last executing test programs:

3.519744057s ago: executing program 1 (id=3368):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0)
unshare(0x26020480)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3e, 0x4}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000003000000000000"], &(0x7f00000014c0)=""/2, 0x1b, 0x2, 0x1}, 0x28)

3.278727491s ago: executing program 1 (id=3371):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24044880}, 0x4044850)
unshare(0xc040000)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c0002800800", @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x4040090}, 0xc000)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @remote, 0x1}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @rand_addr, 0x8}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

2.867030044s ago: executing program 3 (id=3375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911175000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000080000001809000020206925000000000020e3207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c4000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {0x0, 0x27}], 0x2)
socket$netlink(0x10, 0x3, 0xe)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x1, 0x7, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

2.572830151s ago: executing program 3 (id=3378):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x20}, 0x8)
sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000180)=0x3, 0x4)
sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00032dbd7000fcdbdf251b0000000800010032000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0)
r7 = socket$inet(0xa, 0x6, 0x84)
listen(r7, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085df73e666000000f0520ea730e3bcac"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x14)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f00000002c0)={0x1f, 0xffff, 0x1}, 0x6)
write(r11, 0x0, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000000000100000000000000000c0a00806e08000000000001007c8b2f1f613c7ed8122be39de20f5abf48c51610df01d0a80d0b8e158ea6138b82c5735bb50b7b5da1f5dded3963a0a5440622b72a9dd0555e3fc8dcb1384fed1ca9cfa8351efa894ec567"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="74005a801e000180140005000800050009000000c408ff07030006e09409d230383074001000ffff273103524e200a1c4608572114000500d100090010000004dffb0d00230700100e0002000713181053382532221800001400030306000b000500ebdd0600060003000200050007000100000005000700000000000a0018000303030303030000"], 0x9c}, 0x1, 0x0, 0x0, 0x4008880}, 0x40080)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r4)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000001020104000000000000000001000004680001802c0001801400030000000000000000000000ffffac1414aa1400040000008280050001002f0000000c000280050001"], 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'geneve0\x00'})

2.249141048s ago: executing program 1 (id=3383):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111bd000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000073de8844526c1cae3cd01e188bb45f000000b3118300000000b2820700"/51], &(0x7f0000000100)='syzkaller\x00', 0xd1e1, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000c1140b897430b6e5eec4691087cf762fb0348f194ef0144444a372da0cf0cbb22735115b25c6fe3d32a61186c9211cb3226aa5d7b80a2fce86506552e82be6598bacd92646f3aee8373d7f9eb4043d06f6e19220742f3e871c540ddb8304f3de00"/110, @ANYRES16=r3, @ANYBLOB="05090000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2)
unshare(0x22020600)
r8 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
r9 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
recvmsg(r9, 0x0, 0x104)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x9, 0xc}, {0x10, 0xffff}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e22, 0x5da3, @mcast1, 0x100}, {0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fff}, 0x1, {[0x4, 0xa, 0x3, 0x4, 0x2, 0x3ff, 0xff, 0x2]}}, 0x5c)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x0)

1.935322093s ago: executing program 0 (id=3387):
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000180)={&(0x7f0000000040)=[{0x1, 0x0, 0x9ebc, 0x0, 0x4, 0x1, 0x7}, {0x0, 0x0, 0xfffffffffffffff4, 0x200, 0x3, 0x6, 0x8000, 0x1}, {0x2, 0x0, 0x294d, 0x5, 0x1, 0xe, 0x7, 0x81}, {0x2, 0x0, 0x8, 0x5, 0x4, 0x9, 0x5, 0x6}, {0x2, 0x0, 0x400, 0x4, 0x0, 0x7fffffff, 0x1, 0x4}], 0x5, 0x38, 0x1, 0x7})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffff0fdb, 0x0, 0xffff, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b0, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x20}}}}, [@NL80211_ATTR_TESTDATA={0x60, 0x45, "1c22a025adb5c85eac38f691404e2626c66301350733055f68345d16f79eadbd042e434fc2ee68923535a8aac1617cc5ff6fa7796d3204e94e7babb9209a00641926274901ddc8f24a4d56fd5d53b506a8f04b846a998e45136c669d"}, @NL80211_ATTR_TESTDATA={0xaf, 0x45, "d390dd9b49cac15b96ccef4c554d63b17a8ae616b78bf0ccd7ff391f75d7229474cb245efe1a9a3d4c43ef3ce37f743c5213aa5442af4fd3bb682a33c95aaf68aa1a6272347cd2fc498271516bdd9deebd5797a4764ff16af8aa425dce944ebe5c85e38ebfd39f4949432750a7323ec6f682c9b352ae3845e9cde2602feb12d341ed9679e74f4aa6669fc94b15c66da324b6143333c330763ee3e2926a2a4e8fd6af3a6a778731f50afcd6"}, @NL80211_ATTR_TESTDATA={0x49, 0x45, "b7de985a0b69cdb19fbbde83cea8c1aec6f955db2ca88b76b853628728c7b83bffb008cc588d62d640faab62d98b3dd986dd21cea4962abe3a8f3b962a0cbec4b198065aa2"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "d6639e892e16f2ae1bdb013103178fb3a3b25df07495bca5ea263c7b90edd33948c454d25a643b4cd45f9cf2348f"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x4000001)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000a40)={{<r3=>r1, &(0x7f00000008c0)='TIPC\x00', 0x22000, &(0x7f0000000900)={@_ha_fsid={[0x6, 0x3]}, {0x0, 0x7, 0x4}}, 0xd, &(0x7f0000000940), &(0x7f0000000980)=0x9}, {[0xfffffff8, 0xb, 0xffffffff, 0x1]}, 0x80, 0x61, &(0x7f00000009c0)=""/97})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000ac0)={&(0x7f00000005c0)="61ac04700bf2b79153df7c3d1fa2abf17def4325039b82a89aa1fe22a081146c6dc482776f5c86ca02819e68152d0da59c9f3461c26e29c9d0e9bc48153faf3854ed8edd7e5f91fd2ea7092c1e689c1428d22347279689f9359ce131fe77b96d5bb0e4d4de39b1504a2e96e6d41756e5d2a28c67885e26ae39bf55568ea4cc324a514b6364b4448a5e8e9b9c94a314c43b5a06224b73b62016368c94b4ee6101417fd4a27b084bcc56bc008029f7f52a27142f69d1659770d598b24dade4", &(0x7f0000000680)=""/96, &(0x7f0000000700)="b37bed2897549dc7a0be3649f80e830f5e48fab53c71a8e1a13f36842438205be526514f4ffe4733fb4bc796403522da47ac542a96118f1a8274c89d5d4cbd7f76df7645226a8696bb40325e4da7bf70d7a81e239bdf2f2810af7f463a47b09ebcd08bcefee805b09c2b672a23f9b44f4f6e96a540daa432dde0526ca3b73a72ae065d66ac4f5ef99a29ea037a043c6198e789c5c7895772d638cb0e49a5a51f91aa08db641239d0ee550e5ee3aaa24ecc897c0f1fdf7c54425afae4a4a541d5b0cc8576566bfe1b4d116e7f84f88a914c3197a5b949a16fdd81", &(0x7f0000000800)="8aa5ac88eb3c0136dca430b96b02953404b04ae05eebde36810b9056d9325fa1af462574ce3b519995eded9364c30ac26bced48b5237ccab66fd5f7667b88b2524b60f86169b5d3d6438611ca0ef3f507dc582322520fcb1288a840d8229e865e4cc4c99813c90c0c11d4ede340ccef8ff09a72d5051a41c86090fc5d232e07a28a8f174ee38d2c74d3d1f9ca66c253160842c2fa9a3c417c33cd70a0167b4ff8395a783de05421b3435cf", 0x8, r3, 0x4}, 0x38)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3f5, 0x8, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x4400)
socketpair(0x6, 0x3, 0xd685, &(0x7f0000000c00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c080}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000d80)={'wg1\x00'})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000dc0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x1}}, 0x2e)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r1)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8204048}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xca}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x3cbd88a2b5399af5)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r9, 0x300, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x24008004)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000001080))
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000001100)={0x0, 0x3})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001140)={<r10=>0x0, 0x5f, "72e694236538d8c44d2fddee8ffa94e6c35a56bd8e5aa8a07ba6525a1ce2d131db859ddca22631b159ee0ffef3924fac69f660a5e9ac4cb3637c15123e5de862947a9493f302c603b66ba8355d36edf1436c52871b4f3c7b6d6d96a791fb55"}, &(0x7f00000011c0)=0x67)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001200)={r10, 0x8, 0x1, [0x2]}, &(0x7f0000001240)=0xa)
socket$kcm(0x29, 0x5, 0x0)
r11 = accept4$bt_l2cap(r5, &(0x7f0000001280)={0x1f, 0x0, @fixed}, &(0x7f00000012c0)=0xe, 0x800)
getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f0000001300)=""/158, &(0x7f00000013c0)=0x9e)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000001480)={'sit0\x00', &(0x7f0000001400)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@empty}, {@initdev}, {@multicast1}, {@initdev}]}})
unshare(0x22000000)
listen(r11, 0x3)

1.810853035s ago: executing program 1 (id=3389):
r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x4, 0x4, 0x560, 0xffffffff, 0x128, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xffffffff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xffffffff], 'veth0\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@mcast2, [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv6=@mcast2, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x8, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ipv6header={{0x28}, {0x77, 0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x40010)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000005c0), 0x10)
read(r2, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000440)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x64}}, 0x84082)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x8040480)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d}, 0x14}, 0x1, 0x0, 0x0, 0x82b}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28)
setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4)
close(r7)
ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, 0x0)

1.711122136s ago: executing program 0 (id=3391):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x61, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}}, 0x14}}, 0x4000080)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7f, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000800}, 0x0)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000000180)}], 0x3, 0x0, 0x0, 0x2000847}], 0x1, 0x40800)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t'], 0x44}}, 0x44000)

1.683111524s ago: executing program 2 (id=3392):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

1.634733212s ago: executing program 4 (id=3393):
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000002000000000000000008500000005000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000950000000000000093652c5605381e6a0e54e8c4170c34b1b95ac398ccc3bb50e78e9f8cd581dc591e559f2f42763ff9c855291ee05ac19c9d623738c121e57f438c4abe85d3daaa38a94c582adb066c9e4912b05bec6419e7b45390826b71927fb8eb6696f3139986fe6ae23a78e1d08ebf12a02dfe95c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1016, &(0x7f00000004c0)=ANY=[@ANYBLOB="48d06fd96647aaaaaaaaaaaa0011aa018669b4f700f536ae23e28f8532400b381c46c3bb834a6305af2eeefcd01df1aba148d3666cec6214191c9ff5b16a2d8e32766cb0a9d2400356ab5ef6717859d7446551b6cf704f254ea37bf8b5c68d936eff3b5b33fa5668aac2d4a9476337ffeeb0c9566578aba3feba5336ec0ac47ecd5f573ecd0120f2807736a75e82b440ecc32080e7"], &(0x7f0000001500)={0x0, 0x3, [0xaea, 0xd2c, 0x339, 0x179]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@local, 0x0, 0x7, 0x4e22, 0x0, 0xa}, {@in=@local, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x10000000000003, 0x8, 0x1000000000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x2, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@lifetime_val={0x24, 0x9, {0x5, 0xe3c2, 0x4, 0x400}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffe, 0x70bd29, 0x70bf27, 0x8000}}, @algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "ba1d3a445f0f7597dbf8c493d59506645b82aab1954e2bb748aa6f510e0f4ba88b"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
r4 = socket$netlink(0x10, 0x3, 0x9)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x190, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040001}, 0x20004080)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0x1d}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'})

1.538874094s ago: executing program 4 (id=3394):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
close(0x4)
getsockname$l2tp6(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB="180000009000000000000000080000001825000039b1f605b2187f5b227131201282c94f68c80bc8a2768c244c0123a3c5803fab449b0b137324a071d97f5a44321a4d71f1fc2055cb45773e9eca2247053b6b009d985e8e95fc30b27d0cf2a011f9886811a47b", @ANYRES32=r2, @ANYBLOB="000000000900000088191000fcffffff9a000100ffffffff2f1140001000000085000000d40000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.508348187s ago: executing program 0 (id=3395):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000000)={<r1=>0x0, "39ebe62bb12c0a7a5aed2ddc86dceff3"})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001300)={{<r2=>r0, &(0x7f0000001000)='\x00', 0x101400, &(0x7f0000001040)={@align, {0x7, 0x2, 0x6c0, 0x4}}, 0xb, &(0x7f0000001080)={@_ha_fsid}, &(0x7f00000010c0)=0x7fff}, 0x2, &(0x7f00000012c0)=[{0x2, 0x7fff, &(0x7f0000001100)='-&\x00', &(0x7f0000001140)="8203e1a088d75a0539c5dd03359863676f346dc2e8edbe9ae89b28ae263f16dd774bf10447b12e6b883993ca032302210d6c2166f5313e139fbf9399887e4e082b3d8aaeb79a83c8788fe41893f6cc38da863504771b1fdfed219816965e9d4bdf1b6dac774ffa9be6f5a7f7c116d348e5d2eef97e3e44fe6e8cfda16b015895eb7048f7e1744a5a9481b06aa3a4e22c2223be646e0baaf500bc33d842b4b1d341e8b65502eafbad8f0ab279a71bd15a0650cd1a180b05203ecec5cb65215acc6d", 0xc1, 0x22}, {0x1, 0x7, &(0x7f0000001240)='^)\xe1\xd6\x00', &(0x7f0000001280)="e84020c1b7690149a59fdfefbbf2f5f25e988b496068432819a1f34f400f78778da585ad238102627f655193fab21c43dd41a19ab6656845960b4daf7c113b", 0x3f}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001380)=[@in={0x2, 0x4e24, @private=0xa010100}], 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan0\x00', <r3=>0x0})
listen(r0, 0x3)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001400)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r2)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000001580)={&(0x7f0000001480), 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x6c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0xc081)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000015c0)={<r6=>r1, 0x0, 0x7, 0x1})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000019c0)={r6, 0x32, 0x7, 0x1})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x58, 0x140e, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x44000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan0\x00'})
recvmsg$can_raw(r2, &(0x7f0000002100)={&(0x7f0000001f40)=@nl=@proc, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001fc0)=""/235, 0xeb}], 0x1}, 0x2000)
syz_genetlink_get_family_id$gtp(&(0x7f0000002140), r2)
setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000002180)={0x6, {{0xa, 0x4e22, 0x8, @loopback, 0x3}}, {{0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x108)
connect$inet6(r4, &(0x7f00000022c0)={0xa, 0x4e24, 0x3c, @empty, 0x6}, 0x1c)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_buf(r8, 0x29, 0x2d, &(0x7f0000002300)="c4215c066aae4ab0a6720e00444027aee2eb461121000945cfcba3c87df5af089688fede5795ad3782639bbb18861bcc91599ae1924b8c", 0x37)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000002340)=@req={0x3, 0x6, 0x800, 0x8}, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000023c0), r4)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000002540)={&(0x7f0000002380), 0xc, &(0x7f0000002500)={&(0x7f0000002400)={0xe0, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1914}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21364020}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91bc}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5cef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x998}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x4044080)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000002580)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000025c0)={'batadv0\x00', <r10=>0x0})
bind$packet(r0, &(0x7f0000002600)={0x11, 0x16, r10, 0x1, 0x6, 0x6, @random="b658c2ebb500"}, 0x14)
recvmsg$unix(r4, &(0x7f0000002c80)={&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f00000026c0)=""/231, 0xe7}, {&(0x7f00000027c0)=""/55, 0x37}, {&(0x7f0000002800)=""/185, 0xb9}, {&(0x7f00000028c0)=""/194, 0xc2}, {&(0x7f00000029c0)=""/173, 0xad}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/142, 0x8e}], 0x7, &(0x7f0000002c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10042)
getsockname(r4, &(0x7f0000002cc0)=@ethernet={0x0, @remote}, &(0x7f0000002d40)=0x80)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002dc0), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000002f40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0xa8, r11, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4)

1.447907903s ago: executing program 2 (id=3396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20)
mmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2000009, 0x8010, r2, 0x1)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$nl_netfilter(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002640)={0x18, 0x10, 0xa, 0x201, 0x70bd27, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@generic="93a52d1f"]}, 0x18}}, 0x40)

1.442368152s ago: executing program 4 (id=3397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000002030300000000000000a000000000030800010004000027"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44000)

