last executing test programs:

1.961320988s ago: executing program 2 (id=494):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001240)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x1d8, 0x0, 0x2c0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'syzkaller1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2}, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff, 0x0, 0x0, 0xff000000], 0x4e20, 0x4e22, 0x4e22, 0x4e21, 0x4, 0x7, 0x3, 0x4, 0x8}}}, {{@ip={@local, @private=0xa010102, 0xffff00, 0x0, 'gre0\x00', 'pimreg\x00', {}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, 0x0, 0x0, 'wlan1\x00', 'pimreg0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x4}, {0x0, 0xe}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xfa}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffb81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x4000000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001240)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x1d8, 0x0, 0x2c0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'syzkaller1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x2}, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff, 0x0, 0x0, 0xff000000], 0x4e20, 0x4e22, 0x4e22, 0x4e21, 0x4, 0x7, 0x3, 0x4, 0x8}}}, {{@ip={@local, @private=0xa010102, 0xffff00, 0x0, 'gre0\x00', 'pimreg\x00', {}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, 0x0, 0x0, 'wlan1\x00', 'pimreg0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x4}, {0x0, 0xe}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xfa}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffb81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x4000000) (async)

1.069507299s ago: executing program 2 (id=497):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000100000007000000000000fb4100", @ANYRES32=0x0, @ANYBLOB="2008010000040000140003006d6163766c616e300000000000000000"], 0x34}}, 0x4084)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000088000008000a00", @ANYRES32=0x0, @ANYBLOB="5b63b3f1770f093f00"/19], 0x30}}, 0x4)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000bc4a9e0b02900000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c009d77d8a9773e360280080002400000000b0900010073797a30000000000900020073797a320000000014000000110001"], 0x74}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x7, 0x2002, 0x0, 0x2, 0x8, 0x101, 0x5}, 0x1c)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r9, 0x913e0000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000068000100fffc00000000000002000000040000000c000880050005000000000008000600f200000008000500", @ANYRES32=0x0, @ANYRES8=r6], 0x34}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

1.067780615s ago: executing program 1 (id=498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000001e000100000000000400000002000000e3541eb102746d2796bff86c5f16065d59003f6c6b4420e176421fb24b4af4d73b1aa9b7035a3e16d2d37c6c4dfd3028133dff05859470f47c0e311b4ea598b16de3451ba07f0c9d", @ANYRES32=0x0, @ANYBLOB='\x00\x00 \x00'], 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x203f72, 0xe092}, {0x200, 0x40000000}]}})
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
setsockopt$ax25_int(r3, 0x101, 0xb, &(0x7f0000002200)=0x3, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d5", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889)
recvmsg$can_j1939(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r8, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x200000c0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r5)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x208, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4e}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x60000}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xe}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0x8}}]}, 0x208}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r10 = socket(0x10, 0x3, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r12 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r13, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054)
r14 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
connect$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0xfffffffc, @empty, 0x9}, 0x1c)

1.007315488s ago: executing program 1 (id=499):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b500ffffff9000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c", @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffb}, 0x10}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x10, 0x0, 0x0, 0x336c}, 0x48) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='cachefiles_ondemand_cread\x00', r4, 0x0, 0x6}, 0x18) (async)
r6 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r5, 0x0, 0x24, 0xfffffffffffffffe}, 0x15) (async)
syz_open_procfs$namespace(r6, &(0x7f0000000480)='ns/pid\x00') (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2517000000500006800800060006000000440004"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4804) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x22850, 0x4020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8091}, 0x4008000) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r11, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4040) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r12, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0xfffffffffffffdf8, 0x32, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008040)

959.444881ms ago: executing program 1 (id=501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="0600"], 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x40, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

321.342328ms ago: executing program 0 (id=510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040013"], 0x24}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

271.471185ms ago: executing program 0 (id=511):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) (async, rerun: 64)
r7 = socket(0x1, 0x803, 0x0) (rerun: 64)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000100)={r11, 0x62}, &(0x7f0000000240)=0x8) (async)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async, rerun: 64)
socket(0x10, 0x803, 0x0) (async, rerun: 64)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x28, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

271.032093ms ago: executing program 0 (id=512):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffddff04000000000006930000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

211.66978ms ago: executing program 2 (id=513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde8c}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xd041)
nanosleep(&(0x7f0000000100), &(0x7f0000000140))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6d8fc21a49095424}, {0xe, 0xfff1}, {0xd, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xfa}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
unshare(0x52000800)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r2, &(0x7f0000000300)="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", &(0x7f0000000400)=""/15}, 0x20)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000004c0))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', <r9=>0x0, 0x2f, 0x8, 0x2, 0x8, 0x34, @private0, @local, 0x7800, 0x7, 0x17, 0x200}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x10801)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf8, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x75}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASK={0x40, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001)
socketpair(0x11, 0x3, 0x8, &(0x7f00000009c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
read$alg(r10, &(0x7f0000000a00)=""/16, 0x10)
pipe(&(0x7f0000000a40)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r12, 0x113, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={<r13=>r0})
connect$unix(r13, &(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e)
getpeername$packet(r12, &(0x7f0000000c00)={0x11, 0x0, <r14=>0x0}, &(0x7f0000000c40)=0x14)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f00000019c0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f0000000c80)={0xcf8, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x46, 0x5, "b78bd42f81a72c488b83df95ce4fe80f5f610452b13ca28917feaf38d8234df4effe2fe142495538cb921b09a1667236dcf3fb6f4ebb4f3e76e3be59bbbbfbb5f6cf"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+- %\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb91f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "88a59cec8c6f6f0ddc5cca64e568d95d66d70d86fad9e9ff7255b7f67d4c43d6b15fec69bd2392e6dc69ec78dd17226a5b8a9fc8ac51e115a43c887d6034513683d5aca798984d8111d7c33f722fd8a2b61b6bdcadd6ca4148cab05c5cfd37b0024b86bb4eced8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "2dc1562e16033c2e66cd5f980778a5d6cac076acb1ac88f5f84f4aaabbef3755ef433ed2bf891c8c84d83741b8703438"}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "de2d91b03d1aeec0942d3eeaa2656b96d971252068f217dd0d1665a07e96ee8a63d3fd0df909cde629453880b22798b08c4b0c11b164e0466ddbd6e2e9486177a869321fd55ad56097c58c0a1781e40b4a2fc23250edfc7693412f1e87bd099facd739b072c81a412f6763934d43501cf7e04e471e2648d9088868bbab7803ee9edb7a0de0e7d8757c965f8a0fd63cfadc02e64d45db77e1ed455cb1845fc6c9787ffc2e3b6d6770d1d0f505d7669685eb5a3750eafed0671d50f21dde236e4140c9c279"}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "2cf50e9b13dabf1e49c8685c502dda666885135ef33c02f1e4979be73763a7bcc431a6a45ae8ab4fd7ddb66a1c5252e5dfe43a71d9d81411ae0c4ff551a6c9bdde7702f81f5cc5a7f7d81246e2ab663f57bfe4577f208cb0599ee3a5de0ee2a8d77df39692bd3deeb1978e047ff7ff53a8d3bd470d752400055a2ec39999aec3e8ce73d351efe7a7d1d9a64e3acd0e257b4d8067918a6d92008eded013bc833a977988a7a6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "299f1b80dc4927a584fd5560036151bb1dcdbbe51b28bee39146c4de39baf271eb3f2873ba1a09b7a16516aa9a973ec7289c4f46d9b34e65be43131869684286e83d59c45d8910f3a1193b44ca26bc5e26ee1f9d9cc6f929aee4fcedd973041ce07f518d687f7691527baf697aa872a24efbae868e0b5b929a28fbc34bcfff5ed4e1a8f0028cd11cf6b8b6dc268c86760b914d353478aa8ac2a0546332d359c1de"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+^*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xac*%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@},\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba0f}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '+[\\#\xf1!#%,){\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.(}{,,-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x90, 0x5, "03f2566db75e4de1d123050c0e246334fcd88fa34e1d2b8c384718e928a2a02d8ba2919804ea6eddf1d8d327fce1056d9445c274274684c22f3324176a3150bfb7bb62088fbdecb88f1cb4c96a121110a93be4d32c7ef0f75c30eb1f14786d28b349dde9cd8b19b45b3febd241f1305e09ad7a61a740364153bb0550871d0a0f00fbeed1ec5b7d9a0f68812d"}, @ETHTOOL_A_BITSET_BITS={0x1a0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9ea}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/,\'/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'd,[<+-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,#,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdf2f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "e42769c83b46b37e5cccbbdf8b871646eb9547d25425f533152ac174a0acc63cc104a7169e"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+/\'!5\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x25a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x860b}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\')!:);\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\\'%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*{($\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')-\\{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff8ab}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd, 0x5, "498ea154db768df029"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "1cf48df57913f8b950f3238b5346852537567a6de556f3e801401b9d70a85fadf6105b8a2a0f70e322e1a4c90c2bf2618f99dfd85cca349153dc610d64e076a3330204c32a2b069b14114d49e30dd405705e5071b0d15105a92219b9b1921c19201bb48e0a2c033081865ab5474051e1e8f8a0feb571c66a446ba899f3e78626968bcfd14506"}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "0162f547130d3b036d165959caf59c3a433c2abfdcb502b0a2cb6242d541e9c877d2f72c1883b5278edd5d7ae0bcc20932cea80622b83378e5cf4119a9c148f8c82140465aac12999af92ea12ff600bd27aab417d15b06c46fdfd89fac7c72078d25c520f3e3045e4e811b4748dce02f25bfa467fb75ec46840441c91d01f55403ad41b15d9eee8921669d2aa6a838fb0c90cb68ebac92dd20939bbdd4e73f0d0570a38117ba3f53f914d422ac8eca77b850c2ee93f147988ffe722f015cc11092ec34c28e0e900b50c71b55a930338083a055675e3d78838af316"}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "1f2aa256c05edac44661ad79130d9aac3a8bf4e6e88aca2179c13ca66da91e475bd3d5adfde83ff7569310b978d3c7deb2ae5e656f934ce0d313b536c3a18741be5ad3c9efbe828ac514e2bc8a11cb007834da5f331dd5cfd4b94fe297ab7451033c779574321bbfaed46e6ec9c3f3e121028256047c053557aa768de5175f3e5fa6de84a2b49b95afce70459f17062a6348dc4d0133ba793879dc7ea05885f2b091bfd99f4be194dfd0"}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "9b2ba23fbdd9654a4772634a83714baea530e1ce1c236579d7054dcb8dfa48579411f85c8d48307db1ccb055061596b0b393cc8b"}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "46984a98559a087250b71c03091f48816b49cdbb87c709c58c"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "db17d79cebe18d09cc21b3b14b89ea3529838f1edc1ac69f9b1a8ec6c1e694560a1419077a0effbeff06d8b1c1136bfdf1a82107c2b7d5b3b81ebdb5e1441e31d9bdd8507c521a5dd87bee7e7ec8ae8df69669173f590b515a1cd2ff32d247953ffebb8a319e5bd72ad30265467722d460eef46fa5c556d669168f9108"}]}]}, 0xcf8}, 0x1, 0x0, 0x0, 0x4}, 0x20008084)
setsockopt$CAIFSO_LINK_SELECT(r11, 0x116, 0x7f, &(0x7f0000001a00)=0x9, 0x4)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000001a40)={0x5, [0x8, 0x6d7, 0x58, 0xfff, 0x8]}, &(0x7f0000001a80)=0xe)

210.980635ms ago: executing program 0 (id=514):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r5, 0x701, 0x70bd25, 0x2, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c840}, 0x800)
r6 = socket$nl_generic(0x11, 0x3, 0x10)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000380)={&(0x7f0000000300)=""/88, 0x58, 0x6, 0x1})
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0xfffffffe, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00e0fffd00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40040)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x97, 0x9, 0x4, 0x2, 0x25}, [@TCA_NETEM_JITTER64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

119.017274ms ago: executing program 2 (id=515):
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000200)={0x0, 0x0, 0x1})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000400018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)

114.510577ms ago: executing program 1 (id=516):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}}, 0x40048a4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

113.041371ms ago: executing program 2 (id=517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x58}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a093400000000000000000200fffe0900020073797a32000000000900010073797a30000000003800048024000180090001006d65746100000000140002800800014000000001080002400000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x24, 0x0, 0x0)
close(r6)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

