last executing test programs:

17.540070568s ago: executing program 2 (id=952):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=<r3=>r0], 0x0, 0x4c}, 0x28)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), r4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x7, 0x2}, 0x10)
mmap(&(0x7f0000a74000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRESHEX=r2, @ANYBLOB="8b2300000000000000000500000008000300", @ANYRES16=r8, @ANYBLOB="0c00990040000000000000009090b25f7a2a89444317ca36e8ddde068069f64a08c2d783564db72334a60f05456ea7169b73489f1a3464d4092fe98dcee5fb84a53839b4efd5ea21cba37bc837cb5ed09968cddf5cfd5843324a6f00a894d13ae03fb50a2f97fec885ffe308d9cda707e929bb0e0b43bfe7c9d643784b2af60ea03afc2ee2434c", @ANYRES8=r3], 0x28}}, 0x4048004)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYRESHEX=r8], 0x2f8}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xc1f44b4500fb80eb, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

17.539333314s ago: executing program 1 (id=953):
r0 = socket$kcm(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) (async)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x2, 0x73) (rerun: 32)
r2 = accept(r0, &(0x7f0000000180)=@nfc, &(0x7f0000000100)=0x80)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000200), 0x4) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async, rerun: 64)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)

17.478889268s ago: executing program 1 (id=955):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090783300000000000000000000000000ee3f000000002b036f"], 0xfdef)

17.289898518s ago: executing program 1 (id=958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3ff}, 0x1c)
bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x88}]}}}]}, 0x44}}, 0x0)

17.189238623s ago: executing program 1 (id=959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "789fbfddc089671da63db7397c07ed18"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) (async)
getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000080)) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000"], 0x48}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, 0x2500}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

17.186943955s ago: executing program 1 (id=961):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r0=>0x0, 0x4, 0x7, 0x1, 0x9, 0x10, @local, @remote, 0x80, 0x78af, 0x3, 0x7}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltclass={0x50, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfffb, 0xc}, {0xa, 0xfff3}, {0x8, 0xa}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @TCA_RATE={0x6, 0x5, {0xab, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xb, 0x3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4080)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8004050}, 0x0)
r11 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r13, 0xff04, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x68, 0x1407, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r13}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x10)

17.186216741s ago: executing program 2 (id=962):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r0, 0x0, 0x0, 0x80, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000dcf3490000000000000007850000080000000e00000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r8, @ANYBLOB="b059a2c0749a471dba30330ccaf02fccb0937b4971ab2f7e34ec4dc4fabfcf20bdca19e8b18adb7b0e68a2170327a9097c322194d4ce8ea97e0877fe224ad585f4fc50583711b0eea783111fa901d8e8322f1d8471184f89818faf3df6cc6140e862cab6d91965304ba438812508f8cd653ca15b886c05f205c4ccf7d9b09cbdb085fd071ed860860180bb621fce79af"], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {0x0}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x8, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f0000001480)=""/175, 0xaf}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f00000016c0)=""/218, 0xda}], 0x2, &(0x7f0000001bc0)=""/227, 0xeb}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0xc5, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000000740)=@generic, 0x80, &(0x7f0000005180), 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000001540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r10, 0x0, 0x0, 0x4000005)

16.360853819s ago: executing program 0 (id=966):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x821c0005, r2})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x110022, r2})
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000400000100000028"], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}}, 0x24}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x100, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x6db6ec49e3ab5510}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xc8, 0x1, [@m_xt={0xc4, 0x8, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7ff}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x8c, 0x6, "dd1db307963f82d23566a14c2b374c0ac69ed361e84196f289f6ad56c466bd74de545839a4f7435878600038618c47abb3e2820e2714c22df42c87c81bff7c137acb6b8758e41ff5a1dcc7199c3401aa36741b70beb21f6afb8cafd6a35974c6cd709bb73f7927a481a27da56d42e6f3cf0fa21797d27548d51a0fecee39322c09d88aeb1c6d58f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c084)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

16.240450658s ago: executing program 2 (id=967):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x0, 0x1, [@broadcast]})
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x7b6}, 0xc)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r3, 0x4000, r0}, 0x18)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.239310215s ago: executing program 0 (id=968):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

16.238394916s ago: executing program 1 (id=969):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c05000000005aa4c711e980fa73b52aa700"/31, @ANYRES32=0x0, @ANYBLOB="000000000c2000001c0012800b00010062726964676500000c0002800800020005000000"], 0x3c}}, 0x80)
pipe(&(0x7f00000001c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x5}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x1a0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x200, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b0, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x134, 0x9, 0x0, 0x1, [@m_ct={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xb}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, 'cryptd(sha256-ce)\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000)

16.236001665s ago: executing program 0 (id=970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0800080000840400080002"], 0x53)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES16=r6, @ANYRES16=r2], 0x34}}, 0x80000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r10], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08090400a0080000140003007866726d3000"/28], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.094181906s ago: executing program 2 (id=971):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090788500000000000000000000000000ee3f000000002b036f"], 0xfdef)