1.414482107s ago: executing program 3 (id=3398):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x100) (async)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) (async)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000240)="991192af267742a8c614fdc9157accd268f1c07e91afe3857c4d66203d88f88ff1449eae7d9c144087d8d005a716daaf65e2a20f59d047ed1e53c97f8072874090dd41972e7c1e2a7b31ccbee5fea7ba8dc23c745211b7dd8c0dc9571e72d65cdd250786f2356b2888d5bfc77fb4c3bce0cdb4fd6e3554350a19f8f7e82666ba1eff5ee1aa75884b8473a642ac5f298e222dbf01b1ae0854417623d349340e90606c9f0c23e0a96f343269576974034e550d2e34cbfdf6ca64a1798458c1d0cd0dc061349af321620983e7edce6fc98a03283c2723d6ea88") (async)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000340)={0x0, 0x1, {0xffffffffffffffff, @struct={0x6, 0x5fd3}, 0x0, 0x5, 0x10000, 0x5, 0x7, 0x5, 0x34, @usage=0x917, 0x1, 0x1, [0x1ff, 0x5, 0x8, 0x3, 0x7, 0x4]}, {0xffffffff, @struct={0x4a65, 0xf26}, <r2=>0x0, 0xb3a, 0x6, 0x3, 0x8, 0xffffffffffffffff, 0x49b, @usage=0x4, 0x3, 0x7, [0x3, 0x80000000, 0x2, 0xff, 0x2, 0x7]}, {0x6, @usage=0x3ff, 0x0, 0x5, 0x3, 0x9, 0x100000000, 0xca5, 0xb0, @usage=0x8, 0x80000000, 0x40, [0x8, 0x5, 0x8, 0x8, 0x200, 0x7f]}, {0x9, 0x0, 0x80}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000740)={r2, 0x3, 0x1, [0x1ff, 0x0, 0x6, 0x3, 0x8000], [0x6, 0x6, 0x0, 0x0, 0x9, 0x6c, 0xfffffffffffffffd, 0x7f, 0x8, 0x6, 0x1, 0x2, 0x101, 0x80, 0xfffffffffffffffb, 0x1, 0x100000000, 0x1, 0xffff, 0xd5c2, 0x5, 0x3, 0x1, 0x5, 0xffffffffffffffff, 0x4, 0xfffffffffffff844, 0xf9, 0x8000000000000000, 0x8000000000000000, 0x6, 0x5, 0xe, 0xff, 0x1, 0x6, 0x9c, 0xb, 0x0, 0x2, 0x8000000000000000, 0x7fff, 0x7, 0xe83, 0x100000000, 0xcb4f, 0x9, 0x0, 0xfffffffffffffffb, 0x5, 0x8, 0x0, 0x62, 0x5, 0x3, 0x7, 0x8, 0x8de, 0x80000000, 0x6, 0x6, 0xe, 0x7fffffffffffffff, 0x1, 0xfffffffffffffff3, 0x1, 0x1000, 0x19, 0x8001, 0x1, 0x1000, 0xfffffffffffffe25, 0x7f, 0x3, 0x6, 0x8000000000000000, 0x3, 0x5, 0x0, 0x2, 0x8000000000000001, 0x7, 0x8, 0xa8a, 0x2, 0x4, 0x1, 0x9, 0xffffffffffffffff, 0x2f202347, 0x3, 0xc, 0x0, 0xc925, 0x6, 0x7, 0x5f6c, 0x1000, 0xffffffff00000001, 0xffffffffffffffff, 0x8000000000000001, 0x7, 0x6, 0xfff, 0x1, 0x8, 0x380, 0xd17b, 0x3, 0x7, 0x5, 0x7, 0x8000000000000001, 0x4, 0xffffffffffffff3d, 0x4, 0x87b, 0x9, 0xfffffffffffffb34, 0xb14, 0x3]}) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x8c}}, 0x24008045)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40880) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@newchain={0x3c, 0x64, 0xa00, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xa}, {0x0, 0xfff2}, {0x10, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8094}, 0x48811)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000000)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001040)="085a47dd07ad043bdf2439e9abdbed8d24d89076f5a11a8531988cdc349b66ab50d4a898295402a865aea4d701fd94245aa236131bc0a8d642d106515007ac310a68cf1fe0599c46b6bbab1c79f384f36881ccd0dd680b6a886a63469c0eff73c73fcccf223c95b3581c83022ff84a97a7381adb22526df81f1f7ffd83", 0x7d) (async)
setsockopt(r4, 0x3, 0x8, &(0x7f00000010c0)="4bef328aa0d82f66a64ec99f2e478cfd4454eda033deef845f7ca71eec95679a25dcf49591ae380616f91aa75f661243506b420b14ce3e751ee6b1f3f1e5a497a4e19d133144af2f7a7d7c8c5f1cd7d8c3ffc7d06bb389e53a5cf7585b72bf31585974c1f98422e7ee3078f3543e12b51010ff65a5b845ddd7d0fdd56aab9be7ff156875ca48e94b1c60b8c6fc30d7a08cdbf63242be2e69a4c45a243b525d17e9e0d98da77ba35d211e67bace110c6b8d1fed0543bcaf432bd0667a5f10b41bc3378399feca4b90fb5d68d5a9ddf378177a3b2c0e649e75f96c9de9c053bc44fbf43b7ec37cabf9efd9391ffe", 0xed) (async)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000014c0)={{0x5, 0x4, 0xffffff92, 0x6, 0x6}, &(0x7f00000011c0)=[{}, {}, {}, {}]}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001540)={<r5=>r4})
sendmsg$nl_route(r5, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=@ipv4_getaddr={0x54, 0x16, 0x800, 0x70bd2c, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xfd}, [@IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x8000, 0x9, 0xc, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x4) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
r6 = socket$inet(0x2, 0x3, 0x89)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000016c0)={r6}) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r5)
setsockopt(r0, 0x5, 0x7, &(0x7f0000001740)="10a793b13a1d92621093d36fd0c215743109b4012c368ea408d71509f465b8727f941dcf", 0x24)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001780)={<r7=>0x0, 0x2, 0xd}, &(0x7f00000017c0)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001800)={r7, 0x1000}, 0x8) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x7d}}}}, ["", "", ""]}, 0x20}}, 0x24000805)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000001a40)={<r9=>r5, &(0x7f0000001940)='[w){[\x00', 0x80c00, &(0x7f0000001980)={@_ha_fsid={[0x7f, 0x100]}, {0x5, 0x6, 0xe70, 0xfff}}, 0x5, &(0x7f00000019c0), &(0x7f0000001a00)=0x401}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001ac0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x60, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x198c, 0x67}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8bd}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8ea}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeab}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2a1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe85}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)

1.28267598s ago: executing program 0 (id=3399):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a00000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x5, 0x271}, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newtfilter={0x894, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x868, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff05, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x0, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x6, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x8, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}]}}]}, 0x894}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0)
close(r10)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804)
r12 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f00000001c0)=0xe0, 0x1)
writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r12)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x3b8}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)

1.282032301s ago: executing program 4 (id=3400):
sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000006780)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x11d0}}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x200004, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"/528], 0x210}}, {{&(0x7f0000003f80)=@l2tp6={0xa, 0x0, 0xffb, @empty, 0x9, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004000)="9069c8b1ad9c75c0831b6f3d638017a30de699626c5d22ce72141b105963ee912340bf57a9699bc1c2e3720a5a3f94d0d579b7b4b189594cf273e5f0de0fb4ece40666062d0022b99c4f1b8047efbb020f8543c1c3f66910b5b80454b09ffc8f640dce7cc93537ea9f261eb67a41feea6b2f8198d06bfb511a23d59a9806faa92727896a7251b2cf91071491127f32b97eb82513cfcc935a1537114dc72122a3e51801d5978dfae0cfa5f7c2fed70bfff3d8771e1d2d6277649c64da7ffc20ce3004252390e811fe20a2d4d98a46b119a5dae072b2422deeb14c", 0xda}, {&(0x7f0000000980)="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", 0x117}, {&(0x7f0000004200)="cc9e891ea95ac8ed0a6dec3ca9412a2a7a2685e956b2a55558e52c676055f06045cd87bd87bd204bb68b9145599ac104c7330f696d20194e3815306a86d25924529acbce6c3b62ef4d05d325b5d76c", 0x4f}, {&(0x7f0000004280)="1282d36bfb3b7f987f7422ce9396609c76f6aa2ace584b1b1c007b532b3d06fab499462916ec6e4e6435704d213a8eed48cbc0ac7f01c01e8674a5a1d9646776eeea9ccc2587a52fac69dcd25be1d7d4cc14a9071fb0a5125d9c7e8788df07d6c1aa9940ca534517d0d6183ed8aa7e99d2ab7c57083962ea770c8962f8e5ec632fc820e2c656", 0x86}, {&(0x7f0000000600)="4b8bd4fa8961ecabf22ae3b3cd7043ed7a2f27e615e688f90981645bc3c1faf55a01f86ea00bcffcd10caf20643264ddd76d18f017dfb879a401bec29e5452b76c7f202286589c956c7830f291e2d1b6bb3d374efba63ad695dd8a6ab92fafbfb88ef755215bf2dd1c4661f2ac1e3fd9fa3c8c6d5b691a2b5a487873d3a24b09e2a76b77759485e8b40cab71465b80858eacffbb8f1074018cf21be301b454f014048148d29e4086ee8e7c883f0dff1067728df49715c75c375b6fffe2cde4aadf5c1e32aa0606c9758943ce7170260ca08080e5b90298054b02f442b7e1db", 0xdf}, {&(0x7f0000000ac0)="c83860afc7d6a1701a16d47b40a4f58504892945c810422e0957576c2bdafb957678a00d2b4c3d5b538e548feabf63b1f79c18c59b4e32cae94410fe7ead91d15b8d25a07f6de06f5ab9168388a7f0b24d7b9b7464fd60c75904c6fe2df68ab9b0fd761f37457a379f66af7848f1247e719a96997e03589ffc35c2da5bc5de8034e965e519d8eb7288dc2f86e2f28ff8ea71084681041fdc6de2cf6e92e710ee9a6f1674b29b044982189731898abe10147b7aabf70cad2d925ddcb24550793279bf", 0xc2}, {&(0x7f0000004480)="4675cdc76b0cd6885be02b7827394dc8eebf9b21e5705471a12c6c600997", 0x1e}], 0x7, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x1a0}}, {{&(0x7f0000004700)=@generic={0x28, "5d771866b1ee067f7f11250b02dae223ece629dfa7807502e8f1edb996b2c5cd5a2f8e1ff4bea1ec95a42842400d0a2d32e89eb53ed6f3dfd76bb9b976eba9d0b892a55f2d42410938ab297590c59d65d8e594773c7ac7e925ba04786f8258e99e5cf51da4a4a8d2ef53fe0c6e34f5bb038c5d4cf81fc18b7d3da16184be"}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000000940)="7b8a69eaeca61bc1f0041df93ec4a31271bf57ff3dcc472d900d2e62da6ddef96857c84a211e6cd207e6919363a5d6a273841a0b9a80167085a4fb2446faa0", 0x3f}, {&(0x7f00000047c0)="75b920644aa26ebb5ebd9a0910d92a675dfb93e5547abfe5698b55873e3e729f13e3ab93cbd401eba356b23a91c7940ae80f611b023b877354bcb16d0905663591dd4fbb1a08382afd2f5007e9b9114cf4a39d15bed0c233127eae9963d2cbdb2128c54fe99f01b3ebc6462a3c4852a4ec995b0365eeb334e05816e7ae3aee5cd0267e47b834e4f825c31c5ff5fecb556a9349d7eb41d87eb91d0e16177fe9a0010665498ac1cb7ed92b8fdba58b17705e6e63b620958d690a9483cd942ab3d2f787d18c2130046364c491b2808e1ebf33da3c1055ae5998df3c2ed5c5c055f42e451adb953e68f6d24e4d35f4e91f0dd018a2ea", 0xf4}, {&(0x7f0000000440)="37c414ead78ce9a85b2525c070b1134bdf9cbf0e146de4c35ac14068ff85e02c80e934c63c645c7f8fa0e0c0a9de301f9702c755d374eb0fb01303bd20be001f44d517b394ee8cc3592f9b5d6694cfae50d823e564a8b0b232965a050cb980f454989adf219b3d0decf98d854ecee3be5bdf7824c6d5aea57a24e75ccc9673af01593206ac3aecd1591860a43dff4c1fc6cbe466ebd88c3c05d904e723c66d7951dcc92194785bb0b95c1fad7e29cf03857db9568797aaa7bcb95b19c561a2e138b6c3f7a18079079cf0654826f4d36bf164206baa1e1c9da4c3e5e9101c12ac62dde65c705d93958357142267c3c6", 0xef}, {&(0x7f0000004980)="fdf743b261dd09f440f627691504ef573743587e43a785bf69c480d5124b0308c76c6b4a698a30d75e3d46dba6f00c347d2457e0bc60003d13e73acb3f1f364414136a02000000000000000eaeeb4ebbedaa2a118d00", 0x56}, {&(0x7f00000001c0)}, {&(0x7f0000004ac0)="802cd10a4d89a7a45df9ffd22bbf2a55300f766dc60bd24992db53d8f638f644458ad1c107bb686d6f6e4e69f69297b6f28a1f76a65aa63ab0431f16712bd4cbb429947223233626f44a14fe29124af83c445b2c9354dcfed62162f597ab8d8816de9792354282eb321959298b76de7874b04dada3e8", 0x76}], 0x6, &(0x7f0000004bc0)=ANY=[], 0x1448}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f00000060c0)="00eeefaf8123221a1e19cd79076797defb1762750b9049966adc8cc2ea5343905d3e1e04049628e48ad4bc80d7fbb2b1542d79cef4a285f9835bc8ac658205077f9576a97bba8ffdea68a0cffc28c2cbc2c0f12a2a4f69539edd02b7e11072b7dce8db4d66535c75d8ecb2dbf6d91903ad4b6974a8251ff1d1f6dcd94fa107eaa25578afc413846bad763ff5ca7dcc356c6a61ff01ef5517b35a3758902c661d7bdf6bb1ef29cf99fb8445c8de16d9b2782ba5cdb537271b3465f1bc394256c8a33decdf62d958d0c330ec55b019a404c58e9d1cc0e59d1363c3e576dc6d", 0xde}, {&(0x7f00000061c0)="374f8cd59ae59035ebcf8034c432509616a7a860dbd74f7930b859f89b4d32e56b13", 0x22}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="2d0100000000000013000000ff6d76d32795de0c39fee0cc977cc916c3623f07f9da5ab1a35b5d0500000008cc57e0a9ba0aaf31d065fab4b41fc4634a9b6709a40f9a1deda1706f0fc76070b2dd1067158a8f0c6ee78232d7ceeb2e65dbf25f4448b6663876f75cbfbf4a60bd688646d3ca830801000000030434590a2d35d970aeed81b82dc24598a298bb38f9940d4e2e2e74aaf4b9d41d9a1a39542a44041066aac6c9771d1e7d0f7727e563ecae0dd3fb3da19c96570cb6661ce38970a53fd194f33d61a224e0d53e42e22186b3f30e040a63c9baa0924181edb28846250675cb4611b64ef18bec97cb09a23b33ee6aff032c7004f9f7282ab83def0c1152566099a359c230ea4d127f0bf1222f82def5ad9cf075e6d7bb5450dc2d4345f774673900000000000000000000ac7b000000000000000064e606e96362063e8dd2ed3a46a03b0ff937a6811f805be04d748b9854444ddaba24b2147d"], 0x138}}, {{&(0x7f0000006300)=@ll={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x80, &(0x7f00000065c0)}}], 0x6, 0x804)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd7000fddbdf2505001a00ac1414bbddffffffffffffff00000000fe80000000000000000000000000000c260014ca"], 0x38}}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x6, {{0x21, 0x4, 0x2, 0x1b, 0x84, 0x68, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @rr={0x7, 0x17, 0xf4, [@loopback, @multicast1, @broadcast, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xd4, 0x1, 0xa, [{@private=0xa010102, 0x9}, {@multicast2, 0x2a}]}, @lsrr={0x83, 0x2b, 0xb9, [@rand_addr=0x64010100, @empty, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @noop, @end, @generic={0x86, 0x12, "484cfce182adcfaf7bd92ac00a8595dc"}, @rr={0x7, 0x3, 0xa3}, @noop]}}}}})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="4400000010000104000800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000c000000000005000d0001000000"], 0x44}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs, &(0x7f0000000540)=0xfffffffffffffe5e)
socket(0x10, 0x803, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4$alg(r6, 0x0, 0x0, 0x800)
sendmsg$alg(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x5, @remote, 'gre0\x00'}}, 0xfffffcde)
socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
socket$inet6(0xa, 0x3, 0x2)

1.215036678s ago: executing program 3 (id=3401):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x9, &(0x7f0000000340)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d0f3b67}, {0x85, 0x0, 0x0, 0x5d}}, @exit], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x4}, 0x94)
sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081)
close(r1)
close(r1)

1.112069487s ago: executing program 2 (id=3402):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETSGCNT(r0, 0x89e1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES16=0x0], 0x50)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r1, @ANYBLOB="00000000000000006200f8ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94)

1.011242912s ago: executing program 2 (id=3403):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)

1.010622389s ago: executing program 3 (id=3404):
unshare(0x22020600)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

943.710707ms ago: executing program 2 (id=3405):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/4097, 0x1001}], 0x1}, 0xb}], 0x4000000000000f1, 0x40000021, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4008850}, 0x40)

925.207039ms ago: executing program 4 (id=3406):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0xce23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x200040c1}, 0x44004) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x517}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)
sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001ffffcfffffffddbdf6500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000240012800b00010067726574617000001400028008000700ac141428060003002e50000008001f000900000008000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r5 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000540)={0x2d, 0x0, 0xffffc000}, 0xc) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2d5f"], 0xe0}], 0x1}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200081dc2bbd5500fedbdf25020000000000000517000000080018006e244e24"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004)
write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x0, 0x2}, 0x10)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
readv(r9, &(0x7f0000000d80)=[{0x0}], 0x1)

874.811752ms ago: executing program 0 (id=3407):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x1, 0x44000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14, r8, 0x110, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004812}, 0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r11=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040025bd7000fddbdf251200000008000100", @ANYRES32=r9, @ANYBLOB="0800150000000000080015000100000008001500c60000000800150002000000080015000100000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="ea2e88f393385f"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000070601f80000000000000000010000000500010007000000bb8e5ffb979d38a86342f1d2f6efc53bfd2a5a7c456c47a7ca063d8c7b70468d6cadc3bbffbf298b8a578149b33d4bca4e9ff760b9a7fa4586d70cdf5c2a85b9546cf9f8ccbad03bfac898dd1b7cd24d07d552f00b91bf159933f0d1ec6f0523fea06ce10423cba032ea37279089e4fe1b823f5e121c26052d7f448ff1a189ca5b130d9fb7be24e07142aee1a15e7a58b2dcb4a6a6cb651c9de7efbe0f0049ca293be09d4c3a46abf39bf5857a8a845c440fee322a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=','], 0x8)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@bridge_delvlan={0x74, 0x71, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x83}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xcd0}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x68}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00", @ANYRES32=r13, @ANYBLOB="080004007df7ffff09000100"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)

