last executing test programs:

2.171414813s ago: executing program 0 (id=997):
unshare(0x6a040000)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x9fffffffffffffff}, 0x0)
socket(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000301010200000000000000000a00fffe0c001980080002002c080000100002800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffdf0, &(0x7f0000000240)={&(0x7f00000004c0)={0x4c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x5, 0x200}, {0x3, 0x4, 0xe633}]}]}, {0x0, [0x2e]}}, &(0x7f0000000180)=""/118, 0x3f, 0x76, 0x0, 0xd792}, 0x28)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x30, r5, 0xa66d7000)
getpeername(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x110, 0xffffffffffffffff, 0x2ecd6000)
syz_extract_tcp_res(&(0x7f0000000240), 0x0, 0x200)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="db6928e8"}, 0x50)

2.10395059s ago: executing program 2 (id=998):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/164], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x31, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) (async)
getsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, &(0x7f0000000040))
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x8, 0xa, [0x3, 0xf8, 0x7ff, 0x2]}})
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)

1.964533976s ago: executing program 2 (id=1000):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x78060280)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000500))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x102, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f00000030c0), 0x0, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x10, 0xd}, {0x93e4cd12cebd9266, 0xa}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000081)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$SIOCGSKNS(r7, 0x894c, &(0x7f0000000140)={'veth0_macvtap\x00', 0x400})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000900))

1.413870426s ago: executing program 0 (id=1006):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x31c, &(0x7f00000006c0)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "86a724", 0x2e6, 0x21, 0xff, @remote, @private0, {[@dstopts={0x67, 0xb, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0xd2, 0x9, [0x47c, 0xff, 0x1, 0x5, 0x8, 0x2, 0x8, 0x11a60000]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}, @fragment={0x3c, 0x0, 0xe4, 0x0, 0x0, 0x1, 0x67}, @routing={0x32, 0x10, 0x1, 0x6, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, @remote, @empty, @remote]}, @dstopts={0x32, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x6c, 0x0, 0xae, 0x0, 0x0, 0x6, 0x68}, @fragment={0x5e, 0x0, 0x4, 0x0, 0x0, 0x12, 0x65}, @hopopts={0x32, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @pad1, @ra={0x5, 0x2, 0xa56b}, @enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x7, [0xb271, 0x8a3, 0x4b37]}}, @ra={0x5, 0x2, 0xfc01}]}, @hopopts={0x1d, 0x10, '\x00', [@generic={0x5, 0x68, "783e3ace03c27c289ab819ac64746507633844afcd77d367c6f319856905bde5d9dde387f222ba16ae0ecee49d79792746a1a7cb6119076ea1697b5ec8a86793b80020304da49ac1b18a446477cb3415f4b52c513f01241e77f16c5ef9b142d359a590be55ce40c8"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @empty}]}, @hopopts={0xc, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0xc7}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0xffffff81}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @dstopts={0x87, 0x10, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}, @pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0xa76f, [0x4, 0x2c4f, 0x116, 0x7d50, 0x7, 0x7, 0xfffffffffffff001, 0x6, 0x9]}}, @ra={0x5, 0x2, 0xf}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xc98e}, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0xff}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x7, "630177", 0x5, "e832e4"}, "ef626674262dc96005ed0a1483de261baf527849324e4a5dc6312757a44a"}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async)
syz_emit_ethernet(0x31c, &(0x7f00000006c0)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "86a724", 0x2e6, 0x21, 0xff, @remote, @private0, {[@dstopts={0x67, 0xb, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0xd2, 0x9, [0x47c, 0xff, 0x1, 0x5, 0x8, 0x2, 0x8, 0x11a60000]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}, @fragment={0x3c, 0x0, 0xe4, 0x0, 0x0, 0x1, 0x67}, @routing={0x32, 0x10, 0x1, 0x6, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, @remote, @empty, @remote]}, @dstopts={0x32, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x6c, 0x0, 0xae, 0x0, 0x0, 0x6, 0x68}, @fragment={0x5e, 0x0, 0x4, 0x0, 0x0, 0x12, 0x65}, @hopopts={0x32, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @pad1, @ra={0x5, 0x2, 0xa56b}, @enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x7, [0xb271, 0x8a3, 0x4b37]}}, @ra={0x5, 0x2, 0xfc01}]}, @hopopts={0x1d, 0x10, '\x00', [@generic={0x5, 0x68, "783e3ace03c27c289ab819ac64746507633844afcd77d367c6f319856905bde5d9dde387f222ba16ae0ecee49d79792746a1a7cb6119076ea1697b5ec8a86793b80020304da49ac1b18a446477cb3415f4b52c513f01241e77f16c5ef9b142d359a590be55ce40c8"}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @empty}]}, @hopopts={0xc, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0xc7}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0xffffff81}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @dstopts={0x87, 0x10, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}, @pad1, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0xa76f, [0x4, 0x2c4f, 0x116, 0x7d50, 0x7, 0x7, 0xfffffffffffff001, 0x6, 0x9]}}, @ra={0x5, 0x2, 0xf}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xc98e}, @jumbo={0xc2, 0x4, 0xfff}, @enc_lim={0x4, 0x1, 0xff}]}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x6, 0x7, "630177", 0x5, "e832e4"}, "ef626674262dc96005ed0a1483de261baf527849324e4a5dc6312757a44a"}}}}}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

1.214068089s ago: executing program 0 (id=1009):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d40100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a1990000df9e190a587bed507002e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="88010000"], 0x188}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.053945025s ago: executing program 0 (id=1011):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket(0x2, 0x80805, 0x0) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r2, &(0x7f00000029c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}}], 0x1, 0x2004c040)
sendto$unix(r2, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r3, 0xc9, "c2e455c8817ada4d4e1034b3a70305e16c5d032e0a0caa459a0cb64748659eb2c8fce8927fc72556d383090520ebcfc724488491c16bea9d32bafd3a4536874b9cc4e9a06b59c8261ee2c1e30c3f9fee99322783825dadb13ad51cde5c4c1f4ec3818c18bd8bc0dbef618798a530df651430c56e97b1a6b3129cf1d654da3001f5095ff1833861a171a590d12a9c8bbc0b7038f156dd0274750fef9b3d6b630d62a5469e8b385282f6b2cd059257a51f2b6f671dcf5bdcfbcefb589c63e8668323b87118fd5d5ffd39"}, &(0x7f0000000100)=0xd1)

980.452519ms ago: executing program 2 (id=1013):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r1, 0x26, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4008850)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x8057})
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000080)={{0x3, @default, 0x4}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r4, &(0x7f0000000280)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x10, 0x0, 0x4, 0x0, @loopback, @empty=0x21}}}})

979.873142ms ago: executing program 0 (id=1014):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000140))
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=<r3=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000d00)={{r2}, r3, 0x2, @unused=[0xe, 0x7, 0x3, 0x9], @subvolid=0x4})
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000000901040000000000000000070000000900010073797a0600000000080000000800014000000000"], 0x2c}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r4], 0x30}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000001f80)={@val={0x0, 0x892f}, @val={0x0, 0x0, 0x3}, @mpls={[], @generic="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"}}, 0xfce)
r8 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={<r9=>r8})
r10 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4)
r11 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000300)={<r12=>r9})
bind$xdp(r12, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r5], 0x20}}, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)

893.968112ms ago: executing program 1 (id=1015):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x80000002, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ufshcd_clk_scaling\x00', r5, 0x0, 0x1}, 0x18)
pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000002030600710a06069d856829c2", 0x16}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'})
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0xffff, @none}, 0xe)
sendfile(r4, r0, &(0x7f0000000080)=0x400, 0x401)

893.32943ms ago: executing program 2 (id=1016):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r0)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x24, 0x0, &(0x7f0000000280)="61dfb0020866c667fc53b9265583e283d8ddef068c05608ffc450394321545000043aee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8911, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_settings={0x5, 0x7, @fr=&(0x7f0000000040)={0x2aa8, 0x8, 0x4, 0x8, 0x3, 0x8, 0x5}}})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
getsockopt(r4, 0x28, 0x1, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36)
r7 = socket(0x2, 0x3, 0xff)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000000580)=""/154, 0x9a}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000005}}], 0x48, 0x8004}, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000140)=0xafe, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r9, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c, &(0x7f0000002d40)=[{&(0x7f0000001ac0)="15976e94", 0x4}], 0x1}}], 0x2, 0x20000040)
sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4)

742.162649ms ago: executing program 0 (id=1017):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x7, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0x10, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x3ff, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x6, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ec, 0x7, 0x73, 0x10001, 0x7, 0x8f1e, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xffffff01, 0x1, 0x1, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0x9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0x1, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e8, 0x5, 0x8, 0xc, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000480)={0x3, 'vcan0\x00', {0x2}, 0x1000})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000280)="480000001500190d0b004beafd0d36020a8447000ba17dfc3129576a93cebc144e230f00004e20420cd25c19d70042edc351ace76188b0e9d7359031033f817f0000000000000000", 0x48}], 0x1)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r10, 0x800448d3, 0x0)
setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500093000003dc6570020fc0290780000001ce00003000306907800fa000900f4fff600650005010400030a010102ac1414aa"], 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, @none}, 0xe)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2)
sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="020000007467ec5e19c430807fe7eeb383c2d113330881142fcca7f61d6d9cbe1c64541a17df63f33d8120ba6454490f44123d37810fc5fa201a0ffcde454cb81eb3ef0ed6734b71e38222da8a3fa39c0a807d099cd6cf3be0b340c3abab01d65b1f4174727b036050e923b35afe46a855b9876653bc0c4adbf874c4ff5baa16d9f6bac41553de2cf2560713af8a6c4870641e3a4acf8dae60fa12fc0eea14db2e139e0ddaef2a2a", @ANYRES16=r12, @ANYBLOB="00032bbd7000ffdbdf250a00000008000600fdffffff080006001e0f00000800050009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44)
r13 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10)

740.865628ms ago: executing program 1 (id=1018):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'})
socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x840)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x42, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=0x1, @ANYRESHEX=r0], &(0x7f00000002c0)='syzkaller\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r1, 0x0, 0x3}, 0x18)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0) (async)
listen(r2, 0x0)
poll(&(0x7f0000000040)=[{r2, 0x2124}, {r2, 0xb0c4}], 0x2, 0x11ff)
shutdown(r2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x37, &(0x7f0000000300)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x20004854)
mmap(&(0x7f00004fc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) (async)
getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r3)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000780), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'ip6gretap0\x00'})

678.777755ms ago: executing program 2 (id=1019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x10)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x4030582a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000009060102000000000000000002000000100007800a001100aaaaaaaaaaaa0000050001000700000038000780180001801400024000000000000000000000ffffac1414bb0500070084000000060004404e2200000c000280080001403ec5e27f000001"], 0x64}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3e}, 0x1, 0x0, 0x0, 0x1}, 0x48097)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000040), 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000180)={0x1}, 0x8)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r9, 0x1, 0x1, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x2000c845}, 0x0)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xfe, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x11, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/4096, 0x1000}, {}], 0x1}}], 0x1, 0x1, 0x0)
sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