16.040871183s ago: executing program 0 (id=972):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1, 0x1, 0x406, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\a'], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0)

15.937178066s ago: executing program 2 (id=973):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
close(r3) (async, rerun: 64)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r6], 0x158}, 0x1, 0xba01}, 0x44) (async, rerun: 64)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4) (async)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x200, 0x5, 0x9}, 0x10) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (rerun: 64)

15.935458026s ago: executing program 2 (id=974):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
listen(r0, 0x8)
accept$ax25(r0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x16c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x21, 0xa8, @random="3e28ede4c1c909d85bc8f8ae0862bc1a4e18bca7539c0b342a9b6a324d"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc1, 0xa9, @random="8b534062aa82e69bf0902ec899a4e5d0783b380402ce66189af6868bf034c9ce266e02ce7e558b6b766a5e20d893d9a0d61d0e274f787cd762a88667dd73b060a8614c51f24cdb9261717f1aa7f33837b025216c9f5708cc679962c8840a35907965a8fb7cb2ad111cb77145030e452c917699db23d971545ae132fbb8c3a002feb5abde23c38bccf5607f2770986f9ac9ebd1a483b131b963cfdfd6f8ec5a68815987379e34e285f0d27cef161c7aa1c7b24efb22bacaa5126cc197f5"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4084}, 0x404c040)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xb}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x81}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)
r12 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)

15.932953635s ago: executing program 0 (id=975):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x10, @empty, @remote, 0x0, 0x0, 0x0, 0x5}})
unshare(0x6a040000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket(0x2, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x59)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e21, 0x7fff, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x16, 0x0, r5}, {0x8, 0x98a, 0x7, 0x1, 0xbad, 0x100, 0x8, 0x5}, {0x9, 0x5, 0x2, 0xffff}, 0x8, 0x6e6bbd, 0x0, 0x1}, {{@in=@local, 0x4d6, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x2, 0x7, 0x9, 0x2, 0x9}}, 0xe8)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r6, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)

15.270809267s ago: executing program 0 (id=976):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000001c0)="4b1a011f8064fc", 0x7}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800004bc20001000004000d80000000000000000000000042308ee248ec90e245244b6c"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.058347357s ago: executing program 32 (id=969):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c05000000005aa4c711e980fa73b52aa700"/31, @ANYRES32=0x0, @ANYBLOB="000000000c2000001c0012800b00010062726964676500000c0002800800020005000000"], 0x3c}}, 0x80)
pipe(&(0x7f00000001c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x5}, {@in=@loopback, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}, @algo_auth={0x48, 0x1, {{'cryptd(sha256-ce)\x00'}}}]}, 0x1a0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x200, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b0, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x134, 0x9, 0x0, 0x1, [@m_ct={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xb}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r11, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, 'cryptd(sha256-ce)\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000)

48.475062ms ago: executing program 33 (id=976):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000001c0)="4b1a011f8064fc", 0x7}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800004bc20001000004000d80000000000000000000000042308ee248ec90e245244b6c"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

0s ago: executing program 34 (id=974):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
listen(r0, 0x8)
accept$ax25(r0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x16c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x21, 0xa8, @random="3e28ede4c1c909d85bc8f8ae0862bc1a4e18bca7539c0b342a9b6a324d"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x10001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc1, 0xa9, @random="8b534062aa82e69bf0902ec899a4e5d0783b380402ce66189af6868bf034c9ce266e02ce7e558b6b766a5e20d893d9a0d61d0e274f787cd762a88667dd73b060a8614c51f24cdb9261717f1aa7f33837b025216c9f5708cc679962c8840a35907965a8fb7cb2ad111cb77145030e452c917699db23d971545ae132fbb8c3a002feb5abde23c38bccf5607f2770986f9ac9ebd1a483b131b963cfdfd6f8ec5a68815987379e34e285f0d27cef161c7aa1c7b24efb22bacaa5126cc197f5"}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4084}, 0x404c040)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xb}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x81}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)
r12 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)

kernel console output (not intermixed with test programs):