51.799276ms ago: executing program 1 (id=518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000100001040000000000005057e0eb316e", @ANYRES32=0x0, @ANYBLOB="0106000000000000340012800e00010069703665727370616e0000002000028008000d000d000000040012000500160001000000080015"], 0x54}, 0x1, 0x0, 0x0, 0xcbf2b2b85a7692bb}, 0x40)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x80000001) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x80000001)

51.149014ms ago: executing program 0 (id=519):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x2, @short={0x2, 0x3, 0xfffe}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) (async)
writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4)
recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r5}]}}}]}, 0x40}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2c, 0xf, {{}, {@val={0x8, 0x1, 0x3}, @void, @val={0xc, 0x99, {0x8, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8800)

50.192707ms ago: executing program 1 (id=520):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffddff04000000000006930000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

1.7891ms ago: executing program 2 (id=521):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000040000000030a010300000000000000000500000009000100ec35763673797a30000000000940030073797a300000000014000480080002400000001208000140000000031400000011000100000000000000000025b850e30642cbcb9f615d4ad499a00b9b9d020924451a4caca275ca7ecf6ea0d2b23711d6b04699983e98dc7714df3b36c441488ecd37394ccc5ded9d67d6e9b04b93a9fcdc26f4a13a1b60024a326a4b50e450afb623b13e4183458ce4e7d84df4ae"], 0x88}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@gettaction={0x48, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=<r3=>r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r4)
r5 = socket(0x1e, 0x4, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x29, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x5, 0x0, 0x5}, 0x10)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000004c0)=@req3={0x1020, 0x8, 0x7, 0xf, 0x10, 0xfffffffb, 0xfff}, 0x1c)
sendmmsg(r7, &(0x7f00000030c0), 0x0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
recvmmsg(r5, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r9, 0x29, 0xc8, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040))
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="06000000", @ANYBLOB="63c7b76927ab7aebb5e51e60810d26cd5bff5b71b64125697745560ef254288af7ccbccd01c99ba491dc9b4649bd5ea9cda8c1448162996b93ef8fa1a2e7cd6207d4cca68dc379285805ddc21aa29ff792bcbecbdc", @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRESDEC, @ANYRESHEX=r3], 0x30}, 0x1, 0x0, 0x0, 0x24000090}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xfff1}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000000000000000000800000008500009500002000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