851.978853ms ago: executing program 1 (id=3408):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$inet(0x2, 0x3, 0xa)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) (async)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'pimreg\x00', 0x19a3})
sendmmsg$unix(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x44000000}}], 0x2, 0x20000084) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000a40)='illinois', 0x8) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES64=r6, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004944)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0002ff100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x9}}}, 0x24}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4040040) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r13, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x8004) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)

560.267536ms ago: executing program 4 (id=3409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write(r2, &(0x7f0000000240)="94", 0x1)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r1, r5, 0x8f5, 0x0)
write(r3, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1f}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x10}]}, 0x28}}, 0x4044004)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x517}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

499.760233ms ago: executing program 1 (id=3410):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="1f"], 0x20)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
listen(r2, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x7, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x80, 0xb, 0xfffffffe, 0xfb}}], 0x38, 0x2000c004}, 0x2c0408d0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8, 0x88}, 0x50)
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'veth1_macvtap\x00', @local})
close(0x4)

138.427799ms ago: executing program 2 (id=3411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="03002abd7000fbdbdf2503000000"], 0x14}}, 0x68040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000540)="80fd02000001", 0x6}], 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b113600000000009f000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0xb6, &(0x7f0000000080)=""/182, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)

129.374576ms ago: executing program 0 (id=3412):
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x0, @private1, 0x3000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f31", 0x22}], 0x3}, 0x40010)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=3413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
sendmmsg$unix(r1, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38, 0x40004}}], 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffc0, 0x13}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x38}}, 0x40004)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

kernel console output (not intermixed with test programs):

