'.
[  527.604886][ T8766] lo speed is unknown, defaulting to 1000
[  527.610311][ T8766] lo speed is unknown, defaulting to 1000
[  527.765756][ T8785] lo speed is unknown, defaulting to 1000
[  527.769879][ T8785] lo speed is unknown, defaulting to 1000
[  528.268791][ T8840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.096458][ T8872] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  529.271500][ T8891] lo speed is unknown, defaulting to 1000
[  529.274154][ T8891] lo speed is unknown, defaulting to 1000
[  529.666303][ T8908] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  529.678344][ T8908] validate_nla: 1 callbacks suppressed
[  529.678355][ T8908] netlink: 'syz.4.15397': attribute type 4 has an invalid length.
[  529.827766][ T8921] batadv_slave_1: entered promiscuous mode
[  530.546955][ T8895] Set syz1 is full, maxelem 65536 reached
[  531.548952][ T8962] __nla_validate_parse: 9 callbacks suppressed
[  531.548964][ T8962] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.15420'.
[  531.757612][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15432'.
[  531.911901][ T9020] pim6reg: entered allmulticast mode
[  531.914297][ T9020] pim6reg: left allmulticast mode
[  531.924420][ T9014] lo speed is unknown, defaulting to 1000
[  531.929613][ T9014] lo speed is unknown, defaulting to 1000
[  532.309249][ T9047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.313055][ T9046] tipc: Resetting bearer <eth:syzkaller0>
[  532.350341][ T9046] tipc: Disabling bearer <eth:syzkaller0>
[  532.448684][ T9051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15455'.
[  532.472053][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15456'.
[  532.790401][ T9059] lo speed is unknown, defaulting to 1000
[  532.793543][ T9059] lo speed is unknown, defaulting to 1000
[  532.970226][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15460'.
[  532.979648][ T9064] bridge0: port 1(macvlan2) entered blocking state
[  532.982246][ T9064] bridge0: port 1(macvlan2) entered disabled state
[  532.984816][ T9064] macvlan2: entered allmulticast mode
[  532.988455][ T9064] macvlan2: left allmulticast mode
[  532.989209][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15458'.
[  532.994554][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15458'.
[  533.011721][ T9060] netlink: 'syz.3.15458': attribute type 13 has an invalid length.
[  533.016835][ T9060] netlink: 'syz.3.15458': attribute type 17 has an invalid length.
[  533.030279][ T9060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  533.337265][ T9102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15478'.
[  533.846377][ T9132] netlink: 'syz.3.15490': attribute type 1 has an invalid length.
[  533.849183][ T9132] netlink: 232 bytes leftover after parsing attributes in process `syz.3.15490'.
[  533.852216][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15490'.
[  533.980479][ T9143] netlink: 'syz.5.15494': attribute type 1 has an invalid length.
[  534.106965][ T9155] lo speed is unknown, defaulting to 1000
[  534.122714][ T9155] lo speed is unknown, defaulting to 1000
[  534.497074][ T9086] Set syz1 is full, maxelem 65536 reached
[  534.811224][ T9196] netlink: 'syz.4.15519': attribute type 3 has an invalid length.
[  535.220137][ T9219] netlink: zone id is out of range
[  535.221820][ T9219] netlink: zone id is out of range
[  535.223647][ T9219] netlink: zone id is out of range
[  535.225629][ T9219] netlink: zone id is out of range
[  535.227620][ T9219] netlink: zone id is out of range
[  535.230245][ T9219] netlink: zone id is out of range
[  535.231910][ T9219] netlink: zone id is out of range
[  535.353349][ T9231] netlink: 'syz.3.15534': attribute type 6 has an invalid length.
[  535.465614][ T9243] lo speed is unknown, defaulting to 1000
[  535.474566][ T9243] lo speed is unknown, defaulting to 1000
[  535.513584][ T9250] lo speed is unknown, defaulting to 1000
[  535.578608][ T9250] lo speed is unknown, defaulting to 1000
[  536.623453][ T9290] __nla_validate_parse: 12 callbacks suppressed
[  536.623469][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15558'.