0s ago: executing program 0 (id=522):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x5)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) (async)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000080)=0x1c, 0x800)
sendto$inet6(r1, &(0x7f00000000c0)="d46b77bc005317a9b1b94aa51ff0bcb40825eda7b4f4b85af0365c7008667939356535156cef544cceabe1d28e3ec2bebbe284ce6dcf3605f504b56666242093f265d44951164d1610393404cf421be1ea7afdc7f6c1f49236920d8e81a567717984b5494556e330560d333e71d4cf66156a589fe394c5b5d55f6d71c848e807cbcee60ee9affbaeb9141d06473a61e34071739dff9f474e87539a2d14eede103c18191fbba752aa3adfe8781e963ac264061eee56d1ad3d44d7", 0xba, 0x0, 0x0, 0x0) (async)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)="144b9c2cf6578e36069560b9b1842bc5e079cd90a40477e9976f69735eeee15c2d785c69449ecd86013c7a6b20123ae1ed4bd68745bdca91244e51400431fc4c8bb31fae82908dc5cd055a15d0b280333e754074d66ec75cd33fd969314ff8333d9add4d1ccb796295e2fd25533e354d02119aec7c55371c9b4bbb76c6b3a92a37082f9a0a476d547b1000d1cbd27875f472e4bfb30c11e22f58b5520079904bdb60fac774d6ce1fb6da061c29def3afa910d9f1802a55a1e73680d3beca7987ea22d6a19689392623ee54beb36fe073a51e96b5ee50a56e189d63a469bfdb8b24ceeebf914184871b3bec5e1cb13123da", 0xf1, 0x40800, &(0x7f00000002c0)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x2}, 0x1c) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e23, 0x0, @local, 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x3c) (async)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000380)={<r4=>0x0, 0x2a, 0x8, [0x1, 0x1ff, 0xfff8, 0xac3, 0xa9, 0x3, 0x7, 0x1000]}, &(0x7f00000003c0)=0x18)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x3, 0x800, 0x8000, 0x4, 0x6, 0x0, 0x6, 0x4, r4}, &(0x7f0000000440)=0x20) (async)
r5 = accept(r2, &(0x7f0000000480)=@l2, &(0x7f0000000500)=0x80)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r5)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0xc094}, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x140f, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}}, 0x20000084) (async)
socket$rds(0x15, 0x5, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x81)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000900)={'nicvf0\x00', @local})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000940))
r8 = socket$inet(0x2, 0xa, 0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'ip6gretap0\x00', <r9=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000e80)={'syztnl2\x00', <r10=>0x0, 0x700, 0x20, 0x4, 0x291, {{0x1d, 0x4, 0x2, 0x2, 0x74, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x45, 0x0, [{0x2, 0x6, "97936823"}, {0x6, 0x10, "94c603704f9746e42771604ffd34"}, {0x1, 0x10, "b74746d25db723dcdf62563a3ff5"}, {0x5, 0x9, "4e16c5c50ec2bd"}, {0x1, 0xb, "61864a8c10fd7e9dc9"}, {0x2, 0x5, "04ff51"}]}, @end, @rr={0x7, 0xb, 0x7c, [@multicast1, @private=0xa010100]}, @rr={0x7, 0xf, 0xf, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}})
sendmmsg$inet(r8, &(0x7f0000001380)=[{{&(0x7f0000000980)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="c1f9f5fd4b26a4ca9c097e7aab9155c0c1d6d82a79f80a30d7efaf99012232b3861cf46d53c83e63f365c31c232329740fda06dca1276ee71be3a7f7c3699a0aad5260c7a17f2be3c5c99a02018dab1d9fb1207ca561bdcd682cf2b57cbe4dd2e892b27407159642d429a5f86a743cbac063b48cc4a65d19f748d3d77f6f100d11aa5e218686e38ea85f4b416c0fe9a4b3d2be54200037d063719bfb7df8d115755cf7ded80dda2c31d4d953579dd7136ec89a26e51b92a80681540879fdb917a850191c0dc05e3004356846967e4be832f6964ff3934fc1b03b78bec14b43a9faf26d9ae1f2dff431b62a93df3b3c0293d2", 0xf2}, {&(0x7f0000000ac0)="3e52823d0610b46647403cbe9cd1a1eabeae7cfd0a30624fbddcfd1203c9420c00ddb2ccf3614b3b59298b59f9337bc4935478954fcc770639f6b1d414bc846136dad8f6f420ffc1af9f096b7f0249aa076bdb12f7a14e5421d69a8f7283c3379b600646d4acd092840dc727deb9ae4d2d9a15662fecb472ef5057fae59a9c94409411cf8a51bbd86a1b4e70e3eb34b9763c12509942312ab5dd5dd048cacb02ab4041dcb14cc245de5d74938c674322993f70875db743a948f697bfb8756581d3eaa64c6e8df7bf616dae95578fc97e4b026de258d0b1e2938ac33c2728251524ce986115", 0xe5}], 0x2, &(0x7f0000000c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9000000}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x82, 0x3, '='}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010101, @loopback}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xa3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}], 0xc8}}, {{&(0x7f0000000d40)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)="cfeadc66fc10c44f5762e844cf9d000932a7575e720415c9eed6a4a2d774ee53ee64d2a3877793a674df02de2a2877bf8d5b285d57f6f790059bc5bf8bb031106b4b2e8f050b76b34d4ff0fcfd26b3090ca5df66a89d79123301f71bdf2a712d7d7b1815bfd0f166f76bfc1b2d124a", 0x6f}], 0x2, &(0x7f0000000f80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x26, [@empty, @rand_addr=0x64010101, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}], 0x88}}, {{&(0x7f0000001040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000001080)="609609cd500bdb3f7ef8c5e85c3abe134b336129f481d1b0e30b2152ce98382300ffccc0e6b0", 0x26}, {&(0x7f00000010c0)="1f7e76262f38164c7e2b5a55f1f65ed30b0d502fdc52853d88b519ba817b67741ae043c0b442c2a6aa50402c84742f32c3898ecd226801bb87a72c92074be276e84ae808589f97e933c218808261cc", 0x4f}, {&(0x7f0000001140)="97b873d25d3a08f5d46d03e0246da8459a2a0fa92f172c5523e51209ae98b2f9e2a0790429c52ac20419b373956096a178f0968c4140b17203cf8ad9c62703e4ad23fd831fc48a01a4f5a3b07aeaf14505dd93c08cb56c9267f2c9fd4c5a1ddffc9b52f92fb03f84c9190c59b2a4efe6d6448c08c3", 0x75}], 0x3, &(0x7f0000001200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x78, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x17, 0x13, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x7a, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xb}, {@rand_addr=0x64010101, 0x98800000}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x92a7}]}, @cipso={0x86, 0x2b, 0x3, [{0x5, 0x11, "ae7f35e213762b1d1d77920599f9ec"}, {0x6, 0x10, "894197b0acdff51721720c3ad261"}, {0x6, 0x4, "a9b4"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x55a8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb9b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x64}}], 0x150}}], 0x3, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001500)={&(0x7f0000001440), 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20042800) (async)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000001580)={'sit0\x00', &(0x7f0000001540)={@mcast2, @multicast2, 0x16, 0xe}}) (async)
r11 = socket$inet(0x2, 0x4, 0x0)
getsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000015c0), 0x10)
setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000001600)="10ad692dc8da3d7fa06abbb93024f474f749c3887a5dd4185146c293e4596ceb7767e0f3f5", 0x25)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50985' (ED25519) to the list of known hosts.
syzkaller login: [   40.856513][ T5831] cgroup: Unknown subsys name 'net'
[   40.938247][ T5831] cgroup: Unknown subsys name 'cpuset'
[   40.941142][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.072173][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.541513][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.547035][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.555224][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.560254][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.563456][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.567219][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.570675][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.574038][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.576665][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.579721][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.582510][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.589588][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.592290][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.603328][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.610288][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.702014][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   44.736260][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   44.750683][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   44.775144][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.778178][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.781098][ T5842] bridge_slave_0: entered allmulticast mode
[   44.784215][ T5842] bridge_slave_0: entered promiscuous mode
[   44.796483][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.799640][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.802527][ T5842] bridge_slave_1: entered allmulticast mode
[   44.805689][ T5842] bridge_slave_1: entered promiscuous mode
[   44.854324][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.856698][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.859315][ T5848] bridge_slave_0: entered allmulticast mode
[   44.862149][ T5848] bridge_slave_0: entered promiscuous mode
[   44.875601][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.878955][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.881245][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.883475][ T5848] bridge_slave_1: entered allmulticast mode
[   44.885721][ T5848] bridge_slave_1: entered promiscuous mode
[   44.892200][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.894570][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.897622][ T5846] bridge_slave_0: entered allmulticast mode
[   44.900481][ T5846] bridge_slave_0: entered promiscuous mode
[   44.904112][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.920263][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.923634][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.925991][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.928778][ T5846] bridge_slave_1: entered allmulticast mode
[   44.931088][ T5846] bridge_slave_1: entered promiscuous mode
[   44.938530][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.945452][ T5842] team0: Port device team_slave_0 added
[   44.948549][ T5842] team0: Port device team_slave_1 added
[   44.971695][ T5848] team0: Port device team_slave_0 added
[   44.981243][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.985385][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.988836][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.999748][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.005177][ T5848] team0: Port device team_slave_1 added
[   45.013273][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.020643][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.023479][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.033900][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.043363][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.045653][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.054734][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.066627][ T5846] team0: Port device team_slave_0 added
[   45.073608][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.076424][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.087597][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.092857][ T5846] team0: Port device team_slave_1 added
[   45.140196][ T5842] hsr_slave_0: entered promiscuous mode
[   45.142927][ T5842] hsr_slave_1: entered promiscuous mode
[   45.145876][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.149444][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.159533][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.165962][ T5848] hsr_slave_0: entered promiscuous mode
[   45.168865][ T5848] hsr_slave_1: entered promiscuous mode
[   45.171388][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   45.173764][ T5848] Cannot create hsr debugfs directory
[   45.179847][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.182712][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.192334][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.239992][ T5846] hsr_slave_0: entered promiscuous mode
[   45.242389][ T5846] hsr_slave_1: entered promiscuous mode
[   45.244531][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   45.246658][ T5846] Cannot create hsr debugfs directory
[   45.312241][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.318019][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.323019][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.329285][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.347743][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.351248][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.357803][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.362146][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.364536][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.366983][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.369559][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.373774][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.389891][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.393638][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.400396][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.405683][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.413661][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.415996][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.418578][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.420917][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.442085][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.444429][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.446936][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.449224][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.460437][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.470064][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.472527][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.475026][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.478310][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.480768][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.483179][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.491277][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   45.498170][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.500438][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.507544][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.509956][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.514659][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.536293][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   45.550024][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.552936][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.561629][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.566092][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.568445][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.582430][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   45.590248][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.592656][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.595387][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.597786][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.650116][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.687854][ T5848] veth0_vlan: entered promiscuous mode
[   45.696402][ T5848] veth1_vlan: entered promiscuous mode
[   45.717966][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.734136][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.740596][ T5848] veth0_macvtap: entered promiscuous mode
[   45.744243][ T5848] veth1_macvtap: entered promiscuous mode
[   45.759104][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.766072][ T5846] veth0_vlan: entered promiscuous mode
[   45.769255][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.774765][ T5846] veth1_vlan: entered promiscuous mode
[   45.780970][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.788931][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.792152][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.799074][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.803398][ T5842] veth0_vlan: entered promiscuous mode
[   45.815251][ T5842] veth1_vlan: entered promiscuous mode
[   45.822625][ T5846] veth0_macvtap: entered promiscuous mode
[   45.830098][ T5846] veth1_macvtap: entered promiscuous mode
[   45.844292][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.847486][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.847495][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.857932][ T5842] veth0_macvtap: entered promiscuous mode
[   45.864204][ T5842] veth1_macvtap: entered promiscuous mode