 0
[  281.502543][T13316] syzkaller1: tun_chr_ioctl cmd 1074025677
[  281.521568][T13316] syzkaller1: linktype set to 825
[  281.901296][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'.
[  282.199432][T13351] netlink: 'syz.2.1935': attribute type 1 has an invalid length.
[  282.213585][T13351] netlink: 'syz.2.1935': attribute type 2 has an invalid length.
[  282.673286][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  282.673539][ T4937] Bluetooth: hci2: command 0x0401 tx timeout
[  282.742115][T13360] lo speed is unknown, defaulting to 1000
[  282.776094][T13360] lo speed is unknown, defaulting to 1000
[  282.832001][T13364] vxcan0: entered allmulticast mode
[  282.846728][T13366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1940'.
[  283.205105][T13380] x_tables: duplicate underflow at hook 1
[  283.287248][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1941'.
[  283.912798][T13396] bond8: option broadcast_neighbor: invalid value (4)
[  283.972609][T13396] bond8 (unregistering): Released all slaves
[  284.635333][T13424] __nla_validate_parse: 2 callbacks suppressed
[  284.635350][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'.
[  284.708235][T13424] macvlan0: entered promiscuous mode
[  284.959705][T13428] bond8 (unregistering): Released all slaves
[  285.446421][T13464] netlink: 'syz.3.1958': attribute type 8 has an invalid length.
[  286.120169][T13485] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  287.453328][T13529] tap0: tun_chr_ioctl cmd 1074025677
[  287.478327][T13529] tap0: linktype set to 823
[  287.585490][T13535] gre0: entered promiscuous mode
[  287.610687][T13535] gre0: entered allmulticast mode
[  287.758964][ T7169] bridge0: entered promiscuous mode
[  288.096715][T13557] syzkaller0: left promiscuous mode
[  288.106173][T13557] syzkaller0: left allmulticast mode
[  288.111812][T13557] tipc: Resetting bearer <eth:syzkaller0>
[  288.319757][T13563] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1988'.
[  288.418572][T13566] netlink: 'syz.2.1989': attribute type 1 has an invalid length.
[  288.598904][T13566] bond5 (unregistering): Released all slaves
[  289.959783][T13619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1999'.
[  291.421204][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2009'.
[  291.434940][T13652] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  291.852322][   T29] audit: type=1804 audit(1783535775.882:9): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2012" name="/newroot/414/memory.events" dev="tmpfs" ino=2150 res=1 errno=0
[  291.875928][   T29] audit: type=1800 audit(1783535775.882:10): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2012" name="memory.events" dev="tmpfs" ino=2150 res=0 errno=0
[  292.688755][T13606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  292.985668][T13676] xt_hashlimit: size too large, truncated to 1048576
[  292.992480][T13676] xt_hashlimit: max too large, truncated to 1048576
[  293.201379][T13686] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.215810][T13686] erspan0: entered promiscuous mode
[  293.233812][T13686] erspan0: entered allmulticast mode
[  293.459644][T13684] tipc: Disabling bearer <eth:syzkaller0>
[  293.685737][T13718] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2028'.
[  293.857148][T13721] lo speed is unknown, defaulting to 1000
[  293.877406][T13721] lo speed is unknown, defaulting to 1000
[  294.201493][T13713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2027'.
[  294.317630][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'.
[  294.524252][T13742] vlan1: entered promiscuous mode
[  294.529397][T13742] bridge0: entered promiscuous mode
[  294.762556][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2037'.
[  294.955874][T13751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2038'.
[  295.209958][T13751] ipvlan1: entered promiscuous mode
[  295.217818][T13751] ipvlan1: left promiscuous mode
[  297.525232][T13798] syzkaller1: entered allmulticast mode
[  297.808339][T13819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2052'.
[  297.900891][T13819] ipvlan1: entered promiscuous mode
[  297.921544][T13825] netlink: 'syz.0.2053': attribute type 1 has an invalid length.
[  297.934068][T13819] ipvlan1: left promiscuous mode
[  297.988916][T13815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'.
[  298.020066][T13825] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  298.078235][T13833] veth0_to_team: entered promiscuous mode
[  298.260135][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'.
[  298.531765][T13833] veth0_to_team: left promiscuous mode
[  298.929401][T13850] syzkaller0: entered promiscuous mode
[  298.950135][T13850] syzkaller0: entered allmulticast mode
[  298.961853][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2058'.
[  298.996363][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2058'.
[  299.089342][T13862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2058'.
[  299.122681][T13868] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2062'.
[  299.136515][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'.
[  299.153928][T13869] netlink: 'syz.4.2061': attribute type 17 has an invalid length.
[  300.907796][T13865] pim6reg: entered allmulticast mode
[  300.916765][T13869] erspan0: left promiscuous mode
[  300.923262][T13869] erspan0: left allmulticast mode
[  300.946100][T13869] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  301.012734][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'.
[  301.172887][T13889] IPVS: length: 24 != 55320
[  302.285815][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2081'.
[  302.501723][T13981] tipc: Resetting bearer <eth:syzkaller0>
[  302.573507][ T7177] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  302.604830][T13989] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  302.625264][ T7177] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  302.810393][  T754] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.829782][  T754] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.920875][T13991] bond5 (unregistering): Released all slaves
[  302.941635][  T754] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.950709][  T754] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.003023][T14007] bridge0: entered promiscuous mode
[  303.013909][T14007] bridge0: entered allmulticast mode
[  303.051359][T14003] syzkaller0: entered promiscuous mode
[  303.065169][T14004] __nla_validate_parse: 1 callbacks suppressed
[  303.065185][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'.
[  303.065737][T14003] syzkaller0: entered allmulticast mode
[  303.330016][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'.
[  303.341965][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'.
[  303.353022][T14023] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  303.378515][T14023] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2095'.
[  303.491535][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2098'.
[  303.591174][T14040] vlan1: entered allmulticast mode
[  303.603110][T14040] bond0: entered allmulticast mode
[  303.609002][T14040] bond_slave_0: entered allmulticast mode
[  303.626513][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'.
[  304.346027][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'.
[  304.655225][T14092] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.703969][T14092] syzkaller0: entered promiscuous mode
[  304.751694][T14092] syzkaller0: entered allmulticast mode
[  304.798576][T14092] tipc: Resetting bearer <eth:syzkaller0>
[  304.961024][T14097] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  305.167319][T14110] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  305.231275][T14117] netlink: 'syz.4.2119': attribute type 3 has an invalid length.
[  305.253436][T14117] netlink: 'syz.4.2119': attribute type 3 has an invalid length.
[  305.362246][T14117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  306.155388][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2131'.
[  306.164741][T14155] lo speed is unknown, defaulting to 1000
[  306.172416][T14155] lo speed is unknown, defaulting to 1000
[  306.408208][T14167] batadv_slave_0: entered promiscuous mode
[  306.455227][T14166] batadv_slave_0: left promiscuous mode
[  306.627446][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'.
[  306.772949][T14185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2138'.
[  307.570052][T14203] lo speed is unknown, defaulting to 1000
[  307.580544][T14203] lo speed is unknown, defaulting to 1000
[  308.470335][T14221] xt_CT: No such helper "netbios-ns"
[  308.817564][T14229] __nla_validate_parse: 1 callbacks suppressed
[  308.817581][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2149'.
[  309.220656][T14237] syzkaller0: entered promiscuous mode
[  309.241712][T14237] syzkaller0: entered allmulticast mode
[  309.376551][T14243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.400296][T14243] x_tables: unsorted entry at hook 2
[  309.420677][T14243] xt_hashlimit: size too large, truncated to 1048576
[  309.428388][T14244] xt_hashlimit: size too large, truncated to 1048576
[  316.995335][ T1320] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  327.022475][T14260] syzkaller0: entered promiscuous mode
[  327.034434][T14260] syzkaller0: entered allmulticast mode
[  327.060809][T14261] lo speed is unknown, defaulting to 1000
[  327.079520][T14254] lo speed is unknown, defaulting to 1000
[  327.095893][T14266] netlink: 'syz.0.2160': attribute type 1 has an invalid length.
[  327.104924][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2158'.
[  327.170375][T14261] lo speed is unknown, defaulting to 1000
[  327.359758][T14271] bond8: (slave gretap1): making interface the new active one
[  327.382458][T14271] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  327.429938][T14274] vlan0: entered allmulticast mode
[  327.452309][T14274] bond8: entered allmulticast mode
[  327.470419][T14274] gretap1: entered allmulticast mode
[  327.495594][T14274] bond8: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  327.584769][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'.
[  327.862682][T14254] lo speed is unknown, defaulting to 1000
[  327.882973][T14294] syzkaller0: entered promiscuous mode
[  327.922234][T14294] syzkaller0: entered allmulticast mode
[  328.433295][T14307] netlink: 'syz.2.2168': attribute type 2 has an invalid length.
[  328.556693][T14307] 
: entered promiscuous mode
[  328.587744][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'.
[  329.230351][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'.
[  329.282799][T14322] netlink: 'syz.0.2171': attribute type 12 has an invalid length.
[  329.436054][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2169'.
[  329.511532][T14335] syzkaller0: entered promiscuous mode
[  329.524615][T14335] syzkaller0: entered allmulticast mode
[  329.960683][T14359] openvswitch: netlink: Tunnel attr 245 out of range max 16
[  329.988703][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'.
[  330.058061][T14364] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2183'.
[  330.085869][T14364] syzkaller1: entered promiscuous mode
[  330.095289][T14364] syzkaller1: entered allmulticast mode
[  330.228937][T14371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2186'.
[  330.680844][T14391] syzkaller0: entered promiscuous mode
[  330.689448][T14391] syzkaller0: entered allmulticast mode
[  330.704835][T14392] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2191'.
[  330.882546][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'.
[  330.949839][T14397] netlink: 'syz.2.2194': attribute type 5 has an invalid length.
[  331.015059][T14397] geneve3: entered promiscuous mode
[  331.021765][T14397] geneve3: entered allmulticast mode
[  331.065954][T13962] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 52602 - 0
[  331.089046][T13962] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 52602 - 0
[  331.111936][T13962] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 52602 - 0
[  331.155683][T14402] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  331.157062][T13962] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 52602 - 0
[  331.157827][T14399] netlink: 'syz.0.2195': attribute type 1 has an invalid length.
[  331.298354][T14418] syzkaller0: entered promiscuous mode
[  331.307099][T14418] syzkaller0: entered allmulticast mode
[  331.508528][T14432] syzkaller0: entered promiscuous mode
[  331.530498][T14432] syzkaller0: entered allmulticast mode
[  331.585476][T14437] syzkaller0: entered promiscuous mode
[  331.597346][T14437] syzkaller0: entered allmulticast mode
[  331.739166][T14439] xfrm0: entered allmulticast mode
[  331.773934][T14439] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  332.051572][T14455] netlink: 'syz.0.2209': attribute type 7 has an invalid length.
[  332.167041][T14452] xt_hashlimit: size too large, truncated to 1048576
[  332.266493][T14454] xt_hashlimit: size too large, truncated to 1048576
[  332.300611][T14454] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  332.353365][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  332.428075][T14469] __nla_validate_parse: 5 callbacks suppressed
[  332.428094][T14469] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2212'.
[  332.532750][T14472] x_tables: duplicate underflow at hook 3
[  332.538814][T14469] x_tables: duplicate underflow at hook 3
[  332.622205][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'.
[  332.645019][T14474] batadv0: entered promiscuous mode
[  332.651468][T14474] macvtap1: entered promiscuous mode
[  332.657496][T14474] macvtap1: entered allmulticast mode
[  332.663091][T14474] batadv0: entered allmulticast mode
[  332.670480][T14474] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  332.954747][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'.
[  333.060401][T14485] ip6tnl3: entered allmulticast mode
[  333.099282][T14496] syzkaller0: entered promiscuous mode
[  333.119045][T14496] syzkaller0: entered allmulticast mode
[  333.212257][T14498] netlink: 'syz.3.2219': attribute type 1 has an invalid length.
[  333.339597][T14500] bond5: option downdelay: invalid value (18446744073709551487)
[  333.384636][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'.
[  333.385670][T14500] bond5: option downdelay: allowed values 0 - 2147483647
[  333.430968][T14500] bond5 (unregistering): Released all slaves
[  333.476289][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2225'.
[  333.549967][T14498] 8021q: adding VLAN 0 to HW filter on device bond10
[  333.584594][T14510] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  334.001976][T14548] syzkaller0: entered promiscuous mode
[  334.028360][T14548] syzkaller0: entered allmulticast mode
[  334.301228][T14564] syzkaller0: entered promiscuous mode
[  334.320661][T14564] syzkaller0: entered allmulticast mode
[  334.342423][T14564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.385429][T14563] tipc: Resetting bearer <eth:syzkaller0>
[  334.421789][T14568] netlink: 'syz.3.2242': attribute type 1 has an invalid length.
[  334.488099][T14563] tipc: Disabling bearer <eth:syzkaller0>
[  334.550229][T14569] bridge0: port 1(vlan4) entered blocking state
[  334.579919][T14569] bridge0: port 1(vlan4) entered disabled state
[  334.603920][T14569] vlan4: entered allmulticast mode
[  334.615824][T14569] geneve0: entered allmulticast mode
[  334.637203][T14569] vlan4: entered promiscuous mode
[  334.660412][T14569] geneve0: entered promiscuous mode
[  334.708411][T14578] bond5: entered promiscuous mode
[  334.714138][T14578] bond5: entered allmulticast mode
[  334.963532][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'.
[  335.047569][T14594] xt_hashlimit: size too large, truncated to 1048576
[  335.098313][T14597] syzkaller0: entered promiscuous mode
[  335.104186][T14597] syzkaller0: entered allmulticast mode
[  335.182023][T14593] xt_hashlimit: size too large, truncated to 1048576
[  335.582128][T14621] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2255'.
[  335.689611][T14622] openvswitch: netlink: Message has 8 unknown bytes.
[  335.734177][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2255'.
[  336.334420][T14651] lo speed is unknown, defaulting to 1000
[  336.345470][T14657] bridge_slave_0: left allmulticast mode
[  336.351250][T14657] bridge_slave_0: left promiscuous mode
[  336.378158][T14657] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.443667][T14657] bridge_slave_1: left allmulticast mode
[  336.461079][T14657] bridge_slave_1: left promiscuous mode
[  336.493936][T14657] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.568365][T14657] bond0: (slave bond_slave_0): Releasing backup interface
[  336.590283][T14657] bond0: (slave bond_slave_1): Releasing backup interface
[  336.600297][T14667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.612005][T14657] team0: Port device team_slave_0 removed
[  336.620811][T14657] team0: Port device team_slave_1 removed
[  336.636214][T14657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.660653][T14657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  336.721837][T14651] lo speed is unknown, defaulting to 1000
[  336.750373][T14669] team0: Mode changed to "roundrobin"
[  336.811937][T14676] netlink: 'syz.1.2272': attribute type 2 has an invalid length.
[  336.822461][T14676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.147109][T14689] syzkaller0: entered promiscuous mode
[  337.155480][T14692] xt_hashlimit: size too large, truncated to 1048576
[  337.163271][T14689] syzkaller0: entered allmulticast mode
[  337.592950][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  337.769680][T14722] netlink: 'syz.3.2285': attribute type 12 has an invalid length.
[  338.191098][T14737] netlink: 'syz.1.2290': attribute type 32 has an invalid length.
[  338.371545][T14739] syzkaller0: left promiscuous mode
[  338.383779][T14739] syzkaller0: left allmulticast mode
[  338.404343][T14739] tipc: Resetting bearer <eth:syzkaller0>
[  338.512793][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2293'.
[  338.524090][T14744] pimreg: left allmulticast mode
[  338.655238][T14756] netlink: 'syz.4.2296': attribute type 5 has an invalid length.
[  338.687772][T14752] netlink: 'syz.4.2296': attribute type 5 has an invalid length.
[  338.968676][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'.
[  339.138851][T14780] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2302'.
[  339.247217][T14780] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2302'.
[  339.506011][T14804] tipc: Failed to remove unknown binding: 66,0,0/4278190080:1123397468/1123397469
[  339.577272][T14804] tipc: Failed to remove unknown binding: 66,0,0/4278190080:1123397468/1123397469
[  339.692784][T14820] bridge0: port 1(ipvlan2) entered blocking state
[  339.703032][T14820] bridge0: port 1(ipvlan2) entered disabled state
[  339.718809][T14820] ipvlan2: entered allmulticast mode
[  339.734662][T14820] ipvlan2: left allmulticast mode
[  339.885311][T14836] ip6tnl1: entered allmulticast mode
[  339.933725][T14838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2316'.
[  339.980218][T14840] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2319'.
[  340.324931][T13963] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  340.343882][T13963] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  340.354649][ T7169] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.073396][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.082474][ T7169] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  342.337972][T14794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.347857][T14814] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2307'.
[  342.602131][T14869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.652812][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2326'.
[  342.835521][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2332'.
[  342.896801][T14886] netlink: 'syz.4.2333': attribute type 1 has an invalid length.
[  342.983929][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'.
[  343.002222][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'.
[  343.227736][T14898] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20001
[  343.255139][T14906] gre0: left promiscuous mode
[  343.271010][T14906] gre0: left allmulticast mode
[  343.323648][T14909] netlink: 'syz.2.2337': attribute type 4 has an invalid length.
[  343.326984][T14906] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  343.374837][T14906] tipc: Resetting bearer <eth:syzkaller0>
[  343.406650][T14906] bond3: left allmulticast mode
[  343.410017][T14917] netlink: 'syz.2.2337': attribute type 4 has an invalid length.
[  343.430397][T14906] macvlan0: left promiscuous mode
[  343.443878][T14906] macvlan0: left allmulticast mode
[  343.458471][T14907] block nbd1: server does not support multiple connections per device.
[  343.462149][T14906] ip6tnl2: left allmulticast mode
[  343.494415][T14906] gretap1: left allmulticast mode
[  343.500502][T14907] block nbd1: shutting down sockets
[  343.507951][T14906] gretap0: left allmulticast mode
[  343.528003][T14906] macvlan1: left allmulticast mode
[  343.545060][T14906] bond6: left promiscuous mode
[  343.554991][T14906] ip6tnl4: left allmulticast mode
[  343.569580][T14906] vlan1: left allmulticast mode
[  343.575136][T14906] bond0: left allmulticast mode
[  343.581641][T14906] bond_slave_0: left allmulticast mode
[  343.616940][T14910] block nbd1: server does not support multiple connections per device.
[  343.659694][T14909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2337'.
[  343.696314][ T7172] lo speed is unknown, defaulting to 1000
[  343.705111][T14910] block nbd1: shutting down sockets
[  343.712603][ T7172] syz1: Port: 1 Link ACTIVE
[  343.722041][ T5820] lo speed is unknown, defaulting to 1000
[  343.760960][T14924] netlink: 516 bytes leftover after parsing attributes in process `syz.3.2340'.
[  343.941341][T14905] syzkaller1: entered promiscuous mode
[  343.960880][T14937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2343'.
[  343.972160][T14905] syzkaller1: entered allmulticast mode
[  344.593365][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  345.031560][T14979] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  345.262070][T14990] syzkaller0: entered promiscuous mode
[  345.271604][T14990] syzkaller0: entered allmulticast mode
[  345.287455][T14990] tipc: Resetting bearer <eth:syzkaller0>
[  345.368923][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'.
[  345.441374][T14999] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2361'.
[  345.526816][T15001] bridge6: entered promiscuous mode
[  345.541600][T15004] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2363'.
[  345.551055][T15001] bridge6: entered allmulticast mode
[  345.593524][T15001] team0: Port device bridge6 added
[  345.808860][T15017] netlink: 'syz.2.2365': attribute type 1 has an invalid length.
[  345.876699][T15019] nbd: couldn't find a device at index 0
[  346.045369][T14999] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  346.314742][T15029] lo speed is unknown, defaulting to 1000
[  346.334651][T15029] lo speed is unknown, defaulting to 1000
[  346.342321][T15036] netlink: 'syz.0.2372': attribute type 1 has an invalid length.
[  346.549455][T15036] bond9: (slave bridge5): making interface the new active one
[  346.636458][T15036] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  346.982147][T15049] netlink: 'syz.2.2374': attribute type 4 has an invalid length.
[  347.130993][T15051] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  347.837477][T15078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  347.966476][T15087] netlink: 'syz.2.2381': attribute type 1 has an invalid length.
[  348.717356][T15092] batman_adv: batadv0: Interface deactivated: dummy0
[  348.859390][T15092] batman_adv: batadv0: Removing interface: dummy0
[  349.672519][T15095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  349.707861][ T5820] lo speed is unknown, defaulting to 1000
[  349.721299][ T5820] syz1: Port: 1 Link DOWN
[  349.782124][T15142] erspan1: entered allmulticast mode
[  349.831406][T15138] syzkaller0: entered promiscuous mode
[  349.841609][T15138] syzkaller0: entered allmulticast mode
[  349.875881][ T5821] lo speed is unknown, defaulting to 1000
[  350.088974][T15167] Cannot find set identified by id 0 to match
[  350.204569][T15167] netlink: 'syz.2.2390': attribute type 5 has an invalid length.
[  350.258655][T15173] __nla_validate_parse: 70 callbacks suppressed
[  350.258672][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'.
[  350.560177][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'.
[  350.602000][T15190] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2396'.
[  350.642917][T15190] openvswitch: netlink: Message has 16 unknown bytes.
[  351.059102][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'.