[  536.733659][ T9296] net_ratelimit: 2 callbacks suppressed
[  536.733868][ T9296] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  536.788519][ T9300] syzkaller1: entered promiscuous mode
[  536.790691][ T9300] syzkaller1: entered allmulticast mode
[  536.891225][ T9314] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15570'.
[  536.941509][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15572'.
[  536.977986][ T9327] netlink: 116 bytes leftover after parsing attributes in process `syz.3.15575'.
[  537.039065][ T9333] lo speed is unknown, defaulting to 1000
[  537.044520][ T9333] lo speed is unknown, defaulting to 1000
[  537.181287][ T9341] syzkaller1: entered promiscuous mode
[  537.183646][ T9341] syzkaller1: entered allmulticast mode
[  537.326581][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'.
[  537.330952][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'.
[  537.335994][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'.
[  537.341015][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'.
[  537.346625][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'.
[  537.351180][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15583'.
[  537.366830][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.369656][ T9347] team0: left promiscuous mode
[  537.371620][ T9347] 8021q: adding VLAN 0 to HW filter on device team0
[  537.379047][ T9347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  537.534840][ T9359] ip6gre1: entered promiscuous mode
[  537.764015][ T9367] batadv_slave_0: entered promiscuous mode
[  537.766888][ T9366] batadv_slave_0: left promiscuous mode
[  538.022937][ T9395] bond0: (slave 0!): Releasing backup interface
[  538.037330][ T9395] team0: Port device geneve0 removed
[  538.039827][ T9395] bond0: (slave netdevsim0): Releasing backup interface
[  538.043516][ T9395] bond2: (slave gretap2): Releasing active interface
[  538.047326][ T9395] bond2: (slave gretap2): the permanent HWaddr of slave - 5e:21:9c:28:a4:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  538.052749][ T9395] bond2: (slave gretap3): making interface the new active one
[  538.057704][ T9395] bond2: (slave gretap3): Releasing active interface
[  538.064647][ T9397] tun0: tun_chr_ioctl cmd 35111
[  538.413799][ T9448] syz_tun: entered promiscuous mode
[  538.419949][ T9448] syz_tun: left promiscuous mode
[  538.713302][ T9514] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  538.904494][ T9538] IPv6: NLM_F_CREATE should be specified when creating new route
[  539.006516][ T9544] lo speed is unknown, defaulting to 1000
[  539.008951][ T9544] lo speed is unknown, defaulting to 1000
[  539.805170][   T61] block nbd2: Possible stuck request ffff888022aaa800: control (read@0,4096B). Runtime 180 seconds
[  540.175431][ T9618] netlink: 'syz.5.15709': attribute type 1 has an invalid length.
[  540.177983][ T9618] NCSI netlink: No device for ifindex 813332851
[  540.707695][ T9645] nbd: socks must be embedded in a SOCK_ITEM attr
[  540.721674][ T9648] netlink: 'syz.3.15723': attribute type 2 has an invalid length.
[  541.376589][ T9687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  541.380818][ T9687] syzkaller0: entered promiscuous mode
[  541.383104][ T9687] syzkaller0: entered allmulticast mode
[  541.411081][ T9687] tipc: Resetting bearer <eth:syzkaller0>
[  541.790617][ T9738] __nla_validate_parse: 27 callbacks suppressed
[  541.790638][ T9738] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15760'.
[  541.797521][ T9738] 0X: renamed from caif0
[  541.801245][ T9738] 0X: entered allmulticast mode
[  541.803404][ T9738] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  542.623266][ T9762] netlink: 288 bytes leftover after parsing attributes in process `syz.3.15772'.
[  542.763960][ T9784] netlink: 92 bytes leftover after parsing attributes in process `syz.5.15782'.
[  542.831268][ T9794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  542.834388][ T9794] syzkaller0: entered promiscuous mode
[  542.840845][ T9794] syzkaller0: entered allmulticast mode
[  542.847513][ T9798] tipc: New replicast peer: 255.255.255.255
[  542.849839][ T9798] tipc: Enabled bearer <udp:syz2>, priority 26
[  542.852129][ T9794] syzkaller0: Caught tx_queue_len zero misconfig
[  542.857512][ T9794] tipc: Resetting bearer <eth:syzkaller0>
[  542.863284][ T9800] netlink: 'syz.3.15790': attribute type 9 has an invalid length.