492.80816ms ago: executing program 1 (id=1020):
unshare(0x6a040000)
unshare(0x62040200)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0xfc00000000000000}, 0x0)
socket(0xa, 0x3, 0x3a)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000301010200000000000000000a00fffe0c001980080002002c080000100002800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffdf0, &(0x7f0000000240)={&(0x7f00000004c0)={0x4c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x5, 0x200}, {0x3, 0x4, 0xe633}]}]}, {0x0, [0x2e]}}, &(0x7f0000000180)=""/118, 0x3f, 0x76, 0x0, 0xd792}, 0x28)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x30, r5, 0xa66d7000)
getpeername(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x110, 0xffffffffffffffff, 0x2ecd6000)
syz_extract_tcp_res(&(0x7f0000000240), 0x0, 0x200)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="db6928e8"}, 0x50)

438.551023ms ago: executing program 2 (id=1021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
r2 = accept4(r1, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
write$tun(r3, 0x0, 0xb9)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x80000001, 0x7fff, 0x1, 0x5, 0x94c, 0xa4, 0xff9, 0xc3cfbe86, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x7fffffff, 0x3, 0xd, 0xe, 0x2312, 0x100, 0x8, 0x1c00, 0x7, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x6, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x10, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xc, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xf, 0x5, 0x20006, 0x5, 0x4, 0xb, 0x2, 0xd9a, 0x80000001, 0x4, 0xfffffffd, 0x7, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x2, 0x1fc, 0xc60, 0xffffdfff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
close(r1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0xe5, &(0x7f0000000300)=""/229, 0x0, 0x8}, 0x94)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={0x0, 0x5}, &(0x7f0000000480)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

53.60807ms ago: executing program 1 (id=1022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0x4, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000002c0a0500003b5e0000000000074c09e48b000740000000023952b6d222f4ddae75a2dee07cd9032cd8eee5ab8ccbbbe9ace8d440f9062e64bc8962b1f77020f77c47023a091937b112efb609114257ecf85e9dfae4168c03644f1eebaa16af0bef81f5c671d372e7ea8f1c92fdf65644c8356667e81b275be469a258b8f725ab8ab34a1f2613f71cb017eddcd63b126e87531fdfbc727344d1b55cb3e631692158b5d28e33d312af894267469ed87be357d0dc92e8c16f5952d0bb819c9b6fb2aeb7cda963d9c4211ec1782c7e868f74085f93a400f93cce8fe7565d4902d3df71f740b50604ea45821ee66f3b61d79a4123f9c49d2a75e6018b273b1c34423488a288a47c"], 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0x4, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
ioctl(0xffffffffffffffff, 0x1b, &(0x7f0000000200)="58c8b1ff78175e2ee270bcdb963ab8049a2efed98478fd4ec1bb45e7eb629cc3b5035957fdbf6ea05e") (async)
ioctl(0xffffffffffffffff, 0x1b, &(0x7f0000000200)="58c8b1ff78175e2ee270bcdb963ab8049a2efed98478fd4ec1bb45e7eb629cc3b5035957fdbf6ea05e")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c6c0fa8de140cca02da6d71305566000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x48804) (async)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c6c0fa8de140cca02da6d71305566000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x48804)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x5, 0x0, 0x5d, @local, @mcast1, 0xa0, 0x8000, 0x823f, 0x400}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0x9, 0x5, 0x0, 0x5d, @local, @mcast1, 0xa0, 0x8000, 0x823f, 0x400}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="20002abd7000fedbdf250d00000005002a0000000000060028000100000008000300", @ANYRESDEC=r3, @ANYBLOB="060028000300000008003a00010000000500370000000000dd5896f8a9c5da1c0000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000045)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000840)={r0, r5})
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newtaction={0x2c8, 0x30, 0x100, 0x0, 0x0, {}, [{0x2b4, 0x1, [@m_bpf={0x48, 0x15, 0x0, 0x0, {{0x8}, {0x4}, {0x1e, 0x6, "a748f9e04ca0acc85d3e2900"/26}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x84, 0x1c, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x4, 0xffffffffffffffff, 0x1, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x20000000}, 0x1}}]}, {0x1a, 0x6, "8b3a750b4cd7f6b3ff1af705a6f5dbf51f4eff765477"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x11c, 0x2001, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0xe5, 0x6, "556f5d98fef997d9c0afa6677ef23bfdf46a17f1e8e5995a619b6c61acce586543cfbc04b239546a6cdb00c7e5cab8ad44117ea59d7cf99d470156c571a3966ed9ce85e35bd01db4b656da1d2d92c8712267af63d34121fa108531217ef1aa0c983efb90d4e20a9318dd46e7f891eb8510229ef929d8c57c1919c43cc590539f43c0c3eb5063af9f1c5c4355285779f517cf45bfeaa78ef432bab25a31e2212bc8451988b6f65673d47b95958c7f007bf6f565ceadb43d281e9d89893abcd3a605d0aeb1007850bfa3ff165d630a4040ca09c3880e1f0939cccf67fbed44fa4850"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xc8, 0xe, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_ACTION={0x6, 0x3, 0x31}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_LABELS={0x14, 0x7, "f40c72367bd3117bf9aa2193c38375b0"}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}]}, {0x5f, 0x6, "973db2d658cd2914bea6740898b15855a3b61056b4c63503afda0ffe249b3b83e46da7cf096a2cbc28f3dfc2a121b7644267a4d69e2b808706c0351a2fe70a76b1c763bdda15e2ca37f478b717fc1c83cf3396d80dd01650c1ef5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2c8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r9)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fbdbdf254100000008000300", @ANYRES8=r3, @ANYBLOB="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"], 0x1c}}, 0x800)
bind$netlink(r1, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff000000000000000071109d0000000000950000c837000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff000000000000000071109d0000000000950000c837000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x24}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000000c0))
close(0x3)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)

2.75033ms ago: executing program 1 (id=1023):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) (async, rerun: 32)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/100], 0x0) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) (async)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) (async)
socket$inet6(0xa, 0xa, 0x6) (async)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc200000000000002002000000000010000"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)