[   45.869420][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.876468][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.878723][ T5895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.882081][ T5895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.885869][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.890997][ T5895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.895267][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.899561][ T5895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.904905][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.911199][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.921976][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.930126][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.933100][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.943823][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.959675][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.962226][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.989043][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.998099][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.024707][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.031260][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.037754][ T5913] syz.2.4 uses obsolete (PF_INET,SOCK_PACKET)
[   46.055538][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.056025][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.060956][ T5917] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   46.063615][ T5917] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   46.065892][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.068902][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.090727][ T5921] ieee802154 phy0 wpan0: encryption failed: -90
[   46.094923][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'.
[   46.139618][ T5926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6'.
[   46.144586][ T5931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   46.146737][ T5927] Zero length message leads to an empty skb
[   46.173693][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   46.181321][ T5938] pim6reg1: entered promiscuous mode
[   46.183296][ T5938] pim6reg1: entered allmulticast mode
[   46.244551][ T5946] tipc: Started in network mode
[   46.246172][ T5946] tipc: Node identity 9a8cc99e1e0b, cluster identity 4711
[   46.250399][ T5946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.255110][ T5945] tipc: Disabling bearer <eth:syzkaller0>
[   46.349907][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   46.353018][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   46.357475][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   46.361160][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   46.361218][ T5951] delete_channel: no stack
[   46.399488][ T5949] delete_channel: no stack
[   46.519444][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.522330][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.544642][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.549544][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.580284][ T5957] @: renamed from veth0_vlan
[   46.583715][ T5895] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.588786][ T5895] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.594497][ T5895] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.598105][ T5895] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   46.654715][ T5961] syzkaller0: entered promiscuous mode
[   46.657425][ T5961] syzkaller0: entered allmulticast mode
[   46.660503][ T5960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   46.663788][ T5961] vlan0: entered promiscuous mode
[   46.666789][ T5962] tipc: Resetting bearer <eth:syzkaller0>
[   46.667067][   T55] Bluetooth: hci2: command tx timeout
[   46.669239][ T5847] Bluetooth: hci0: command tx timeout
[   46.670718][ T5845] Bluetooth: hci1: command tx timeout
[   46.677298][ T5959] tipc: Resetting bearer <eth:syzkaller0>
[   46.679885][ T5959] tipc: Disabling bearer <eth:syzkaller0>
[   46.957099][ T5965] sctp: [Deprecated]: syz.0.13 (pid 5965) Use of struct sctp_assoc_value in delayed_ack socket option.
[   46.957099][ T5965] Use struct sctp_sack_info instead
[   47.005684][ T5972] gretap1: entered promiscuous mode
[   47.008709][ T5972] gretap1: entered allmulticast mode
[   47.697442][ T5974] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   47.700909][ T5974] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   47.778043][ T5976] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[   47.786019][ T5976] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   47.792018][   T51] IPVS: starting estimator thread 0...
[   47.820714][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.823271][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.847734][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.852529][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.876966][ T5977] IPVS: using max 134 ests per chain, 321600 per kthread
[   47.894643][ T5895] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.897695][ T5895] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.902677][ T5895] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.905589][ T5895] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.106789][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19'.
[   48.150922][ T5986] tipc: Started in network mode
[   48.152675][ T5986] tipc: Node identity 7eefb7bf8fa4, cluster identity 4711
[   48.155325][ T5986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.158148][ T5986] syzkaller0: entered promiscuous mode
[   48.160081][ T5986] syzkaller0: entered allmulticast mode
[   48.176706][ T5985] tipc: Resetting bearer <eth:syzkaller0>
[   48.180155][ T5985] tipc: Disabling bearer <eth:syzkaller0>
[   48.644191][ T5981] Set syz1 is full, maxelem 65536 reached
[   48.720806][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.724958][ T5991] syzkaller1: entered promiscuous mode
[   48.727411][ T5991] syzkaller1: entered allmulticast mode
[   48.747119][ T5845] Bluetooth: hci1: command tx timeout
[   48.747379][ T5847] Bluetooth: hci2: command tx timeout
[   48.749304][   T55] Bluetooth: hci0: command tx timeout
[   48.903362][ T6001] veth1_to_bond: entered allmulticast mode
[   48.918293][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.924300][ T6000] veth1_to_bond: left allmulticast mode
[   48.964761][ T6008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.974100][ T6011] tipc: Disabling bearer <eth:syzkaller0>
[   49.037908][ T6013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.040798][ T6013] syzkaller0: entered promiscuous mode
[   49.042948][ T6013] syzkaller0: entered allmulticast mode
[   49.065797][ T6014] tipc: Resetting bearer <eth:syzkaller0>
[   49.069095][ T6014] tipc: Disabling bearer <eth:syzkaller0>
[   49.365971][ T6025] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   49.740777][ T6055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.744020][ T6055] syzkaller0: entered promiscuous mode
[   49.746361][ T6055] syzkaller0: entered allmulticast mode
[   49.774123][ T6055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.349793][ T6061] netlink: 'syz.1.42': attribute type 9 has an invalid length.
[   50.399528][ T6066] batadv_slave_1: entered promiscuous mode
[   50.402382][ T6066] batadv_slave_1: left promiscuous mode
[   50.405674][ T6066] netlink: 'syz.2.43': attribute type 39 has an invalid length.
[   50.433888][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   50.440847][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   50.447875][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   50.452921][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   50.461267][ T6074] netlink: 'syz.1.45': attribute type 2 has an invalid length.
[   50.463766][ T6073] team0: Device gtp0 is of different type
[   50.473724][ T6074] k*]: entered promiscuous mode
[   50.508291][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.512532][ T6074] 8021q: adding VLAN 0 to HW filter on device team0
[   50.518373][ T6074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.532069][ T6074] veth0_to_team: entered promiscuous mode
[   50.534643][ T6074] veth0_to_team: entered allmulticast mode
[   50.541388][ T6074] Illegal XDP return value 16128 on prog  (id 6) dev syz_tun, expect packet loss!
[   50.572670][ T6054] tipc: Resetting bearer <eth:syzkaller0>
[   50.579797][ T6054] tipc: Disabling bearer <eth:syzkaller0>
[   50.586110][ T6079] netlink: 'syz.2.47': attribute type 21 has an invalid length.
[   50.609078][ T6086] syzkaller0: entered promiscuous mode
[   50.612679][ T6086] syzkaller0: entered allmulticast mode
[   50.617594][ T6085] tipc: Started in network mode
[   50.622558][ T6085] tipc: Node identity 4a2819102701, cluster identity 4711
[   50.625649][ T6085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.640255][ T6085] tipc: Resetting bearer <eth:syzkaller0>
[   50.644684][ T6085] tipc: Disabling bearer <eth:syzkaller0>
[   50.690300][ T6095] dvmrp1: entered allmulticast mode
[   50.827423][   T55] Bluetooth: hci0: command tx timeout
[   50.827577][ T5845] Bluetooth: hci1: command tx timeout
[   50.829416][   T55] Bluetooth: hci2: command tx timeout
[   50.842472][ T6055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.866289][ T6110] netlink: 'syz.2.51': attribute type 10 has an invalid length.
[   50.887999][ T6118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.890510][ T6118] syzkaller0: entered promiscuous mode
[   50.892314][ T6118] syzkaller0: entered allmulticast mode
[   50.895509][ T6118] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   50.903527][ T6055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.910916][ T6118] tipc: Resetting bearer <eth:syzkaller0>
[   50.913591][ T6117] tipc: Resetting bearer <eth:syzkaller0>
[   50.916184][ T6117] tipc: Disabling bearer <eth:syzkaller0>
[   50.952927][ T6055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.995946][ T6120] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   51.005234][ T6120] hsr_slave_1 (unregistering): left promiscuous mode
[   51.016089][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.022029][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.028280][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.033550][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.134641][ T6128] __nla_validate_parse: 14 callbacks suppressed
[   51.134651][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'.
[   51.141203][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.57'.
[   51.154173][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.56'.
[   51.163023][ T6133] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   51.165661][ T6133] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   51.181398][ T6134] vlan2: entered allmulticast mode
[   51.183090][ T6134] veth1: entered allmulticast mode
[   51.195613][ T6133] vlan2: entered allmulticast mode
[   51.267942][ T6144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.270723][ T6144] syzkaller0: entered promiscuous mode
[   51.272668][ T6144] syzkaller0: entered allmulticast mode
[   51.279261][ T6144] tipc: Resetting bearer <eth:syzkaller0>
[   51.281993][ T6143] tipc: Resetting bearer <eth:syzkaller0>
[   51.285586][ T6143] tipc: Disabling bearer <eth:syzkaller0>
[   51.427530][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'.
[   51.598658][ T6153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.64'.
[   51.601507][ T6153] netlink: 43 bytes leftover after parsing attributes in process `syz.1.64'.
[   51.604428][ T6153] netlink: 'syz.1.64': attribute type 5 has an invalid length.
[   51.607751][ T6153] netlink: 43 bytes leftover after parsing attributes in process `syz.1.64'.
[   51.627556][ T6157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.651812][ T6157] syzkaller0: entered promiscuous mode
[   51.654037][ T6157] syzkaller0: entered allmulticast mode
[   51.663596][ T6157] tipc: Resetting bearer <eth:syzkaller0>
[   51.676765][ T6166] veth0_to_team: left promiscuous mode
[   51.678979][ T6166] veth0_to_team: left allmulticast mode
[   51.680912][ T6166] vlan0: left promiscuous mode
[   51.688073][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   51.691112][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   51.694420][ T6156] tipc: Resetting bearer <eth:syzkaller0>
[   51.720226][ T6156] tipc: Disabling bearer <eth:syzkaller0>
[   51.724093][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   51.728673][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   51.980088][ T6179] netlink: 'syz.1.69': attribute type 10 has an invalid length.
[   51.983178][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.986353][ T6179] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   52.007979][ T6181] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   52.018360][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.103246][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'.
[   52.122461][ T6187] dvmrp8: entered allmulticast mode
[   52.124983][ T6186] dvmrp8: left allmulticast mode
[   52.907070][ T5845] Bluetooth: hci2: command tx timeout
[   52.907310][   T55] Bluetooth: hci1: command tx timeout
[   52.910093][ T5847] Bluetooth: hci0: command tx timeout
[   53.137965][ T6198] warning: `syz.2.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.142022][ T6198] bridge_slave_0: left allmulticast mode
[   53.143841][ T6198] bridge_slave_0: left promiscuous mode
[   53.145694][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.154160][ T6198] bridge_slave_1: left allmulticast mode
[   53.156287][ T6198] bridge_slave_1: left promiscuous mode
[   53.159549][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.163607][ T6198] bond0: (slave bond_slave_0): Releasing backup interface
[   53.168745][ T6198] bond0: (slave bond_slave_1): Releasing backup interface
[   53.173337][ T6198] team0: Port device team_slave_0 removed
[   53.176141][ T6198] team0: Port device team_slave_1 removed
[   53.178874][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.181651][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.185052][ T6198] bond0: (slave wlan1): Releasing backup interface
[   53.194353][ T6198] netlink: 'syz.2.75': attribute type 10 has an invalid length.
[   53.200642][ T6198] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.220423][ T6202] netlink: 256 bytes leftover after parsing attributes in process `syz.1.77'.
[   53.223368][ T6202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.77'.
[   53.231001][ T6202] lo speed is unknown, defaulting to 1000
[   53.233047][ T6202] lo speed is unknown, defaulting to 1000
[   53.235142][ T6202] lo speed is unknown, defaulting to 1000
[   53.269670][ T6202] infiniband syz0: set down
[   53.271214][ T5881] lo speed is unknown, defaulting to 1000
[   53.273255][ T6202] infiniband syz0: added lo
[   53.283229][ T6202] RDS/IB: syz0: added
[   53.284567][ T6202] smc: adding ib device syz0 with port count 1
[   53.286798][ T6202] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[   53.299620][ T6204] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.303056][ T6204] 8021q: adding VLAN 0 to HW filter on device team0
[   53.309301][ T6204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   53.315832][ T5313] lo speed is unknown, defaulting to 1000
[   53.319253][ T5313] syz0: Port: 1 Link ACTIVE
[   53.319295][ T5881] lo speed is unknown, defaulting to 1000
[   53.323134][ T6202] lo speed is unknown, defaulting to 1000
[   53.359682][ T6202] lo speed is unknown, defaulting to 1000
[   53.394372][ T6202] lo speed is unknown, defaulting to 1000
[   53.484040][ T6204] syz.1.77 (6204) used greatest stack depth: 20128 bytes left
[   53.493976][ T6206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.496546][ T6206] syzkaller0: entered promiscuous mode
[   53.498489][ T6206] syzkaller0: entered allmulticast mode
[   53.502196][ T6206] tipc: Resetting bearer <eth:syzkaller0>
[   53.504757][ T6205] tipc: Resetting bearer <eth:syzkaller0>
[   53.507716][ T6205] tipc: Disabling bearer <eth:syzkaller0>
[   53.835415][ T6209] netlink: 'syz.1.79': attribute type 10 has an invalid length.
[   53.840758][ T6209] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.969778][ T3143] cfg80211: failed to load regulatory.db
[   53.987436][ T6217] syzkaller0: entered promiscuous mode
[   53.990243][ T6217] syzkaller0: entered allmulticast mode
[   54.043142][ T6219] macvlan2: entered allmulticast mode
[   54.045497][ T6219] veth1_vlan: entered allmulticast mode