lave_0: entered allmulticast mode
[   56.754898][ T5839] bridge_slave_0: entered promiscuous mode
[   56.758810][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.761120][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.763414][ T5839] bridge_slave_1: entered allmulticast mode
[   56.767185][ T5839] bridge_slave_1: entered promiscuous mode
[   56.827297][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.829652][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.831943][ T5850] bridge_slave_0: entered allmulticast mode
[   56.834679][ T5850] bridge_slave_0: entered promiscuous mode
[   56.841687][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.848013][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.851000][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.854207][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.857140][ T5850] bridge_slave_1: entered allmulticast mode
[   56.859904][ T5850] bridge_slave_1: entered promiscuous mode
[   56.863922][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.892699][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.915468][ T5840] team0: Port device team_slave_0 added
[   56.928889][ T5839] team0: Port device team_slave_0 added
[   56.932197][ T5839] team0: Port device team_slave_1 added
[   56.953357][ T5840] team0: Port device team_slave_1 added
[   56.976290][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.988611][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.991210][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.002161][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.008836][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.012037][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.014223][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.023314][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.028567][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.031235][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.041136][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.069558][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.071776][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.081155][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.109618][ T5850] team0: Port device team_slave_0 added
[   57.113602][ T5850] team0: Port device team_slave_1 added
[   57.126884][ T5839] hsr_slave_0: entered promiscuous mode
[   57.129360][ T5839] hsr_slave_1: entered promiscuous mode
[   57.171266][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.173535][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.183275][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.207181][ T5840] hsr_slave_0: entered promiscuous mode
[   57.209575][ T5840] hsr_slave_1: entered promiscuous mode
[   57.211747][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   57.213661][ T5840] Cannot create hsr debugfs directory
[   57.216540][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.218964][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.227383][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.336149][ T5850] hsr_slave_0: entered promiscuous mode
[   57.339770][ T5850] hsr_slave_1: entered promiscuous mode
[   57.342041][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   57.343904][ T5850] Cannot create hsr debugfs directory
[   57.586264][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.609299][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.628458][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.639296][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.683282][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.699624][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.708201][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.731053][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.823365][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.828917][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.851895][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.862540][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.936957][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.966109][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.981058][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.984074][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.992819][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.010226][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.013003][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.033557][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   58.051870][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.059547][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.061898][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.078648][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.081611][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.096634][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   58.111770][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.114438][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.137508][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.139828][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.168225][ T5235] Bluetooth: hci0: command tx timeout
[   58.175411][ T5235] Bluetooth: hci1: command tx timeout
[   58.247981][ T5235] Bluetooth: hci2: command tx timeout
[   58.296972][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.334259][ T5839] veth0_vlan: entered promiscuous mode
[   58.350480][ T5839] veth1_vlan: entered promiscuous mode
[   58.383532][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.398260][ T5839] veth0_macvtap: entered promiscuous mode
[   58.403312][ T5839] veth1_macvtap: entered promiscuous mode
[   58.422896][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.430078][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.444900][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.459023][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.469803][ T5840] veth0_vlan: entered promiscuous mode
[   58.472619][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.477976][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.481108][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.503045][ T5840] veth1_vlan: entered promiscuous mode
[   58.531901][ T5850] veth0_vlan: entered promiscuous mode
[   58.548264][ T5850] veth1_vlan: entered promiscuous mode
[   58.596861][  T344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.599016][ T5840] veth0_macvtap: entered promiscuous mode