[  351.069702][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'.
[  351.233098][T15212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.254425][T15212] syzkaller0: entered promiscuous mode
[  351.261032][T15212] syzkaller0: entered allmulticast mode
[  351.286370][T15212] tipc: Resetting bearer <eth:syzkaller0>
[  351.307763][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2404'.
[  351.327538][T15211] tipc: Resetting bearer <eth:syzkaller0>
[  351.378877][T15211] tipc: Disabling bearer <eth:syzkaller0>
[  351.430259][T15217] bridge0: port 3(vlan3) entered blocking state
[  351.452774][T15217] bridge0: port 3(vlan3) entered disabled state
[  351.464146][T15217] vlan3: entered allmulticast mode
[  351.493027][T15217] bridge0: entered allmulticast mode
[  351.542752][T15217] vlan3: left allmulticast mode
[  351.560292][T15217] bridge0: left allmulticast mode
[  351.748077][T15236] netlink: 'syz.2.2411': attribute type 12 has an invalid length.
[  351.847648][T15239] lo speed is unknown, defaulting to 1000
[  351.865988][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'.
[  351.896309][T15239] lo speed is unknown, defaulting to 1000
[  352.949072][T15280] syzkaller1: entered promiscuous mode
[  352.972163][T15282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  352.974277][T15280] syzkaller1: entered allmulticast mode
[  352.981136][T15282] IPv6: NLM_F_CREATE should be set when creating new route
[  352.993620][T15282] IPv6: NLM_F_CREATE should be set when creating new route
[  353.225996][T15296] syzkaller0: entered promiscuous mode
[  353.232190][T15296] syzkaller0: entered allmulticast mode
[  353.473344][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  353.598132][T15303] syzkaller0: entered promiscuous mode
[  353.604377][T15303] syzkaller0: entered allmulticast mode
[  354.383411][T15333] nbd: socks must be embedded in a SOCK_ITEM attr
[  354.390457][T15333] block nbd1: shutting down sockets
[  355.436524][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2435'.
[  355.992152][T15315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  356.010235][T15346] vlan0: entered promiscuous mode
[  356.151703][T15349] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  356.180525][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2437'.
[  356.242146][T15353] sctp: [Deprecated]: syz.2.2438 (pid 15353) Use of int in max_burst socket option deprecated.
[  356.242146][T15353] Use struct sctp_assoc_value instead
[  356.266741][ T5821] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  356.417110][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2442'.
[  356.457670][T15368] syzkaller0: left promiscuous mode
[  356.475604][T15368] syzkaller0: left allmulticast mode
[  356.485905][T15368] tipc: Resetting bearer <eth:syzkaller0>
[  356.843850][ T5821] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  356.868962][T15395] syzkaller0: entered promiscuous mode
[  356.903953][T15395] syzkaller0: entered allmulticast mode
[  356.925352][T15395] tipc: Resetting bearer <eth:syzkaller0>
[  357.010505][T15401] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2451'.
[  357.039306][T15401] netlink: 'syz.2.2451': attribute type 1 has an invalid length.
[  357.253517][T15412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2454'.
[  357.390016][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'.
[  357.612913][T15429] tipc: Resetting bearer <eth:syzkaller0>
[  357.687060][T15441] netlink: 'syz.4.2459': attribute type 8 has an invalid length.
[  357.736123][T15441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2459'.
[  357.885631][T15451] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  357.983063][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2463'.
[  358.061766][T15460] netlink: 'syz.2.2467': attribute type 5 has an invalid length.
[  358.074934][T15460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2467'.
[  358.084683][T15460] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2467'.
[  358.216055][T15466] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  358.395982][T15474] netlink: 'syz.2.2470': attribute type 1 has an invalid length.
[  358.414383][T15474] netlink: 'syz.2.2470': attribute type 1 has an invalid length.
[  358.621470][T15480] nbd: couldn't find a device at index 0
[  359.537277][T15517] netlink: 'syz.2.2485': attribute type 2 has an invalid length.
[  359.602979][T15517] ¿: entered promiscuous mode
[  360.742726][T15554] __nla_validate_parse: 9 callbacks suppressed
[  360.742744][T15554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2497'.
[  361.248302][T15570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2500'.
[  361.540587][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'.
[  362.400845][T15623] xt_cgroup: invalid path, errno=-2
[  362.471660][T15623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.487874][T15623] syzkaller0: entered promiscuous mode
[  362.503008][T15623] syzkaller0: entered allmulticast mode
[  362.508062][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'.
[  362.598772][T15623] tipc: Resetting bearer <eth:syzkaller0>
[  362.612036][T15629] netlink: 'syz.2.2510': attribute type 1 has an invalid length.
[  362.715580][T15623] tipc: Disabling bearer <eth:syzkaller0>
[  363.209116][T15658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2518'.
[  363.275533][T15658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2518'.
[  363.443822][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'.
[  363.568590][T15672] netlink: 'syz.0.2522': attribute type 2 has an invalid length.
[  363.584696][T15672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2522'.
[  364.054943][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2524'.
[  364.081663][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'.
[  364.155970][ T4937] block nbd1: Receive control failed (result -1)
[  365.208575][T15727] netlink: 'syz.4.2534': attribute type 1 has an invalid length.
[  365.299594][T15727] 8021q: adding VLAN 0 to HW filter on device bond6
[  365.357081][T15727] bond6: (slave geneve2): making interface the new active one
[  365.379346][T15727] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  365.541953][T15744] smc: removing ib device syz1
[  365.610460][T15744] smbdirect: ib_dev[syz1] removed
[  365.730981][T15754] netlink: 'syz.1.2540': attribute type 2 has an invalid length.
[  365.753038][T15754] __nla_validate_parse: 6 callbacks suppressed
[  365.753054][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  366.011323][T15763] netlink: 'syz.1.2542': attribute type 27 has an invalid length.
[  366.477811][T15780] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  366.628184][T15782] bridge6: entered promiscuous mode
[  366.645854][T15782] bridge6: entered allmulticast mode
[  368.142423][T15803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'.
[  368.667445][T15816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2556'.
[  368.823060][T15822] lo speed is unknown, defaulting to 1000
[  369.065973][T15830] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2560'.
[  369.266574][T15835] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2561'.
[  369.731825][T15822] netlink: 'syz.4.2558': attribute type 9 has an invalid length.
[  369.762411][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'.
[  369.784415][T15855] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  369.910527][T15861] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2566'.
[  370.357112][T15856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.366276][T15856] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  370.374886][T15856] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  370.395596][T15856] netlink: zone id is out of range
[  370.406683][T15856] netlink: zone id is out of range
[  370.419472][T15856] netlink: zone id is out of range
[  370.438706][T15856] netlink: zone id is out of range
[  370.476263][T15856] netlink: zone id is out of range
[  370.505134][T15856] netlink: zone id is out of range
[  370.518681][T15856] netlink: zone id is out of range
[  370.533382][T15856] netlink: zone id is out of range
[  370.540082][T15856] netlink: zone id is out of range
[  370.753373][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  370.885589][T15879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.184543][T15885] lo speed is unknown, defaulting to 1000
[  371.795292][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'.
[  371.927888][T15901] tunl0: left promiscuous mode
[  371.947965][T15901] gre0: left promiscuous mode
[  372.141197][T15901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.234174][T15913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2581'.
[  372.575926][T15901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.672383][T15901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.767429][T15901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.823614][T15901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.860948][T15901] veth1_vlan: left promiscuous mode
[  372.883733][T15901] vlan0: left promiscuous mode
[  372.891427][T15901] veth1_vlan: entered promiscuous mode
[  372.908762][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'.
[  372.940116][T15901] veth0_macvtap: left promiscuous mode
[  372.960836][T15901] veth0_macvtap: entered promiscuous mode
[  372.987345][T15901] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  373.000523][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  373.011895][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  373.021565][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  373.031527][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  373.049981][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'.
[  373.077834][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.085080][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.120591][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.127776][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.229529][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2589'.
[  373.343436][T15952] 8021q: adding VLAN 0 to HW filter on device bond8
[  373.378598][T15957] bond8: (slave batadv0): Opening slave failed
[  373.574598][T13961] bond10: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  373.604229][T13961] bond10: (slave veth0_to_bond): making interface the new active one
[  373.641302][T13961] bond10: active interface up!
[  373.677878][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2595'.
[  373.859168][T15988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2596'.
[  373.965477][T15983] xt_CT: No such helper "syz0"
[  374.045342][T16000] IPv6: NLM_F_CREATE should be specified when creating new route
[  374.059578][T15999] bridge0: port 1(netdevsim1) entered blocking state
[  374.131765][T15999] bridge0: port 1(netdevsim1) entered disabled state
[  374.185788][T15999] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  374.237475][T15999] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  374.522770][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'.
[  374.792407][T16023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2604'.
[  374.869084][T16023] ip6gre1: entered promiscuous mode
[  374.886181][T16023] ip6gre1: entered allmulticast mode
[  374.910550][ T1228] lo speed is unknown, defaulting to 1000
[  375.235137][T16031] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2606'.
[  375.289466][T16031] net_ratelimit: 378 callbacks suppressed
[  375.289482][T16031] openvswitch: netlink: Message has 512 unknown bytes.
[  375.342327][T16035] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  375.412795][T16036] netlink: 'syz.4.2608': attribute type 1 has an invalid length.
[  375.437329][T16034] netlink: 'syz.4.2608': attribute type 1 has an invalid length.
[  375.674850][T16036] 8021q: adding VLAN 0 to HW filter on device bond7
[  375.790030][T16034] 8021q: adding VLAN 0 to HW filter on device bond8
[  375.815403][T16053] netlink: 'syz.2.2612': attribute type 1 has an invalid length.
[  375.823947][T16053] netlink: 'syz.2.2612': attribute type 1 has an invalid length.
[  376.048020][T16066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.340849][T16084] netlink: 'syz.1.2621': attribute type 1 has an invalid length.
[  376.844524][T16098] __nla_validate_parse: 4 callbacks suppressed
[  376.844541][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'.
[  376.947320][T16099] syzkaller0: entered promiscuous mode
[  376.976001][T16099] syzkaller0: entered allmulticast mode
[  377.006423][T16107] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2629'.
[  377.039032][T16109] block nbd2: Unsupported socket: should be TCP or UNIX.
[  377.290551][T16119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2632'.
[  377.335381][T16119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2632'.
[  377.406429][T16121] x_tables: duplicate underflow at hook 2
[  377.415348][T16121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2633'.
[  377.435323][T16121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2633'.
[  377.481385][T16126] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.647428][T16128] tipc: Resetting bearer <eth:syzkaller0>
[  377.902988][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'.
[  378.109916][T16146] nbd2: detected capacity change from 0 to 63
[  378.181764][T16152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2641'.
[  378.194735][T16152] nbd: must specify at least one socket
[  378.202691][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2645'.
[  378.427895][T16172] netlink: 'syz.0.2646': attribute type 11 has an invalid length.
[  378.450353][ T1320] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.651108][T16178] raw_sendmsg: syz.1.2647 forgot to set AF_INET. Fix it!
[  378.769524][T16187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2650'.
[  378.856655][ T4937] block nbd2: Receive control failed (result -104)
[  379.608094][T16223] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  379.621434][T16223] bond13 (unregistering): Released all slaves
[  379.959399][T16254] Bluetooth: hci0: Opcode 0x080f failed: -22
[  380.157381][T16270] x_tables: duplicate entry at hook 1
[  382.939048][T16285] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  382.979575][T16285] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  383.137808][T16304] __nla_validate_parse: 5 callbacks suppressed
[  383.137822][T16304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'.
[  383.162357][T16304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2678'.
[  383.183573][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'.
[  383.201553][   T29] audit: type=1800 audit(1783535867.232:11): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2681" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2734 res=0 errno=0
[  383.414199][T16321] netlink: 'syz.3.2685': attribute type 1 has an invalid length.
[  383.512823][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2685'.
[  383.795064][T16344] lo speed is unknown, defaulting to 1000
[  383.949018][T16353] netlink: 'syz.0.2690': attribute type 9 has an invalid length.
[  384.698536][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'.
[  385.175071][T16385] netlink: 'syz.4.2698': attribute type 11 has an invalid length.
[  385.331854][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'.
[  385.437402][T16397] syzkaller0: entered promiscuous mode
[  385.447688][T16397] syzkaller0: entered allmulticast mode
[  385.654283][T16402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2702'.
[  385.944081][T16411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2706'.
[  386.111843][T16414] syzkaller0: entered promiscuous mode
[  386.125714][T16414] syzkaller0: entered allmulticast mode
[  386.464810][T16436] netlink: 'syz.1.2709': attribute type 8 has an invalid length.
[  386.484777][T16439] netlink: 'syz.1.2709': attribute type 8 has an invalid length.
[  386.506211][T16444] netlink: 'syz.3.2711': attribute type 5 has an invalid length.
[  388.689997][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'.
[  388.733322][T16450] IPv6: NLM_F_CREATE should be specified when creating new route
[  388.865521][T16464] netlink: 'syz.2.2717': attribute type 4 has an invalid length.
[  389.141193][T16479] tipc: Invalid UDP bearer configuration
[  389.141247][T16479] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  389.575802][T16493] veth9: entered promiscuous mode
[  389.620018][T16496] syzkaller1: entered promiscuous mode
[  389.626112][T16496] syzkaller1: entered allmulticast mode
[  389.634655][T16497] tipc: Can't bind to reserved service type 0
[  390.127530][T16486] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  390.392922][T16529] bond9: entered promiscuous mode
[  390.400006][T16529] 8021q: adding VLAN 0 to HW filter on device bond9
[  390.877275][T16561] block nbd3: server does not support multiple connections per device.
[  390.970879][T16569] bond9: Unable to set peer notification delay as MII monitoring is disabled
[  390.989629][T16569] bond9 (unregistering): Released all slaves
[  390.994886][T16561] block nbd3: shutting down sockets
[  391.547844][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'.
[  391.741674][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  391.758641][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  391.771057][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  391.779274][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  391.790542][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  391.976045][T16596] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check.
[  392.007332][T16596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  392.568924][T16633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2760'.
[  392.592997][T16592] lo speed is unknown, defaulting to 1000
[  392.758840][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'.
[  392.784121][T16639] can: request_module (can-proto-0) failed.
[  392.956323][T16651] bridge_slave_0: left allmulticast mode
[  392.962133][T16651] bridge_slave_0: left promiscuous mode
[  392.971095][T16651] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.994765][T16651] bridge_slave_1: left allmulticast mode
[  393.008029][T16651] bridge_slave_1: left promiscuous mode
[  393.014709][T16651] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.040515][T16651] bond10: (slave veth0_to_bond): Releasing active interface
[  393.097059][T16651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.100807][T16656] netlink: 2380 bytes leftover after parsing attributes in process `syz.3.2763'.
[  393.107008][T16651] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.130093][T16651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.141443][T16651] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.156718][T16651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  393.181890][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'.
[  393.181931][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'.
[  393.204369][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'.
[  393.234035][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'.
[  393.251362][T16659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'.
[  393.287017][T16660] netlink: 'syz.2.2765': attribute type 18 has an invalid length.
[  393.323353][T16659] netlink: 'syz.2.2765': attribute type 18 has an invalid length.
[  393.732140][T16592] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.742036][T16592] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.750442][T16592] bridge_slave_0: entered allmulticast mode
[  393.760049][T16592] bridge_slave_0: entered promiscuous mode
[  393.778662][T16592] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.792536][T16592] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.802368][T16592] bridge_slave_1: entered allmulticast mode
[  393.811668][T16592] bridge_slave_1: entered promiscuous mode
[  393.845835][T16684] __nla_validate_parse: 1 callbacks suppressed
[  393.845855][T16684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2771'.
[  393.873395][ T5631] Bluetooth: hci5: command tx timeout
[  393.914261][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  393.933477][T16592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.946016][T16592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.973932][ T5747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  394.031693][T16592] team0: Port device team_slave_0 added
[  394.045305][T16592] team0: Port device team_slave_1 added
[  394.106826][T16592] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.125190][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.152868][T16592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.185894][T16592] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.208564][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.250249][T16592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.346075][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'.
[  394.357896][T16592] hsr_slave_0: entered promiscuous mode
[  394.376401][T16592] hsr_slave_1: entered promiscuous mode
[  394.389334][T16592] debugfs: 'hsr0' already exists in 'hsr'
[  394.399315][T16592] Cannot create hsr debugfs directory
[  394.458884][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'.
[  394.706551][T16718] netlink: 492 bytes leftover after parsing attributes in process `syz.0.2781'.
[  394.868973][T16734] sctp: [Deprecated]: syz.4.2785 (pid 16734) Use of int in max_burst socket option deprecated.
[  394.868973][T16734] Use struct sctp_assoc_value instead
[  394.916008][T16734] sctp: [Deprecated]: syz.4.2785 (pid 16734) Use of int in max_burst socket option deprecated.
[  394.916008][T16734] Use struct sctp_assoc_value instead
[  395.225229][T16742] bond10: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  395.248073][T16742] bond10: entered promiscuous mode
[  395.257881][T16742] 8021q: adding VLAN 0 to HW filter on device bond10
[  395.265370][T16748] netlink: 'syz.0.2788': attribute type 11 has an invalid length.
[  395.635695][T16765] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  395.666128][T16765] netlink: 'syz.0.2791': attribute type 1 has an invalid length.
[  395.687559][T16765] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2791'.
[  395.702972][T16769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2794'.
[  395.955136][ T5631] Bluetooth: hci5: command tx timeout
[  396.099117][T16784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2797'.
[  396.168195][T16592] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  396.177883][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  396.191037][T16592] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  396.205301][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  396.216468][T16592] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  396.233498][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  396.242059][T16592] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  396.262317][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  396.340907][T16809] netlink: 'syz.3.2800': attribute type 4 has an invalid length.
[  396.362968][T16808] netlink: 'syz.3.2800': attribute type 4 has an invalid length.
[  396.424959][T16811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.460973][T16811] syzkaller0: entered promiscuous mode
[  396.469244][T16811] syzkaller0: entered allmulticast mode
[  396.496841][T16812] tipc: Resetting bearer <eth:syzkaller0>
[  396.525080][T16592] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.584700][T16592] 8021q: adding VLAN 0 to HW filter on device team0
[  396.637797][  T754] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.645052][  T754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.721136][T13965] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.728312][T13965] bridge0: port 2(bridge_slave_1) entered forwarding state
[  398.033299][ T5631] Bluetooth: hci5: command tx timeout
[  399.389724][T16810] tipc: Resetting bearer <eth:syzkaller0>
[  399.532520][T16816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  399.545807][T16810] tipc: Disabling bearer <eth:syzkaller0>
[  399.637960][ T5727] tipc: Node number set to 1372687151
[  399.928484][T16860] bond14: Removing last arp target with arp_interval on
[  400.040668][T16859] nbd: nbd2 already in use
[  400.080265][T16859] block nbd2: NBD_DISCONNECT
[  400.085143][T16859] block nbd2: Send disconnect failed -32
[  400.104634][T16859] block nbd2: shutting down sockets
[  400.115532][ T5631] Bluetooth: hci5: command tx timeout
[  400.138654][    C0] blk_print_req_error: 114 callbacks suppressed
[  400.138673][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  400.154108][    C0] buffer_io_error: 138 callbacks suppressed