[   54.048725][ T6219] veth1_vlan: left allmulticast mode
[   54.183920][ T6224] netlink: 'syz.2.82': attribute type 32 has an invalid length.
[   54.187429][ T6224] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   54.721441][ T6226] bond0: (slave wlan1): Releasing backup interface
[   54.736676][ T6226] team0: Mode changed to "activebackup"
[   54.791562][ T6236] ip6gre1: entered allmulticast mode
[   54.819079][ T6238] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   54.857959][ T3143] lo speed is unknown, defaulting to 1000
[   54.860091][ T3143] syz0: Port: 1 Link DOWN
[   54.861565][ T3143] lo speed is unknown, defaulting to 1000
[   54.951087][ T6250] netlink: 'syz.2.89': attribute type 4 has an invalid length.
[   55.060682][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.063211][ T6263] sit2: entered allmulticast mode
[   55.099091][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.101619][ T6263] sit2: entered allmulticast mode
[   55.150009][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.152658][ T6263] sit2: entered allmulticast mode
[   55.209611][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.212363][ T6263] sit2: entered allmulticast mode
[   55.269361][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.272087][ T6263] sit2: entered allmulticast mode
[   55.318461][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.321040][ T6263] sit2: entered allmulticast mode
[   55.358692][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.360972][ T6263] sit2: entered allmulticast mode
[   55.400006][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.402700][ T6263] sit2: entered allmulticast mode
[   55.449908][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.452597][ T6263] sit2: entered allmulticast mode
[   55.518851][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.520960][ T6263] sit2: entered allmulticast mode
[   55.558523][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.560534][ T6263] sit2: entered allmulticast mode
[   55.598452][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.600643][ T6263] sit2: entered allmulticast mode
[   55.639515][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.641920][ T6263] sit2: entered allmulticast mode
[   55.699583][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.702786][ T6263] sit2: entered allmulticast mode
[   55.743074][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.745061][ T6263] sit2: entered allmulticast mode
[   55.756366][ T6281] netlink: 'syz.0.96': attribute type 142 has an invalid length.
[   55.799679][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.801691][ T6263] sit2: entered allmulticast mode
[   55.813894][ T6281] syz_tun: entered allmulticast mode
[   55.822180][ T6281] dvmrp1: entered allmulticast mode
[   55.830389][ T6280] syz_tun: left allmulticast mode
[   55.849876][ T6263] IPv6: sit2: Disabled Multicast RS
[   55.866732][ T6263] sit2: entered allmulticast mode
[   55.890268][ T6295] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.934475][ T6295] veth3: entered promiscuous mode
[   55.979445][ T6307] dvmrp8: entered allmulticast mode
[   55.982528][ T6306] dvmrp8: left allmulticast mode
[   56.140824][ T6314] __nla_validate_parse: 11 callbacks suppressed
[   56.140837][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'.
[   56.169557][ T6322] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   56.221002][ T6327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.106'.
[   56.222759][ T6329] validate_nla: 2 callbacks suppressed
[   56.222772][ T6329] netlink: 'syz.0.107': attribute type 2 has an invalid length.
[   56.223968][ T6327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.106'.
[   56.230030][ T6329] : entered promiscuous mode
[   56.236397][ T6329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.249928][ T6329] syzkaller0: entered promiscuous mode
[   56.252404][ T6327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.106'.
[   56.252434][ T6327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.106'.
[   56.257511][ T6329] syzkaller0: entered allmulticast mode
[   56.265134][ T6329] tipc: Resetting bearer <eth:syzkaller0>
[   56.270252][ T6326] tipc: Resetting bearer <eth:syzkaller0>
[   56.293255][ T6326] tipc: Disabling bearer <eth:syzkaller0>
[   56.357402][ T6338] netlink: 'syz.0.110': attribute type 9 has an invalid length.
[   56.360530][ T6338] netlink: 'syz.0.110': attribute type 7 has an invalid length.
[   56.363559][ T6338] netlink: 'syz.0.110': attribute type 8 has an invalid length.
[   56.448343][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'.
[   56.454284][ T6341] netlink: 'syz.0.110': attribute type 10 has an invalid length.
[   56.470225][ T6341] team0: Port device dummy0 added
[   56.507047][ T6341] netlink: 'syz.0.110': attribute type 10 has an invalid length.
[   56.524640][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   56.527838][ T6341] team0: Port device dummy0 removed
[   56.529948][ T6341] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   56.587125][ T6348] veth0_to_bond: entered allmulticast mode
[   57.258015][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv1
[   57.267803][ T6382] team0: Port device batadv1 added
[   57.305609][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   57.315258][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   57.323190][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   57.326448][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   57.357638][ T6397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.121'.
[   57.358063][ T6395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'.
[   57.473380][ T6413] netlink: 'syz.0.123': attribute type 1 has an invalid length.
[   57.492683][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'.
[   57.542794][ T6426] netlink: 'syz.0.125': attribute type 2 has an invalid length.
[   57.545649][ T6426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.690725][ T6448] Bluetooth: MGMT ver 1.23
[   57.704110][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv1
[   57.721599][ T6451] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   57.728847][ T6451] team0: Failed to send options change via netlink (err -105)
[   57.733947][ T6451] team0: Port device batadv1 added
[   57.775948][ T6462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.807246][ T6458] tipc: Disabling bearer <eth:syzkaller0>
[   57.872933][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.876248][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.945975][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.981334][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.051147][ T6465] gretap1: left promiscuous mode
[   58.053281][ T6465] gretap1: left allmulticast mode
[   58.092239][ T6468] @: renamed from veth0_vlan
[   58.099545][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv1
[   58.104647][ T6473] team0: Failed to send options change via netlink (err -105)
[   58.108023][ T6473] team0: Port device batadv1 added
[   58.110454][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   58.115912][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.120239][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   58.126637][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.137800][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   58.140765][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.144824][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   58.147983][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.155412][ T6479] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   58.160431][ T6479] bond0: (slave batadv0): Releasing backup interface
[   58.163572][ T6479] bridge_slave_0: left allmulticast mode
[   58.165704][ T6479] bridge_slave_0: left promiscuous mode
[   58.168102][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.176133][ T6479] bridge_slave_1: left allmulticast mode
[   58.178538][ T6479] bridge_slave_1: left promiscuous mode
[   58.183775][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.203062][ T6479] bond0: (slave bond_slave_0): Releasing backup interface
[   58.209146][ T6479] bond0: (slave bond_slave_1): Releasing backup interface
[   58.212828][ T6479] team0: Port device team_slave_0 removed
[   58.215480][ T6481] netlink: 'syz.1.140': attribute type 10 has an invalid length.
[   58.218280][ T6479] team0: Port device team_slave_1 removed
[   58.220256][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.222913][ T6479] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.226200][ T6479] bond0: (slave wlan1): Releasing backup interface
[   58.230511][ T6479] team0: Port device batadv1 removed
[   58.239731][ T6481] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   58.242240][ T6481] bond0: (slave wlan1): Opening slave failed
[   58.257595][ T6477] lo speed is unknown, defaulting to 1000
[   58.267722][ T6479] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   58.271166][ T6479] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   58.304980][ T6484] pim6reg1: entered allmulticast mode
[   58.307120][ T6480] netlink: 'syz.0.139': attribute type 13 has an invalid length.
[   58.348390][ T6480] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.351543][ T6480] 8021q: adding VLAN 0 to HW filter on device team0
[   58.356159][ T6480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.593521][   T33] audit: type=1800 audit(1756212590.802:2): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.148" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=279 res=0 errno=0
[   58.621393][ T6506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.624152][ T6506] syzkaller0: entered promiscuous mode
[   58.626087][ T6506] syzkaller0: entered allmulticast mode
[   58.634256][ T6506] tipc: Resetting bearer <eth:syzkaller0>
[   58.638788][ T6505] tipc: Resetting bearer <eth:syzkaller0>
[   58.642136][ T6505] tipc: Disabling bearer <eth:syzkaller0>
[   59.106480][ T6514] veth0_to_bond: left allmulticast mode
[   59.876396][ T6522] macsec0: entered promiscuous mode
[   59.879052][ T6522] team0: entered promiscuous mode
[   59.906701][ T6523] team0: Port device batadv1 removed
[   59.964931][ T6526] bond0: (slave wlan1): Opening slave failed
[   60.340804][ T6548] vlan2: entered promiscuous mode
[   60.342531][ T6548] macvtap0: entered promiscuous mode
[   60.371972][ T6550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.374388][ T6549] syzkaller0: entered promiscuous mode
[   60.376192][ T6549] syzkaller0: entered allmulticast mode
[   60.382157][ T6547] tipc: Resetting bearer <eth:syzkaller0>
[   60.386431][ T6547] tipc: Disabling bearer <eth:syzkaller0>
[   60.504785][ T6554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.508182][ T6554] syzkaller0: entered promiscuous mode
[   60.510282][ T6554] syzkaller0: entered allmulticast mode
[   60.513227][ T6554] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   60.518752][ T6554] tipc: Resetting bearer <eth:syzkaller0>
[   60.523280][ T6553] tipc: Resetting bearer <eth:syzkaller0>
[   60.526769][ T6553] tipc: Disabling bearer <eth:syzkaller0>
[   60.721167][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   60.724544][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   60.727779][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   60.730437][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   60.808892][ T6564] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   61.003525][ T6583] team0: Port device dummy0 added
[   61.010696][ T6583] team0: Port device dummy0 removed
[   61.014022][ T6583] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   61.574404][ T6587] validate_nla: 5 callbacks suppressed
[   61.574414][ T6587] netlink: 'syz.1.173': attribute type 10 has an invalid length.
[   61.580769][ T6587] bond0: (slave wlan1): Opening slave failed
[   61.583537][ T6587] __nla_validate_parse: 19 callbacks suppressed
[   61.583545][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.588586][ T6587] netlink: 52 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.591620][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.594748][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.599909][ T6587] netlink: 52 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.602793][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.606116][ T6587] netlink: 'syz.1.173': attribute type 8 has an invalid length.
[   61.613068][ T6587] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   61.636225][ T6589] vlan2: entered promiscuous mode
[   61.642476][ T6589] bridge0: entered promiscuous mode
[   61.653106][ T6590] vlan2: entered promiscuous mode
[   61.660919][ T6592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.663433][ T6592] syzkaller0: entered promiscuous mode
[   61.665245][ T6592] syzkaller0: entered allmulticast mode
[   61.671093][ T6592] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   61.678066][ T6592] tipc: Resetting bearer <eth:syzkaller0>
[   61.680836][ T6591] tipc: Resetting bearer <eth:syzkaller0>
[   61.685324][ T6589] netlink: 19 bytes leftover after parsing attributes in process `syz.0.174'.
[   61.689175][ T6591] tipc: Disabling bearer <eth:syzkaller0>
[   61.732252][ T6595] bond0: (slave dummy0): Releasing backup interface
[   61.739674][ T6595] bridge_slave_0: left allmulticast mode
[   61.742178][ T6595] bridge_slave_0: left promiscuous mode
[   61.744682][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.749257][ T6595] bridge_slave_1: left allmulticast mode
[   61.751834][ T6595] bridge_slave_1: left promiscuous mode
[   61.754402][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.762952][ T6595] bond0: (slave bond_slave_0): Releasing backup interface
[   61.770717][ T6595] bond0: (slave bond_slave_1): Releasing backup interface
[   61.775628][ T6595] team0: Port device team_slave_0 removed
[   61.784512][ T6595] team0: Port device team_slave_1 removed
[   61.786621][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.789695][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.798677][ T6595] team0: Port device batadv1 removed
[   61.808539][ T6598] ip6tnl2: entered promiscuous mode
[   61.810242][ T6598] ip6tnl2: entered allmulticast mode
[   61.814135][ T6598] ip6gre2: entered allmulticast mode
[   61.863777][ T6607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.888569][ T6600] syzkaller0: entered promiscuous mode
[   61.890455][ T6600] syzkaller0: entered allmulticast mode
[   61.894972][ T6600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.946510][ T6610] bond0: (slave dummy0): Releasing backup interface
[   62.002704][ T6612] netlink: 'syz.2.180': attribute type 10 has an invalid length.
[   62.004736][ T6600] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   62.009855][ T6612] bond0: (slave wlan1): Opening slave failed
[   62.014471][ T6600] tipc: Resetting bearer <eth:syzkaller0>
[   62.017981][ T6612] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   62.021267][ T6612] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   62.024436][ T6599] tipc: Resetting bearer <eth:syzkaller0>
[   62.028474][ T6599] tipc: Disabling bearer <eth:syzkaller0>
[   62.102973][ T6615] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   62.144500][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   62.153597][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   62.157742][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   62.163679][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   62.192967][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'.
[   62.209114][ T6632] netlink: 27 bytes leftover after parsing attributes in process `syz.0.185'.
[   62.228006][ T6636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.241177][ T6636] syzkaller0: entered promiscuous mode
[   62.243599][ T6636] syzkaller0: entered allmulticast mode
[   63.059238][ T6635] tipc: Resetting bearer <eth:syzkaller0>
[   63.120623][ T6635] tipc: Disabling bearer <eth:syzkaller0>
[   63.129548][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.193'.
[   63.191727][ T6689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.194149][ T6689] syzkaller0: entered promiscuous mode
[   63.195880][ T6689] syzkaller0: entered allmulticast mode
[   63.200079][ T6689] tipc: Resetting bearer <eth:syzkaller0>
[   63.202585][ T6687] tipc: Resetting bearer <eth:syzkaller0>
[   63.205775][ T6687] tipc: Disabling bearer <eth:syzkaller0>
[   63.241978][ T6688] netlink: 'syz.0.198': attribute type 12 has an invalid length.
[   63.383190][ T6692] batman_adv: batadv0: Adding interface: ip6gretap1