[  542.866114][ T9800] netlink: 184 bytes leftover after parsing attributes in process `syz.3.15790'.
[  543.054019][ T9832] netlink: 'syz.3.15805': attribute type 4 has an invalid length.
[  543.082834][ T9834] netlink: 'syz.4.15807': attribute type 3 has an invalid length.
[  543.085156][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15806'.
[  543.088188][ T9834] netlink: 666 bytes leftover after parsing attributes in process `syz.4.15807'.
[  543.261782][ T9862] netlink: 'syz.5.15819': attribute type 7 has an invalid length.
[  543.362094][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15828'.
[  543.366365][ T9882] bridge_slave_0: left allmulticast mode
[  543.369019][ T9882] bridge_slave_0: left promiscuous mode
[  543.371382][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.377463][ T9882] bridge_slave_1: left allmulticast mode
[  543.379804][ T9882] bridge_slave_1: left promiscuous mode
[  543.381969][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.390379][ T9882] bond0: (slave bond_slave_0): Releasing backup interface
[  543.394887][ T9882] bond0: (slave bond_slave_1): Releasing backup interface
[  543.402803][ T9882] team0: Port device team_slave_0 removed
[  543.409232][ T9882] team0: Port device team_slave_1 removed
[  543.413296][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.418467][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.422583][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.426256][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.452108][ T9885] team0: Mode changed to "loadbalance"
[  543.581148][ T9904] netlink: 'syz.5.15836': attribute type 21 has an invalid length.
[  543.583960][ T9904] IPv6: NLM_F_CREATE should be specified when creating new route
[  543.588266][ T9904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  543.591105][ T9904] IPv6: NLM_F_CREATE should be set when creating new route
[  543.593571][ T9904] IPv6: NLM_F_CREATE should be set when creating new route
[  543.594116][ T9906] netlink: 256 bytes leftover after parsing attributes in process `syz.4.15837'.
[  543.596053][ T9904] IPv6: NLM_F_CREATE should be set when creating new route
[  543.693996][ T9920] syzkaller0: left promiscuous mode
[  543.696670][ T9920] syzkaller0: left allmulticast mode
[  543.720004][ T9924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  543.855331][ T9852] tipc: Node number set to 438360891
[  543.908292][ T9955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  543.966433][ T5878] tipc: Node number set to 1924428789
[  544.832583][T10003] lo speed is unknown, defaulting to 1000
[  544.836417][T10003] lo speed is unknown, defaulting to 1000
[  544.873841][T10004] netlink: 'syz.4.15881': attribute type 6 has an invalid length.
[  545.482401][T10040] lo speed is unknown, defaulting to 1000
[  545.487310][T10040] lo speed is unknown, defaulting to 1000
[  545.993222][T10062] netlink: 'syz.3.15906': attribute type 1 has an invalid length.
[  546.029525][T10062] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  546.032670][T10062] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  546.046414][T10062] bond4: (slave vti0): making interface the new active one
[  546.049555][T10062] bond4: (slave vti0): Enslaving as an active interface with an up link
[  546.090063][T10071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  546.101886][T10067] lo speed is unknown, defaulting to 1000
[  546.106090][T10067] lo speed is unknown, defaulting to 1000
[  546.254516][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15919'.
[  546.283417][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15922'.
[  546.406433][T10111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  546.411036][T10111] syzkaller0: entered promiscuous mode
[  546.414801][T10111] syzkaller0: entered allmulticast mode
[  546.436820][T10114] siw: device registration error -23
[  546.623809][T10140] syzkaller1: entered promiscuous mode
[  546.626693][T10140] syzkaller1: entered allmulticast mode
[  547.507596][T10174] netlink: 'syz.5.15956': attribute type 1 has an invalid length.
[  547.530868][T10176] netlink: 'syz.5.15957': attribute type 6 has an invalid length.