[  400.154124][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  400.176183][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  400.185731][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  400.193516][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  400.203506][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  400.211241][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  400.220375][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  400.231485][T16869] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  400.240296][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  400.244211][T16592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.250013][ T4949] Buffer I/O error on dev nbd2, logical block 0, async page read
[  400.265654][ T4949] Buffer I/O error on dev nbd2, logical block 1, async page read
[  400.283806][ T4949] Buffer I/O error on dev nbd2, logical block 2, async page read
[  400.291966][ T4949] Buffer I/O error on dev nbd2, logical block 3, async page read
[  400.300313][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  400.309543][ T4949] Buffer I/O error on dev nbd2, logical block 0, async page read
[  400.317922][ T4949] Buffer I/O error on dev nbd2, logical block 1, async page read
[  400.326591][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  400.336631][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  400.346900][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  400.357120][ T4949] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  400.367384][T14293] ldm_validate_partition_table(): Disk read failed.
[  400.381558][T14293] Dev nbd2: unable to read RDB block 0
[  400.390557][T14293]  nbd2: unable to read partition table
[  400.467637][T14293] ldm_validate_partition_table(): Disk read failed.
[  400.478210][T14293] Dev nbd2: unable to read RDB block 0
[  400.491074][T14293]  nbd2: unable to read partition table
[  401.108978][T16883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2813'.
[  403.886880][T16882] syzkaller0: entered promiscuous mode
[  403.892385][T16882] syzkaller0: entered allmulticast mode
[  403.914431][T16904] ip6gre0: entered allmulticast mode
[  404.041946][T16592] veth0_vlan: entered promiscuous mode
[  404.075108][T16912] syzkaller1: entered promiscuous mode
[  404.093586][T16912] syzkaller1: entered allmulticast mode
[  404.195515][T16592] veth1_vlan: entered promiscuous mode
[  404.264881][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2823'.
[  404.280899][T16592] veth0_macvtap: entered promiscuous mode
[  404.306717][T16922] SET target dimension over the limit!
[  404.412393][T16937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2823'.
[  404.422121][T16937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2823'.
[  404.429718][T16922] bond11: option primary_reselect: invalid value (6)
[  404.463593][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'.
[  404.512290][T16922] bond11 (unregistering): Released all slaves
[  404.549415][T16937] syz_tun: entered promiscuous mode
[  404.556680][T16937] syz_tun: left promiscuous mode
[  404.597791][T16592] veth1_macvtap: entered promiscuous mode
[  404.660604][T16592] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.701347][T16592] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.757148][T13963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.770540][T13963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.807003][T13963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.824763][T13963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.849086][T16948] nbd: couldn't find a device at index 0
[  404.875261][T16948] sctp: [Deprecated]: syz.2.2829 (pid 16948) Use of struct sctp_assoc_value in delayed_ack socket option.
[  404.875261][T16948] Use struct sctp_sack_info instead
[  405.075891][T16959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'.
[  405.104904][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.132557][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.187457][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2832'.
[  405.218515][T16964] xt_TCPMSS: Only works on TCP SYN packets
[  405.261534][  T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.281643][  T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.314384][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  405.477135][T16973] netlink: 'syz.1.2750': attribute type 5 has an invalid length.
[  405.550914][T16976] netlink: 'syz.1.2836': attribute type 2 has an invalid length.
[  405.560087][T16976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2836'.
[  405.823627][T16981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2838'.
[  405.952039][T16997] netlink: 'syz.1.2841': attribute type 1 has an invalid length.
[  406.080690][T16997] veth3: entered allmulticast mode
[  406.216483][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2840'.
[  406.233402][T16992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2840'.
[  406.560654][T17016] netlink: 'syz.0.2845': attribute type 15 has an invalid length.
[  406.618736][T17020] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2847'.
[  406.644025][T17020] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2847'.
[  406.838035][T17027] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  406.902087][T17037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2850'.
[  406.946516][T17037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2850'.
[  407.036593][T17051] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 517, id = 0
[  407.853024][T17093] hsr0: entered allmulticast mode
[  407.859406][T17093] hsr_slave_0: entered allmulticast mode
[  407.888740][T17093] hsr_slave_1: entered allmulticast mode
[  407.910482][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'.
[  407.945317][T17093] hsr_slave_0: left promiscuous mode
[  407.968213][T17093] hsr_slave_1: left promiscuous mode
[  408.026657][T17093] hsr0 (unregistering): left allmulticast mode
[  408.077492][T17104] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2870'.
[  408.359789][T17112] batman_adv: batadv0: Adding interface: vlan6
[  408.388797][T17112] batman_adv: batadv0: The MTU of interface vlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  408.481958][T17112] batman_adv: batadv0: Not using interface vlan6 (retrying later): interface not active
[  408.655231][T17129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'.
[  408.674565][T17131] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2876'.
[  409.046089][T17149] xt_TCPMSS: Only works on TCP SYN packets
[  409.279539][T17151] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.287456][T17151] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.296246][T17153] netlink: 'syz.4.2886': attribute type 3 has an invalid length.
[  409.442156][T17151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.456553][T17151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.637496][ T9745] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.679182][ T9745] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.712826][ T9745] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.757647][ T9745] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.907045][T17184] netlink: 'syz.1.2892': attribute type 2 has an invalid length.
[  410.945740][T17228] A link change request failed with some changes committed already. Interface veth1_to_bo
d may have been left with an inconsistent configuration, please check.
[  411.789402][T17269] syzkaller0: entered promiscuous mode
[  411.808135][T17269] syzkaller0: entered allmulticast mode
[  411.912865][T17277] TC_ACT_REPEAT abuse ?
[  412.020475][T17283] netlink: 'syz.0.2919': attribute type 4 has an invalid length.
[  412.190739][T17289] __nla_validate_parse: 9 callbacks suppressed
[  412.190757][T17289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2919'.
[  413.353863][ T4937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  413.362539][ T4937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  413.428242][ T4937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  413.455853][ T4937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  413.476571][ T4937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  415.322471][  T754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.496442][T17339] syzkaller0: entered promiscuous mode
[  415.506693][T17339] syzkaller0: entered allmulticast mode
[  415.564176][ T5631] Bluetooth: hci1: command tx timeout
[  416.121078][T17384] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  417.648888][ T5631] Bluetooth: hci1: command tx timeout
[  417.972943][  T754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.094718][T17306] lo speed is unknown, defaulting to 1000
[  418.215864][T17403] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  418.250794][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2944'.
[  418.251107][  T754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.384211][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2949'.
[  418.421480][T17419] netlink: 'syz.2.2944': attribute type 1 has an invalid length.
[  418.481758][T17401] macvlan2: entered allmulticast mode
[  418.487527][T17401] batadv_slave_1: entered allmulticast mode
[  418.495537][T17401] batman_adv: batadv0: Adding interface: macvlan2
[  418.503815][T17401] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.533007][T17401] batman_adv: batadv0: Interface activated: macvlan2
[  418.635116][  T754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.670242][T17417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2949'.
[  418.910870][T17436] netlink: 'syz.0.2951': attribute type 1 has an invalid length.
[  419.021529][T17436] bond10: entered promiscuous mode
[  419.027801][T17436] 8021q: adding VLAN 0 to HW filter on device bond10
[  419.060820][T17446] xt_hashlimit: size too large, truncated to 1048576
[  419.074264][T17445] xt_hashlimit: size too large, truncated to 1048576
[  419.118780][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'.
[  419.143968][T17439] 8021q: adding VLAN 0 to HW filter on device bond10
[  419.176946][T17439] bond10: (slave gre3): The slave device specified does not support setting the MAC address
[  419.218909][T17439] bond10: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  419.297079][T17439] bond10: (slave gre3): making interface the new active one
[  419.306822][T17439] gre3: entered promiscuous mode
[  419.319764][T17439] bond10: (slave gre3): Enslaving as an active interface with an up link
[  419.431589][T17454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2955'.
[  419.534160][T17436] bond10 (unregistering): (slave gre3): Releasing backup interface
[  419.535448][T17460] openvswitch: netlink: Actions may not be safe on all matching packets
[  419.583365][T17436] gre3: left promiscuous mode
[  419.597856][T17436] bond10 (unregistering): Released all slaves
[  419.723973][ T5631] Bluetooth: hci1: command tx timeout
[  419.868622][  T754] vlan4: left allmulticast mode
[  419.889085][  T754] geneve0: left allmulticast mode
[  419.908745][  T754] vlan4: left promiscuous mode
[  419.919781][  T754] geneve0: left promiscuous mode
[  419.936473][  T754] bridge0: port 1(vlan4) entered disabled state
[  419.974812][  T754] pim6reg: left allmulticast mode
[  419.981050][  T754] dvmrp0: left allmulticast mode
[  420.050518][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'.
[  420.568810][  T754] bond6 (unregistering): (slave geneve2): Releasing active interface
[  420.656645][  T754] bond4 (unregistering): (slave bridge2): Removing an active aggregator
[  420.666945][  T754] bond4 (unregistering): (slave bridge2): Releasing backup interface
[  420.691968][  T754] bond0 (unregistering): Released all slaves
[  420.709320][  T754] bond1 (unregistering): Released all slaves
[  420.723011][  T754] bond2 (unregistering): Released all slaves
[  420.740118][  T754] bond3 (unregistering): (slave veth3): Releasing active interface
[  420.750274][  T754] bond3 (unregistering): Released all slaves
[  420.781349][  T754] bond4 (unregistering): Released all slaves
[  420.802840][  T754] bond5 (unregistering): Released all slaves
[  420.828353][  T754] bond6 (unregistering): Released all slaves
[  420.845633][  T754] bond7 (unregistering): Released all slaves
[  420.860813][  T754] bond8 (unregistering): Released all slaves
[  420.878441][  T754] bond9 (unregistering): Released all slaves
[  420.892117][  T754] bond10 (unregistering): Released all slaves
[  420.965370][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  421.275229][  T754] tipc: Left network mode
[  421.281313][T17306] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.302250][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  421.314843][T17306] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.337385][T17306] bridge_slave_0: entered allmulticast mode
[  421.347479][  T754] IPVS: stopping backup sync thread 8304 ...
[  421.385323][T17306] bridge_slave_0: entered promiscuous mode
[  421.514706][T17511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.628826][T17306] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.648704][T17306] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.674750][T17306] bridge_slave_1: entered allmulticast mode
[  421.695065][T17306] bridge_slave_1: entered promiscuous mode
[  421.735032][T17532] xt_hashlimit: size too large, truncated to 1048576
[  421.794307][ T5631] Bluetooth: hci1: command tx timeout
[  422.056433][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.149297][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.237299][T17548] bond7: entered promiscuous mode
[  422.250805][T17548] bond7: entered allmulticast mode
[  422.257326][T17548] 8021q: adding VLAN 0 to HW filter on device bond7
[  422.398643][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  422.436115][T17306] team0: Port device team_slave_0 added
[  422.453899][T17562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2971'.
[  422.648012][T17306] team0: Port device team_slave_1 added
[  422.677444][T17558] lo speed is unknown, defaulting to 1000
[  422.859628][  T754] batman_adv: batadv0: Removing interface: vlan6
[  422.860251][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'.
[  422.876388][T17577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2974'.
[  422.922881][  T754] batadv0: left allmulticast mode
[  422.939498][  T754] batadv0: left promiscuous mode
[  422.948334][  T754] veth1_macvtap: left promiscuous mode
[  422.956724][  T754] veth0_macvtap: left promiscuous mode
[  422.966709][  T754] veth1_vlan: left promiscuous mode
[  422.972693][  T754] veth0_vlan: left promiscuous mode
[  423.602696][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.643269][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.707273][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.720743][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.728420][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.756298][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.793007][T17598] netlink: zone id is out of range
[  423.805504][T17593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  423.826951][T17598] netlink: zone id is out of range
[  423.844705][T17598] netlink: zone id is out of range
[  423.877464][T17598] netlink: zone id is out of range
[  423.902339][T17598] netlink: zone id is out of range
[  423.933433][T17598] netlink: zone id is out of range
[  423.944144][T17597] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  423.947936][T17598] netlink: zone id is out of range
[  424.010126][T17598] netlink: zone id is out of range
[  424.033425][T17598] netlink: zone id is out of range
[  424.111683][T17306] hsr_slave_0: entered promiscuous mode
[  424.134217][T17306] hsr_slave_1: entered promiscuous mode
[  424.156633][T17306] debugfs: 'hsr0' already exists in 'hsr'
[  424.171165][T17306] Cannot create hsr debugfs directory
[  424.421651][  T754] IPVS: stop unused estimator thread 0...
[  424.578198][T17626] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  424.674152][T17615] lo speed is unknown, defaulting to 1000
[  424.867456][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  425.279910][T17651] netlink: 'syz.2.2991': attribute type 11 has an invalid length.
[  425.292109][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'.
[  425.326184][T17655] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2990'.
[  425.571405][T17665] bridge0: port 3(bond0) entered blocking state
[  425.592294][T17665] bridge0: port 3(bond0) entered disabled state
[  425.610598][T17665] bond0: entered allmulticast mode
[  425.619301][T17665] bond_slave_0: entered allmulticast mode
[  425.626814][T17665] bond_slave_1: entered allmulticast mode
[  425.651259][T17665] bond0: left allmulticast mode
[  425.677747][T17665] bond_slave_0: left allmulticast mode
[  425.708449][T17665] bond_slave_1: left allmulticast mode
[  426.066061][T17697] netlink: 'syz.0.3002': attribute type 1 has an invalid length.
[  426.170143][T17705] netlink: 87 bytes leftover after parsing attributes in process `syz.1.3003'.
[  426.234172][T17703] TCP: TCP_TX_DELAY enabled
[  426.301491][   T29] audit: type=1800 audit(1783535910.332:12): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.366343][   T29] audit: type=1800 audit(1783535910.332:13): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.441511][   T29] audit: type=1800 audit(1783535910.332:14): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.542496][   T29] audit: type=1800 audit(1783535910.332:15): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.677295][T17306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  426.684684][   T29] audit: type=1800 audit(1783535910.332:16): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.752568][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  426.788945][   T29] audit: type=1800 audit(1783535910.332:17): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.813842][T17306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  426.833903][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  426.848316][   T29] audit: type=1800 audit(1783535910.332:18): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.890475][T17306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  426.903364][   T29] audit: type=1800 audit(1783535910.372:19): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  426.940773][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  426.951686][T17306] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  426.963903][   T29] audit: type=1800 audit(1783535910.372:20): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  427.018352][T17306] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  427.061698][   T29] audit: type=1800 audit(1783535910.372:21): pid=17711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="memory.events" dev="tmpfs" ino=2989 res=0 errno=0
[  427.138028][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'.
[  427.374349][T17306] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.438667][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3015'.
[  427.485130][T17306] 8021q: adding VLAN 0 to HW filter on device team0
[  427.538259][T13965] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.545464][T13965] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.639858][  T754] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.647059][  T754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.742317][T17787] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3020'.
[  428.183764][T17818] netlink: 'syz.0.3024': attribute type 1 has an invalid length.
[  428.379310][ T5749] IPVS: starting estimator thread 0...
[  428.478085][T17829] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  428.524585][T17827] IPVS: using max 36 ests per chain, 86400 per kthread
[  428.638348][T17830] IPVS: Scheduler module ip_vs_sip not found
[  428.738070][T17846] netlink: 'syz.0.3030': attribute type 1 has an invalid length.
[  428.870005][T17846] netlink: 'syz.0.3030': attribute type 3 has an invalid length.
[  428.991248][T17845] sctp: [Deprecated]: syz.1.3031 (pid 17845) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.991248][T17845] Use struct sctp_sack_info instead
[  429.079081][T17848] sctp: [Deprecated]: syz.1.3031 (pid 17848) Use of struct sctp_assoc_value in delayed_ack socket option.
[  429.079081][T17848] Use struct sctp_sack_info instead
[  429.359908][T17306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.387496][T17885] netlink: 'syz.2.3036': attribute type 11 has an invalid length.
[  429.578593][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'.
[  429.647402][T17890] 8021q: adding VLAN 0 to HW filter on device bond1
[  429.692997][T17890] net_ratelimit: 17 callbacks suppressed
[  429.693013][T17890] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  429.996772][T17888] bond15: entered allmulticast mode
[  430.020285][T17888] 8021q: adding VLAN 0 to HW filter on device bond15
[  430.221966][T17911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.291336][T17924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'.
[  430.305970][T17924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3043'.
[  430.325278][T17924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'.
[  430.565800][T17306] veth0_vlan: entered promiscuous mode
[  430.582498][T17941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.591951][T17941] syzkaller0: entered promiscuous mode
[  430.608623][T17941] syzkaller0: entered allmulticast mode
[  430.632132][T17941] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  430.699249][T17306] veth1_vlan: entered promiscuous mode
[  430.733757][T17941] tipc: Resetting bearer <eth:syzkaller0>
[  430.859489][T17940] tipc: Resetting bearer <eth:syzkaller0>
[  430.909273][T17940] tipc: Disabling bearer <eth:syzkaller0>
[  430.927646][T17953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3049'.
[  430.945093][T17306] veth0_macvtap: entered promiscuous mode
[  430.962866][T17306] veth1_macvtap: entered promiscuous mode
[  431.012673][T17306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  431.031771][T17956] netlink: 'syz.0.3050': attribute type 1 has an invalid length.
[  431.062103][T17306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.108421][T17956] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  431.143992][  T754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.212737][  T754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.245088][  T754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.275682][  T754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.423117][T17974] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  431.462862][T17974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  431.545389][  T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.581740][  T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.611249][T17985] netlink: 'syz.1.3058': attribute type 5 has an invalid length.
[  431.692733][T17991] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3056'.
[  431.722850][T13959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.740015][T13959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.165512][T17998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.444719][ T4937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  432.456929][ T4937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  432.468106][ T4937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  432.478551][ T4937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  432.489709][ T4937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  433.120963][  T754] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  433.242363][T18006] lo speed is unknown, defaulting to 1000
[  433.252111][T18037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3065'.
[  433.477090][T18006] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.484360][T18006] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.491509][T18006] bridge_slave_0: entered allmulticast mode
[  433.499260][T18006] bridge_slave_0: entered promiscuous mode
[  433.508419][T18006] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.515761][T18006] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.522941][T18006] bridge_slave_1: entered allmulticast mode
[  433.530595][T18006] bridge_slave_1: entered promiscuous mode
[  433.570487][T18006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.582842][T18006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.611773][T18006] team0: Port device team_slave_0 added
[  433.619983][T18006] team0: Port device team_slave_1 added
[  433.646157][T18006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.653123][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.680320][T18006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.693451][T18006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.700408][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.728095][T18006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.773980][T18006] hsr_slave_0: entered promiscuous mode
[  433.780572][T18006] hsr_slave_1: entered promiscuous mode