[   58.602120][  T344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.607532][ T5850] veth0_macvtap: entered promiscuous mode
[   58.621569][ T5840] veth1_macvtap: entered promiscuous mode
[   58.624939][ T5850] veth1_macvtap: entered promiscuous mode
[   58.646976][  T344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.649907][  T344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.660458][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.671364][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.686466][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.690198][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.702202][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.712959][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.719405][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.729953][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.741496][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.767600][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.788938][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.824106][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.829600][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.877210][ T5914] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   58.879884][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.882497][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.890516][ T5914] vti0: entered promiscuous mode
[   58.892096][ T5914] vti0: entered allmulticast mode
[   58.902251][ T5914] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   58.947944][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.950770][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.951256][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.959596][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.996002][   T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.998626][   T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.056489][ T5918] netlink: 'syz.1.2': attribute type 3 has an invalid length.
[   59.058956][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   59.150184][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.153700][ T5933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.222925][ T5932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.229450][ T5932] Zero length message leads to an empty skb
[   59.479039][ T5956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'.
[   59.492257][ T5953] Illegal XDP return value 4294967262 on prog  (id 2) dev N/A, expect packet loss!
[   59.536782][ T5960] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET)
[   59.892513][ T5982] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   59.973380][ T5985] gretap1: entered promiscuous mode
[   60.116488][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.245411][ T5235] Bluetooth: hci1: command tx timeout
[   60.247718][ T5847] Bluetooth: hci0: command tx timeout
[   60.325547][ T5235] Bluetooth: hci2: command tx timeout
[   60.479937][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.483854][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.553906][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.747988][ T6006] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   60.779621][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'.
[   60.782533][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'.
[   60.858349][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.861731][ T6006] batadv_slave_0: entered promiscuous mode
[   60.964392][ T6026] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   61.148067][ T6038] ..0: renamed from hsr0 (while UP)
[   61.152984][ T6038] ..0: entered allmulticast mode
[   61.157527][ T6038] hsr_slave_0: entered allmulticast mode
[   61.159820][ T6038] hsr_slave_1: entered allmulticast mode
[   61.164665][ T6038] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   61.441724][ T6046] pim6reg: entered allmulticast mode
[   61.448453][ T6046] pim6reg: left allmulticast mode
[   61.663276][ T6050] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   61.670348][ T6050] batadv1: entered promiscuous mode
[   61.672079][ T6050] batadv1: entered allmulticast mode
[   61.919775][ T6035] syz.1.27 (6035) used greatest stack depth: 17816 bytes left
[   62.170234][ T6087] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[   62.183065][ T6085] sit1: entered promiscuous mode
[   62.188810][ T6089] warning: `syz.1.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.197907][ T6089] netlink: 'syz.1.39': attribute type 1 has an invalid length.
[   62.251722][ T6096] netlink: 'syz.1.42': attribute type 5 has an invalid length.
[   62.258786][ T6096] geneve2: entered promiscuous mode
[   62.260628][ T6096] geneve2: entered allmulticast mode
[   62.325828][ T5235] Bluetooth: hci1: command tx timeout
[   62.325905][ T5847] Bluetooth: hci0: command tx timeout
[   62.333730][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   62.336978][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   62.403423][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   62.406863][ T5847] Bluetooth: hci2: command tx timeout
[   62.407929][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   62.420701][ T6101] tipc: Started in network mode
[   62.422635][ T6101] tipc: Node identity c67c85af96ff, cluster identity 4711
[   62.425330][ T6101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.428232][ T6101] syzkaller0: entered promiscuous mode
[   62.430270][ T6101] syzkaller0: entered allmulticast mode
[   62.442116][ T6101] tipc: Resetting bearer <eth:syzkaller0>
[   62.451218][ T6100] tipc: Resetting bearer <eth:syzkaller0>
[   62.461824][ T6100] tipc: Disabling bearer <eth:syzkaller0>
[   62.568195][ T6109] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   62.641902][ T6113] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   62.747321][ T6123] tun0: tun_chr_ioctl cmd 1074025675
[   62.749516][ T6123] tun0: persist enabled
[   62.753332][ T6118] tun0: tun_chr_ioctl cmd 1074025675
[   62.754989][ T6118] tun0: persist enabled
[   62.868554][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.410167][ T6177] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   63.547350][ T6180] bridge_slave_0: left allmulticast mode
[   63.550842][ T6180] bridge_slave_0: left promiscuous mode
[   63.554076][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.584756][ T6189] syz.0.68: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   63.594507][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) 