0s ago: executing program 1 (id=1024):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6, 0x401}]}, 0x10) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) (rerun: 64)
write$tun(r3, &(0x7f0000001240)=ANY=[@ANYBLOB="080008000500020000001400050047a00fc000680000030690780a010100e0000001004404b93e0000004e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35429' (ED25519) to the list of known hosts.
syzkaller login: [   56.207164][ T5827] cgroup: Unknown subsys name 'net'
[   56.371146][ T5827] cgroup: Unknown subsys name 'cpuset'
[   56.377286][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.141867][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.552963][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.558412][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.561785][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.564764][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.569108][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.572187][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.596530][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.601736][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.605535][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.608648][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.640367][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.644727][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.650209][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.654650][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.657876][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.859894][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   63.978111][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.001778][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.004758][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.008176][ T5845] bridge_slave_0: entered allmulticast mode
[   64.011323][ T5845] bridge_slave_0: entered promiscuous mode
[   64.016304][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.018920][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.021519][ T5845] bridge_slave_1: entered allmulticast mode
[   64.024384][ T5845] bridge_slave_1: entered promiscuous mode
[   64.046239][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.080732][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.085958][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.180082][ T5845] team0: Port device team_slave_0 added
[   64.190587][ T5845] team0: Port device team_slave_1 added
[   64.245395][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.249028][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.252010][ T5854] bridge_slave_0: entered allmulticast mode
[   64.256180][ T5854] bridge_slave_0: entered promiscuous mode
[   64.260272][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.263274][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.267492][ T5849] bridge_slave_0: entered allmulticast mode
[   64.271220][ T5849] bridge_slave_0: entered promiscuous mode
[   64.275096][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.280181][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.290836][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.296687][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.299535][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.302157][ T5854] bridge_slave_1: entered allmulticast mode
[   64.305192][ T5854] bridge_slave_1: entered promiscuous mode
[   64.317869][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.320582][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.322882][ T5849] bridge_slave_1: entered allmulticast mode
[   64.325933][ T5849] bridge_slave_1: entered promiscuous mode
[   64.329723][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.332502][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.343222][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.362131][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.380761][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.397096][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.402365][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.443745][ T5854] team0: Port device team_slave_0 added
[   64.447753][ T5854] team0: Port device team_slave_1 added
[   64.468697][ T5849] team0: Port device team_slave_0 added
[   64.489711][ T5849] team0: Port device team_slave_1 added
[   64.492124][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.494539][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.504210][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.513945][ T5845] hsr_slave_0: entered promiscuous mode
[   64.519248][ T5845] hsr_slave_1: entered promiscuous mode
[   64.538017][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.540658][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.550391][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.570358][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.572594][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.582672][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.602986][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.605231][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.615288][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.693030][ T5854] hsr_slave_0: entered promiscuous mode
[   64.695346][ T5854] hsr_slave_1: entered promiscuous mode
[   64.698745][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   64.700762][ T5854] Cannot create hsr debugfs directory
[   64.709548][ T5849] hsr_slave_0: entered promiscuous mode
[   64.711835][ T5849] hsr_slave_1: entered promiscuous mode
[   64.714056][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   64.716159][ T5849] Cannot create hsr debugfs directory
[   64.997313][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.006726][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.020698][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.027719][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.074298][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.079567][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.086909][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.094840][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.153555][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.168991][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.174989][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.190993][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.273138][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.310786][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.327572][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.330535][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.359274][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.362225][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.374992][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.400758][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.408023][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.425305][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.427754][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.438016][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.448579][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.450885][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.460955][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.463312][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.480112][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.483704][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.532412][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.537786][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.651858][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.667224][ T5853] Bluetooth: hci0: command tx timeout
[   65.667585][ T5235] Bluetooth: hci2: command tx timeout
[   65.669758][   T55] Bluetooth: hci1: command tx timeout
[   65.718127][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.729953][ T5845] veth0_vlan: entered promiscuous mode
[   65.750555][ T5845] veth1_vlan: entered promiscuous mode
[   65.759778][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.804909][ T5845] veth0_macvtap: entered promiscuous mode
[   65.818707][ T5845] veth1_macvtap: entered promiscuous mode
[   65.821886][ T5854] veth0_vlan: entered promiscuous mode
[   65.837831][ T5854] veth1_vlan: entered promiscuous mode
[   65.853777][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.864051][ T5849] veth0_vlan: entered promiscuous mode
[   65.872186][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.885639][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.893337][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.898901][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.902905][ T5849] veth1_vlan: entered promiscuous mode
[   65.907653][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.910730][ T5854] veth0_macvtap: entered promiscuous mode
[   65.924765][ T5854] veth1_macvtap: entered promiscuous mode
[   65.964270][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.975245][ T5849] veth0_macvtap: entered promiscuous mode
[   65.987628][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.009656][ T5849] veth1_macvtap: entered promiscuous mode
[   66.014747][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.022053][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.024617][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.040163][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.055525][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.061445][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.109261][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.112746][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.119182][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.124610][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.143828][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.157355][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.160237][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.163148][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.201149][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.215468][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.220236][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.310896][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.313887][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.366004][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.368383][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.462482][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.464929][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.569189][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'.
[   66.583277][ T5934] pim6reg: entered allmulticast mode
[   66.586925][ T5934] pim6reg: left allmulticast mode
[   66.642682][ T5937] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20002
[   66.659657][    T9] IPVS: starting estimator thread 0...
[   66.666750][ T5936] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   66.736587][ T5942] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET)
[   66.746278][ T5938] IPVS: using max 51 ests per chain, 122400 per kthread
[   66.789547][ T5944] bond0: (slave veth3): Enslaving as an active interface with an up link
[   66.798668][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   66.808844][ T5945] syzkaller1: entered promiscuous mode
[   66.811067][ T5945] syzkaller1: entered allmulticast mode
[   67.494324][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.563563][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'.
[   67.567810][ T5952] netlink: 'syz.2.11': attribute type 2 has an invalid length.
[   67.748463][ T5853] Bluetooth: hci2: command tx timeout
[   67.756498][   T55] Bluetooth: hci1: command tx timeout
[   67.762858][ T5853] Bluetooth: hci0: command tx timeout
[   67.992725][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   68.098583][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.120842][ T5984] bond0: (slave rose0): Enslaving as an active interface with an up link
[   68.128305][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   68.132867][ T5983] netlink: 'syz.1.19': attribute type 4 has an invalid length.
[   68.210008][ T5998] netlink: 'syz.1.19': attribute type 4 has an invalid length.
[   69.054625][ T6028] netlink: 'syz.1.23': attribute type 16 has an invalid length.
[   69.058940][ T6028] netlink: 'syz.1.23': attribute type 17 has an invalid length.
[   69.090061][ T6030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.24'.
[   69.096717][ T6028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.154226][ T6033] geneve2: entered promiscuous mode
[   69.167034][ T6033] geneve2: entered allmulticast mode
[   69.171879][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[   69.175464][ T6035] netlink: 'syz.0.24': attribute type 12 has an invalid length.
[   69.180210][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[   69.183713][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[   69.189099][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[   69.215012][ T6032] Zero length message leads to an empty skb
[   69.263396][ T6039] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   69.280642][ T6039] syzkaller1: entered promiscuous mode
[   69.282637][ T6039] syzkaller1: entered allmulticast mode
[   69.391626][ T6041] syz_tun: entered allmulticast mode
[   69.408504][ T6041] dvmrp1: entered allmulticast mode
[   69.504605][ T6040] syz_tun: left allmulticast mode
[   69.782105][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.826427][   T55] Bluetooth: hci1: command tx timeout
[   69.826480][ T5235] Bluetooth: hci2: command tx timeout
[   69.829193][ T5853] Bluetooth: hci0: command tx timeout
[   69.876588][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.982892][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   70.049638][ T6075] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   70.152900][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.1.36'.
[   70.172863][ T6081] netlink: 'syz.1.36': attribute type 1 has an invalid length.
[   70.341858][ T6087] syzkaller1: entered promiscuous mode
[   70.343738][ T6087] syzkaller1: entered allmulticast mode
[   70.391174][ T6092] netlink: 'syz.2.41': attribute type 1 has an invalid length.
[   70.756428][ T6114] syzkaller1: entered promiscuous mode
[   70.758508][ T6114] syzkaller1: entered allmulticast mode
[   71.314444][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.317960][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.381639][ T6139] bridge_slave_0: left allmulticast mode
[   71.383578][ T6139] bridge_slave_0: left promiscuous mode
[   71.387761][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.394587][ T6139] bridge_slave_1: left allmulticast mode
[   71.399895][ T6139] bridge_slave_1: left promiscuous mode
[   71.403055][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.419237][ T6139] bond0: (slave bond_slave_0): Releasing backup interface
[   71.439622][ T6139] bond0: (slave bond_slave_1): Releasing backup interface
[   71.452318][ T6139] team0: Port device team_slave_0 removed
[   71.458886][ T6139] team0: Port device team_slave_1 removed
[   71.462085][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.464642][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.471957][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.475076][ T6139] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.495439][ T6139] bond0: (slave veth3): Releasing backup interface
[   71.791322][ T6165] syzkaller0: entered promiscuous mode