[  547.917507][T10188] bridge_slave_0: left allmulticast mode
[  547.921629][T10188] batadv_slave_1: left promiscuous mode
[  547.925665][T10188] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  547.929110][T10188] mac80211_hwsim hwsim42 wlan0: left promiscuous mode
[  547.932059][T10188] gretap1: left allmulticast mode
[  547.934500][T10188] veth3: left promiscuous mode
[  547.937214][T10188] geneve2: left promiscuous mode
[  547.939571][T10188] gtp0: left promiscuous mode
[  547.942130][T10188] macvtap1: left promiscuous mode
[  547.947116][T10188] macvtap1: left allmulticast mode
[  547.949438][T10188] ip6tnl1: left promiscuous mode
[  547.951885][T10188] ip6tnl1: left allmulticast mode
[  547.965605][T10191] netlink: 'syz.4.15962': attribute type 1 has an invalid length.
[  547.966704][T10188] bridge5: left allmulticast mode
[  547.968615][T10191] __nla_validate_parse: 1 callbacks suppressed
[  547.968626][T10191] netlink: 140 bytes leftover after parsing attributes in process `syz.4.15962'.
[  547.976700][T10191] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15962'.
[  547.980427][T10188] geneve4: left promiscuous mode
[  547.988461][T10188] tipc: Resetting bearer <eth:syzkaller0>
[  547.992460][T10188] syzkaller0: left promiscuous mode
[  547.994591][T10188] syzkaller0: left allmulticast mode
[  548.041076][ T5871] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.045868][ T5871] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  548.049060][ T5871] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.051964][ T5871] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  548.057263][ T5871] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.060323][ T5871] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  548.063433][ T5871] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.067226][ T5871] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  548.437576][T10182] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  548.595172][T10199] netlink: 'syz.5.15966': attribute type 10 has an invalid length.
[  548.607825][T10199] team0: Device dummy0 failed to register rx_handler
[  548.635143][T10199] netlink: 'syz.5.15966': attribute type 10 has an invalid length.
[  549.139033][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15974'.
[  549.141825][T10217] netlink: 'syz.3.15974': attribute type 14 has an invalid length.
[  549.144544][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15974'.
[  549.147619][T10217] netlink: 'syz.3.15974': attribute type 14 has an invalid length.
[  549.203306][T10219] bond5: entered promiscuous mode
[  549.207993][T10219] bond5: entered allmulticast mode
[  549.210549][T10219] 8021q: adding VLAN 0 to HW filter on device bond5
[  549.284462][T10229] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  549.324446][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15979'.
[  549.379318][T10235] bond0: entered promiscuous mode
[  549.381687][T10235] batadv0: entered promiscuous mode
[  549.384351][T10235] debugfs: 'hsr1' already exists in 'hsr'
[  549.388619][T10235] Cannot create hsr debugfs directory
[  549.391700][T10235] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  549.395654][T10235] hsr1: entered allmulticast mode
[  549.397971][T10235] bond0: entered allmulticast mode
[  549.400386][T10235] batadv0: entered allmulticast mode
[  549.403237][T10235] 8021q: adding VLAN 0 to HW filter on device hsr1
[  549.513283][T10243] batman_adv: batadv0: Adding interface: dummy0
[  549.523327][T10243] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.553526][T10243] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  549.559617][T10245] macvtap1: mtu less than device minimum
[  549.593057][T10240] batman_adv: batadv0: Adding interface: ip6gretap2
[  549.596954][T10240] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.606395][T10240] batman_adv: batadv0: Interface activated: ip6gretap2
[  549.609267][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15983'.
[  549.613293][T10247] netlink: 'syz.3.15983': attribute type 9 has an invalid length.
[  549.635690][T10249] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.15984'.
[  549.667607][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15986'.
[  549.671167][T10251] netlink: 'syz.5.15986': attribute type 1 has an invalid length.
[  549.691444][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15987'.
[  549.791543][T10260] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15988'.