[   63.594521][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.594527][ T6189] Call Trace:
[   63.594532][ T6189]  <TASK>
[   63.594536][ T6189]  dump_stack_lvl+0x189/0x250
[   63.594554][ T6189]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.594564][ T6189]  ? __pfx__printk+0x10/0x10
[   63.594579][ T6189]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   63.594591][ T6189]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   63.594601][ T6189]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   63.594612][ T6189]  warn_alloc+0x214/0x310
[   63.594630][ T6189]  ? stack_depot_save_flags+0x41b/0x860
[   63.594644][ T6189]  ? __pfx_warn_alloc+0x10/0x10
[   63.594657][ T6189]  ? kasan_save_track+0x4f/0x80
[   63.594668][ T6189]  ? xskq_create+0x56/0x170
[   63.594677][ T6189]  ? xsk_init_queue+0xb0/0x110
[   63.594683][ T6189]  ? xsk_setsockopt+0x4dc/0x8d0
[   63.594689][ T6189]  ? do_sock_setsockopt+0x17c/0x1b0
[   63.594697][ T6189]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   63.594705][ T6189]  ? do_syscall_64+0xfa/0x3b0
[   63.594714][ T6189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.594726][ T6189]  __vmalloc_node_range_noprof+0x125/0x12f0
[   63.594752][ T6189]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   63.594766][ T6189]  ? __kasan_kmalloc+0x93/0xb0
[   63.594777][ T6189]  vmalloc_user_noprof+0xad/0xf0
[   63.594788][ T6189]  ? xskq_create+0xbf/0x170
[   63.594796][ T6189]  xskq_create+0xbf/0x170
[   63.594806][ T6189]  xsk_init_queue+0xb0/0x110
[   63.594814][ T6189]  xsk_setsockopt+0x4dc/0x8d0
[   63.594823][ T6189]  ? __pfx_xsk_setsockopt+0x10/0x10
[   63.594830][ T6189]  ? __pfx_aa_sk_perm+0x10/0x10
[   63.594844][ T6189]  ? aa_sock_opt_perm+0xff/0x1b0
[   63.594853][ T6189]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   63.594862][ T6189]  ? __pfx_xsk_setsockopt+0x10/0x10
[   63.594869][ T6189]  do_sock_setsockopt+0x17c/0x1b0
[   63.594880][ T6189]  __x64_sys_setsockopt+0x13f/0x1b0
[   63.594891][ T6189]  do_syscall_64+0xfa/0x3b0
[   63.594899][ T6189]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.594907][ T6189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.594915][ T6189]  ? exc_page_fault+0x9f/0xf0
[   63.594923][ T6189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.594931][ T6189] RIP: 0033:0x7f0b5f38ebe9
[   63.594939][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.594946][ T6189] RSP: 002b:00007f0b601f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   63.594955][ T6189] RAX: ffffffffffffffda RBX: 00007f0b5f5c6090 RCX: 00007f0b5f38ebe9
[   63.594960][ T6189] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   63.594964][ T6189] RBP: 00007f0b5f411e19 R08: 0000000000000004 R09: 0000000000000000
[   63.594969][ T6189] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.594973][ T6189] R13: 00007f0b5f5c6128 R14: 00007f0b5f5c6090 R15: 00007ffd05423ec8
[   63.594986][ T6189]  </TASK>
[   63.594990][ T6189] Mem-Info:
[   63.601848][ T6180] bridge_slave_1: left allmulticast mode
[   63.608091][ T6189] active_anon:5748 inactive_anon:0 isolated_anon:0
[   63.608091][ T6189]  active_file:1101 inactive_file:38223 isolated_file:0
[   63.608091][ T6189]  unevictable:1768 dirty:1415 writeback:0
[   63.608091][ T6189]  slab_reclaimable:9537 slab_unreclaimable:51901
[   63.608091][ T6189]  mapped:18092 shmem:2433 pagetables:944
[   63.608091][ T6189]  sec_pagetables:0 bounce:0
[   63.608091][ T6189]  kernel_misc_reclaimable:0
[   63.608091][ T6189]  free:298617 free_pcp:22967 free_cma:0
[   63.611956][ T6180] bridge_slave_1: left promiscuous mode
[   63.612777][ T6189] Node 0 active_anon:13820kB inactive_anon:0kB active_file:3504kB inactive_file:115420kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45920kB dirty:5600kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5640kB pagetables:1952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   63.617847][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.622623][ T6189] Node 1 active_anon:9172kB inactive_anon:0kB active_file:900kB inactive_file:37472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26448kB dirty:60kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5864kB pagetables:1824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   63.750967][ T6189] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   63.761929][ T6189] lowmem_reserve[]: 0 811 811 811 811
[   63.764134][ T6189] Node 0 DMA32 free:325532kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13820kB inactive_anon:0kB active_file:3504kB inactive_file:115420kB unevictable:3536kB writepending:5600kB present:1556484kB managed:830868kB mlocked:0kB bounce:0kB free_pcp:25320kB local_pcp:5292kB free_cma:0kB
[   63.764503][ T6180] bond0: (slave bond_slave_0): Releasing backup interface
[   63.776517][ T6189] lowmem_reserve[]: 0 0 0 0 0
[   63.776554][ T6189] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   63.776589][ T6189] lowmem_reserve[]: 0 0 854 854 854
[   63.776614][ T6189] Node 1 Normal free:394608kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9308kB inactive_anon:0kB active_file:900kB inactive_file:37472kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:66260kB local_pcp:19068kB free_cma:0kB
[   63.776647][ T6189] lowmem_reserve[]: 0 0 0 0 0
[   63.776670][ T6189] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   63.776763][ T6189] Node 0 DMA32: 3*4kB (UME) 0*8kB 17*16kB (ME) 23*32kB (ME) 21*64kB (M) 11*128kB (UM) 3*256kB (UM) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 77*4096kB (M) 
[   63.818629][ T6180] bond0: (slave bond_slave_1): Releasing backup interface
[   63.826365][ T6189] = 325564kB
[   63.828651][ T6189] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   63.834915][ T6189] Node 1 Normal: 1432*4kB (UME) 524*8kB (UM) 352*16kB (UME) 56*32kB (UM) 18*64kB (UM) 8*128kB (UME) 7*256kB (M) 9*512kB (ME) 6*1024kB (UME) 5*2048kB (UM) 86*4096kB (M) = 394560kB
[   63.841908][ T6189] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   63.844315][ T6180] team0: Port device team_slave_0 removed
[   63.844819][ T6189] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   63.844830][ T6189] 41762 total pagecache pages
[   63.844835][ T6189] 0 pages in swap cache
[   63.844839][ T6189] Free swap  = 124996kB
[   63.844843][ T6189] Total swap = 124996kB
[   63.844847][ T6189] 786301 pages RAM
[   63.844851][ T6189] 0 pages HighMem/MovableOnly
[   63.844855][ T6189] 241352 pages reserved
[   63.844859][ T6189] 0 pages cma reserved