[   71.793521][ T6165] syzkaller0: entered allmulticast mode
[   71.906015][ T5853] Bluetooth: hci2: command tx timeout
[   71.916606][ T5853] Bluetooth: hci0: command tx timeout
[   71.916844][ T5235] Bluetooth: hci1: command tx timeout
[   72.159252][ T6219] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   72.355108][ T6226] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   72.445588][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'.
[   72.503225][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.503907][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'.
[   72.506876][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.589717][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.597361][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.688313][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.60'.
[   72.699341][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.704422][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[   72.710174][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.713229][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[   72.719766][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.722664][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[   72.727820][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.735996][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[   72.783848][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   72.975479][ T6219] Bluetooth: hci0: Opcode 0x080f failed: -4
[   73.042465][ T6248] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   73.107916][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   73.137533][ T6251] netlink: 'syz.1.67': attribute type 10 has an invalid length.
[   73.251974][ T6256] tipc: Started in network mode
[   73.253778][ T6256] tipc: Node identity ac14142f, cluster identity 4711
[   73.288509][ T6256] tipc: New replicast peer: 0.0.0.0
[   73.292593][ T6256] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.301039][ T6263] netlink: 'syz.0.71': attribute type 1 has an invalid length.
[   73.356710][ T5910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.360510][ T5910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.371995][ T6263] 8021q: VLANs not supported on syztnl0
[   73.458572][ T5910] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.464467][ T5910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.598191][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   73.829516][ T6284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.847046][ T6283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   73.921712][ T6286] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.966417][    C0] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82
[   74.014610][ T6283] tipc: Resetting bearer <eth:syzkaller0>
[   74.051272][ T6293] netlink: 68 bytes leftover after parsing attributes in process `syz.2.80'.
[   74.061600][ T6293] netlink: 'syz.2.80': attribute type 1 has an invalid length.
[   74.101452][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.115392][ T6282] tipc: Resetting bearer <eth:syzkaller0>
[   74.129508][ T6282] tipc: Disabling bearer <eth:syzkaller0>
[   74.144369][ T6293] bond1: (slave geneve3): making interface the new active one
[   74.151589][ T6293] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   74.155246][ T5910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.164278][ T5910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.169666][ T5910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.173140][ T5910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.228378][ T5235] Bluetooth: hci0: command 0x080f tx timeout
[   74.323195][ T6308] netlink: 'syz.2.81': attribute type 13 has an invalid length.
[   74.328844][ T6308] netlink: 'syz.2.81': attribute type 17 has an invalid length.
[   74.409398][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.415249][ T6308] 8021q: adding VLAN 0 to HW filter on device team0
[   74.430942][ T6308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.508946][ T6316] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   74.544176][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   74.547917][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'.
[   74.552587][ T6316] bond1: (slave geneve2): making interface the new active one
[   74.556618][ T6316] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   74.560440][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   74.563828][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   74.568528][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'.
[   74.577661][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.581378][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   74.586562][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   74.867267][   T24] tipc: Node number set to 2886997039
[   74.889685][ T6326] geneve3: entered promiscuous mode
[   74.891420][ T6326] geneve3: entered allmulticast mode
[   74.895565][ T5910] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.904367][ T5910] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   74.912025][ T5910] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[   74.928407][ T5910] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.931223][ T5910] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   74.933928][ T5910] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[   74.937124][ T5910] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.941931][ T5910] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   74.946514][ T5910] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[   74.950002][ T5910] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.953024][ T5910] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   74.958287][ T5910] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[   75.008413][ T6331] geneve4: entered promiscuous mode
[   75.010141][ T6331] geneve4: entered allmulticast mode
[   75.020348][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.023984][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.032920][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.037884][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.097964][ T6342] syz_tun: entered allmulticast mode
[   75.101963][ T6342] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   75.112296][ T6342] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002
[   75.172541][ T6341] syz_tun: left allmulticast mode
[   75.186434][ T6346] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   75.245442][ T6346] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.253341][ T6352] ipvlan2: entered allmulticast mode
[   75.255158][ T6352] bond2: entered allmulticast mode
[   75.274316][ T6346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.288126][ T6346] bond2: (slave gretap1): making interface the new active one
[   75.290632][ T6346] gretap1: entered allmulticast mode
[   75.293563][ T6346] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   75.301600][ T6346] syz.0.94 (6346) used greatest stack depth: 19912 bytes left
[   75.323416][ T6355] warning: `syz.2.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.365134][ T6359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.368908][ T6359] syzkaller0: entered promiscuous mode
[   75.370719][ T6359] syzkaller0: entered allmulticast mode
[   75.383787][ T6359] tipc: Resetting bearer <eth:syzkaller0>
[   75.387845][ T6359] syzkaller1: entered promiscuous mode
[   75.389752][ T6359] syzkaller1: entered allmulticast mode
[   75.393529][ T6358] tipc: Resetting bearer <eth:syzkaller0>
[   75.406371][ T6358] tipc: Disabling bearer <eth:syzkaller0>
[   75.480110][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.485125][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0
[   75.495270][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.498556][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0
[   75.505367][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.515776][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0
[   75.518554][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.533407][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0
[   75.661434][   T24] IPVS: starting estimator thread 0...
[   75.668836][ T6376] tipc: Started in network mode
[   75.670415][ T6376] tipc: Node identity ac1414aa, cluster identity 4711
[   75.673750][ T6376] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   75.678840][ T6376] tipc: Enabled bearer <udp:s>, priority 10
[   75.746029][ T6377] IPVS: using max 64 ests per chain, 153600 per kthread
[   75.787262][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.792609][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.798418][ T6381] bond0 (unregistering): Released all slaves
[   75.815917][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   75.865114][ T6390] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   75.955935][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.005546][ T6399] geneve2: left promiscuous mode
[   76.009328][ T6399] geneve2: left allmulticast mode
[   76.023876][ T5875] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.028088][ T5875] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.031814][ T5875] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.035396][ T5875] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.039922][ T5875] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.043727][ T5875] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.049775][ T5875] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.053402][ T5875] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.105857][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.255829][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.405887][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.510068][ T6406] batadv_slave_1: entered promiscuous mode
[   76.549376][ T6406] batadv_slave_1: left promiscuous mode
[   76.695910][ T5882] tipc: Node number set to 2886997162
[   77.541114][ T6449] netlink: 'syz.0.125': attribute type 9 has an invalid length.
[   77.545344][ T6449] netlink: 'syz.0.125': attribute type 6 has an invalid length.
[   77.645866][    C1] net_ratelimit: 3 callbacks suppressed
[   77.645896][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   77.851590][ T6467] Bluetooth: MGMT ver 1.23
[   77.860992][ T6467] __nla_validate_parse: 10 callbacks suppressed
[   77.861005][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.130'.
[   77.873876][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.130'.
[   77.990327][ T6474] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   78.078595][ T6486] syzkaller1: entered promiscuous mode
[   78.084199][ T6486] syzkaller1: entered allmulticast mode
[   78.091844][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'.
[   78.099858][ T6491] netlink: 'syz.1.134': attribute type 4 has an invalid length.
[   78.354015][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[   78.439286][ T6509] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   78.697794][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'.
[   78.705856][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   78.750870][ T6514] tipc: Started in network mode
[   78.753028][ T6514] tipc: Node identity 169ae873f3fe, cluster identity 4711
[   78.756646][ T6514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.760008][ T6514] syzkaller0: entered promiscuous mode
[   78.762305][ T6514] syzkaller0: entered allmulticast mode
[   78.783099][ T6514] tipc: Resetting bearer <eth:syzkaller0>
[   78.787955][ T6514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.141'.
[   78.793879][ T6513] tipc: Resetting bearer <eth:syzkaller0>
[   78.807573][ T6513] tipc: Disabling bearer <eth:syzkaller0>
[   78.901630][ T6516] sock: sock_set_timeout: `syz.0.142' (pid 6516) tries to set negative timeout
[   78.908726][ T6518] sock: sock_set_timeout: `syz.0.142' (pid 6518) tries to set negative timeout
[   79.061947][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'.
[   79.074961][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'.
[   79.278175][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[   79.430095][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.538485][ T6552] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   79.745765][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   79.833352][ T6574] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.891819][ T6578] sctp: [Deprecated]: syz.2.155 (pid 6578) Use of int in maxseg socket option.
[   79.891819][ T6578] Use struct sctp_assoc_value instead
[   79.906003][ T5235] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   79.907643][ T5853] Bluetooth: hci0: command 0x080f tx timeout
[   79.980251][ T6582] geneve4: entered promiscuous mode
[   79.982577][ T6582] geneve4: entered allmulticast mode
[   79.988588][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 57787 - 0
[   79.992156][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 46606 - 0
[   79.998221][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 57787 - 0
[   80.001926][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 46606 - 0
[   80.006038][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 57787 - 0
[   80.009922][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 46606 - 0
[   80.013442][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 57787 - 0
[   80.019225][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 46606 - 0
[   80.187535][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'.
[   80.282068][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.452112][ T6614] netlink: 'syz.1.163': attribute type 16 has an invalid length.
[   80.455234][ T6614] netlink: 'syz.1.163': attribute type 17 has an invalid length.
[   80.479395][ T6614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.617179][ T6616] IPv6: Can't replace route, no match found
[   80.786890][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   80.795102][ T6627] geneve5: entered promiscuous mode
[   80.808754][ T5910] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[   80.813625][ T5910] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[   80.817606][ T5910] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[   80.820793][ T5910] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[   80.963710][ T6641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.980242][ T6640] tipc: Disabling bearer <eth:syzkaller0>
[   81.391299][ T6670] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   81.413552][ T6672] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[   81.785092][ T6699] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   81.793214][ T6702] netlink: 'syz.2.189': attribute type 1 has an invalid length.
[   81.804077][ T6699] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.821519][ T6702] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.830164][ T6702] erspan0: entered allmulticast mode
[   81.835247][ T6702] bond2: (slave erspan0): making interface the new active one
[   81.839755][ T6702] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   82.013289][ T6711] netlink: 'syz.2.192': attribute type 3 has an invalid length.
[   82.062634][ T6714] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[   82.067107][ T6714] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[   82.865829][    C1] net_ratelimit: 1 callbacks suppressed
[   82.865840][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   82.888465][ T6723] syzkaller1: entered promiscuous mode
[   82.890431][ T6723] syzkaller1: entered allmulticast mode