[  550.229343][ T5294] udevd[5294]: worker [28911] /devices/virtual/block/nbd2 timeout; kill it
[  550.232154][ T5294] udevd[5294]: seq 20905 '/devices/virtual/block/nbd2' killed
[  550.391592][T10287] erspan0: entered promiscuous mode
[  550.393825][T10287] macvtap2: entered promiscuous mode
[  550.396194][T10287] macvtap2: entered allmulticast mode
[  550.398894][T10287] erspan0: entered allmulticast mode
[  550.603693][T10294] lo: entered allmulticast mode
[  550.606257][T10294] tunl0: entered allmulticast mode
[  550.608509][T10294] gre0: entered allmulticast mode
[  550.610652][T10294] gretap0: entered allmulticast mode
[  550.612934][T10294] erspan0: entered allmulticast mode
[  550.615708][T10294] ip_vti0: entered allmulticast mode
[  550.617996][T10294] ip6_vti0: entered allmulticast mode
[  550.620347][T10294] sit0: entered allmulticast mode
[  550.622513][T10294] ip6tnl0: entered allmulticast mode
[  550.624710][T10294] ip6gre0: entered allmulticast mode
[  550.627579][T10294] syz_tun: entered allmulticast mode
[  550.629792][T10294] ip6gretap0: entered allmulticast mode
[  550.632203][T10294] vcan0: entered allmulticast mode
[  550.634335][T10294] bond0: entered allmulticast mode
[  550.636647][T10294] team0: entered allmulticast mode
[  550.638985][T10294] !: entered allmulticast mode
[  550.641464][T10294] nlmon0: entered allmulticast mode
[  550.643718][T10294] caif0: entered allmulticast mode
[  550.646122][T10294] batadv0: entered allmulticast mode
[  550.648385][T10294] vxcan0: entered allmulticast mode
[  550.650600][T10294] vxcan1: entered allmulticast mode
[  550.652779][T10294] veth0: entered allmulticast mode
[  550.655442][T10294] veth1: entered allmulticast mode
[  550.657532][T10294] wg1: entered allmulticast mode
[  550.659572][T10294] wg2: entered allmulticast mode
[  550.661636][T10294] veth0_to_bridge: entered allmulticast mode
[  550.664072][T10294] bridge_slave_0: entered allmulticast mode
[  550.667193][T10294] veth1_to_bridge: entered allmulticast mode
[  550.669593][T10294] bridge_slave_1: entered allmulticast mode
[  550.671946][T10294] veth0_to_bond: entered allmulticast mode
[  550.674331][T10294] bond_slave_0: entered allmulticast mode
[  550.677311][T10294] veth1_to_bond: entered allmulticast mode
[  550.679792][T10294] bond_slave_1: entered allmulticast mode
[  550.682203][T10294] veth0_to_team: entered allmulticast mode
[  550.685490][T10294] team_slave_0: entered allmulticast mode
[  550.688351][T10294] veth1_to_team: entered allmulticast mode
[  550.690783][T10294] team_slave_1: entered allmulticast mode
[  550.693162][T10294] veth0_to_batadv: entered allmulticast mode
[  550.698174][T10294] batadv_slave_0: entered allmulticast mode
[  550.700657][T10294] veth1_to_batadv: entered allmulticast mode
[  550.703267][T10294] batadv_slave_1: entered allmulticast mode
[  550.710800][T10294] xfrm0: entered allmulticast mode
[  550.712967][T10294] veth0_to_hsr: entered allmulticast mode
[  550.715471][T10294] hsr_slave_0: entered allmulticast mode
[  550.717872][T10294] veth1_to_hsr: entered allmulticast mode
[  550.720371][T10294] hsr_slave_1: entered allmulticast mode
[  550.722688][T10294] hsr0: entered allmulticast mode
[  550.724841][T10294] veth1_virt_wifi: entered allmulticast mode
[  550.727562][T10294] veth0_virt_wifi: entered allmulticast mode
[  550.733106][T10294] veth1_macvtap: entered allmulticast mode
[  550.738974][T10294] veth0_macvtap: entered allmulticast mode
[  550.741839][T10294] macvtap0: entered allmulticast mode
[  550.744634][T10294] geneve0: entered allmulticast mode
[  550.747893][T10294] geneve1: entered allmulticast mode
[  550.750186][T10294] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  550.753307][T10294] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  550.756639][T10294] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  550.759675][T10294] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  550.762670][T10294] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode
[  550.765973][T10294] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  550.768831][T10294] gretap1: entered allmulticast mode
[  550.770949][T10294] bond1: entered allmulticast mode
[  550.773443][T10294] veth2: entered allmulticast mode
[  550.775898][T10294] veth3: entered allmulticast mode