[   63.870160][ T6180] team0: Port device team_slave_1 removed
[   63.872801][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.875969][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.879481][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.881804][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.996668][ T6202] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.052734][ T6202] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   64.059210][ T6202] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[   64.123725][ T6202] bond1: (slave macvlan2): Releasing backup interface
[   64.195785][ T6224] __nla_validate_parse: 27 callbacks suppressed
[   64.195801][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'.
[   64.238751][ T6219] netlink: 56 bytes leftover after parsing attributes in process `syz.1.75'.
[   64.271495][ T6224] bond2: entered promiscuous mode
[   64.273908][ T6224] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.342227][ T6224] bond2 (unregistering): Released all slaves
[   64.369185][ T6219] bridge3: entered allmulticast mode
[   64.385609][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   64.405872][ T5847] Bluetooth: hci1: command tx timeout
[   64.490036][ T5847] Bluetooth: hci2: command tx timeout
[   64.562468][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[   64.595802][ T6246] openvswitch: netlink: IP tunnel dst address not specified
[   64.633873][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[   64.658268][ T6250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.744322][ T6257] netlink: 'syz.1.83': attribute type 49 has an invalid length.
[   64.756738][ T6250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.840598][ T6263] netlink: 'syz.1.85': attribute type 30 has an invalid length.
[   64.854648][ T6250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.860324][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   64.889741][ T6261] IPVS: Unknown mcast interface: vcan0
[   64.953971][ T6250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.090772][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.114274][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.138160][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.142320][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   65.155765][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.183118][ T6281] bond2: entered promiscuous mode
[   65.188099][ T6281] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.250999][ T6285] !: renamed from dummy0 (while UP)
[   65.308565][ T6291] vlan2: entered promiscuous mode
[   65.310456][ T6291] vlan2: entered allmulticast mode
[   65.362305][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'.
[   65.490506][ T6306] netlink: 'syz.2.94': attribute type 1 has an invalid length.
[   65.492971][ T6306] netlink: 228 bytes leftover after parsing attributes in process `syz.2.94'.
[   65.719117][ T6313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.723173][ T6313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   65.889508][ T6336] netlink: 'syz.2.97': attribute type 4 has an invalid length.
[   65.901909][ T6336] netlink: 'syz.2.97': attribute type 4 has an invalid length.
[   66.008683][ T6313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.012470][ T6313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   66.088469][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'.
[   66.098193][ T6313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.118575][ T6313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   66.353721][ T6313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.363305][ T6313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   66.461192][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   66.464364][ T6390] netlink: 'syz.2.99': attribute type 10 has an invalid length.
[   66.465344][ T5872] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   66.481675][ T6390] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.493458][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   66.496414][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   66.512312][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   66.521191][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   66.544804][ T6390] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   66.565361][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   66.568808][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   66.681335][ T6412] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   66.714875][ T6413] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.724803][ T6413] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   66.758265][ T6412] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.766899][ T6412] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   66.856553][ T6423] openvswitch: netlink: Message has 4 unknown bytes.
[   66.879198][ T6423] veth1_macvtap: left promiscuous mode
[   67.000960][ T6428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.007972][ T6428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.013564][ T6428] bond0 (unregistering): Released all slaves
[   69.079480][ T6442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.095727][ T6442] syzkaller0: entered promiscuous mode
[   69.097636][ T6442] syzkaller0: entered allmulticast mode
[   69.105751][ T6442] tipc: Resetting bearer <eth:syzkaller0>
[   69.110972][ T6441] tipc: Resetting bearer <eth:syzkaller0>
[   69.131006][ T6441] tipc: Disabling bearer <eth:syzkaller0>
[   69.224755][ T6444] __nla_validate_parse: 8 callbacks suppressed
[   69.224768][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   69.241318][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   69.251285][ T6444] bridge2: entered promiscuous mode
[   69.253580][ T6444] macsec1: entered promiscuous mode
[   69.259634][ T6444] macsec1: entered allmulticast mode
[   69.261485][ T6444] bridge2: entered allmulticast mode
[   69.264279][ T6444] bridge2: port 1(macsec1) entered blocking state
[   69.267592][ T6444] bridge2: port 1(macsec1) entered disabled state
[   69.272014][ T6444] bridge2: left allmulticast mode
[   69.273828][ T6444] bridge2: left promiscuous mode
[   69.653111][ T6454] syzkaller0: entered promiscuous mode
[   69.656230][ T6454] syzkaller0: entered allmulticast mode
[   69.919956][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.929558][ T6466] batadv_slave_0: entered promiscuous mode
[   69.939040][ T6466] netlink: 428 bytes leftover after parsing attributes in process `syz.2.119'.