[   83.073455][ T6725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.093546][ T6725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.098878][ T6725] bond0 (unregistering): Released all slaves
[   83.311656][ T6758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.320005][ T6758] __nla_validate_parse: 10 callbacks suppressed
[   83.320019][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[   83.472495][ T6764] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   83.475370][ T6764] tipc: Enabled bearer <udp:syz2>, priority 10
[   83.605963][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   83.793564][ T6769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.205'.
[   83.833957][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.206'.
[   83.875910][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   83.906022][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   83.911150][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[   84.059810][ T6789] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   84.095079][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.133809][ T6790] netlink: 'syz.1.208': attribute type 10 has an invalid length.
[   84.149768][ T6790] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   84.153196][ T6790] team0: Failed to send options change via netlink (err -105)
[   84.157610][ T6790] team0: Port device netdevsim0 added
[   84.168272][ T6789] bond0: (slave gretap2): making interface the new active one
[   84.172050][ T6789] bond0: (slave gretap2): Enslaving as an active interface with an up link
[   84.180676][ T6212] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   84.208592][ T6782] infiniband !yz!: set active
[   84.210948][ T6782] infiniband !yz!: added team_slave_0
[   84.261978][ T6782] RDS/IB: !yz!: added
[   84.264320][ T6782] smc: adding ib device !yz! with port count 1
[   84.268864][ T6782] smc:    ib device !yz! port 1 has no pnetid
[   84.365243][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 57787 - 0
[   84.374103][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 46606 - 0
[   84.381705][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0
[   84.390075][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 57787 - 0
[   84.398467][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 46606 - 0
[   84.402694][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0
[   84.406568][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   84.409442][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 57787 - 0
[   84.414194][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 46606 - 0
[   84.417475][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0
[   84.423060][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 57787 - 0
[   84.427644][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 46606 - 0
[   84.430527][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0
[   84.945865][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   85.044993][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'.
[   85.065860][ T6814] netlink: 'syz.1.217': attribute type 2 has an invalid length.
[   85.074182][ T6814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.217'.
[   85.080121][ T6814] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   85.177836][   T24] IPVS: starting estimator thread 0...
[   85.206065][ T6832] netlink: 'syz.1.223': attribute type 12 has an invalid length.
[   85.208551][ T6832] netlink: 'syz.1.223': attribute type 29 has an invalid length.
[   85.210971][ T6832] netlink: 148 bytes leftover after parsing attributes in process `syz.1.223'.
[   85.226257][ T6832] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[   85.228670][ T6832] netlink: 47 bytes leftover after parsing attributes in process `syz.1.223'.
[   85.245020][ T6832] netlink: 'syz.1.223': attribute type 10 has an invalid length.
[   85.256889][ T6832] team0: Port device macvlan1 added
[   85.266842][ T6834] IPVS: using max 64 ests per chain, 153600 per kthread
[   85.327320][ T6832] syz.1.223 (6832) used greatest stack depth: 18744 bytes left
[   85.435878][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   85.494737][ T6838] netlink: 56 bytes leftover after parsing attributes in process `syz.1.225'.
[   85.561834][ T6838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.697961][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[   85.838686][ T6844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.230213][ T6849] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   86.636526][ T1268] cfg80211: failed to load regulatory.db
[   88.067308][    C1] net_ratelimit: 4 callbacks suppressed
[   88.067326][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   88.308138][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.313122][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.338259][ T6888] __nla_validate_parse: 10 callbacks suppressed
[   88.338272][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'.
[   88.343696][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'.
[   88.346889][ T6888] netlink: 'syz.0.241': attribute type 4 has an invalid length.
[   88.416270][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'.
[   88.538833][ T6894] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   88.555902][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   88.576869][ T6894] bond4: entered promiscuous mode
[   88.579372][ T6894] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.585219][ T6894] netlink: 3 bytes leftover after parsing attributes in process `syz.0.242'.
[   88.600672][ T6894] batadv1: entered promiscuous mode
[   88.603061][ T6894] batadv1: entered allmulticast mode
[   88.607161][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv1
[   88.612472][ T6894] bond4: (slave batadv1): making interface the new active one
[   88.616857][ T6894] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   88.684447][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   88.729924][ T6894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.242'.
[   88.770709][ T6904] netlink: 208 bytes leftover after parsing attributes in process `syz.1.245'.
[   88.894906][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'.
[   88.902655][ T6911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'.
[   88.910451][ T6911] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.928182][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'.
[   88.943828][ T6914] k*]: entered promiscuous mode
[   88.973846][ T6919] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.989784][ T6919] vlan2: entered allmulticast mode
[   88.991488][ T6919] batadv0: entered allmulticast mode
[   88.996945][ T6919] bond2: (slave vlan2): making interface the new active one
[   89.000795][ T6919] bond2: (slave vlan2): Enslaving as an active interface with an up link
[   89.008853][ T6919] syz.1.248 (6919) used greatest stack depth: 18248 bytes left
[   89.086350][ T6929] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   89.106963][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   89.170039][ T6937] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[   89.174517][ T6937] bond5: (slave vxcan1): Error -95 calling set_mac_address
[   89.280276][ T6940] validate_nla: 4 callbacks suppressed
[   89.280314][ T6940] netlink: 'syz.0.253': attribute type 1 has an invalid length.
[   89.342481][ T6942] syzkaller1: entered promiscuous mode
[   89.344246][ T6942] syzkaller1: entered allmulticast mode
[   89.585876][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.156055][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.503395][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.522367][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.625923][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.671515][ T6981] vlan2: left allmulticast mode
[   90.673179][ T6981] batadv0: left allmulticast mode
[   90.679489][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.690089][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.693964][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.723702][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.750938][ T6994] netlink: 'syz.1.268': attribute type 10 has an invalid length.
[   90.756371][ T6985] syzkaller0: create flow: hash 1158044741 index 1
[   90.846204][ T6984] syzkaller0: delete flow: hash 1158044741 index 1
[   91.195764][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   91.667160][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   91.767789][ T7004] netlink: 'syz.1.271': attribute type 28 has an invalid length.
[   92.071168][ T7017] netlink: 'syz.0.274': attribute type 6 has an invalid length.
[   92.089352][ T7019] bond4: entered promiscuous mode
[   92.091350][ T7019] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.198134][ T7019] bond4 (unregistering): Released all slaves
[   92.217926][ T7017] netlink: 'syz.0.274': attribute type 12 has an invalid length.
[   92.235764][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   92.445214][ T7034] syz_tun: entered allmulticast mode
[   92.460663][ T7034] dvmrp1: entered allmulticast mode
[   92.498897][ T7034] syz_tun: left allmulticast mode
[   92.500909][ T7034] dvmrp1: left allmulticast mode
[   92.528710][ T7041] syzkaller1: entered promiscuous mode
[   92.531080][ T7041] syzkaller1: entered allmulticast mode
[   92.705991][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   93.048130][ T7080] netlink: 'syz.2.290': attribute type 4 has an invalid length.
[   93.304367][ T7096] syz_tun: entered allmulticast mode
[   93.390111][ T7096] syz_tun: left allmulticast mode
[   93.560347][ T7116] __nla_validate_parse: 17 callbacks suppressed
[   93.560361][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.299'.
[   93.596452][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[   93.675373][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[   93.702839][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.784157][ T7132] netlink: 'syz.2.305': attribute type 1 has an invalid length.
[   93.803503][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'.
[   93.804548][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.304'.
[   93.809500][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'.
[   93.812493][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.304'.
[   93.815394][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.304'.
[   94.021170][ T7154] netlink: 'syz.2.311': attribute type 10 has an invalid length.
[   94.023940][ T7154] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.047600][ T7156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.051147][ T7156] syzkaller0: entered promiscuous mode
[   94.053420][ T7156] syzkaller0: entered allmulticast mode
[   94.081809][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   94.096956][ T7155] tipc: Resetting bearer <eth:syzkaller0>
[   94.108492][ T7155] tipc: Disabling bearer <eth:syzkaller0>
[   94.388267][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[   94.391323][ T7166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.456780][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[   94.767614][ T7177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.912944][ T7180] bond2: (slave erspan0): Releasing active interface
[   94.918008][ T7180] bridge_slave_0: left allmulticast mode
[   94.920329][ T7180] bridge_slave_0: left promiscuous mode
[   94.922730][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.929086][ T7180] bridge_slave_1: left allmulticast mode
[   94.931358][ T7180] bridge_slave_1: left promiscuous mode
[   94.933776][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.940440][ T7180] team0: Port device team_slave_0 removed
[   94.945047][ T7180] team0: Port device team_slave_1 removed
[   94.949275][ T7180] bond1: (slave geneve3): Releasing active interface
[   94.953866][ T7180] bond0: (slave gretap2): Releasing active interface
[   95.080497][ T7180] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   95.267881][ T7196] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   95.332744][ T7201] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[   96.127164][ T7205] netlink: 'syz.1.325': attribute type 6 has an invalid length.
[   96.140530][ T7208] netlink: 'syz.1.325': attribute type 12 has an invalid length.
[   96.274956][ T7227] netlink: 'syz.2.330': attribute type 10 has an invalid length.
[   96.278420][ T7226] netlink: 'syz.2.330': attribute type 10 has an invalid length.
[   96.630037][ T7249] netlink: 'syz.1.337': attribute type 4 has an invalid length.
[   96.635659][ T7249] netlink: 'syz.1.337': attribute type 4 has an invalid length.
[   96.758295][ T7257] netlink: 'syz.2.339': attribute type 13 has an invalid length.
[   96.761815][ T7257] netlink: 'syz.2.339': attribute type 17 has an invalid length.
[   96.770828][ T7257] erspan0: left allmulticast mode
[   96.785876][ T7257] 8021q: adding VLAN 0 to HW filter on device team0
[   96.790211][ T7257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.849084][ T7265] IPv6: sit1: Disabled Multicast RS
[   97.025851][ T7274] netlink: 'syz.2.345': attribute type 6 has an invalid length.
[   98.395926][ T7317] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.410813][ T7318] bond3: (slave gretap3): making interface the new active one
[   98.418673][ T7318] bond3: (slave gretap3): Enslaving as an active interface with an up link
[   98.910502][ T7341] __nla_validate_parse: 12 callbacks suppressed
[   98.910516][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   98.915518][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   98.919508][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   98.922789][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   98.925635][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   99.104894][ T7350] dvmrp8: entered allmulticast mode
[   99.107867][ T7350] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   99.111866][ T7349] dvmrp8: left allmulticast mode
[   99.296797][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   99.305301][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'.
[   99.352094][ T7359] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.447530][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'.
[   99.450534][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'.
[   99.466588][ T7370] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.478833][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[   99.518141][ T7375] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  100.707423][ T7438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.716905][ T7438] syzkaller0: entered promiscuous mode
[  100.719718][ T7438] syzkaller0: entered allmulticast mode
[  100.877794][ T7437] tipc: Resetting bearer <eth:syzkaller0>
[  100.890427][ T7437] tipc: Disabling bearer <eth:syzkaller0>
[  100.910447][ T7447] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.917538][ T7447] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  100.970128][ T7451] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  101.350551][ T7465] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.357576][ T7465] netlink: 'syz.2.399': attribute type 11 has an invalid length.
[  101.360831][ T7465] netlink: 'syz.2.399': attribute type 11 has an invalid length.
[  101.479300][ T7477] validate_nla: 5 callbacks suppressed
[  101.479319][ T7477] netlink: 'syz.2.402': attribute type 12 has an invalid length.
[  101.713074][ T7487] netlink: 'syz.2.406': attribute type 12 has an invalid length.
[  101.764678][ T7490] netlink: 'syz.2.407': attribute type 16 has an invalid length.