[  550.778019][T10294] @: entered allmulticast mode
[  550.780012][T10294] ip6gre1: entered allmulticast mode
[  550.782151][T10294] gre1: entered allmulticast mode
[  550.784140][T10294] bridge1: entered allmulticast mode
[  550.786827][T10294] geneve2: entered allmulticast mode
[  550.792250][T10294] vxlan0: entered allmulticast mode
[  550.794436][T10294] gtp0: entered allmulticast mode
[  550.799967][T10294] bridge2: entered allmulticast mode
[  550.802063][T10294] veth4: entered allmulticast mode
[  550.804146][T10294] veth5: entered allmulticast mode
[  550.806574][T10294] vxlan1: entered allmulticast mode
[  550.808688][T10294] macvtap1: entered allmulticast mode
[  550.810852][T10294] ip6tnl1: entered allmulticast mode
[  550.812968][T10294] bridge3: entered allmulticast mode
[  550.815475][T10294] syztnl0: entered allmulticast mode
[  550.817770][T10294] bridge4: entered allmulticast mode
[  550.819985][T10294] geneve3: entered allmulticast mode
[  550.822418][T10294] ip6tnl2: entered allmulticast mode
[  550.824536][T10294] ip6tnl3: entered allmulticast mode
[  550.827781][T10294] bond2: entered allmulticast mode
[  550.830126][T10294] gretap2: entered allmulticast mode
[  550.832271][T10294] gretap3: entered allmulticast mode
[  550.834412][T10294] bridge5: entered allmulticast mode
[  550.836633][T10294] geneve4: entered allmulticast mode
[  550.838833][T10294] ip6tnl4: entered allmulticast mode
[  550.840963][T10294] bond3: entered allmulticast mode
[  550.843094][T10294] syzkaller0: entered allmulticast mode
[  550.846018][T10294] sit1: entered allmulticast mode
[  550.848142][T10294] gre2: entered allmulticast mode
[  550.851557][T10294] ip6gretap1: entered allmulticast mode
[  550.853991][T10294] bond4: entered allmulticast mode
[  550.859398][T10294] vti0: entered allmulticast mode
[  550.861747][T10294] veth6: entered allmulticast mode
[  550.864114][T10294] veth7: entered allmulticast mode
[  550.867072][T10294] macvlan0: entered allmulticast mode
[  550.869420][T10294] sit2: entered allmulticast mode
[  550.919591][T10299] bond6: entered promiscuous mode
[  550.921779][T10299] bond6: entered allmulticast mode
[  550.924203][T10299] 8021q: adding VLAN 0 to HW filter on device bond6
[  550.931707][T10307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9
[  551.048767][T10313] validate_nla: 2 callbacks suppressed
[  551.048785][T10313] netlink: 'syz.3.16005': attribute type 10 has an invalid length.
[  551.107037][T10317] veth3: entered promiscuous mode
[  551.128426][T10320] team0: Device macvlan1 is already an upper device of the team interface
[  551.153600][T10325] netlink: 'syz.5.16008': attribute type 39 has an invalid length.
[  551.291975][T10339] netlink: 'syz.4.16012': attribute type 1 has an invalid length.
[  551.321549][T10339] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  551.336202][ T5871] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  551.336570][T10339] 8021q: adding VLAN 0 to HW filter on device bond7
[  551.377520][T10339] veth3: entered promiscuous mode
[  551.387841][T10339] bond7: (slave veth3): Enslaving as a backup interface with a down link
[  551.416045][T10339] bond7: (slave ip6gretap1): Removing an active aggregator
[  551.423766][T10339] bond7: (slave ip6gretap1): Releasing backup interface
[  551.432657][T10339] bond7: (slave ip6gretap1): the permanent HWaddr of slave - 1a:d3:fa:5b:87:7c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  551.470675][T10339] bond7: (slave veth3): Releasing backup interface
[  551.533031][T10356] netlink: 'syz.4.16016': attribute type 1 has an invalid length.
[  551.563797][T10356] 8021q: adding VLAN 0 to HW filter on device bond8
[  551.577026][T10360] batman_adv: batadv0: Removing interface: dummy0
[  551.588088][T10356] bond8: (slave geneve2): making interface the new active one
[  551.591794][T10356] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  551.596631][ T5871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.600346][ T5871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.607098][ T5871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.610510][ T5871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.865172][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  552.217470][T10383] netlink: 'syz.4.16025': attribute type 3 has an invalid length.