[   69.942437][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'.
[   69.983231][ T6470] tipc: Started in network mode
[   69.988692][ T6470] tipc: Node identity 827b1a25a5b8, cluster identity 4711
[   69.991087][ T6470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.996595][ T6470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.120'.
[   70.003196][ T6470] tipc: Resetting bearer <eth:syzkaller0>
[   70.020375][ T6469] tipc: Disabling bearer <eth:syzkaller0>
[   70.214441][ T6479] netlink: 52 bytes leftover after parsing attributes in process `syz.1.123'.
[   70.214480][ T6481] netlink: 52 bytes leftover after parsing attributes in process `syz.1.123'.
[   70.247932][ T6481] netlink: 'syz.1.123': attribute type 25 has an invalid length.
[   70.265463][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'.
[   70.534818][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   70.590274][ T6500] 8021q: VLANs not supported on lo
[   70.599340][ T6500] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   70.733842][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   70.744361][ T6508] veth3: entered allmulticast mode
[   70.753322][ T6506] sit1: entered promiscuous mode
[   70.924184][ T6516] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[   70.951313][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.980827][ T6516] veth3: entered promiscuous mode
[   70.986182][ T6516] bond0: (slave veth3): Enslaving as an active interface with a down link
[   71.033360][ T6526] tap0: tun_chr_ioctl cmd 1074025677
[   71.037436][ T6526] tap0: linktype set to 774
[   71.178625][ T6532] IPv6: sit2: Disabled Multicast RS
[   71.181683][ T6532] sit2: entered allmulticast mode
[   71.252278][ T6529] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.310453][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.317833][ T1360] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[   71.362198][ T6543] netlink: 'syz.0.140': attribute type 10 has an invalid length.
[   71.396913][ T6543] 8021q: adding VLAN 0 to HW filter on device team0
[   71.439174][ T6543] netlink: 'syz.0.140': attribute type 10 has an invalid length.
[   71.464288][ T6543] bond1: option mode: unable to set because the bond device is up
[   71.494564][ T6543] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   72.761739][ T6589] dvmrp8: entered allmulticast mode
[   72.771850][ T6586] dvmrp8: left allmulticast mode
[   72.837355][ T6592] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[   72.844105][ T6593] bridge5: entered promiscuous mode
[   72.857306][ T6593] bridge5: entered allmulticast mode
[   72.931547][ T6592] bond3: entered promiscuous mode
[   72.933412][ T6592] bond3: entered allmulticast mode
[   73.177611][ T6606] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   73.226486][ T6616] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   73.399244][ T6618] batman_adv: batadv0: Adding interface: dummy0
[   73.406879][ T6618] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.428981][ T6618] batman_adv: batadv0: Interface activated: dummy0
[   73.434312][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.443680][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.450948][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.453840][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.474468][ T6619] batadv0: mtu less than device minimum
[   73.486670][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.492361][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.498316][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.503788][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.509211][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.514549][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.519994][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.525325][ T6619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.581499][ T6622] batman_adv: batadv0: Adding interface: ip6gretap1
[   73.584178][ T6622] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.604431][ T6622] batman_adv: batadv0: Interface activated: ip6gretap1
[   73.697021][ T6639] lo: entered allmulticast mode
[   73.709018][ T6639] lo: left allmulticast mode
[   73.712037][ T6640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.716191][ T6640] syzkaller0: entered promiscuous mode
[   73.718414][ T6640] syzkaller0: entered allmulticast mode
[   73.793507][ T6649] tipc: Resetting bearer <eth:syzkaller0>
[   73.804861][ T6637] tipc: Resetting bearer <eth:syzkaller0>
[   73.830700][ T6637] tipc: Disabling bearer <eth:syzkaller0>
[   73.842492][   T33] audit: type=1107 audit(1757217407.251:2): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   73.850657][   T33] audit: type=1107 audit(1757217407.251:3): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   74.032152][ T6668] tun1: tun_chr_ioctl cmd 2148045848
[   74.034657][ T6668] tun1: tun_chr_ioctl cmd 21731
[   74.262800][ T6676] __nla_validate_parse: 9 callbacks suppressed
[   74.262813][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'.
[   74.393770][ T6678] bond0 (unregistering): (slave veth3): Releasing active interface
[   74.399606][ T6678] bond0 (unregistering): Released all slaves
[   74.508017][ T6688] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   74.512212][ T6688] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[   74.554218][ T6694] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[   74.672982][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.830495][ T6700] netlink: 'syz.2.177': attribute type 5 has an invalid length.
[   74.898031][ T6704] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.919766][ T6707] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424)
[   74.922930][ T6707] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   74.960794][ T6704] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.023488][ T6704] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.051089][ T6716] netlink: 3 bytes leftover after parsing attributes in process `syz.1.183'.
[   75.059835][ T6716] batadv1: entered promiscuous mode
[   75.061633][ T6716] batadv1: entered allmulticast mode
[   75.072805][ T6704] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.158471][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.168945][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.188464][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.196332][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.219991][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'.