[  101.768663][ T7490] netlink: 'syz.2.407': attribute type 3 has an invalid length.
[  101.806023][ T7492] netlink: 'syz.2.408': attribute type 21 has an invalid length.
[  102.027325][ T5908] tipc: Node number set to 3848595571
[  102.222100][ T7510] syzkaller1: entered promiscuous mode
[  102.224210][ T7510] syzkaller1: entered allmulticast mode
[  102.273689][ T7510] netlink: 'syz.0.413': attribute type 13 has an invalid length.
[  102.278885][ T7510] netlink: 'syz.0.413': attribute type 27 has an invalid length.
[  102.493126][ T7515] netlink: 'syz.0.414': attribute type 10 has an invalid length.
[  102.501964][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.508985][ T7515] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  103.095536][ T7551] netlink: 'syz.2.426': attribute type 1 has an invalid length.
[  103.130545][ T7551] 8021q: adding VLAN 0 to HW filter on device bond5
[  103.434131][ T7573] netlink: 'syz.0.432': attribute type 4 has an invalid length.
[  103.862610][ T7587] geneve4: entered promiscuous mode
[  103.866000][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  103.870008][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  103.872858][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  103.878922][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  104.168551][   T56] block nbd0: Receive control failed (result -32)
[  104.288213][ T7597] syzkaller1: entered promiscuous mode
[  104.290192][ T7597] syzkaller1: entered allmulticast mode
[  104.411913][ T7604] __nla_validate_parse: 21 callbacks suppressed
[  104.411931][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.420629][ T7604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.431855][ T7604] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  104.436871][ T7604] gretap2: entered promiscuous mode
[  104.489382][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'.
[  104.548271][ T7609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.442'.
[  104.678018][ T7616] syzkaller1: entered promiscuous mode
[  104.680285][ T7616] syzkaller1: entered allmulticast mode
[  104.741842][ T7622] netlink: 104 bytes leftover after parsing attributes in process `syz.1.447'.
[  104.925764][ T7640] geneve3: left promiscuous mode
[  104.928196][ T7640] geneve3: left allmulticast mode
[  104.930604][ T7640] geneve4: left promiscuous mode
[  104.932304][ T7640] geneve4: left allmulticast mode
[  104.934185][ T7640] ipvlan2: left allmulticast mode
[  104.937434][ T7640] bond2: left allmulticast mode
[  104.939426][ T7640] gretap1: left allmulticast mode
[  104.942056][ T7640] bond4: left promiscuous mode
[  104.944302][ T7640] batadv1: left promiscuous mode
[  104.947270][ T7640] batadv1: left allmulticast mode
[  104.950956][ T7640] gretap2: left promiscuous mode
[  105.022995][ T7647] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.142688][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[  105.334869][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.343133][ T7669] 8021q: adding VLAN 0 to HW filter on device team0
[  105.351656][ T7669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.423614][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.507887][ T7678] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.520693][ T7678] vlan3: entered promiscuous mode
[  105.522739][ T7678] bond5: entered promiscuous mode
[  105.524909][ T7678] vlan3: entered allmulticast mode
[  105.527394][ T7678] bond5: entered allmulticast mode
[  105.540116][ T7678] bond5: (slave gretap1): making interface the new active one
[  105.542599][ T7678] gretap1: entered promiscuous mode
[  105.544425][ T7678] gretap1: entered allmulticast mode
[  105.547576][ T7678] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  105.627063][ T7683] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.466'.
[  105.631330][ T7683] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  105.641690][ T7683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.466'.
[  106.285286][ T7698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.295378][ T7698] bridge_slave_1: entered promiscuous mode
[  106.299300][ T7698] bridge_slave_1: entered allmulticast mode
[  106.304687][ T7698] tipc: Resetting bearer <eth:syzkaller0>
[  106.314067][ T7697] tipc: Disabling bearer <eth:syzkaller0>
[  106.445102][ T7711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.475'.
[  106.499720][ T7709] syzkaller0: entered promiscuous mode
[  106.501546][ T7709] syzkaller0: entered allmulticast mode
[  106.505202][ T7709] syzkaller0: tun_chr_ioctl cmd 1074025677
[  106.511394][ T7709] syzkaller0: Linktype set failed because interface is up
[  106.544594][ T7716] syzkaller1: entered promiscuous mode
[  106.546753][ T7716] syzkaller1: entered allmulticast mode
[  106.813871][ T7731] netlink: 184 bytes leftover after parsing attributes in process `syz.1.480'.
[  107.061605][ T7767] lo speed is unknown, defaulting to 1000
[  107.064112][ T7767] lo speed is unknown, defaulting to 1000
[  107.069545][ T7767] lo speed is unknown, defaulting to 1000
[  107.074303][ T7767] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  107.093619][ T7767] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  107.114208][ T7767] lo speed is unknown, defaulting to 1000
[  107.128814][ T7767] lo speed is unknown, defaulting to 1000
[  107.143295][ T7767] lo speed is unknown, defaulting to 1000
[  107.185100][ T7774] validate_nla: 6 callbacks suppressed
[  107.185116][ T7774] netlink: 'syz.0.485': attribute type 4 has an invalid length.
[  107.203827][ T7767] smc: removing ib device !yz!
[  108.044628][ T7825] lo speed is unknown, defaulting to 1000
[  108.199573][ T7842] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  108.646256][ T7867] netlink: 'syz.0.495': attribute type 13 has an invalid length.
[  108.649652][ T7867] netlink: 'syz.0.495': attribute type 17 has an invalid length.
[  108.662537][ T7867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.670208][  T972] lo speed is unknown, defaulting to 1000
[  108.710883][ T7867] lo speed is unknown, defaulting to 1000
[  109.252870][ T7885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.259996][   T33] audit: type=1107 audit(1757325268.079:2): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  109.739039][ T7893] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  110.140905][ T7900] netlink: 'syz.1.502': attribute type 3 has an invalid length.
[  110.147591][ T7900] syz_tun: entered allmulticast mode
[  110.159316][ T7900] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  110.192516][ T7900] 8021q: adding VLAN 0 to HW filter on device team0
[  110.197718][ T7900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.206832][ T7899] syz_tun: left allmulticast mode
[  110.446686][ T7916] __nla_validate_parse: 3 callbacks suppressed
[  110.446700][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  110.486452][ T7920] netlink: 788 bytes leftover after parsing attributes in process `syz.1.509'.
[  110.604540][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.758415][ T7933] netlink: 'syz.2.513': attribute type 42 has an invalid length.
[  110.781111][ T7935] IPVS: length: 163 != 8
[  110.861185][ T7946] netlink: 'syz.0.516': attribute type 33 has an invalid length.
[  110.863740][ T7946] netlink: 152 bytes leftover after parsing attributes in process `syz.0.516'.
[  110.921347][ T7948] netlink: 'syz.2.517': attribute type 6 has an invalid length.
[  110.942575][ T7948] netlink: 'syz.2.517': attribute type 12 has an invalid length.
[  110.946232][ T7948] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.517'.
[  110.992089][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[  111.041205][ T7954] netlink: 'syz.2.519': attribute type 4 has an invalid length.
[  111.051752][ T7954] netlink: 'syz.2.519': attribute type 4 has an invalid length.
[  111.060506][ T7954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.519'.
[  111.161589][ T7960] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.422754][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.525'.
[  111.543951][ T7988] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  111.546047][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'.
[  111.592030][ T7992] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  111.750137][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[  111.771099][ T8005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  111.800911][ T8005] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  111.839716][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'.
[  112.330988][ T8040] validate_nla: 1 callbacks suppressed
[  112.331008][ T8040] netlink: 'syz.2.538': attribute type 4 has an invalid length.
[  112.362718][ T8029] netlink: 'syz.2.538': attribute type 4 has an invalid length.
[  113.004732][ T8068] netlink: 'syz.1.550': attribute type 4 has an invalid length.
[  113.017685][ T8072] netlink: 'syz.2.551': attribute type 1 has an invalid length.
[  113.052557][ T8072] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.062178][ T8072] ipvlan2: entered allmulticast mode
[  113.064001][ T8072] bond6: entered allmulticast mode
[  113.112539][ T8081] netlink: 'syz.1.553': attribute type 12 has an invalid length.
[  113.171317][ T8086] netlink: 'syz.1.554': attribute type 21 has an invalid length.
[  113.174027][ T8086] netlink: 'syz.1.554': attribute type 4 has an invalid length.
[  113.440261][ T8101] sit0: entered promiscuous mode
[  113.442482][ T8101] sit0: entered allmulticast mode
[  113.741987][ T8122] unknown channel width for channel at 909000KHz?
[  113.801909][   T33] audit: type=1800 audit(1757325272.619:3): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.567" name="memory.events" dev="tmpfs" ino=1027 res=0 errno=0
[  113.813908][   T33] audit: type=1804 audit(1757325272.629:4): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.567" name="memory.events" dev="tmpfs" ino=1027 res=1 errno=0
[  113.829130][ T8130] netlink: 'syz.2.567': attribute type 5 has an invalid length.
[  113.836262][ T8130] geneve6: entered promiscuous mode
[  113.838132][ T8130] geneve6: entered allmulticast mode
[  113.839047][ T8133] netlink: 'syz.0.568': attribute type 1 has an invalid length.
[  113.840728][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  113.846624][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  113.878530][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  113.881911][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  113.908988][ T8133] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.925036][ T8136] syzkaller1: entered promiscuous mode
[  113.927597][ T8136] syzkaller1: entered allmulticast mode
[  114.169774][ T8162] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.184775][ T8161] netlink: 'syz.2.574': attribute type 1 has an invalid length.
[  114.273362][ T8175] lo speed is unknown, defaulting to 1000
[  114.372148][ T8183] team0: No ports can be present during mode change
[  114.468292][ T8189] syzkaller1: entered promiscuous mode
[  114.471658][ T8189] syzkaller1: entered allmulticast mode
[  114.693374][ T8202] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003
[  114.942354][ T8217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.945114][ T8217] syzkaller0: entered promiscuous mode
[  114.949164][ T8217] syzkaller0: entered allmulticast mode
[  114.963421][ T8217] tipc: Resetting bearer <eth:syzkaller0>
[  114.970435][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[  114.980819][ T8216] tipc: Disabling bearer <eth:syzkaller0>
[  115.092588][ T8221] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  115.099849][ T8221] bond0 (unregistering): Released all slaves
[  115.574419][ T8236] __nla_validate_parse: 29 callbacks suppressed
[  115.574430][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.0.599'.
[  115.723743][ T8245] xt_time: invalid argument - start or stop time greater than 23:59:59
[  115.971260][ T8269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.608'.
[  116.006288][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'.
[  116.016034][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'.
[  116.019494][ T8258] netlink: 216 bytes leftover after parsing attributes in process `syz.1.604'.
[  116.185879][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'.
[  116.189206][ T8273] netlink: 216 bytes leftover after parsing attributes in process `syz.0.609'.
[  116.868537][ T8276] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  116.870887][ T8276] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  116.876331][ T8277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.611'.
[  117.056775][ T8301] netlink: 84 bytes leftover after parsing attributes in process `syz.0.617'.
[  117.070343][ T8303] IPVS: Error connecting to the multicast addr
[  117.099599][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'.
[  117.135242][ T8308] pimreg: entered allmulticast mode
[  117.148068][ T8308] dvmrp8: entered allmulticast mode
[  117.150245][ T8308] pimreg: left allmulticast mode
[  117.151930][ T8308] dvmrp8: left allmulticast mode
[  117.233235][ T8323] vxcan1: entered allmulticast mode
[  117.235618][ T8323] vxcan1: left allmulticast mode
[  117.297823][ T8323] raw_sendmsg: syz.1.624 forgot to set AF_INET. Fix it!
[  117.302234][ T8326] syzkaller0: entered promiscuous mode
[  117.304115][ T8326] syzkaller0: entered allmulticast mode
[  118.392832][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.399547][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.404942][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.414484][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.423259][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.447773][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.453092][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.470351][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.501863][ T8350] syzkaller1: entered promiscuous mode
[  118.504180][ T8350] syzkaller1: entered allmulticast mode
[  118.753991][ T8376] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  118.834736][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.273762][ T8413] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  119.540504][ T8425] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.641720][ T8439] validate_nla: 5 callbacks suppressed
[  119.641732][ T8439] netlink: 'syz.0.646': attribute type 21 has an invalid length.
[  119.692134][ T8439] pimreg: entered allmulticast mode
[  119.751031][ T8439] dvmrp8: entered allmulticast mode
[  119.801092][ T8442] netlink: 'syz.2.647': attribute type 6 has an invalid length.
[  119.917979][ T8448] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  119.969293][ T5853] Bluetooth: hci2: link tx timeout
[  119.971711][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.003224][ T8448] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.123087][ T8448] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.179781][ T8448] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  120.285265][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  120.303391][ T5875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  120.315901][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  120.331279][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  120.547381][ T8438] pimreg: left allmulticast mode
[  120.549566][ T8438] dvmrp8: left allmulticast mode
[  120.579815][ T8475] netlink: 'syz.1.653': attribute type 12 has an invalid length.
[  120.588935][ T8475] syzkaller1: entered promiscuous mode
[  120.591293][ T8475] syzkaller1: entered allmulticast mode
[  120.624918][ T8479] __nla_validate_parse: 17 callbacks suppressed