[  433.787204][T18006] debugfs: 'hsr0' already exists in 'hsr'
[  433.792940][T18006] Cannot create hsr debugfs directory
[  433.961832][T18006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.973047][T18006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52602 - 0
[  434.074661][T18006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.085333][T18006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52602 - 0
[  434.148061][T18006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.158861][T18006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52602 - 0
[  434.222492][T18006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.232815][T18006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52602 - 0
[  434.593360][ T5631] Bluetooth: hci3: command tx timeout
[  436.014576][T18015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.047824][T18006] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  436.165714][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.196139][T18006] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  436.214355][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.222773][T18006] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  436.237345][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.253849][T18006] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  436.275904][T18006] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.385916][T18064] syzkaller0: entered promiscuous mode
[  436.417101][T18064] syzkaller0: entered allmulticast mode
[  436.535384][T18074] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3074'.
[  436.676763][ T5631] Bluetooth: hci3: command tx timeout
[  436.728913][T18006] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.798658][T18006] 8021q: adding VLAN 0 to HW filter on device team0
[  436.800291][T18087] netlink: 'syz.4.3077': attribute type 178 has an invalid length.
[  436.841242][T13961] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.848447][T13961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.853610][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3077'.
[  436.881569][T13961] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.888783][T13961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.929213][T18087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3077'.
[  437.069360][T18006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  437.459308][T18123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.209998][T18006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.472309][T18149] vlan4: entered promiscuous mode
[  438.482438][T18149] hsr0: entered promiscuous mode
[  438.488652][T18154] netlink: 'syz.3.3091': attribute type 1 has an invalid length.
[  438.522717][T18149] vlan4: entered allmulticast mode
[  438.530845][T18149] hsr0: entered allmulticast mode
[  438.538500][T18149] hsr_slave_0: entered allmulticast mode
[  438.549477][T18149] hsr_slave_1: entered allmulticast mode
[  438.622331][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'.
[  438.668789][T18006] veth0_vlan: entered promiscuous mode
[  438.734541][T18149] hsr_slave_0: left promiscuous mode
[  438.753872][ T5631] Bluetooth: hci3: command tx timeout
[  438.773909][T18149] hsr_slave_1: left promiscuous mode
[  439.162513][T18006] veth1_vlan: entered promiscuous mode
[  439.310501][T18006] veth0_macvtap: entered promiscuous mode
[  439.338911][T18175] lo speed is unknown, defaulting to 1000
[  439.348711][T18006] veth1_macvtap: entered promiscuous mode
[  439.353876][T18180] netlink: 'syz.4.3099': attribute type 1 has an invalid length.
[  439.525896][T18181] bond2 (unregistering): Released all slaves
[  439.576802][T18179] lo speed is unknown, defaulting to 1000
[  439.592286][T18006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.868281][T18006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.886018][ T1320] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  439.988958][ T8514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.069154][ T8514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.090340][ T8514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.167329][T18183] dvmrp0: entered allmulticast mode
[  440.185447][ T8514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.719373][  T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.757206][  T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.834981][ T5631] Bluetooth: hci3: command tx timeout
[  441.059712][   T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.120023][   T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.202679][T18252] lo speed is unknown, defaulting to 1000
[  441.254973][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3113'.
[  441.370582][T18262] bond12: option downdelay: invalid value (18446744073709551487)
[  441.379551][T18262] bond12: option downdelay: allowed values 0 - 2147483647
[  441.392338][T18262] bond12 (unregistering): Released all slaves
[  441.436288][T18256] syzkaller0: entered promiscuous mode
[  441.452014][T18256] syzkaller0: entered allmulticast mode
[  441.967499][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3120'.
[  441.976864][T18274] syzkaller0: entered promiscuous mode
[  442.004855][T18274] syzkaller0: entered allmulticast mode
[  442.058168][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  442.070796][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  442.078890][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  442.096679][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  442.110856][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  442.120504][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3122'.
[  442.172453][T18278] macvlan0: entered promiscuous mode
[  442.187782][T18285] macvlan0: entered allmulticast mode
[  442.227235][T18285] veth1_vlan: entered allmulticast mode
[  442.253798][T18286] veth1_vlan: left allmulticast mode
[  442.300594][T18286] macvlan0 (unregistering): left promiscuous mode
[  442.310224][T18286] macvlan0 (unregistering): left allmulticast mode
[  442.741622][T18307] Cannot find set identified by id 0 to match
[  442.773657][T18307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  442.791513][T18313] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  442.954284][T18319] bond12: (slave dummy0): making interface the new active one
[  442.992115][T18319] bond12: (slave dummy0): Enslaving as an active interface with an up link
[  442.995590][T18332] GUP no longer grows the stack in syz.1.3131 (18332): 200000003000-20000000a000 (200000001000)
[  443.029894][T18332] CPU: 0 UID: 0 PID: 18332 Comm: syz.1.3131 Not tainted syzkaller #0 PREEMPT(full) 
[  443.029928][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  443.029946][T18332] Call Trace:
[  443.029952][T18332]  <TASK>
[  443.029959][T18332]  dump_stack_lvl+0xe8/0x150
[  443.029986][T18332]  __get_user_pages+0x238c/0x2720
[  443.030011][T18332]  ? __gup_longterm_locked+0xc3b/0x15c0
[  443.030047][T18332]  __gup_longterm_locked+0xd52/0x15c0
[  443.030063][T18332]  ? lock_acquire+0x106/0x350
[  443.030094][T18332]  gup_fast_fallback+0x1d8c/0x20e0
[  443.030107][T18332]  ? lockdep_hardirqs_on+0x7a/0x110
[  443.030149][T18332]  ? __pfx_gup_fast_fallback+0x10/0x10
[  443.030166][T18332]  ? is_valid_gup_args+0x11f/0x200
[  443.030182][T18332]  ? get_user_pages_fast+0x4d/0xb0
[  443.030198][T18332]  __iov_iter_get_pages_alloc+0x378/0xa40
[  443.030224][T18332]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  443.030264][T18332]  iov_iter_get_pages2+0x5e/0xa0
[  443.030286][T18332]  __se_sys_vmsplice+0x7b5/0x1660
[  443.030321][T18332]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  443.030342][T18332]  ? __pfx_futex_wake+0x10/0x10
[  443.030359][T18332]  ? rcu_is_watching+0x15/0xb0
[  443.030384][T18332]  ? fput+0xa0/0xd0
[  443.030443][T18332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.030458][T18332]  do_syscall_64+0x174/0x580
[  443.030478][T18332]  ? trace_irq_disable+0x3b/0x140
[  443.030499][T18332]  ? clear_bhb_loop+0x40/0x90
[  443.030520][T18332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.030538][T18332] RIP: 0033:0x7f0d6939de59
[  443.030556][T18332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.030570][T18332] RSP: 002b:00007f0d6a32c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  443.030589][T18332] RAX: ffffffffffffffda RBX: 00007f0d69625fa0 RCX: 00007f0d6939de59
[  443.030602][T18332] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005
[  443.030613][T18332] RBP: 00007f0d69433e6f R08: 0000000000000000 R09: 0000000000000000
[  443.030623][T18332] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  443.030633][T18332] R13: 00007f0d69626038 R14: 00007f0d69625fa0 R15: 00007fff1adc3df8
[  443.030665][T18332]  </TASK>
[  443.351713][T18288] lo speed is unknown, defaulting to 1000
[  443.681570][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'.
[  443.953769][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'.
[  444.033832][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3136'.
[  444.130074][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3136'.
[  444.205910][ T5631] Bluetooth: hci2: command tx timeout
[  444.213894][ T8514] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  444.223559][T18377] netlink: 'syz.1.3138': attribute type 9 has an invalid length.
[  444.241666][ T8514] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  444.313056][T18371] Bluetooth: MGMT ver 1.23
[  444.321914][ T8514] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  444.339993][T18288] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.377887][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'.
[  444.385707][T18288] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.405268][T18288] bridge_slave_0: entered allmulticast mode
[  444.417613][T18288] bridge_slave_0: entered promiscuous mode
[  444.426840][T18288] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.434394][T18288] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.441736][T18288] bridge_slave_1: entered allmulticast mode
[  444.452232][T18288] bridge_slave_1: entered promiscuous mode
[  444.459540][ T8514] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  444.482196][T18386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3141'.
[  444.504262][T18382] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  444.522135][T18382] bond2 (unregistering): Released all slaves
[  444.602253][T18288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.632636][T18288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.734829][T18288] team0: Port device team_slave_0 added
[  444.752119][T18288] team0: Port device team_slave_1 added
[  444.804781][T18393] netlink: 'syz.2.3144': attribute type 12 has an invalid length.
[  444.832260][T18393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3144'.
[  444.846222][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'.
[  444.927841][T18388] netlink: 'syz.1.3142': attribute type 9 has an invalid length.
[  444.942101][T18288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.950806][T18388] netlink: 'syz.1.3142': attribute type 6 has an invalid length.
[  444.962141][T18288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.969697][T18388] netlink: 'syz.1.3142': attribute type 7 has an invalid length.
[  445.065886][T18288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.089299][T18388] netlink: 'syz.1.3142': attribute type 8 has an invalid length.
[  445.115961][T18288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.124527][T18288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.151544][T18288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.206551][T18407] netlink: 'syz.0.3145': attribute type 26 has an invalid length.
[  445.241331][T18288] hsr_slave_0: entered promiscuous mode
[  445.252335][T18288] hsr_slave_1: entered promiscuous mode
[  445.264237][T18288] debugfs: 'hsr0' already exists in 'hsr'
[  445.274495][T18288] Cannot create hsr debugfs directory
[  445.563730][T18421] team0: Port device team_slave_0 removed
[  445.648495][T18288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.660572][T18288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.685880][T18421] syzkaller1: entered promiscuous mode
[  445.692060][T18421] syzkaller1: entered allmulticast mode
[  445.758953][T18288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.769976][T18288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.852390][T18288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.862764][T18288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.955899][T18288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  445.966935][T18288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.284012][ T5631] Bluetooth: hci2: command tx timeout
[  448.010891][T18400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  448.056029][T18288] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  448.101310][T18288] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  448.128334][T18288] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  448.165804][T18288] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  448.205996][T18288] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  448.217252][T18288] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  448.268573][T18288] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  448.295550][T18288] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  448.346258][T18447] xt_CT: You must specify a L4 protocol and not use inversions on it
[  448.353344][ T5631] Bluetooth: hci2: command tx timeout
[  448.776880][T18288] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.811317][T18288] 8021q: adding VLAN 0 to HW filter on device team0
[  448.820671][T18467] netlink: 'syz.2.3158': attribute type 13 has an invalid length.
[  448.836228][T18467] netlink: 'syz.2.3158': attribute type 17 has an invalid length.
[  448.850040][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.857219][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.961359][T18471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.140961][T18481] __nla_validate_parse: 6 callbacks suppressed
[  449.140979][T18481] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3161'.
[  449.171084][T18482] batman_adv: batadv0: Adding interface: dummy0
[  449.177559][T18482] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.206474][T18482] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  449.224022][T13959] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.231179][T13959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.525881][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'.
[  449.675852][T18503] bond1: entered promiscuous mode
[  449.690405][T18503] bond1: entered allmulticast mode
[  449.718970][T18503] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.812613][T18509] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  449.821944][ T5727] IPVS: starting estimator thread 0...
[  449.923837][T18516] IPVS: using max 29 ests per chain, 69600 per kthread
[  450.204874][T18529] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3171'.
[  450.546494][ T5631] Bluetooth: hci2: command tx timeout
[  450.712599][T18288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.880800][T18288] veth0_vlan: entered promiscuous mode
[  450.925127][T18288] veth1_vlan: entered promiscuous mode
[  451.041441][T18545] lo speed is unknown, defaulting to 1000
[  451.058092][T18288] veth0_macvtap: entered promiscuous mode
[  451.198382][T18288] veth1_macvtap: entered promiscuous mode
[  451.237867][T18557] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  451.279398][T18551] bond2: option lacp_rate: invalid value (3)
[  451.290582][T18551] bond2 (unregistering): Released all slaves
[  451.435011][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3179'.
[  451.442228][T18288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.624401][T18288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.702930][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.743455][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.844003][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.889229][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.911115][T18579] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  451.947197][T18579] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  451.968396][T18579] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  452.107839][T18584] Bluetooth: MGMT ver 1.23
[  452.154535][  T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.191502][  T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.358001][ T8514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.382640][ T8514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.930657][T18611] 8021q: adding VLAN 0 to HW filter on device team0
[  452.952692][T18611] batman_adv: batadv0: Interface activated: dummy0
[  452.952844][T18620] netlink: 'syz.3.3193': attribute type 12 has an invalid length.
[  452.965433][T18611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.010690][T18621] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3193'.
[  453.108317][T18611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.130902][T18611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.198522][T18611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  453.226103][T18611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.252452][T18636] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3192'.
[  453.278254][T18611] veth1_vlan: left promiscuous mode
[  453.284384][T18636] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3192'.
[  453.295306][T18611] veth0_vlan: left promiscuous mode
[  453.305580][T18611] veth0_vlan: entered promiscuous mode
[  453.317228][T18611] veth1_vlan: entered promiscuous mode
[  453.331127][T18611] veth1_macvtap: left promiscuous mode
[  453.337771][T18611] veth0_macvtap: left promiscuous mode
[  453.345516][T18611] veth0_macvtap: entered promiscuous mode
[  453.352531][T18611] veth1_macvtap: entered promiscuous mode
[  453.365053][T18611] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  453.372514][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  453.381181][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  453.391641][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  453.400076][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.428593][   T94] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.435806][   T94] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.469857][   T94] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.477061][   T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.537289][T18634] netlink: 616 bytes leftover after parsing attributes in process `syz.2.3195'.
[  453.567540][ T1124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.585372][ T1124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.595289][ T1124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.606563][T18640] netlink: 'syz.2.3195': attribute type 1 has an invalid length.
[  453.636137][ T1124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.071962][ T4937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.102753][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  454.118802][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  454.135919][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  454.146702][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  454.330013][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'.
[  454.451062][T18666] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  454.472270][ T7175] IPVS: starting estimator thread 0...
[  454.574326][T18673] IPVS: using max 31 ests per chain, 74400 per kthread
[  454.647361][T18664] bond1: entered promiscuous mode
[  454.652538][T18664] bond1: entered allmulticast mode
[  454.658950][T18664] 8021q: adding VLAN 0 to HW filter on device bond1
[  455.296138][T18654] lo speed is unknown, defaulting to 1000
[  455.622284][T18709] ip6erspan1: entered allmulticast mode
[  455.738907][T18725] xt_hashlimit: size too large, truncated to 1048576
[  455.821033][T18727] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.870060][T18729] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3215'.
[  455.888363][T18727] bridge_slave_0 (unregistering): left allmulticast mode
[  455.908037][T18727] bridge_slave_0 (unregistering): left promiscuous mode
[  455.922435][T18727] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.039336][T18735] nbd: nbd1 already in use
[  456.064147][T18735] block nbd1: NBD_DISCONNECT
[  456.089789][T18735] block nbd1: shutting down sockets
[  456.276342][ T4937] Bluetooth: hci0: command tx timeout
[  456.609537][T18654] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.642675][T18654] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.667631][T18654] bridge_slave_0: entered allmulticast mode
[  456.677970][T18654] bridge_slave_0: entered promiscuous mode
[  456.827409][T18654] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.849768][T18654] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.899167][T18654] bridge_slave_1: entered allmulticast mode
[  456.984266][T18654] bridge_slave_1: entered promiscuous mode
[  457.237132][T18654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.250763][T18654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.384748][T18654] team0: Port device team_slave_0 added
[  457.408258][T18654] team0: Port device team_slave_1 added
[  457.501866][T18654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.510437][T18654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.537124][T18654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.563929][T18654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.570886][T18654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.598223][T18654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.622970][T18814] tipc: Started in network mode
[  457.628603][T18814] tipc: Node identity 3e982c824886, cluster identity 4711
[  457.637096][T18814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.674948][T18806] syzkaller0: entered promiscuous mode
[  457.680741][T18806] syzkaller0: entered allmulticast mode
[  457.689711][T18814] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  457.735457][T18812] siw: device registration error -23
[  457.748689][T18806] tipc: Resetting bearer <eth:syzkaller0>
[  457.770616][T18803] tipc: Resetting bearer <eth:syzkaller0>
[  457.816332][T18803] tipc: Disabling bearer <eth:syzkaller0>
[  457.867182][T18809] syzkaller1: entered promiscuous mode
[  457.878176][T18809] syzkaller1: entered allmulticast mode
[  458.023972][T18654] hsr_slave_0: entered promiscuous mode
[  458.045374][T18654] hsr_slave_1: entered promiscuous mode
[  458.055682][T18654] debugfs: 'hsr0' already exists in 'hsr'
[  458.061856][T18654] Cannot create hsr debugfs directory
[  458.354332][ T4937] Bluetooth: hci0: command tx timeout
[  458.486119][T18845] xt_connbytes: Forcing CT accounting to be enabled
[  458.545577][T18844] netlink: 'syz.3.3232': attribute type 11 has an invalid length.
[  458.573600][T18654] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode
[  458.584092][T18654] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode
[  458.594870][T18654] bridge0: port 1(netdevsim1) entered disabled state
[  458.696102][T18850] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3233'.
[  458.828251][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'.
[  458.901123][T18864] netlink: 'syz.1.3236': attribute type 1 has an invalid length.
[  459.121087][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'.
[  459.308129][ T4937] block nbd1: Receive control failed (result -32)
[  459.434046][T18654] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  459.461818][T18654] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  459.494251][T18654] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  459.505543][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'.
[  459.505585][T18895] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3246'.
[  459.558456][T18654] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  459.576945][T18654] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  459.629149][T18654] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  459.648774][T18654] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  459.690495][T18654] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  459.949521][T18923] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3252'.
[  459.960204][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'.
[  459.978729][T18923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3252'.
[  460.115546][T18924] veth1_to_bond: entered allmulticast mode
[  460.138671][T18925] veth1_to_bond: entered promiscuous mode
[  460.197766][T18932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.250324][T18927] veth1_to_bond (unregistering): left allmulticast mode
[  460.258142][T18927] veth1_to_bond (unregistering): left promiscuous mode