[   63.385903][ T6692] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.396491][ T6692] batman_adv: batadv0: Interface activated: ip6gretap1
[   64.054573][ T6703] macvlan1: entered allmulticast mode
[   64.126780][ T6706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.145621][ T6706] syzkaller0: entered promiscuous mode
[   64.149411][ T6706] syzkaller0: entered allmulticast mode
[   64.166459][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[   64.170033][ T6705] tipc: Resetting bearer <eth:syzkaller0>
[   64.173692][ T6705] tipc: Disabling bearer <eth:syzkaller0>
[   64.280445][ T6713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.282811][ T6713] syzkaller0: entered promiscuous mode
[   64.284559][ T6713] syzkaller0: entered allmulticast mode
[   64.298173][ T6715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.303504][ T6713] tipc: Resetting bearer <eth:syzkaller0>
[   64.318649][ T6715] syzkaller0: entered promiscuous mode
[   64.320981][ T6715] syzkaller0: entered allmulticast mode
[   64.324252][ T6712] tipc: Resetting bearer <eth:syzkaller0>
[   64.329861][ T6712] tipc: Disabling bearer <eth:syzkaller0>
[   64.352946][ T6715] tipc: Resetting bearer <eth:syzkaller0>
[   64.377321][ T6724] tipc: Resetting bearer <eth:syzkaller0>
[   64.405994][ T6731] netlink: 'syz.2.211': attribute type 12 has an invalid length.
[   64.422887][ T6724] tipc: Disabling bearer <eth:syzkaller0>
[   64.429549][ T6728] netlink: 'syz.1.210': attribute type 4 has an invalid length.
[   64.466358][ T6736] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   64.472091][ T6736] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   64.474481][ T6736] batman_adv: batadv0: Removing interface: ip6gretap1
[   64.517509][ T6739] netlink: 'syz.1.212': attribute type 10 has an invalid length.
[   64.519239][ T6736] netlink: 'syz.0.213': attribute type 10 has an invalid length.
[   64.523181][ T6736] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   64.526428][ T6736] bond0: (slave wlan1): Opening slave failed
[   64.531075][ T6736] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.531841][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.534869][ T6736] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   64.541974][ T6739] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   64.581773][ T6744] netlink: 'syz.2.214': attribute type 10 has an invalid length.
[   64.587204][ T6744] bond0: (slave wlan1): Opening slave failed
[   64.623861][ T6751] bond0: (slave batadv0): Releasing backup interface
[   64.639109][ T6751] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   64.730659][ T6755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.733311][ T6755] syzkaller0: entered promiscuous mode
[   64.735443][ T6755] syzkaller0: entered allmulticast mode
[   64.739634][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[   64.742530][ T6754] tipc: Resetting bearer <eth:syzkaller0>
[   64.745408][ T6754] tipc: Disabling bearer <eth:syzkaller0>
[   64.975401][ T6761] bridge0: entered promiscuous mode
[   64.978467][ T6761] macsec1: entered promiscuous mode
[   64.980353][ T6761] macsec1: entered allmulticast mode
[   64.982196][ T6761] bridge0: entered allmulticast mode
[   64.985141][ T6761] bridge0: port 1(macsec1) entered blocking state
[   64.988171][ T6761] bridge0: port 1(macsec1) entered disabled state
[   64.992260][ T6761] bridge0: left allmulticast mode
[   64.994537][ T6761] bridge0: left promiscuous mode
[   65.145768][ T6767] netlink: 'syz.1.224': attribute type 9 has an invalid length.
[   65.152349][ T6767] macvlan2: entered promiscuous mode
[   65.154789][ T6767] hsr0: entered promiscuous mode
[   65.158210][ T6767] macvlan2: entered allmulticast mode
[   65.160500][ T6767] hsr0: entered allmulticast mode
[   65.162676][ T6767] hsr_slave_0: entered allmulticast mode
[   65.165109][ T6767] hsr_slave_1: entered allmulticast mode
[   65.189142][ T6769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.289549][ T6781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.292549][ T6781] syzkaller0: entered promiscuous mode
[   65.294661][ T6781] syzkaller0: entered allmulticast mode
[   65.313550][ T6781] tipc: Resetting bearer <eth:syzkaller0>
[   65.317586][ T6780] tipc: Resetting bearer <eth:syzkaller0>
[   65.324250][ T6780] tipc: Disabling bearer <eth:syzkaller0>
[   65.339045][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.343115][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.345827][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.349506][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.406659][ T6789] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   65.418323][ T6789] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   65.423988][ T6789] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   65.485305][ T6795] vxcan5: entered promiscuous mode
[   65.487743][ T6795] team0: Port device vxcan5 added
[   65.551626][ T6803] hsr0: left allmulticast mode
[   65.554959][ T6803] hsr_slave_0: left allmulticast mode
[   65.558186][ T6803] hsr_slave_1: left allmulticast mode
[   65.560253][ T6803] hsr0: left promiscuous mode
[   65.748538][ T6815] vxcan5: left promiscuous mode
[   65.753903][ T6815] team0: Port device vxcan5 removed
[   65.851129][ T6821] sit0: entered promiscuous mode
[   66.248099][ T6823] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.286690][ T6830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.291522][ T6830] syzkaller0: entered promiscuous mode
[   66.293941][ T6830] syzkaller0: entered allmulticast mode
[   66.302381][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[   66.305513][ T6829] tipc: Resetting bearer <eth:syzkaller0>
[   66.310407][ T6829] tipc: Disabling bearer <eth:syzkaller0>
[   66.585860][ T6855] validate_nla: 5 callbacks suppressed
[   66.585869][ T6855] netlink: 'syz.0.252': attribute type 30 has an invalid length.
[   66.632577][ T6848] __nla_validate_parse: 27 callbacks suppressed
[   66.632586][ T6848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'.
[   66.715046][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[   66.783718][ T6873] netlink: 'syz.1.257': attribute type 10 has an invalid length.
[   66.788581][ T6873] dummy0: entered promiscuous mode
[   66.790621][ T6873] team0: Port device dummy0 added
[   66.792972][ T6873] netlink: 'syz.1.257': attribute type 10 has an invalid length.
[   66.799997][ T6873] dummy0: left promiscuous mode
[   66.803925][ T6873] team0: Port device dummy0 removed
[   66.806730][ T6873] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   66.813987][ T6875] vti0: entered promiscuous mode
[   66.816187][ T6875] vti0: entered allmulticast mode
[   66.863502][ T6878] lo speed is unknown, defaulting to 1000
[   67.013768][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'.
[   67.212039][ T6886] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   67.250020][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'.
[   67.291865][ T6890] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.295708][ T6890] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   67.347030][ T6890] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.357036][ T6890] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   67.409513][ T6890] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.417988][ T6890] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   67.478654][ T6890] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.481944][ T6890] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   67.536580][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.539457][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   67.544501][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.547780][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   67.554724][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.558499][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   67.568802][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.572083][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   67.648324][ T6902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.651675][ T6902] syzkaller0: entered promiscuous mode
[   67.657572][ T6902] syzkaller0: entered allmulticast mode
[   67.679449][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[   67.681770][ T6902] syzkaller0: left allmulticast mode
[   67.688609][ T6901] tipc: Resetting bearer <eth:syzkaller0>
[   67.691944][ T6901] tipc: Disabling bearer <eth:syzkaller0>
[   67.723228][ T6908] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[   67.726021][ T6908] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[   67.733946][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'.
[   67.739085][ T6908] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[   67.750969][ T6908] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.781926][ T6911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.784886][ T6911] syzkaller0: entered promiscuous mode
[   67.789476][ T6911] syzkaller0: entered allmulticast mode
[   67.799071][ T6911] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   67.804398][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   67.809589][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'.
[   67.823984][ T6911] tipc: Resetting bearer <eth:syzkaller0>
[   67.856026][ T6910] tipc: Resetting bearer <eth:syzkaller0>
[   67.860024][ T6910] tipc: Disabling bearer <eth:syzkaller0>
[   67.865209][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'.
[   67.872341][ T6913] vti0: entered promiscuous mode
[   67.874143][ T6913] vti0: entered allmulticast mode
[   67.893927][ T6918] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[   67.900492][ T6918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   67.913554][ T6918] netlink: 'syz.1.272': attribute type 4 has an invalid length.
[   67.917560][ T6918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.272'.
[   67.924243][ T6918] : renamed from bond0
[   67.950316][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[   67.974003][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv2
[   67.976483][ T6926] batadv2: entered promiscuous mode
[   67.979667][ T6926] team0: Failed to send options change via netlink (err -105)
[   67.982000][ T6926] team0: Port device batadv2 added
[   68.002227][ T6928] veth0: entered promiscuous mode
[   68.004895][ T6928] veth0 (unregistering): left promiscuous mode
[   68.136052][ T6945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.139117][ T6945] syzkaller0: entered promiscuous mode
[   68.140940][ T6945] syzkaller0: entered allmulticast mode
[   68.147433][ T6945] tipc: Resetting bearer <eth:syzkaller0>
[   68.152494][ T6944] tipc: Resetting bearer <eth:syzkaller0>
[   68.156040][ T6944] tipc: Disabling bearer <eth:syzkaller0>
[   68.242723][ T6947] : (slave dummy0): Releasing backup interface
[   68.246972][ T6947] batadv2: left promiscuous mode
[   68.250260][ T6947] team0: Port device batadv2 removed
[   68.253776][ T6947] netlink: 'syz.1.282': attribute type 2 has an invalid length.
[   68.444548][ T6954] dvmrp8: entered allmulticast mode
[   68.447813][ T6953] dvmrp8: left allmulticast mode
[   68.543701][ T6958] delete_channel: no stack
[   68.736181][ T6962] netlink: 'syz.2.286': attribute type 21 has an invalid length.
[   68.759687][ T6966] batadv_slave_1: entered promiscuous mode
[   68.819542][ T6965] batadv_slave_1: left promiscuous mode
[   68.840635][ T6971] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   68.891421][ T6977] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.900306][ T6978] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.903082][ T6978] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   68.907091][ T6978] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   69.304992][ T7014] bond0: (slave wlan1): Opening slave failed
[   69.307683][ T7014] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   69.555609][ T7034] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   69.574046][ T7034] dvmrp0: entered allmulticast mode
[   69.578915][ T7035] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   70.224908][ T7046] lo speed is unknown, defaulting to 1000
[   70.286348][ T7053] gtp1: entered promiscuous mode
[   70.288971][ T7053] team0: Port device gtp1 added
[   70.314805][ T7057] vlan2: entered promiscuous mode
[   70.317989][ T7057] bridge0: entered promiscuous mode
[   70.401540][ T7060] delete_channel: no stack
[   70.586346][ T7089] syzkaller1: entered promiscuous mode
[   70.588487][ T7089] syzkaller1: entered allmulticast mode
[   70.686401][ T7101] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   70.767693][ T7107] syzkaller0: entered promiscuous mode
[   70.769605][ T7107] syzkaller0: entered allmulticast mode
[   70.990476][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.992571][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.223897][ T7127] pim6reg1: entered promiscuous mode
[   71.232532][ T7127] pim6reg1: entered allmulticast mode
[   71.238528][ T7130] batman_adv: batadv0: Adding interface: dummy0
[   71.241085][ T7130] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.251542][ T7130] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   71.284430][ T7135] openvswitch: netlink: IP tunnel dst address not specified
[   71.299633][ T5958] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.307929][ T5958] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.312127][ T5958] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.316015][ T5958] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.436675][ T7149] sit0: left promiscuous mode
[   71.445549][ T7149] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   71.450916][ T7149] macvlan2: left promiscuous mode
[   71.452633][ T7149] macvlan2: left allmulticast mode
[   71.457794][ T7149] vti0: left promiscuous mode
[   71.459398][ T7149] vti0: left allmulticast mode
[   71.479855][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.486963][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.491098][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.497081][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.531868][ T7153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.222572][ T7164] __nla_validate_parse: 30 callbacks suppressed
[   72.222586][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[   72.315041][ T7170] validate_nla: 11 callbacks suppressed
[   72.315161][ T7170] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[   72.321076][ T7170] batman_adv: batadv0: Removing interface: dummy0
[   72.325538][ T7170] team0: Device dummy0 is of different type
[   72.341844][ T7170] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[   72.357596][ T7170] : (slave dummy0): Enslaving as an active interface with an up link
[   72.450352][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.0.342'.
[   72.502119][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'.
[   72.505981][ T7183] macsec0: entered promiscuous mode
[   72.508885][ T7183] macsec0: entered allmulticast mode
[   72.510648][ T7183] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   72.595247][ T7192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.597952][ T7192] syzkaller0: entered promiscuous mode
[   72.599876][ T7192] syzkaller0: entered allmulticast mode
[   72.604852][ T7194] team0: Port device gtp0 added
[   72.607052][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'.
[   72.639404][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'.
[   72.644995][ T7191] tipc: Resetting bearer <eth:syzkaller0>
[   72.648066][ T7191] tipc: Disabling bearer <eth:syzkaller0>
[   72.744359][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[   72.758013][ T7205] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   72.787578][ T7209] team0: Port device gtp0 removed
[   72.803143][ T7209] team0: Mode changed to "activebackup"
[   72.844898][ T7205] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   72.850238][ T7205] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   72.859124][ T7205] ip6gre1: left allmulticast mode
[   72.868965][ T7205] ip6tnl2: left promiscuous mode
[   72.873568][ T7205] ip6tnl2: left allmulticast mode
[   72.879099][ T7205] ip6gre2: left allmulticast mode
[   72.884797][ T7205] vti0: left promiscuous mode
[   72.886469][ T7205] vti0: left allmulticast mode