[  120.624935][ T8479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.654'.
[  120.673079][ T8482] netlink: 'syz.0.655': attribute type 9 has an invalid length.
[  120.713266][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  120.716634][ T8484] net_ratelimit: 57 callbacks suppressed
[  120.716644][ T8484] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  120.721361][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.899686][ T8494] netlink: 72 bytes leftover after parsing attributes in process `syz.2.658'.
[  121.501477][ T8497] netlink: 'syz.1.659': attribute type 21 has an invalid length.
[  121.506864][ T8497] netlink: 156 bytes leftover after parsing attributes in process `syz.1.659'.
[  121.517795][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  121.782430][ T8526] lo speed is unknown, defaulting to 1000
[  121.832227][ T8529] lo speed is unknown, defaulting to 1000
[  121.878841][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  121.928254][ T8533] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[  121.936977][  T972] lo speed is unknown, defaulting to 1000
[  121.944920][  T972] syz2: Port: 1 Link DOWN
[  121.986050][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  122.018959][ T8534] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[  122.024228][ T5908] lo speed is unknown, defaulting to 1000
[  122.026513][ T5908] syz2: Port: 1 Link ACTIVE
[  122.504636][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'.
[  122.614486][ T8542] lo speed is unknown, defaulting to 1000
[  122.631908][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'.
[  122.651326][ T8545] veth0_to_team: entered promiscuous mode
[  122.653331][ T8545] veth0_to_team: entered allmulticast mode
[  122.675369][ T8546] lo speed is unknown, defaulting to 1000
[  122.807448][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  122.810442][ T8560] netlink: 'syz.0.674': attribute type 1 has an invalid length.
[  122.834927][ T8564] netlink: 152 bytes leftover after parsing attributes in process `syz.1.675'.
[  122.852232][ T8565] IPv6: sit2: Disabled Multicast RS
[  122.854600][ T8565] sit2: entered allmulticast mode
[  122.960564][ T8569] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004
[  123.325290][ T8590] netlink: 'syz.2.681': attribute type 4 has an invalid length.
[  123.381335][ T8591] netlink: 'syz.2.681': attribute type 4 has an invalid length.
[  124.221843][ T8616] vlan2: entered allmulticast mode
[  124.223555][ T8616] dummy0: entered allmulticast mode
[  124.268908][ T8620] syzkaller1: entered promiscuous mode
[  124.271232][ T8620] syzkaller1: entered allmulticast mode
[  124.365889][ T1268] lo speed is unknown, defaulting to 1000
[  124.367802][ T1268] syz2: Port: 1 Link DOWN
[  124.523795][ T8630] infiniband !yz!: set down
[  124.525362][ T8630] infiniband !yz!: added team_slave_0
[  124.549616][ T8630] RDS/IB: !yz!: added
[  124.551358][ T8630] smc: adding ib device !yz! with port count 1
[  124.553982][ T8630] smc:    ib device !yz! port 1 has no pnetid
[  124.675396][ T8639] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.921972][ T8659] validate_nla: 3 callbacks suppressed
[  124.921994][ T8659] netlink: 'syz.0.702': attribute type 1 has an invalid length.
[  124.987856][ T8659] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  125.006111][ T8659] veth5: entered promiscuous mode
[  125.009974][ T8659] bond7: (slave veth5): Enslaving as a backup interface with a down link
[  125.021662][ T8659] bond7: entered promiscuous mode
[  125.023812][ T8659] ip6gretap1: entered promiscuous mode
[  125.030286][ T8659] bond7: entered allmulticast mode
[  125.032218][ T8659] ip6gretap1: entered allmulticast mode
[  125.034006][ T8659] veth5: entered allmulticast mode
[  126.075424][ T8690] __nla_validate_parse: 8 callbacks suppressed
[  126.075445][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'.
[  126.142156][ T8695] netlink: 'syz.2.708': attribute type 4 has an invalid length.
[  126.205369][ T8700] netlink: 'syz.2.708': attribute type 4 has an invalid length.
[  126.303442][ T8707] netlink: 88 bytes leftover after parsing attributes in process `syz.2.714'.
[  126.376068][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'.
[  126.393249][ T8711] macvtap1: entered promiscuous mode
[  126.395526][ T8711] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  126.452560][ T8724] netlink: 224 bytes leftover after parsing attributes in process `syz.1.718'.
[  126.459112][ T8724] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[  126.522132][ T8727] netlink: 'syz.0.719': attribute type 1 has an invalid length.
[  126.883401][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.723'.
[  127.655627][ T8772] veth0_to_team: left promiscuous mode
[  127.658669][ T8772] veth0_to_team: left allmulticast mode
[  127.670161][ T8772] geneve4: left promiscuous mode
[  127.696543][ T8772] vlan3: left promiscuous mode
[  127.698701][ T8772] bond5: left promiscuous mode
[  127.700789][ T8772] gretap1: left promiscuous mode
[  127.703231][ T8772] vlan3: left allmulticast mode
[  127.705277][ T8772] bond5: left allmulticast mode
[  127.709919][ T8772] gretap1: left allmulticast mode
[  127.722882][ T8772] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  127.728552][ T8772] macvtap1: left promiscuous mode
[  127.756721][ T5861] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.764946][ T5861] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.772100][ T5861] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.781892][ T5861] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.824622][ T8779] netlink: 210512 bytes leftover after parsing attributes in process `syz.0.731'.
[  127.833092][ T8779] netlink: zone id is out of range
[  127.835192][ T8779] netlink: zone id is out of range
[  127.837668][ T8779] netlink: zone id is out of range
[  127.840084][ T8779] netlink: zone id is out of range
[  127.842178][ T8779] netlink: zone id is out of range
[  127.844400][ T8779] netlink: zone id is out of range
[  127.849226][ T8779] netlink: zone id is out of range
[  127.851306][ T8779] netlink: get zone limit has 8 unknown bytes
[  127.855353][ T8779] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.860191][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  127.962325][ T8786] netlink: 26 bytes leftover after parsing attributes in process `syz.0.733'.
[  128.023217][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.078697][ T8794] netlink: 64 bytes leftover after parsing attributes in process `syz.0.735'.
[  128.204591][ T8798] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  128.380097][ T8764] Bluetooth: hci0: Opcode 0x080f failed: -4
[  128.467837][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'.
[  128.490750][ T8810] bridge4: port 1(geneve7) entered blocking state
[  128.493807][ T8810] bridge4: port 1(geneve7) entered disabled state
[  128.498400][ T8810] geneve7: entered allmulticast mode
[  128.505194][ T8810] geneve7: entered promiscuous mode
[  128.514080][ T8810] bridge4: port 2(veth0_to_bond) entered blocking state
[  128.517431][ T8810] bridge4: port 2(veth0_to_bond) entered disabled state
[  128.520564][ T8810] veth0_to_bond: entered allmulticast mode
[  128.524853][ T8810] veth0_to_bond: entered promiscuous mode
[  128.544007][ T8810] vlan0: entered allmulticast mode
[  128.551209][ T8810] veth1: entered allmulticast mode
[  128.553723][ T8810] bridge4: port 3(vlan0) entered blocking state
[  128.558580][ T8810] bridge4: port 3(vlan0) entered disabled state
[  128.562955][ T8810] vlan0: entered promiscuous mode
[  128.566256][ T8810] veth1: entered promiscuous mode
[  128.752779][ T8835] netlink: 'syz.2.748': attribute type 1 has an invalid length.
[  128.818972][ T8835] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.925905][ T8844] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.929133][ T8844] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  128.934809][ T8844] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  128.971071][ T8835] veth5: entered promiscuous mode
[  128.980036][ T8835] bond7: (slave veth5): Enslaving as an active interface with a down link
[  129.008519][ T8835] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  129.013700][ T8835] bond7: entered promiscuous mode
[  129.017056][ T8835] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.105374][ T8861] bridge2: entered allmulticast mode
[  129.665974][ T5853] Bluetooth: hci0: command 0x080f tx timeout
[  130.097928][ T8882] lo speed is unknown, defaulting to 1000
[  130.149778][ T8894] lo speed is unknown, defaulting to 1000
[  130.309772][ T8903] netlink: 'syz.1.767': attribute type 1 has an invalid length.
[  130.358283][ T8903] 8021q: adding VLAN 0 to HW filter on device bond6
[  130.416197][ T8903] veth5: entered promiscuous mode
[  130.419731][ T8903] bond6: (slave veth5): Enslaving as an active interface with an up link
[  130.764952][ T8916] netlink: 'syz.0.769': attribute type 4 has an invalid length.
[  130.769438][ T8916] netlink: 'syz.0.769': attribute type 4 has an invalid length.
[  130.775288][ T1268] lo speed is unknown, defaulting to 1000
[  130.777352][ T1268] syz2: Port: 1 Link ACTIVE
[  130.900136][ T8921] netlink: 'syz.0.770': attribute type 12 has an invalid length.
[  130.958173][ T8925] macvtap1: entered allmulticast mode
[  130.960119][ T8925] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  131.105142][ T8938] lo speed is unknown, defaulting to 1000
[  131.110880][ T8939] lo speed is unknown, defaulting to 1000
[  131.558320][ T8945] dvmrp8: entered allmulticast mode
[  131.563139][ T8944] dvmrp8: left allmulticast mode
[  131.681677][ T8947] __nla_validate_parse: 11 callbacks suppressed
[  131.681694][ T8947] netlink: 64 bytes leftover after parsing attributes in process `syz.1.778'.
[  131.801089][ T8950] sctp: [Deprecated]: syz.1.779 (pid 8950) Use of int in maxseg socket option.
[  131.801089][ T8950] Use struct sctp_assoc_value instead
[  131.834392][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'.
[  131.984709][ T8964] lo speed is unknown, defaulting to 1000
[  132.712582][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.871993][ T8979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.786'.
[  132.877886][ T8980] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.786'.
[  132.882521][ T8980] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  132.978485][ T8992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.789'.
[  132.983169][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'.
[  133.062948][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'.
[  133.079720][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.792'.
[  133.088575][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'.
[  133.109750][ T9006] netlink: 'syz.2.790': attribute type 4 has an invalid length.
[  133.116845][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'.
[  133.318068][ T9030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.326345][ T9030] syzkaller0: entered promiscuous mode
[  133.328438][ T9030] syzkaller0: entered allmulticast mode
[  133.342070][ T9030] tipc: Resetting bearer <eth:syzkaller0>
[  133.345094][ T9029] tipc: Resetting bearer <eth:syzkaller0>
[  133.355519][ T9029] tipc: Disabling bearer <eth:syzkaller0>
[  133.510586][ T9045] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.719814][ T9047] team0: Port device netdevsim0 removed
[  134.070978][ T9060] veth0_to_bond: left allmulticast mode
[  134.073138][ T9060] veth0_to_bond: left promiscuous mode
[  134.075166][ T9060] bridge4: port 2(veth0_to_bond) entered disabled state
[  134.081594][ T9060] bond3: (slave gretap3): Releasing active interface
[  134.088804][ T9060] geneve7: left allmulticast mode
[  134.090886][ T9060] geneve7: left promiscuous mode
[  134.093083][ T9060] bridge4: port 1(geneve7) entered disabled state
[  134.101132][ T9060] vlan0: left promiscuous mode
[  134.102936][ T9060] veth1: left promiscuous mode
[  134.104929][ T9060] bridge4: port 3(vlan0) entered disabled state
[  134.111560][ T9060] bond7: (slave veth5): Releasing active interface
[  134.130738][ T9060] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  134.317309][ T9067] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.320567][ T9067] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.415643][ T9102] sctp: [Deprecated]: syz.0.821 (pid 9102) Use of int in max_burst socket option.
[  135.415643][ T9102] Use struct sctp_assoc_value instead
[  136.208668][ T9125] geneve5: entered promiscuous mode
[  136.213013][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.217171][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.221198][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.224518][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.509384][ T9142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.517063][ T9143] tipc: Resetting bearer <eth:syzkaller0>
[  136.520720][ T9142] syzkaller0: entered promiscuous mode
[  136.525065][ T9141] tipc: Resetting bearer <eth:syzkaller0>
[  136.538417][ T9141] tipc: Disabling bearer <eth:syzkaller0>
[  136.557785][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  136.718523][ T9155] bridge_slave_0: left allmulticast mode
[  136.725889][ T9155] bridge_slave_0: left promiscuous mode
[  136.728971][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.738173][ T9155] bridge_slave_1: left allmulticast mode
[  136.741234][ T9155] bridge_slave_1: left promiscuous mode
[  136.746693][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.763985][ T9155] team0: Port device team_slave_0 removed
[  136.777064][ T9155] team0: Port device team_slave_1 removed
[  136.785443][ T9155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.801285][ T9155] team0: Port device macvlan1 removed
[  136.804133][ T9155] bond2: (slave vlan2): Releasing active interface
[  136.811963][ T9155] bond5: (slave gretap1): Releasing active interface
[  136.829371][ T9155] bond6: (slave veth5): Releasing backup interface
[  136.840883][ T9155] netlink: 'syz.1.833': attribute type 10 has an invalid length.
[  136.845633][ T9155] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  136.850104][ T9155] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.953985][ T9175] __nla_validate_parse: 43 callbacks suppressed
[  136.954000][ T9175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.837'.
[  137.178008][ T9190] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  137.181450][ T9190] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len
[  137.516567][ T9193] netlink: 'syz.1.840': attribute type 1 has an invalid length.
[  137.538856][ T9193] 8021q: adding VLAN 0 to HW filter on device bond8
[  137.568562][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'.
[  137.598609][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'.
[  137.613773][ T9199] bond9: entered promiscuous mode
[  137.615617][ T9199] 8021q: adding VLAN 0 to HW filter on device bond9
[  137.629603][ T9199] 8021q: adding VLAN 0 to HW filter on device bond9
[  137.631920][ T9199] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[  137.636592][ T9199] bond9: (slave vcan1): Error -95 calling set_mac_address
[  137.674527][ T9201] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  137.810915][ T9208] netlink: 452 bytes leftover after parsing attributes in process `syz.1.844'.
[  137.918270][ T9212] netlink: 9 bytes leftover after parsing attributes in process `syz.2.845'.
[  137.921382][ T9212] ..0: renamed from hsr0
[  137.924817][ T9212] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.928313][ T9212] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.932346][ T9212] ..0: entered allmulticast mode