[  460.276233][T18927] bond0: (slave bond_slave_1): Releasing backup interface
[  460.320068][T18654] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.357461][T18654] 8021q: adding VLAN 0 to HW filter on device team0
[  460.367827][T18935] nbd: couldn't find a device at index 0
[  460.382649][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.389858][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.436819][ T4937] Bluetooth: hci0: command tx timeout
[  460.451799][T13954] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.458969][T13954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.650796][T18654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.927755][T18990] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3265'.
[  461.946650][T18654] veth0_vlan: entered promiscuous mode
[  461.997364][T18654] veth1_vlan: entered promiscuous mode
[  462.042270][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3265'.
[  462.109207][T18654] veth0_macvtap: entered promiscuous mode
[  462.151039][T18654] veth1_macvtap: entered promiscuous mode
[  462.247428][T18654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.306006][T18654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.432935][T13954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.456530][T13954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.481821][T13954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.516238][ T4937] Bluetooth: hci0: command tx timeout
[  462.530532][T13954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.577081][T19011] gre1: entered allmulticast mode
[  462.594355][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'.
[  462.694814][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3273'.
[  462.790917][T19027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3273'.
[  463.082885][T19024] bond1: left promiscuous mode
[  463.104715][T19027] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.112291][T19027] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.167412][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.208722][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.330840][  T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.349148][  T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.382385][T19049] xt_CT: You must specify a L4 protocol and not use inversions on it
[  463.464474][T19049] netlink: 'syz.4.3282': attribute type 3 has an invalid length.
[  464.708111][T19109] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  464.776301][T19109] bond2 (unregistering): Released all slaves
[  464.864969][T19123] netlink: 'syz.4.3293': attribute type 8 has an invalid length.
[  465.246539][T19132] __nla_validate_parse: 7 callbacks suppressed
[  465.246558][T19132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3298'.
[  465.529071][T19147] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3300'.
[  466.198899][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'.
[  466.659935][ T8513] bond6 (unregistering): (slave geneve5): Releasing active interface
[  466.685578][ T8513] bond4 (unregistering): (slave geneve4): Releasing active interface
[  466.702289][ T8513] bond3 (unregistering): (slave geneve3): Releasing active interface
[  466.842860][ T8513] bond1 (unregistering): Released all slaves
[  466.864967][ T8513] bond2 (unregistering): (slave veth7): Releasing active interface
[  466.882435][ T8513] bond2 (unregistering): Released all slaves
[  466.927610][ T8513] bond3 (unregistering): Released all slaves
[  466.953664][ T8513] bond4 (unregistering): Released all slaves
[  466.970380][ T8513] bond0 (unregistering): Released all slaves
[  466.987581][ T8513] bond5 (unregistering): Released all slaves
[  467.008745][ T8513] bond6 (unregistering): Released all slaves
[  467.031324][ T8513] bond7 (unregistering): Released all slaves
[  467.060645][ T8513] bond8 (unregistering): Released all slaves
[  467.081815][ T8513] bond9 (unregistering): Released all slaves
[  467.097875][ T8513] bond10 (unregistering): Released all slaves
[  467.121754][ T8513] bond11 (unregistering): Released all slaves
[  467.141147][ T8513] bond12 (unregistering): Released all slaves
[  467.162156][ T8513] bond13 (unregistering): Released all slaves
[  467.190652][ T8513] bond14 (unregistering): Released all slaves
[  467.210719][ T8513] bond15 (unregistering): Released all slaves
[  467.227154][ T8513] bond16 (unregistering): Released all slaves
[  467.257400][T19161] bridge1: entered promiscuous mode
[  467.262835][T19161] bridge1: entered allmulticast mode
[  467.272473][T19161] team0: Port device bridge1 added
[  467.280785][T19164] bridge0: port 3(team0) entered blocking state
[  467.297465][T19164] bridge0: port 3(team0) entered disabled state
[  467.314971][T19164] team0: entered allmulticast mode
[  467.323227][T19164] team_slave_0: entered allmulticast mode
[  467.336932][T19164] team_slave_1: entered allmulticast mode
[  467.391116][T19164] team0: entered promiscuous mode
[  467.431920][T19164] team_slave_0: entered promiscuous mode
[  467.441095][T19164] team_slave_1: entered promiscuous mode
[  467.455617][T19164] bridge0: port 3(team0) entered blocking state
[  467.462912][T19164] bridge0: port 3(team0) entered listening state
[  467.511388][T19178] pim6reg: entered allmulticast mode
[  467.604037][T19172] dvmrp0: entered allmulticast mode
[  467.905383][T19202] syzkaller0: entered promiscuous mode
[  467.910982][T19202] syzkaller0: entered allmulticast mode
[  467.928650][ T8513] tipc: Left network mode
[  470.395923][T19168] lo speed is unknown, defaulting to 1000
[  470.677259][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'.
[  471.222216][ T8513] hsr_slave_0: left promiscuous mode
[  471.241497][ T8513] hsr_slave_1: left promiscuous mode
[  471.254963][T19287] netlink: 'syz.0.3326': attribute type 21 has an invalid length.
[  471.269415][ T8513] veth0_macvtap: left promiscuous mode
[  471.284026][ T8513] veth1_vlan: left promiscuous mode
[  471.289461][ T8513] veth0_vlan: left promiscuous mode
[  472.338161][T19287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3326'.
[  472.339024][T19289] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  472.358240][T19289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  472.370897][T19289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  472.573916][T19342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3333'.
[  472.688949][T19349] Bluetooth: MGMT ver 1.23
[  472.695959][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'.
[  472.738962][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'.
[  472.790543][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3336'.
[  472.830678][T19342] bond1 (unregistering): Released all slaves
[  472.958736][ T8513] IPVS: stop unused estimator thread 0...
[  473.201541][T19381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3342'.
[  473.309260][T19392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3338'.
[  473.324368][T19381] veth1_to_hsr: entered promiscuous mode
[  473.346355][T19395] netlink: 'syz.4.3342': attribute type 1 has an invalid length.
[  473.355813][T19381] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3342'.
[  473.385782][T19395] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3342'.
[  473.407562][T19381] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  473.449453][T19399] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  473.492512][T19399] xfrm1: entered allmulticast mode
[  473.802218][T19407] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  473.835635][T19407] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  474.066701][T19407] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  474.109217][T19407] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  474.175734][T19446] lo speed is unknown, defaulting to 1000
[  474.297574][T19407] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  474.327808][T19407] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  474.535656][T19407] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  474.556211][T19407] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  474.755327][ T4937] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  474.771711][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout
[  474.805251][T19407] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  474.813815][T19407] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  475.225214][T19500] netlink: 'syz.0.3365': attribute type 10 has an invalid length.
[  475.247983][T19502] netlink: 'syz.0.3365': attribute type 10 has an invalid length.
[  475.333677][T19500] team0: Port device dummy0 added
[  475.447984][T19502] team0: Port device dummy0 removed
[  475.539012][T19502] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  475.831433][T19537] batadv0: entered promiscuous mode
[  475.852243][T19537] macvtap1: entered allmulticast mode
[  475.872397][T19537] batadv0: entered allmulticast mode
[  475.899435][T19537] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  476.002379][T19546] __nla_validate_parse: 1 callbacks suppressed
[  476.002398][T19546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3374'.
[  476.030877][T19537] batadv0: left allmulticast mode
[  476.048394][T19537] batadv0: left promiscuous mode
[  476.059714][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'.
[  476.176659][T19554] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3376'.
[  476.531738][T19573] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3379'.
[  476.592049][T19578] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3381'.
[  476.615407][T19579] netlink: 'syz.3.3378': attribute type 2 has an invalid length.
[  476.712814][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'.
[  476.747488][T19574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3378'.
[  476.951407][T19592] tipc: Started in network mode
[  476.960254][T19592] tipc: Node identity 060e3f708fb4, cluster identity 4711
[  476.968077][T19592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.982995][T19592] syzkaller0: entered promiscuous mode
[  477.000007][T19592] syzkaller0: entered allmulticast mode
[  477.172055][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  477.361640][T19623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3391'.
[  477.610384][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'.
[  477.736381][T19643] syzkaller0: entered promiscuous mode
[  477.748203][T19643] syzkaller0: entered allmulticast mode
[  477.766951][T19643] TC_ACT_REPEAT abuse ?
[  478.084657][T11576] tipc: Node number set to 2310684528
[  478.155806][T19671] netlink: 'syz.4.3406': attribute type 1 has an invalid length.
[  478.189299][T19676] netlink: 'syz.1.3408': attribute type 1 has an invalid length.
[  478.201966][T19672] Bluetooth: MGMT ver 1.23
[  478.291583][T19671] 8021q: adding VLAN 0 to HW filter on device bond3
[  478.314120][T19676] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  478.737207][T19689] IPVS: Error connecting to the multicast addr
[  478.995111][    C1] ------------[ cut here ]------------
[  479.000974][    C1] sk->sk_forward_alloc
[  479.001003][    C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62b/0x740, CPU#1: cmp/19707
[  479.016139][    C1] Modules linked in:
[  479.020269][    C1] CPU: 1 UID: 0 PID: 19707 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) 
[  479.029104][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  479.039197][    C1] RIP: 0010:inet_sock_destruct+0x62b/0x740
[  479.045147][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 62 f2 7a f7 90 0f 0b 90 e9 8b fe ff ff e8 54 f2 7a f7 90 0f 0b 90 e9 b1 fe ff ff e8 46 f2 7a f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  479.064796][    C1] RSP: 0018:ffffc90000a08d28 EFLAGS: 00010246
[  479.070886][    C1] RAX: ffffffff8a4b7f7a RBX: dffffc0000000000 RCX: ffff88802927dd00
[  479.078932][    C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000
[  479.086948][    C1] RBP: 0000000000000090 R08: ffff88807b674f27 R09: 1ffff1100f6ce9e4
[  479.094953][    C1] R10: dffffc0000000000 R11: ffffed100f6ce9e5 R12: ffff88807b674c80
[  479.102936][    C1] R13: dffffc0000000000 R14: ffff88807b674f0c R15: ffffffff9010c800
[  479.110947][    C1] FS:  0000000000000000(0000) GS:ffff888125060000(0000) knlGS:0000000000000000
[  479.119925][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  479.126541][    C1] CR2: 00007fc6fadaeff8 CR3: 00000000791ba000 CR4: 00000000003526f0
[  479.134543][    C1] Call Trace:
[  479.137841][    C1]  <IRQ>
[  479.140699][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  479.146208][    C1]  __sk_destruct+0x89/0x9d0
[  479.150730][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  479.155890][    C1]  ? rcu_core+0x70d/0x10a0
[  479.160326][    C1]  rcu_core+0x78b/0x10a0
[  479.164630][    C1]  ? __pfx_rcu_core+0x10/0x10
[  479.169342][    C1]  handle_softirqs+0x225/0x840
[  479.174164][    C1]  ? __irq_exit_rcu+0xca/0x220
[  479.178945][    C1]  __irq_exit_rcu+0xca/0x220
[  479.183575][    C1]  irq_exit_rcu+0x9/0x30
[  479.187827][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  479.193506][    C1]  </IRQ>
[  479.196439][    C1]  <TASK>
[  479.199377][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  479.205396][    C1] RIP: 0010:lock_acquire+0x221/0x350
[  479.210729][    C1] Code: ff ff ff e8 41 20 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b db c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 21 2f 0a cc 48 8d 3d b8 77 b8
[  479.230368][    C1] RSP: 0018:ffffc90005b4f260 EFLAGS: 00000286
[  479.236486][    C1] RAX: a369b11e2abb7700 RBX: 0000000000000000 RCX: 0000000000000046
[  479.244508][    C1] RDX: 00000000270d408f RSI: ffffffff8e4afadf RDI: ffffffff8c4bd280
[  479.252492][    C1] RBP: ffffffff8176f21f R08: ffffffff8176f21f R09: 0000000000000000
[  479.260487][    C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002
[  479.268497][    C1] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246
[  479.276528][    C1]  ? unwind_next_frame+0x8f/0x2550
[  479.281655][    C1]  ? unwind_next_frame+0x8f/0x2550
[  479.286808][    C1]  ? stack_trace_save+0xa9/0x100
[  479.291764][    C1]  ? unwind_next_frame+0x8f/0x2550
[  479.296937][    C1]  unwind_next_frame+0xac/0x2550
[  479.301892][    C1]  ? unwind_next_frame+0x8f/0x2550
[  479.307676][    C1]  ? __unwind_start+0x514/0x660
[  479.312551][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  479.318767][    C1]  arch_stack_walk+0x11b/0x150
[  479.323572][    C1]  ? stack_trace_save+0xa9/0x100
[  479.328531][    C1]  stack_trace_save+0xa9/0x100
[  479.333363][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  479.338754][    C1]  ? stack_trace_save+0xa9/0x100
[  479.343749][    C1]  ? stack_depot_save_flags+0x33/0x800
[  479.349233][    C1]  kasan_save_track+0x3e/0x80
[  479.354020][    C1]  __kasan_kmalloc+0x93/0xb0
[  479.358636][    C1]  __kmalloc_cache_noprof+0x32d/0x660
[  479.364071][    C1]  ? __kmalloc_cache_noprof+0x150/0x660
[  479.369634][    C1]  ? kmem_cache_free+0x156/0x650
[  479.374626][    C1]  ? kmem_cache_free+0x156/0x650
[  479.379585][    C1]  ? tear_down_vmas+0x312/0x520
[  479.384492][    C1]  kmem_cache_free+0x156/0x650
[  479.389284][    C1]  tear_down_vmas+0x312/0x520
[  479.394030][    C1]  exit_mmap+0x4ca/0x9f0
[  479.398296][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  479.403112][    C1]  ? __pfx_exit_aio+0x10/0x10
[  479.407858][    C1]  ? arch_uprobe_clear_state+0x1c8/0x240
[  479.413557][    C1]  ? uprobe_clear_state+0x2ac/0x3e0
[  479.418774][    C1]  __mmput+0x118/0x420
[  479.422862][    C1]  setup_new_exec+0x30d/0x360
[  479.427606][    C1]  load_elf_binary+0xbcf/0x2950
[  479.432476][    C1]  ? __lock_acquire+0x683/0x2cf0
[  479.437477][    C1]  ? load_elf_binary+0x9f1/0x2950
[  479.442518][    C1]  ? load_misc_binary+0x10f/0xc90
[  479.447589][    C1]  ? lock_acquire+0x106/0x350
[  479.452306][    C1]  ? __pfx_load_elf_binary+0x10/0x10
[  479.457674][    C1]  bprm_execve+0x9c7/0x1630
[  479.462213][    C1]  ? __pfx_bprm_execve+0x10/0x10
[  479.467225][    C1]  do_execveat_common+0x4f4/0x670
[  479.472278][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.478397][    C1]  __x64_sys_execve+0x97/0xc0
[  479.483101][    C1]  do_syscall_64+0x174/0x580
[  479.487747][    C1]  ? trace_irq_disable+0x3b/0x140
[  479.492790][    C1]  ? clear_bhb_loop+0x40/0x90
[  479.497523][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.503447][    C1] RIP: 0033:0x7f45db074107
[  479.507879][    C1] Code: Unable to access opcode bytes at 0x7f45db0740dd.
[  479.514934][    C1] RSP: 002b:00007ffecff7fbe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  479.523386][    C1] RAX: ffffffffffffffda RBX: 0000557d6a47b1a8 RCX: 00007f45db074107
[  479.531367][    C1] RDX: 0000557d6a476e28 RSI: 0000557d6a47b1a8 RDI: 0000557d6a476eb0
[  479.539381][    C1] RBP: 0000557d6a476eb0 R08: 00007ffecff83eba R09: 0000000000000210
[  479.547389][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000557d6a476e28
[  479.555408][    C1] R13: 00007f45db239e8b R14: 0000557d6a476e28 R15: 0000000000000000
[  479.563432][    C1]  </TASK>
[  479.566474][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  479.573768][    C1] CPU: 1 UID: 0 PID: 19707 Comm: cmp Not tainted syzkaller #0 PREEMPT(full) 
[  479.582534][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  479.592597][    C1] Call Trace:
[  479.595882][    C1]  <IRQ>
[  479.598736][    C1]  vpanic+0x56c/0xa60
[  479.602739][    C1]  ? __pfx__printk+0x10/0x10
[  479.607340][    C1]  ? __pfx_vpanic+0x10/0x10
[  479.611845][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  479.617126][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  479.622326][    C1]  panic+0xc5/0xd0
[  479.626045][    C1]  ? __pfx_panic+0x10/0x10
[  479.630470][    C1]  __warn+0x315/0x4c0
[  479.634437][    C1]  ? inet_sock_destruct+0x62b/0x740
[  479.639633][    C1]  ? inet_sock_destruct+0x62b/0x740
[  479.644825][    C1]  __report_bug+0x331/0x530
[  479.649323][    C1]  ? kasan_save_track+0x3e/0x80
[  479.654163][    C1]  ? kasan_save_free_info+0x40/0x50
[  479.659349][    C1]  ? __kasan_slab_free+0x5c/0x80
[  479.664277][    C1]  ? inet_sock_destruct+0x62b/0x740
[  479.670215][    C1]  ? __pfx___report_bug+0x10/0x10
[  479.675342][    C1]  ? stack_trace_save+0xa9/0x100
[  479.680274][    C1]  ? kasan_save_track+0x3e/0x80
[  479.685122][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  479.689997][    C1]  ? __kmalloc_cache_noprof+0x32d/0x660
[  479.695565][    C1]  ? kmem_cache_free+0x156/0x650
[  479.700514][    C1]  ? tear_down_vmas+0x312/0x520
[  479.705388][    C1]  ? exit_mmap+0x4ca/0x9f0
[  479.709811][    C1]  ? __mmput+0x118/0x420
[  479.714077][    C1]  ? setup_new_exec+0x30d/0x360
[  479.718938][    C1]  ? load_elf_binary+0xbcf/0x2950
[  479.723953][    C1]  ? bprm_execve+0x9c7/0x1630
[  479.728666][    C1]  ? do_execveat_common+0x4f4/0x670
[  479.734333][    C1]  ? __x64_sys_execve+0x97/0xc0
[  479.739182][    C1]  ? do_syscall_64+0x174/0x580
[  479.743943][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.750009][    C1]  ? inet_sock_destruct+0x62b/0x740
[  479.755208][    C1]  report_bug+0x16a/0x220
[  479.759544][    C1]  ? inet_sock_destruct+0x62b/0x740
[  479.764732][    C1]  ? inet_sock_destruct+0x62d/0x740
[  479.769924][    C1]  handle_bug+0x9c/0x200
[  479.774165][    C1]  exc_invalid_op+0x1a/0x50
[  479.778666][    C1]  asm_exc_invalid_op+0x1a/0x20
[  479.783513][    C1] RIP: 0010:inet_sock_destruct+0x62b/0x740
[  479.789722][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 62 f2 7a f7 90 0f 0b 90 e9 8b fe ff ff e8 54 f2 7a f7 90 0f 0b 90 e9 b1 fe ff ff e8 46 f2 7a f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  479.809930][    C1] RSP: 0018:ffffc90000a08d28 EFLAGS: 00010246
[  479.815995][    C1] RAX: ffffffff8a4b7f7a RBX: dffffc0000000000 RCX: ffff88802927dd00
[  479.823985][    C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000
[  479.832169][    C1] RBP: 0000000000000090 R08: ffff88807b674f27 R09: 1ffff1100f6ce9e4
[  479.840145][    C1] R10: dffffc0000000000 R11: ffffed100f6ce9e5 R12: ffff88807b674c80
[  479.848204][    C1] R13: dffffc0000000000 R14: ffff88807b674f0c R15: ffffffff9010c800
[  479.856271][    C1]  ? inet_sock_destruct+0x62a/0x740
[  479.861488][    C1]  ? inet_sock_destruct+0x62a/0x740
[  479.866679][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  479.872231][    C1]  __sk_destruct+0x89/0x9d0
[  479.876748][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  479.881874][    C1]  ? rcu_core+0x70d/0x10a0
[  479.886393][    C1]  rcu_core+0x78b/0x10a0
[  479.890657][    C1]  ? __pfx_rcu_core+0x10/0x10
[  479.895343][    C1]  handle_softirqs+0x225/0x840
[  479.900110][    C1]  ? __irq_exit_rcu+0xca/0x220
[  479.904872][    C1]  __irq_exit_rcu+0xca/0x220
[  479.909459][    C1]  irq_exit_rcu+0x9/0x30
[  479.913697][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  479.919328][    C1]  </IRQ>
[  479.922257][    C1]  <TASK>
[  479.925265][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  479.931338][    C1] RIP: 0010:lock_acquire+0x221/0x350
[  479.936625][    C1] Code: ff ff ff e8 41 20 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b db c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 21 2f 0a cc 48 8d 3d b8 77 b8
[  479.956220][    C1] RSP: 0018:ffffc90005b4f260 EFLAGS: 00000286
[  479.962282][    C1] RAX: a369b11e2abb7700 RBX: 0000000000000000 RCX: 0000000000000046
[  479.970240][    C1] RDX: 00000000270d408f RSI: ffffffff8e4afadf RDI: ffffffff8c4bd280
[  479.978198][    C1] RBP: ffffffff8176f21f R08: ffffffff8176f21f R09: 0000000000000000
[  479.986157][    C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002
[  479.994115][    C1] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246
[  480.002076][    C1]  ? unwind_next_frame+0x8f/0x2550
[  480.007183][    C1]  ? unwind_next_frame+0x8f/0x2550
[  480.012291][    C1]  ? stack_trace_save+0xa9/0x100
[  480.017217][    C1]  ? unwind_next_frame+0x8f/0x2550
[  480.022315][    C1]  unwind_next_frame+0xac/0x2550
[  480.027240][    C1]  ? unwind_next_frame+0x8f/0x2550
[  480.032356][    C1]  ? __unwind_start+0x514/0x660
[  480.037200][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  480.043353][    C1]  arch_stack_walk+0x11b/0x150
[  480.048112][    C1]  ? stack_trace_save+0xa9/0x100
[  480.053046][    C1]  stack_trace_save+0xa9/0x100
[  480.057814][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  480.063183][    C1]  ? stack_trace_save+0xa9/0x100
[  480.068116][    C1]  ? stack_depot_save_flags+0x33/0x800
[  480.073656][    C1]  kasan_save_track+0x3e/0x80
[  480.078371][    C1]  __kasan_kmalloc+0x93/0xb0
[  480.082953][    C1]  __kmalloc_cache_noprof+0x32d/0x660
[  480.088318][    C1]  ? __kmalloc_cache_noprof+0x150/0x660
[  480.093860][    C1]  ? kmem_cache_free+0x156/0x650
[  480.098791][    C1]  ? kmem_cache_free+0x156/0x650
[  480.103900][    C1]  ? tear_down_vmas+0x312/0x520
[  480.108758][    C1]  kmem_cache_free+0x156/0x650
[  480.113526][    C1]  tear_down_vmas+0x312/0x520
[  480.118204][    C1]  exit_mmap+0x4ca/0x9f0
[  480.122452][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  480.127223][    C1]  ? __pfx_exit_aio+0x10/0x10
[  480.131899][    C1]  ? arch_uprobe_clear_state+0x1c8/0x240
[  480.137550][    C1]  ? uprobe_clear_state+0x2ac/0x3e0
[  480.142762][    C1]  __mmput+0x118/0x420
[  480.146835][    C1]  setup_new_exec+0x30d/0x360
[  480.151533][    C1]  load_elf_binary+0xbcf/0x2950
[  480.156386][    C1]  ? __lock_acquire+0x683/0x2cf0
[  480.161426][    C1]  ? load_elf_binary+0x9f1/0x2950
[  480.166457][    C1]  ? load_misc_binary+0x10f/0xc90
[  480.171510][    C1]  ? lock_acquire+0x106/0x350
[  480.176202][    C1]  ? __pfx_load_elf_binary+0x10/0x10
[  480.181501][    C1]  bprm_execve+0x9c7/0x1630
[  480.186020][    C1]  ? __pfx_bprm_execve+0x10/0x10
[  480.190964][    C1]  do_execveat_common+0x4f4/0x670
[  480.196043][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.202113][    C1]  __x64_sys_execve+0x97/0xc0
[  480.206794][    C1]  do_syscall_64+0x174/0x580
[  480.211405][    C1]  ? trace_irq_disable+0x3b/0x140
[  480.216423][    C1]  ? clear_bhb_loop+0x40/0x90
[  480.221093][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.226974][    C1] RIP: 0033:0x7f45db074107
[  480.231389][    C1] Code: Unable to access opcode bytes at 0x7f45db0740dd.
[  480.238417][    C1] RSP: 002b:00007ffecff7fbe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  480.246820][    C1] RAX: ffffffffffffffda RBX: 0000557d6a47b1a8 RCX: 00007f45db074107
[  480.254782][    C1] RDX: 0000557d6a476e28 RSI: 0000557d6a47b1a8 RDI: 0000557d6a476eb0
[  480.262756][    C1] RBP: 0000557d6a476eb0 R08: 00007ffecff83eba R09: 0000000000000210
[  480.270925][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000557d6a476e28
[  480.278893][    C1] R13: 00007f45db239e8b R14: 0000557d6a476e28 R15: 0000000000000000
[  480.286891][    C1]  </TASK>
[  480.290205][    C1] Kernel Offset: disabled
[  480.294529][    C1] Rebooting in 86400 seconds..