[   72.893201][ T5958] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[   72.897023][ T5958] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[   72.902759][ T5958] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[   72.905987][ T5958] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[   73.013966][ T7224] sctp: [Deprecated]: syz.2.355 (pid 7224) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.013966][ T7224] Use struct sctp_sack_info instead
[   73.118309][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   73.129454][ T7232] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.208514][ T7247] Set syz1 is full, maxelem 65536 reached
[   73.220066][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[   73.234934][ T7258] netlink: 'syz.0.360': attribute type 5 has an invalid length.
[   73.242941][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.360'.
[   73.248585][ T7260] netlink: 'syz.2.363': attribute type 4 has an invalid length.
[   73.254137][ T7258] geneve4: entered promiscuous mode
[   73.256322][ T7258] geneve4: entered allmulticast mode
[   73.266357][ T5958] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   73.271669][ T5958] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   73.275440][ T5958] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   73.281078][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'.
[   73.286891][ T5958] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   73.290511][ T7260] netlink: 'syz.2.363': attribute type 4 has an invalid length.
[   73.336658][ T7263] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   74.007805][ T7292] team0: Mode changed to "loadbalance"
[   74.085124][ T7297] team0: left promiscuous mode
[   74.086800][ T7297] gtp1: left promiscuous mode
[   74.185002][ T7301] netlink: 'syz.0.375': attribute type 21 has an invalid length.
[   74.245044][ T7307] geneve5: entered promiscuous mode
[   74.247330][ T5958] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[   74.251145][ T5958] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[   74.254565][ T5958] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[   74.258737][ T5958] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[   74.484341][ T7325] netlink: 'syz.1.380': attribute type 4 has an invalid length.
[   74.488960][ T7326] vlan2: entered allmulticast mode
[   74.490822][ T7326] hsr_slave_1: entered allmulticast mode
[   74.619324][ T7337] netlink: 'syz.1.383': attribute type 10 has an invalid length.
[   74.626802][ T7337] : (slave dummy0): Releasing backup interface
[   74.632700][ T7337] team0: Device dummy0 is of different type
[   74.638850][ T7337] netlink: 'syz.1.383': attribute type 10 has an invalid length.
[   74.647324][ T7337] : (slave dummy0): Enslaving as an active interface with an up link
[   74.685001][ T7339] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.692001][ T7339] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.694410][ T7339] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.699024][ T7339] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   74.750091][ T7341] veth3: entered promiscuous mode
[   74.753299][ T7341] bond3: (slave veth3): Enslaving as an active interface with a down link
[   74.759783][ T7339] erspan0: entered allmulticast mode
[   74.763175][ T7339] bond3: (slave erspan0): making interface the new active one
[   74.766012][ T7339] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   74.892897][ T7349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.262172][ T7375] nbd: must specify a size in bytes for the device
[   75.320661][ T7375] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.324791][ T7376] bond3: (slave wlan0): Opening slave failed
[   75.334206][ T7378] bond3: (slave wlan0): Opening slave failed
[   75.631020][ T7399] syzkaller1: entered promiscuous mode
[   75.632852][ T7399] syzkaller1: entered allmulticast mode
[   75.639510][ T7399] ip6gre1: entered allmulticast mode
[   75.745293][ T7409] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.748450][ T7409] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[   75.753154][ T7409] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[   75.827207][ T7415] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   75.874478][ T7417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.880196][ T7417] syzkaller0: entered promiscuous mode
[   75.884303][ T7417] syzkaller0: entered allmulticast mode
[   75.900166][ T7417] tipc: Resetting bearer <eth:syzkaller0>
[   75.907613][ T7416] tipc: Resetting bearer <eth:syzkaller0>
[   75.910974][ T7416] tipc: Disabling bearer <eth:syzkaller0>
[   76.055533][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.059687][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.068594][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.074458][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.137625][ T7439] syzkaller0: entered promiscuous mode
[   76.154576][ T7439] bond4 (unregistering): Released all slaves
[   76.592275][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.632002][ T7453] lo speed is unknown, defaulting to 1000
[   76.676725][ T5881] IPVS: starting estimator thread 0...
[   76.679875][ T7455] ieee802154 phy0 wpan0: encryption failed: -22
[   76.684123][ T7453] ieee802154 phy0 wpan0: encryption failed: -22
[   76.770039][ T7456] IPVS: using max 135 ests per chain, 324000 per kthread
[   77.389949][ T7506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.402843][ T7506] tipc: Disabling bearer <eth:syzkaller0>
[   77.470716][ T7514] sit2: entered promiscuous mode
[   77.477755][ T7513] bond3: (slave erspan0): Releasing active interface
[   77.482026][ T7513] bond3: (slave veth3): Releasing active interface
[   77.514554][ T7521] __nla_validate_parse: 60 callbacks suppressed
[   77.514568][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'.
[   77.528570][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'.
[   77.629923][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[   77.633538][ T7524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.637671][ T7524] validate_nla: 11 callbacks suppressed
[   77.637679][ T7524] netlink: 'syz.1.425': attribute type 1 has an invalid length.
[   77.651183][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.659193][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.661805][ T7524] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[   77.671899][ T7524] bond0: (slave vxcan1): Error -95 calling set_mac_address
[   77.693748][ T7529] team0: Port device gtp1 added
[   77.700620][ T7531] vlan0: entered promiscuous mode
[   77.702562][ T7531] dummy0: entered promiscuous mode
[   77.718463][ T7533] veth1: entered promiscuous mode
[   77.721308][ T7533] bond0: (slave veth1): Enslaving as an active interface with a down link
[   77.731281][ T7524] erspan0: entered allmulticast mode
[   77.737688][ T7524] bond0: (slave erspan0): making interface the new active one
[   77.740840][ T7524] bond0: (slave erspan0): Enslaving as an active interface with an up link
[   77.769095][ T7536] netlink: 'syz.1.430': attribute type 9 has an invalid length.
[   77.773457][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'.
[   77.779757][ T7536] macvlan3: entered promiscuous mode
[   77.781648][ T7536] hsr0: entered promiscuous mode
[   77.783665][ T7536] macvlan3: entered allmulticast mode
[   77.786007][ T7536] hsr0: entered allmulticast mode
[   77.788135][ T7536] hsr_slave_0: entered allmulticast mode
[   77.792217][ T7538] syzkaller0: left promiscuous mode
[   77.800094][ T6467] IPVS: starting estimator thread 0...
[   77.822905][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'.
[   77.836695][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'.
[   77.896943][ T7539] IPVS: using max 135 ests per chain, 324000 per kthread
[   77.905630][ T7556] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'.
[   77.911416][ T7556]  (unregistering): (slave dummy0): Releasing backup interface
[   77.915330][ T7556]  (unregistering): Released all slaves
[   77.955214][ T7558] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.039376][ T7558] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.099959][ T7558] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.112582][ T7564] erspan0: left allmulticast mode
[   78.115639][ T7564] sit2: left promiscuous mode
[   78.119517][ T7564] veth1: left promiscuous mode
[   78.122491][ T7564] hsr0: left allmulticast mode
[   78.124042][ T7564] hsr_slave_0: left allmulticast mode
[   78.125810][ T7564] hsr0: left promiscuous mode
[   78.129004][ T7564] macvlan3: left promiscuous mode
[   78.130682][ T7564] macvlan3: left allmulticast mode
[   78.133985][ T7558] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.190181][ T5895] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.196766][ T5895] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.206572][ T5895] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.212419][ T5895] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.244356][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'.
[   78.302706][ T7581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'.
[   78.369957][ T7583] ip6tnl3: entered promiscuous mode
[   78.371785][ T7583] ip6tnl3: entered allmulticast mode
[   78.388194][ T7585] netlink: 248 bytes leftover after parsing attributes in process `syz.2.445'.
[   78.473381][ T7594] netlink: 'syz.2.446': attribute type 1 has an invalid length.
[   78.611070][ T7597] netlink: 'syz.0.447': attribute type 4 has an invalid length.
[   79.098178][   T51] hid-generic 0005:046D:8002.0001: collection stack underflow
[   79.100681][   T51] hid-generic 0005:046D:8002.0001: item 0 0 0 12 parsing failed
[   79.105830][   T51] hid-generic 0005:046D:8002.0001: probe with driver hid-generic failed with error -22
[   79.174481][ T7606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.178117][ T7606] syzkaller0: entered promiscuous mode
[   79.180469][ T7606] syzkaller0: entered allmulticast mode
[   79.185527][ T7606] tipc: Resetting bearer <eth:syzkaller0>
[   79.188885][ T7605] tipc: Resetting bearer <eth:syzkaller0>
[   79.192348][ T7605] tipc: Disabling bearer <eth:syzkaller0>
[   79.252620][ T7608] netlink: 'syz.2.452': attribute type 12 has an invalid length.
[   79.255202][ T7608] netlink: 'syz.2.452': attribute type 11 has an invalid length.
[   79.284114][ T7610] syzkaller0: entered promiscuous mode
[   79.286623][ T7610] syzkaller0: entered allmulticast mode
[   79.291462][ T7610] gretap0: entered promiscuous mode
[   79.364962][ T7619] lo speed is unknown, defaulting to 1000
[   79.423972][ T7628] ip6gre2: entered allmulticast mode
[   79.503255][ T7636] IPv6: sit3: Disabled Multicast RS
[   79.515537][ T7638] netlink: 'syz.2.459': attribute type 10 has an invalid length.
[   79.531889][ T7638] netlink: 'syz.2.459': attribute type 10 has an invalid length.
[   79.535511][ T7638] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   79.544474][ T7645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.557514][ T7645] syzkaller0: entered promiscuous mode
[   79.559347][ T7645] syzkaller0: entered allmulticast mode
[   79.584187][ T7648] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.594559][ T7648] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   79.598926][ T7648] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.602435][ T7648] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   79.615588][ T7652] tipc: Resetting bearer <eth:syzkaller0>
[   79.636585][ T7654] team0: Device batadv2 is of different type
[   79.645822][ T7648] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.651109][ T7648] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   79.654871][ T7648] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.677940][ T7648] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   79.760652][ T7644] tipc: Resetting bearer <eth:syzkaller0>
[   79.764297][ T7644] tipc: Disabling bearer <eth:syzkaller0>
[   79.781359][ T7648] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.785341][ T7648] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   79.789749][ T7648] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.793008][ T7648] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   79.860404][ T7648] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.939999][ T7648] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   79.943397][ T7648] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.946668][ T7648] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[   79.951769][ T7675] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   80.009849][ T5958] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.013692][ T5958] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.016731][ T5958] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   80.021371][ T5958] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[   80.034950][ T5958] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.047734][ T5958] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.054395][ T5958] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   80.060139][ T5958] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[   80.065734][ T5958] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.071984][ T5958] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.078833][ T5958] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   80.084736][ T5958] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[   80.094001][ T5958] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.100168][ T5958] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.103936][ T5958] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   80.106552][ T5958] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[   80.174567][ T7692] lo speed is unknown, defaulting to 1000
[   80.277145][ T7701] gretap0: left promiscuous mode
[   80.279201][ T7701] erspan0: left allmulticast mode
[   80.283397][ T7701] veth3: left promiscuous mode
[   80.285821][ T7701] syzkaller0: left promiscuous mode
[   80.287781][ T7701] syzkaller0: left allmulticast mode
[   80.294877][ T7701] ip6tnl3: left promiscuous mode
[   80.296545][ T7701] ip6tnl3: left allmulticast mode
[   80.304227][ T5895] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.312469][ T5895] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.315820][ T5895] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.324035][ T5895] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.327810][ T7705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.331095][ T7704] syzkaller0: entered promiscuous mode
[   80.333111][ T7704] syzkaller0: entered allmulticast mode
[   80.340040][ T7704] netlink: 'syz.1.474': attribute type 83 has an invalid length.
[   80.343500][ T7705] netlink: 'syz.1.474': attribute type 83 has an invalid length.
[   80.350655][ T7704] tipc: Resetting bearer <eth:syzkaller0>
[   80.358312][ T7703] tipc: Resetting bearer <eth:syzkaller0>
[   80.366520][ T7703] tipc: Disabling bearer <eth:syzkaller0>
[   80.427078][ T5847] Bluetooth: hci2: command tx timeout
[   80.467215][ T7716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.470728][ T7716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.473577][ T7716] syzkaller0: entered promiscuous mode
[   80.475484][ T7716] syzkaller0: entered allmulticast mode
[   80.481773][ T7716] tipc: Resetting bearer <eth:syzkaller0>
[   80.484315][ T7715] tipc: Resetting bearer <eth:syzkaller0>
[   80.488039][ T7715] tipc: Disabling bearer <eth:syzkaller0>
[   80.563633][ T7718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.575301][ T7718] syzkaller0: entered promiscuous mode
[   80.577908][ T7718] syzkaller0: entered allmulticast mode
[   80.612742][ T7718] tipc: Resetting bearer <eth:syzkaller0>
[   80.615648][ T7717] tipc: Resetting bearer <eth:syzkaller0>
[   80.620153][ T7717] tipc: Disabling bearer <eth:syzkaller0>
[   80.960614][ T7733] syzkaller1: entered allmulticast mode
[   80.964503][ T7733] syzkaller1: left allmulticast mode
[   81.193328][ T7739] lo speed is unknown, defaulting to 1000
[   81.212586][ T7741] gretap0: refused to change device tx_queue_len
[   81.214733][ T7741] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   81.376458][ T7750] bond0: (slave dummy0): Releasing backup interface
[   82.179528][ T7765] pim6reg1: entered allmulticast mode
[   82.327164][ T7762] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   82.350690][ T7773] gretap1: entered promiscuous mode
[   82.352520][ T7773] gretap1: entered allmulticast mode
[   83.250735][ T7795] validate_nla: 5 callbacks suppressed
[   83.250748][ T7795] netlink: 'syz.1.499': attribute type 11 has an invalid length.
[   83.255312][ T7795] __nla_validate_parse: 24 callbacks suppressed
[   83.255318][ T7795] netlink: 140 bytes leftover after parsing attributes in process `syz.1.499'.