[  552.224133][T10383] netlink: 'syz.4.16025': attribute type 3 has an invalid length.
[  552.231818][T32688] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  552.235619][T32688] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  552.238917][T32688] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  552.242161][T32688] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  552.258015][T10386] dvmrp8: entered allmulticast mode
[  552.264049][T10385] dvmrp8: left allmulticast mode
[  552.362136][T10396] lo speed is unknown, defaulting to 1000
[  552.366101][T10396] lo speed is unknown, defaulting to 1000
[  553.487450][T10459] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  553.529187][T10461] __nla_validate_parse: 29 callbacks suppressed
[  553.529204][T10461] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16044'.
[  553.537276][T10461] netlink: 'syz.5.16044': attribute type 32 has an invalid length.
[  553.540954][T10461] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  553.692097][T10467] netlink: 'syz.4.16046': attribute type 1 has an invalid length.
[  553.736717][T10476] pim6reg1: entered promiscuous mode
[  553.741321][T10476] pim6reg1: entered allmulticast mode
[  553.821804][T10480] lo speed is unknown, defaulting to 1000
[  553.824849][T10480] lo speed is unknown, defaulting to 1000
[  553.899979][T10485] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  553.917168][T10485] team0: Device macvtap2 is already an upper device of the team interface
[  553.974638][T10491] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16052'.
[  554.021460][T10497] netlink: 'syz.5.16054': attribute type 1 has an invalid length.
[  554.044295][T10497] 8021q: adding VLAN 0 to HW filter on device bond1
[  554.062102][T10497] vlan4: entered promiscuous mode
[  554.064136][T10497] bond1: entered promiscuous mode
[  554.066783][T10497] vlan4: entered allmulticast mode
[  554.068937][T10497] bond1: entered allmulticast mode
[  554.079043][T10497] bond1: (slave gretap1): making interface the new active one
[  554.081966][T10497] gretap1: entered promiscuous mode
[  554.084057][T10497] gretap1: entered allmulticast mode
[  554.087303][T10497] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  554.131888][T10503] netlink: 'syz.5.16055': attribute type 1 has an invalid length.
[  554.189505][T10502] bond2: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  554.194870][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  554.209507][T10503] 8021q: adding VLAN 0 to HW filter on device bond2
[  554.222294][T10502] bond2 (unregistering): (slave ip6gretap4): Removing an active aggregator
[  554.225942][T10502] bond2 (unregistering): (slave ip6gretap4): Releasing backup interface
[  554.231126][T10502] bond2 (unregistering): Released all slaves
[  554.315766][T10511] IPVS: length: 49 != 24
[  554.462140][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16063'.
[  554.481618][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16064'.
[  554.485898][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16064'.
[  554.559922][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16067'.
[  554.566369][T10549] IPv6: sit1: Disabled Multicast RS
[  554.569343][T10549] sit1: entered allmulticast mode
[  554.604398][T10553] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  554.608197][  T791] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  554.612790][  T791] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  554.617778][  T791] CPU: 0 UID: 0 PID: 791 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  554.621396][  T791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  554.625148][T10553] batman_adv: batadv0: Removing interface: ip6gretap2
[  554.625284][  T791] Workqueue: mld mld_ifc_work
[  554.629416][  T791] RIP: 0010:add_grec+0x79f/0x1740
[  554.631453][  T791] Code: c6 e8 b5 be 86 f7 45 85 ff 0f 84 b1 00 00 00 e8 67 ba 86 f7 eb 05 e8 60 ba 86 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 12 26 ea f7 4d 8b 3c 24 48 8b 7c
[  554.638878][  T791] RSP: 0018:ffffc90004f378f8 EFLAGS: 00010206
[  554.641333][  T791] RAX: 000000001fffe000 RBX: ffff888068723080 RCX: ffff888022240000
[  554.644322][  T791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  554.647383][  T791] RBP: 0000000000000000 R08: ffff888022240000 R09: 0000000000000002