[  137.934079][ T9212] hsr_slave_0: entered allmulticast mode
[  137.935982][ T9212] hsr_slave_1: entered allmulticast mode
[  137.939281][ T9212] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  138.199791][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'.
[  138.310062][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[  138.394399][ T9237] netlink: 'syz.0.851': attribute type 1 has an invalid length.
[  138.502645][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'.
[  138.521350][ T9244] bond10: entered promiscuous mode
[  138.523347][ T9244] 8021q: adding VLAN 0 to HW filter on device bond10
[  138.534557][ T9244] 8021q: adding VLAN 0 to HW filter on device bond10
[  138.537345][ T9244] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[  138.541486][ T9244] bond10: (slave vcan1): Error -95 calling set_mac_address
[  138.667718][ T9249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.855'.
[  138.877762][ T9257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.856'.
[  139.311470][ T9259] lo speed is unknown, defaulting to 1000
[  139.499605][ T9265] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.774511][ T9286] netlink: 'syz.2.864': attribute type 21 has an invalid length.
[  140.003748][ T9286] netlink: 'syz.2.864': attribute type 4 has an invalid length.
[  140.009523][ T9286] netlink: 'syz.2.864': attribute type 3 has an invalid length.
[  140.068827][ T9290] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  140.406207][ T9316] syzkaller1: entered promiscuous mode
[  140.408743][ T9316] syzkaller1: entered allmulticast mode
[  140.530753][ T9318] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  140.533285][ T9318] netlink: 'syz.2.874': attribute type 4 has an invalid length.
[  140.541709][ T9318] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  140.545432][ T9318] netlink: 'syz.2.874': attribute type 4 has an invalid length.
[  140.614697][ T9330] syzkaller1: entered promiscuous mode
[  140.618607][ T9330] syzkaller1: entered allmulticast mode
[  140.772693][ T9341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.775461][ T9341] syzkaller0: entered promiscuous mode
[  140.778418][ T9341] syzkaller0: entered allmulticast mode
[  140.802264][ T9341] tipc: Resetting bearer <eth:syzkaller0>
[  140.806375][ T9339] tipc: Resetting bearer <eth:syzkaller0>
[  140.817472][ T9339] tipc: Disabling bearer <eth:syzkaller0>
[  140.842563][ T9342] hsr_slave_0: left promiscuous mode
[  140.845655][ T9342] hsr_slave_1: left promiscuous mode
[  140.902365][ T9345] sit0: left promiscuous mode
[  140.904027][ T9345] sit0: left allmulticast mode
[  140.909880][ T9345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.918934][ T9344] veth0_to_team: entered promiscuous mode
[  140.921391][ T9344] veth0_to_team: entered allmulticast mode
[  141.074069][ T9358] lo speed is unknown, defaulting to 1000
[  141.659261][ T9387] 8021q: adding VLAN 0 to HW filter on device bond11
[  142.132858][ T9404] __nla_validate_parse: 14 callbacks suppressed
[  142.132873][ T9404] netlink: 56 bytes leftover after parsing attributes in process `syz.2.900'.
[  142.219525][ T9377] Bluetooth: hci0: Opcode 0x080f failed: -4
[  142.254693][ T9406] syzkaller1: entered promiscuous mode
[  142.259367][ T9406] syzkaller1: entered allmulticast mode
[  142.442255][ T9414] veth0_to_team: left promiscuous mode
[  142.444654][ T9414] veth0_to_team: left allmulticast mode
[  142.458590][ T9414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  142.562403][ T9418] netlink: 92 bytes leftover after parsing attributes in process `syz.2.906'.
[  142.566956][ T9418] netlink: 'syz.2.906': attribute type 4 has an invalid length.
[  142.572853][ T9418] pimreg: entered allmulticast mode
[  142.577378][ T9418] pimreg: left allmulticast mode
[  142.722135][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'.
[  142.815036][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'.
[  143.142028][ T9453] geneve8: entered promiscuous mode
[  143.145651][ T5910] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  143.153979][ T5910] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  143.163543][ T5910] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  143.167790][ T5910] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  143.179930][ T9415] Bluetooth: hci0: Opcode 0x080f failed: -4
[  143.237025][ T9461] netlink: 'syz.2.917': attribute type 10 has an invalid length.
[  143.354060][ T9471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.919'.
[  143.358736][ T9471] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.919'.
[  143.367656][ T9471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.919'.
[  143.426069][ T5853] Bluetooth: hci0: command 0x080f tx timeout
[  143.452660][ T9474] netlink: 'syz.0.920': attribute type 1 has an invalid length.
[  143.456076][ T9474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.758884][ T9485] gretap0: entered allmulticast mode
[  143.761500][ T9485] netlink: 'syz.0.924': attribute type 2 has an invalid length.
[  143.765375][ T9484] gretap0: left allmulticast mode
[  143.882987][ T9492] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  143.894741][ T9492] Bluetooth: MGMT ver 1.23
[  144.104235][ T9507] netlink: 'syz.0.930': attribute type 1 has an invalid length.
[  144.132598][ T9507] 8021q: adding VLAN 0 to HW filter on device bond9
[  144.138023][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  144.140868][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'.
[  144.155194][ T9510] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  144.445475][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'.
[  144.511381][ T9547] netlink: 'syz.1.939': attribute type 1 has an invalid length.
[  145.247351][ T9600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.271566][ T9600] syzkaller0: entered promiscuous mode
[  145.273856][ T9600] syzkaller0: entered allmulticast mode
[  145.295604][ T9600] tipc: Resetting bearer <eth:syzkaller0>
[  145.302002][ T9599] tipc: Resetting bearer <eth:syzkaller0>
[  145.349071][ T9599] tipc: Disabling bearer <eth:syzkaller0>
[  145.506010][ T5235] Bluetooth: hci0: command 0x080f tx timeout
[  145.906221][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  145.908797][ T5853] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  146.049420][ T9639] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  146.418805][ T9660] wireguard0: entered allmulticast mode
[  146.454593][ T9668] netlink: 'syz.1.979': attribute type 1 has an invalid length.
[  146.460752][ T9668] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  146.684488][ T9689] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  146.695091][ T9683] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.938357][ T9712] netlink: 'syz.0.991': attribute type 1 has an invalid length.
[  146.963133][ T9712] 8021q: adding VLAN 0 to HW filter on device bond11
[  146.975476][ T9712] ipvlan3: entered allmulticast mode
[  146.977936][ T9712] bond11: entered allmulticast mode
[  147.177514][ T9719] __nla_validate_parse: 10 callbacks suppressed
[  147.177532][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'.
[  147.179979][ T9721] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  147.294831][ T9726] lo speed is unknown, defaulting to 1000
[  147.312679][ T9728] netlink: 68 bytes leftover after parsing attributes in process `syz.2.998'.
[  147.335567][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  147.345191][ T9729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.998'.
[  147.352991][ T9728] netlink: 'syz.2.998': attribute type 11 has an invalid length.
[  147.361266][ T9730] lo speed is unknown, defaulting to 1000
[  147.409162][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'.
[  147.475387][ T9741] lo speed is unknown, defaulting to 1000
[  147.500631][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  147.706657][ T9751] bridge2: left allmulticast mode
[  147.718604][ T9751] veth5: left promiscuous mode
[  147.731541][ T9751] geneve5: left promiscuous mode
[  147.767914][ T9751] wireguard0: left allmulticast mode
[  147.809605][ T5910] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.819125][ T5910] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.822433][ T5910] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.851531][ T5910] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.267675][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'.
[  148.270505][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'.
[  148.276078][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'.
[  148.286374][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'.
[  148.442741][ T9782] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  148.457232][ T9782] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  148.515507][ T9787] syz_tun: entered allmulticast mode
[  148.576912][ T9789] rdma_op ffff88810e09f9f0 conn xmit_rdma 0000000000000000
[  148.638419][ T9786] syz_tun: left allmulticast mode
[  148.758078][ T9797] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  148.787599][ T9797] gretap0: entered allmulticast mode
[  148.919470][ T9802] lo speed is unknown, defaulting to 1000
[  149.008849][ T9803] lo speed is unknown, defaulting to 1000
[  149.497586][ T9820] syzkaller1: entered promiscuous mode
[  149.499808][ T9820] syzkaller1: entered allmulticast mode
[  149.504937][ T9790] gretap0: left allmulticast mode
[  149.513939][ T9791] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  149.518186][ T9791] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  149.544854][ T9791] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  149.549858][ T9791] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  149.569547][ T9791] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  149.571722][ T9791] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  149.587052][ T8673] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  149.591562][ T8673] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  149.594950][ T8673] CPU: 1 UID: 0 PID: 8673 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  149.599418][ T8673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.603327][ T8673] RIP: 0010:klist_del+0x49/0x110
[  149.605122][ T8673] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 8b b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 8b b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74
[  149.611385][ T8673] RSP: 0018:ffffc90008e2f768 EFLAGS: 00010202
[  149.613355][ T8673] RAX: 000000000000000b RBX: ffff8881104f0060 RCX: ffff888109250000
[  149.615821][ T8673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  149.618869][ T8673] RBP: ffffc90008e2f890 R08: ffff88810e528693 R09: 1ffff11021ca50d2
[  149.621849][ T8673] R10: dffffc0000000000 R11: ffffed1021ca50d3 R12: dffffc0000000000
[  149.625068][ T8673] R13: 1ffff1102209e00c R14: 0000000000000000 R15: ffff88811917c750
[  149.627920][ T8673] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  149.631215][ T8673] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  149.633537][ T8673] CR2: 000000110c3c1ec1 CR3: 000000002a1d8000 CR4: 00000000000006f0
[  149.635894][ T8673] Call Trace:
[  149.636927][ T8673]  <TASK>
[  149.637845][ T8673]  device_del+0x280/0x8e0
[  149.639168][ T8673]  ? _raw_spin_unlock_irq+0x2e/0x50
[  149.640795][ T8673]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  149.643203][ T8673]  ? __pfx_device_del+0x10/0x10
[  149.644991][ T8673]  ? netdev_unregister_kobject+0x344/0x450
[  149.646839][ T8673]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  149.648875][ T8673]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  149.651073][ T8673]  ? rtnl_net_dev_lock+0x257/0x2f0
[  149.652707][ T8673]  unregister_netdevice_queue+0x33c/0x380
[  149.654520][ T8673]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  149.656488][ T8673]  ? rtnl_net_dev_lock+0x36/0x2f0
[  149.658074][ T8673]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  149.659678][ T8673]  unregister_netdev+0x1f/0x60
[  149.661180][ T8673]  bnep_session+0x294d/0x2b40
[  149.662665][ T8673]  ? rcu_is_watching+0x15/0xb0
[  149.664158][ T8673]  ? trace_sched_exit_tp+0x36/0x110
[  149.665782][ T8673]  ? __lock_acquire+0xab9/0xd20
[  149.667313][ T8673]  ? __pfx_bnep_session+0x10/0x10
[  149.668902][ T8673]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  149.670747][ T8673]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.672714][ T8673]  ? __pfx_woken_wake_function+0x10/0x10
[  149.674441][ T8673]  ? __kthread_parkme+0x7b/0x200
[  149.676395][ T8673]  ? __kthread_parkme+0x1a1/0x200
[  149.678316][ T8673]  kthread+0x711/0x8a0
[  149.679794][ T8673]  ? __pfx_bnep_session+0x10/0x10
[  149.681428][ T8673]  ? __pfx_kthread+0x10/0x10
[  149.682885][ T8673]  ? _raw_spin_unlock_irq+0x23/0x50
[  149.684581][ T8673]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.686408][ T8673]  ? __pfx_kthread+0x10/0x10
[  149.688494][ T8673]  ret_from_fork+0x3fc/0x770
[  149.690397][ T8673]  ? __pfx_ret_from_fork+0x10/0x10
[  149.692227][ T8673]  ? __switch_to_asm+0x39/0x70
[  149.693744][ T8673]  ? __switch_to_asm+0x33/0x70
[  149.695258][ T8673]  ? __pfx_kthread+0x10/0x10
[  149.696775][ T8673]  ret_from_fork_asm+0x1a/0x30
[  149.698760][ T8673]  </TASK>
[  149.699745][ T8673] Modules linked in:
[  149.701807][ T8673] ---[ end trace 0000000000000000 ]---
[  149.705868][ T8673] RIP: 0010:klist_del+0x49/0x110
[  149.707672][ T8673] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 8b b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 8b b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74
[  149.720515][ T8673] RSP: 0018:ffffc90008e2f768 EFLAGS: 00010202
[  149.723060][ T8673] RAX: 000000000000000b RBX: ffff8881104f0060 RCX: ffff888109250000
[  149.726507][ T8673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  149.729642][ T8673] RBP: ffffc90008e2f890 R08: ffff88810e528693 R09: 1ffff11021ca50d2
[  149.732229][ T8673] R10: dffffc0000000000 R11: ffffed1021ca50d3 R12: dffffc0000000000
[  149.734616][ T8673] R13: 1ffff1102209e00c R14: 0000000000000000 R15: ffff88811917c750
[  149.737586][ T8673] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  149.740333][ T8673] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  149.742318][ T8673] CR2: 000055e385146000 CR3: 000000002a1d8000 CR4: 00000000000006f0
[  149.744748][ T8673] Kernel panic - not syncing: Fatal exception
[  149.747294][ T8673] Kernel Offset: disabled
[  149.748650][ T8673] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:55:08  Registers:
info registers vcpu 0

CPU#0
RAX=fd04a44f1799ed00 RBX=ffffffff819683f8 RCX=fd04a44f1799ed00 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002000 CR3=000000003e5d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=00007f85a3f97498 00007f85a3f97470 XMM03=00007f85a3f974a8 00007f85a3f974a0
XMM04=00007f85a4afd100 00007f85a3f97460 XMM05=00007f85a3f97478 00007f85a3f974c0
XMM06=00007f85a3f974b8 00007f85a3f974b0 XMM07=00007f85a3f974a8 00007f85a3f974a0
XMM08=0000000000000000 00007f85a3e12ee7 XMM09=0000000000000000 00007f85a3e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008e2eef0
R8 =ffff888020f98237 R9 =1ffff110041f3046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018dc R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3c1ec1 CR3=000000002a1d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f026e012e53
XMM06=0000000000000000 00007f026e012e4d XMM07=0000000000000000 00007f026e012e61
XMM08=0000000000000000 00007f026e012ee7 XMM09=0000000000000000 00007f026e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