[   83.260596][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   83.277961][ T5895] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.280756][ T5895] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.283450][ T5895] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.286106][ T5895] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.302751][ T7803] bond0: (slave erspan0): Releasing active interface
[   83.308956][ T7803] team0: Port device gtp1 removed
[   83.312133][ T7803] bond0: (slave veth1): Releasing active interface
[   83.315855][ T7803] netlink: 'syz.1.501': attribute type 10 has an invalid length.
[   83.320387][ T7803] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.324059][ T7803] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.330859][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'.
[   83.354669][ T7809] bond0: (slave dummy0): Releasing backup interface
[   83.360635][ T7809] team0: Port device gtp1 removed
[   83.366181][ T7809] netlink: 64 bytes leftover after parsing attributes in process `syz.0.502'.
[   83.452876][ T7817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.504'.
[   83.459289][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'.
[   83.535415][ T7823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.538097][ T7823] syzkaller0: entered promiscuous mode
[   83.539879][ T7823] syzkaller0: entered allmulticast mode
[   83.544438][ T7824] tipc: Resetting bearer <eth:syzkaller0>
[   83.551176][ T7822] tipc: Resetting bearer <eth:syzkaller0>
[   83.554622][ T7822] tipc: Disabling bearer <eth:syzkaller0>
[   83.628974][ T7827] lo speed is unknown, defaulting to 1000
[   83.673330][ T7829] geneve6: entered allmulticast mode
[   83.872203][ T7834] lo speed is unknown, defaulting to 1000
[   83.942218][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'.
[   83.948061][ T7842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.951707][ T7842] tipc: Resetting bearer <eth:syzkaller0>
[   83.954519][ T7841] tipc: Disabling bearer <eth:syzkaller0>
[   84.100620][ T7854] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.161895][ T7863] netlink: 'syz.1.516': attribute type 9 has an invalid length.
[   84.164471][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.516'.
[   84.189071][ T7867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.195147][ T7867] syzkaller0: entered promiscuous mode
[   84.200375][ T7867] syzkaller0: entered allmulticast mode
[   84.241509][ T7867] tipc: Resetting bearer <eth:syzkaller0>
[   84.270755][ T7883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.521'.
Connection to localhost closed by remote host.
[   84.496876][ T7602] ==================================================================
[   84.499484][ T7602] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290
[   84.502014][ T7602] Read of size 4 at addr ffff888029c1805c by task khidpd_046d8002/7602
[   84.505473][ T7602] 
[   84.506289][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: khidpd_046d8002 Not tainted syzkaller #0 PREEMPT(full) 
[   84.506299][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.506303][ T7602] Call Trace:
[   84.506307][ T7602]  <TASK>
[   84.506310][ T7602]  dump_stack_lvl+0x189/0x250
[   84.506322][ T7602]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.506330][ T7602]  ? lock_release+0x4b/0x3e0
[   84.506341][ T7602]  ? __virt_addr_valid+0x4a5/0x5c0
[   84.506351][ T7602]  print_report+0xca/0x240
[   84.506357][ T7602]  ? do_raw_spin_lock+0x23d/0x290
[   84.506365][ T7602]  kasan_report+0x118/0x150
[   84.506376][ T7602]  ? do_raw_spin_lock+0x23d/0x290
[   84.506385][ T7602]  do_raw_spin_lock+0x23d/0x290
[   84.506393][ T7602]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   84.506403][ T7602]  _raw_spin_lock_irqsave+0xb3/0xf0
[   84.506412][ T7602]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[   84.506421][ T7602]  ? schedule+0x16f/0x360
[   84.506429][ T7602]  ? __mutex_lock+0x37a/0x1350
[   84.506438][ T7602]  __mutex_lock+0x3d1/0x1350
[   84.506448][ T7602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   84.506457][ T7602]  ? rcu_is_watching+0x15/0xb0
[   84.506464][ T7602]  ? l2cap_unregister_user+0x6a/0x1b0
[   84.506473][ T7602]  ? __pfx___mutex_lock+0x10/0x10
[   84.506483][ T7602]  ? __pfx___timer_delete_sync+0x10/0x10
[   84.506491][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.506501][ T7602]  l2cap_unregister_user+0x6a/0x1b0
[   84.506509][ T7602]  hidp_session_thread+0x3c9/0x410
[   84.506518][ T7602]  ? __pfx_hidp_session_thread+0x10/0x10
[   84.506526][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.506534][ T7602]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   84.506543][ T7602]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   84.506551][ T7602]  ? __kthread_parkme+0x7b/0x200
[   84.506558][ T7602]  ? __kthread_parkme+0x1a1/0x200
[   84.506566][ T7602]  kthread+0x711/0x8a0
[   84.506575][ T7602]  ? __pfx_hidp_session_thread+0x10/0x10
[   84.506582][ T7602]  ? __pfx_kthread+0x10/0x10
[   84.506591][ T7602]  ? rcu_is_watching+0x15/0xb0
[   84.506597][ T7602]  ? __pfx_kthread+0x10/0x10
[   84.506605][ T7602]  ret_from_fork+0x3fc/0x770
[   84.506612][ T7602]  ? __pfx_ret_from_fork+0x10/0x10
[   84.506620][ T7602]  ? __switch_to_asm+0x39/0x70
[   84.506628][ T7602]  ? __switch_to_asm+0x33/0x70
[   84.506636][ T7602]  ? __pfx_kthread+0x10/0x10
[   84.506644][ T7602]  ret_from_fork_asm+0x1a/0x30
[   84.506655][ T7602]  </TASK>
[   84.506658][ T7602] 
[   84.583838][ T7602] Allocated by task 5848:
[   84.585282][ T7602]  kasan_save_track+0x3e/0x80
[   84.586831][ T7602]  __kasan_kmalloc+0x93/0xb0
[   84.588358][ T7602]  __kmalloc_noprof+0x27a/0x4f0
[   84.589956][ T7602]  hci_alloc_dev_priv+0x28/0x2060
[   84.591607][ T7602]  vhci_create_device+0x120/0x6e0
[   84.593359][ T7602]  vhci_write+0x3ce/0x4a0
[   84.594783][ T7602]  vfs_write+0x5c9/0xb30
[   84.596158][ T7602]  ksys_write+0x145/0x250
[   84.597588][ T7602]  do_syscall_64+0xfa/0x3b0
[   84.599031][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.600866][ T7602] 
[   84.601635][ T7602] Freed by task 7881:
[   84.602936][ T7602]  kasan_save_track+0x3e/0x80
[   84.604467][ T7602]  kasan_save_free_info+0x46/0x50
[   84.606071][ T7602]  __kasan_slab_free+0x5b/0x80
[   84.607641][ T7602]  kfree+0x18e/0x440
[   84.608870][ T7602]  bt_host_release+0x82/0x90
[   84.610362][ T7602]  device_release+0x9c/0x1c0
[   84.611847][ T7602]  kobject_put+0x22b/0x480
[   84.613423][ T7602]  vhci_release+0x88/0xd0
[   84.614797][ T7602]  __fput+0x44c/0xa70
[   84.616087][ T7602]  task_work_run+0x1d4/0x260
[   84.617600][ T7602]  do_exit+0x6b5/0x2300
[   84.618937][ T7602]  do_group_exit+0x21c/0x2d0
[   84.620490][ T7602]  get_signal+0x1286/0x1340
[   84.621939][ T7602]  arch_do_signal_or_restart+0x9a/0x750
[   84.623770][ T7602]  exit_to_user_mode_loop+0x75/0x110
[   84.625473][ T7602]  do_syscall_64+0x2bd/0x3b0
[   84.626955][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.628846][ T7602] 
[   84.629647][ T7602] Last potentially related work creation:
[   84.631446][ T7602]  kasan_save_stack+0x3e/0x60
[   84.633063][ T7602]  kasan_record_aux_stack+0xbd/0xd0
[   84.634795][ T7602]  insert_work+0x3d/0x330
[   84.636188][ T7602]  __queue_work+0xbaf/0xfb0
[   84.637656][ T7602]  queue_work_on+0x181/0x270
[   84.639161][ T7602]  process_scheduled_works+0xae1/0x17b0
[   84.640976][ T7602]  worker_thread+0x8a0/0xda0
[   84.642501][ T7602]  kthread+0x711/0x8a0
[   84.643893][ T7602]  ret_from_fork+0x3fc/0x770
[   84.645457][ T7602]  ret_from_fork_asm+0x1a/0x30
[   84.647059][ T7602] 
[   84.647891][ T7602] Second to last potentially related work creation:
[   84.650072][ T7602]  kasan_save_stack+0x3e/0x60
[   84.651662][ T7602]  kasan_record_aux_stack+0xbd/0xd0
[   84.653537][ T7602]  insert_work+0x3d/0x330
[   84.654983][ T7602]  __queue_work+0xcd2/0xfb0
[   84.656484][ T7602]  call_timer_fn+0x17e/0x5f0
[   84.658011][ T7602]  __run_timer_base+0x646/0x860
[   84.659613][ T7602]  run_timer_softirq+0xb7/0x180
[   84.661239][ T7602]  handle_softirqs+0x286/0x870
[   84.662857][ T7602]  __irq_exit_rcu+0xca/0x1f0
[   84.664368][ T7602]  irq_exit_rcu+0x9/0x30
[   84.665740][ T7602]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   84.667591][ T7602]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   84.669553][ T7602] 
[   84.670360][ T7602] The buggy address belongs to the object at ffff888029c18000
[   84.670360][ T7602]  which belongs to the cache kmalloc-8k of size 8192
[   84.675003][ T7602] The buggy address is located 92 bytes inside of
[   84.675003][ T7602]  freed 8192-byte region [ffff888029c18000, ffff888029c1a000)
[   84.679391][ T7602] 
[   84.680181][ T7602] The buggy address belongs to the physical page:
[   84.682264][ T7602] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29c18
[   84.685057][ T7602] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   84.687786][ T7602] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   84.690249][ T7602] page_type: f5(slab)
[   84.691566][ T7602] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[   84.694455][ T7602] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   84.697194][ T7602] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[   84.699861][ T7602] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[   84.702666][ T7602] head: 00fff00000000003 ffffea0000a70601 00000000ffffffff 00000000ffffffff
[   84.705386][ T7602] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   84.708055][ T7602] page dumped because: kasan: bad access detected
[   84.710142][ T7602] page_owner tracks the page as allocated
[   84.712380][ T7602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 44567205940, free_ts 44386688598
[   84.720735][ T7602]  post_alloc_hook+0x240/0x2a0
[   84.722337][ T7602]  get_page_from_freelist+0x21e4/0x22c0
[   84.724184][ T7602]  __alloc_frozen_pages_noprof+0x181/0x370
[   84.726116][ T7602]  alloc_pages_mpol+0x232/0x4a0
[   84.727739][ T7602]  allocate_slab+0x8a/0x370
[   84.729249][ T7602]  ___slab_alloc+0xbeb/0x1410
[   84.730810][ T7602]  __kmalloc_noprof+0x305/0x4f0
[   84.732551][ T7602]  hci_alloc_dev_priv+0x28/0x2060
[   84.734743][ T7602]  vhci_create_device+0x120/0x6e0
[   84.736536][ T7602]  vhci_write+0x3ce/0x4a0
[   84.737971][ T7602]  vfs_write+0x5c9/0xb30
[   84.739384][ T7602]  ksys_write+0x145/0x250
[   84.740830][ T7602]  do_syscall_64+0xfa/0x3b0
[   84.742361][ T7602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.744324][ T7602] page last free pid 5837 tgid 5837 stack trace:
[   84.746650][ T7602]  __free_frozen_pages+0xbc4/0xd30
[   84.748578][ T7602]  __slab_free+0x303/0x3c0
[   84.750043][ T7602]  qlist_free_all+0x97/0x140
[   84.751558][ T7602]  kasan_quarantine_reduce+0x148/0x160
[   84.753324][ T7602]  __kasan_slab_alloc+0x22/0x80
[   84.754948][ T7602]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   84.756741][ T7602]  jbd2__journal_start+0x146/0x5b0
[   84.758432][ T7602]  __ext4_journal_start_sb+0x227/0x5c0
[   84.760238][ T7602]  ext4_dirty_inode+0x93/0x110
[   84.761803][ T7602]  __mark_inode_dirty+0x2ec/0xe10
[   84.763587][ T7602]  touch_atime+0x59b/0x6d0
[   84.765081][ T7602]  ext4_file_mmap_prepare+0x24d/0x440
[   84.766896][ T7602]  mmap_region+0xb41/0x20c0
[   84.768428][ T7602]  do_mmap+0xc45/0x10d0
[   84.769828][ T7602]  vm_mmap_pgoff+0x2a6/0x4d0
[   84.771401][ T7602]  ksys_mmap_pgoff+0x51f/0x760
[   84.772995][ T7602] 
[   84.773818][ T7602] Memory state around the buggy address:
[   84.775700][ T7602]  ffff888029c17f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   84.778599][ T7602]  ffff888029c17f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   84.781619][ T7602] >ffff888029c18000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.784336][ T7602]                                                     ^
[   84.786641][ T7602]  ffff888029c18080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.789303][ T7602]  ffff888029c18100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   84.791878][ T7602] ==================================================================
[   84.794548][ T7602] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   84.796929][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: khidpd_046d8002 Not tainted syzkaller #0 PREEMPT(full) 
[   84.800122][ T7602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.803446][ T7602] Call Trace:
[   84.804588][ T7602]  <TASK>
[   84.805593][ T7602]  dump_stack_lvl+0x99/0x250
[   84.807132][ T7602]  ? __asan_memcpy+0x40/0x70
[   84.808684][ T7602]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.810428][ T7602]  ? __pfx__printk+0x10/0x10
[   84.811965][ T7602]  vpanic+0x281/0x750
[   84.813297][ T7602]  ? __pfx_print_hex_dump+0x10/0x10
[   84.815026][ T7602]  ? __pfx_vpanic+0x10/0x10
[   84.816501][ T7602]  panic+0xb9/0xc0
[   84.817707][ T7602]  ? __pfx_panic+0x10/0x10
[   84.819176][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.821082][ T7602]  ? do_raw_spin_lock+0x23d/0x290
[   84.822723][ T7602]  check_panic_on_warn+0x89/0xb0
[   84.824331][ T7602]  ? do_raw_spin_lock+0x23d/0x290
[   84.825980][ T7602]  end_report+0x78/0x160
[   84.827390][ T7602]  kasan_report+0x129/0x150
[   84.828898][ T7602]  ? do_raw_spin_lock+0x23d/0x290
[   84.830653][ T7602]  do_raw_spin_lock+0x23d/0x290
[   84.832240][ T7602]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   84.833987][ T7602]  _raw_spin_lock_irqsave+0xb3/0xf0
[   84.835690][ T7602]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[   84.837615][ T7602]  ? schedule+0x16f/0x360
[   84.838997][ T7602]  ? __mutex_lock+0x37a/0x1350
[   84.840555][ T7602]  __mutex_lock+0x3d1/0x1350
[   84.842052][ T7602]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   84.844119][ T7602]  ? rcu_is_watching+0x15/0xb0
[   84.845702][ T7602]  ? l2cap_unregister_user+0x6a/0x1b0
[   84.847427][ T7602]  ? __pfx___mutex_lock+0x10/0x10
[   84.849128][ T7602]  ? __pfx___timer_delete_sync+0x10/0x10
[   84.851381][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.853777][ T7602]  l2cap_unregister_user+0x6a/0x1b0
[   84.855795][ T7602]  hidp_session_thread+0x3c9/0x410
[   84.857686][ T7602]  ? __pfx_hidp_session_thread+0x10/0x10
[   84.859991][ T7602]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   84.862424][ T7602]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   84.864976][ T7602]  ? __pfx_hidp_session_wake_function+0x10/0x10
[   84.867546][ T7602]  ? __kthread_parkme+0x7b/0x200
[   84.869576][ T7602]  ? __kthread_parkme+0x1a1/0x200
[   84.871543][ T7602]  kthread+0x711/0x8a0
[   84.872974][ T7602]  ? __pfx_hidp_session_thread+0x10/0x10
[   84.874854][ T7602]  ? __pfx_kthread+0x10/0x10
[   84.876626][ T7602]  ? rcu_is_watching+0x15/0xb0
[   84.878460][ T7602]  ? __pfx_kthread+0x10/0x10
[   84.880007][ T7602]  ret_from_fork+0x3fc/0x770
[   84.881633][ T7602]  ? __pfx_ret_from_fork+0x10/0x10
[   84.883335][ T7602]  ? __switch_to_asm+0x39/0x70
[   84.884937][ T7602]  ? __switch_to_asm+0x33/0x70
[   84.886567][ T7602]  ? __pfx_kthread+0x10/0x10
[   84.888106][ T7602]  ret_from_fork_asm+0x1a/0x30
[   84.889725][ T7602]  </TASK>
[   84.891429][ T7602] Kernel Offset: disabled
[   84.892877][ T7602] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:50:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000312f210
R8 =ffff888106768237 R9 =1ffff11020ced046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8f2 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f625d6e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006e616c78760001 000a801200280000
XMM02=a95ebd49469bdc91 a49bc901cdbcccf7 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=8da6ccd40762cde7 a2a18fef936b9962
XMM06=8144c1a8cda95ebd 49469bdc91a49bc9 XMM07=01cdbcccf78a2854 f20e564577692541
XMM08=41c4363bdf1477dc 983e989946b0d611 XMM09=0000000000000000 00007f7a66012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000246 RBX=ffffffff8184e79e RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000201 RDI=ffffffff8184e79e RBP=ffffc9000479f978 RSP=ffffc9000479f8c8
R8 =ffff8881080a8a43 R9 =1ffff11021015148 R10=dffffc0000000000 R11=ffffed1021015149
R12=ffffffff8b4770f8 R13=dffffc0000000000 R14=dffffc0000000000 R15=1ffff920008f3f1c
RIP=ffffffff8b7979d0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff385ee7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7a66012e53
XMM06=0000000000000000 00007f7a66012e4d XMM07=0000000000000000 00007f7a66012e61
XMM08=0000000000000000 00007f7a66012ee7 XMM09=0000000000000000 00007f7a66012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