[  554.650463][  T791] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000
[  554.653534][  T791] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000000
[  554.656623][  T791] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  554.660004][  T791] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  554.662525][  T791] CR2: 00007f6c084ccfc8 CR3: 0000000106f66000 CR4: 00000000000006f0
[  554.665566][  T791] Call Trace:
[  554.666935][  T791]  <TASK>
[  554.668137][  T791]  mld_ifc_work+0x676/0xd60
[  554.669967][  T791]  ? rcu_is_watching+0x15/0xb0
[  554.671868][  T791]  ? process_scheduled_works+0x9ef/0x17b0
[  554.674119][  T791]  process_scheduled_works+0xae1/0x17b0
[  554.676291][  T791]  ? __pfx_process_scheduled_works+0x10/0x10
[  554.678689][  T791]  worker_thread+0x8a0/0xda0
[  554.680510][  T791]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  554.682972][  T791]  ? __kthread_parkme+0x7b/0x200
[  554.684887][  T791]  kthread+0x711/0x8a0
[  554.686501][  T791]  ? __pfx_worker_thread+0x10/0x10
[  554.688539][  T791]  ? __pfx_kthread+0x10/0x10
[  554.690364][  T791]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.692362][  T791]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.694442][  T791]  ? __pfx_kthread+0x10/0x10
[  554.696298][  T791]  ret_from_fork+0x3fc/0x770
[  554.698076][  T791]  ? __pfx_ret_from_fork+0x10/0x10
[  554.700135][  T791]  ? __switch_to_asm+0x39/0x70
[  554.702003][  T791]  ? __switch_to_asm+0x33/0x70
[  554.703823][  T791]  ? __pfx_kthread+0x10/0x10
[  554.705606][  T791]  ret_from_fork_asm+0x1a/0x30
[  554.707476][  T791]  </TASK>
[  554.708725][  T791] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  554.711414][  T791] ---[ end trace 0000000000000000 ]---
[  554.730534][  T791] RIP: 0010:add_grec+0x79f/0x1740
[  554.732125][T10553] bond1: (slave gretap1): Releasing active interface
[  554.734783][T10553] gretap1: left promiscuous mode
[  554.736117][  T791] Code: c6 e8 b5 be 86 f7 45 85 ff 0f 84 b1 00 00 00 e8 67 ba 86 f7 eb 05 e8 60 ba 86 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 12 26 ea f7 4d 8b 3c 24 48 8b 7c
[  554.743962][  T791] RSP: 0018:ffffc90004f378f8 EFLAGS: 00010206
[  554.746587][  T791] RAX: 000000001fffe000 RBX: ffff888068723080 RCX: ffff888022240000
[  554.749616][  T791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  554.752773][  T791] RBP: 0000000000000000 R08: ffff888022240000 R09: 0000000000000002
[  554.755909][T10553] gretap1: left allmulticast mode
[  554.758258][  T791] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000
[  554.761437][  T791] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000000
[  554.764632][  T791] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  554.770200][  T791] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  554.772481][  T791] CR2: 00007ffc67ae8ee8 CR3: 0000000133118000 CR4: 00000000000006f0
[  554.774777][  T791] Kernel panic - not syncing: Fatal exception
[  554.777605][  T791] Kernel Offset: disabled
[  554.779225][  T791] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:59:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004f37130
R8 =ffff8880214d8237 R9 =1ffff1100429b046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb90f R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6c084ccfc8 CR3=0000000106f66000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f631c212e53
XMM06=0000000000000000 00007f631c212e4d XMM07=0000000000000000 00007f631c212e61
XMM08=0000000000000000 00007f631c212ee7 XMM09=0000000000000000 00007f631c212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff818b5c01 RBX=ffffffff818b5c6f RCX=ffffffff818b5ce1 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8fa38530 RBP=ffffc90000107c70 RSP=ffffc90000107a80
R8 =ffffffff8fa38537 R9 =1ffffffff1f470a6 R10=dffffc0000000000 R11=fffffbfff1f470a7
R12=ffff88801a4a0000 R13=ffff88801c2f6618 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff818b5ceb RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd8e415c88 CR3=0000000025048000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6c07612e53
XMM06=0000000000000000 00007f6c07612e4d XMM07=0000000000000000 00007f6c07612e61
XMM08=0000000000000000 00007f6c07612ee7 XMM09=0000000000000000 00007f6c07612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