[   75.313641][ T6731] netlink: 'syz.2.187': attribute type 10 has an invalid length.
[   75.331579][ T6731] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.340840][ T6731] team0: Port device bond0 added
[   75.347175][ T6732] bridge0: port 3(erspan0) entered blocking state
[   75.351071][ T6732] bridge0: port 3(erspan0) entered disabled state
[   75.354081][ T6732] erspan0: entered allmulticast mode
[   75.358602][ T6732] erspan0: entered promiscuous mode
[   75.362511][ T6732] bridge0: port 3(erspan0) entered blocking state
[   75.365779][ T6732] bridge0: port 3(erspan0) entered forwarding state
[   75.392064][ T6732] erspan0: left allmulticast mode
[   75.393989][ T6732] erspan0: left promiscuous mode
[   75.397997][ T6732] bridge0: port 3(erspan0) entered disabled state
[   75.590370][ T6741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.191'.
[   75.664854][ T6745] tipc: Started in network mode
[   75.667120][ T6745] tipc: Node identity bac0f1e93f49, cluster identity 4711
[   75.670158][ T6745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.674006][ T6745] syzkaller0: entered promiscuous mode
[   75.678987][ T6745] syzkaller0: entered allmulticast mode
[   75.684920][ T6745] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   75.707679][ T6742] tipc: Resetting bearer <eth:syzkaller0>
[   75.733760][ T6749] netlink: 'syz.2.194': attribute type 2 has an invalid length.
[   75.754647][ T6749] k*: entered promiscuous mode
[   75.778841][ T6739] tipc: Resetting bearer <eth:syzkaller0>
[   75.791321][ T6739] tipc: Disabling bearer <eth:syzkaller0>
[   75.914549][ T6758] netlink: 'syz.1.197': attribute type 1 has an invalid length.
[   75.941993][ T6758] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   75.954214][ T6758] veth5: entered promiscuous mode
[   75.957932][ T6758] bond5: (slave veth5): Enslaving as a backup interface with a down link
[   76.884598][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.199'.
[   76.960261][ T6775] pimreg: entered allmulticast mode
[   77.028792][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'.
[   77.088724][ T6787] netlink: 'syz.0.205': attribute type 2 has an invalid length.
[   77.092682][ T6788] netlink: 'syz.1.204': attribute type 4 has an invalid length.
[   77.098991][ T6785] netlink: 'syz.1.204': attribute type 4 has an invalid length.
[   77.110549][ T6787] netlink: 'syz.0.205': attribute type 2 has an invalid length.
[   77.199905][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'.
[   77.202944][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'.
[   77.350763][ T6810] net_ratelimit: 32 callbacks suppressed
[   77.350792][ T6810] IPv4: Oversized IP packet from 127.202.26.0
[   77.390823][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'.
[   77.395596][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'.
[   77.395849][ T6821] bond0: (slave macvlan2): Opening slave failed
[   77.825696][ T6829] xfrm0: entered promiscuous mode
[   77.827559][ T6829] xfrm0: entered allmulticast mode
[   77.934027][ T6829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.991019][ T6829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.263163][ T6844] xfrm1: entered promiscuous mode
[   78.265230][ T6844] xfrm1: entered allmulticast mode
[   78.612584][ T6861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.617128][ T6861] syzkaller0: entered promiscuous mode
[   78.619349][ T6861] syzkaller0: entered allmulticast mode
[   78.650576][ T6860] tipc: Resetting bearer <eth:syzkaller0>
[   78.659854][ T6860] tipc: Disabling bearer <eth:syzkaller0>
[   79.208612][ T6902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.211315][ T6902] syzkaller0: entered promiscuous mode
[   79.213106][ T6902] syzkaller0: entered allmulticast mode
[   79.222132][ T6901] tipc: Resetting bearer <eth:syzkaller0>
[   79.255951][ T6901] tipc: Disabling bearer <eth:syzkaller0>
[   79.288748][ T6909] netlink: 'syz.1.234': attribute type 1 has an invalid length.
[   79.321904][ T6909] 8021q: adding VLAN 0 to HW filter on device bond6
[   79.339598][ T6909] 8021q: adding VLAN 0 to HW filter on device bond6
[   79.341983][ T6909] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.347822][ T6909] bond6: (slave vxcan3): Error -95 calling set_mac_address
[   79.420627][ T6920] bond6: (slave bridge6): Enslaving as an active interface with a down link
[   79.425526][ T6924] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   79.440529][ T6916] __nla_validate_parse: 13 callbacks suppressed
[   79.440540][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'.
[   79.517875][ T6924] netlink: 'syz.2.237': attribute type 10 has an invalid length.
[   79.549857][ T6929] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[   79.611218][ T6929] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.619217][ T6929] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   79.692300][ T6945] netlink: 128 bytes leftover after parsing attributes in process `syz.2.243'.
[   79.776768][ T6953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.867622][ T6953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'.
[   79.874303][ T6951] tipc: Disabling bearer <eth:syzkaller0>
[   80.153190][ T6965] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.247'.
[   80.250863][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'.
[   80.255289][ T6973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.249'.
[   80.315534][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'.
[   80.420640][ T6981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.447668][ T6981] syzkaller0: entered promiscuous mode
[   80.449478][ T6981] syzkaller0: entered allmulticast mode
[   80.460062][ T6989] netlink: 'syz.1.254': attribute type 10 has an invalid length.
[   80.462807][ T6989] batman_adv: batadv0: Interface deactivated: dummy0
[   80.467914][ T6989] batman_adv: batadv0: Removing interface: dummy0
[   80.474371][ T6989] team0: Port device dummy0 added
[   80.483178][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.253'.
[   80.496350][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   80.496405][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'.
[   80.529046][ T6991] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   80.533413][ T6991] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   80.540590][ T6981] tipc: Resetting bearer <eth:syzkaller0>
[   80.548440][ T6980] tipc: Resetting bearer <eth:syzkaller0>
[   80.572104][ T6980] tipc: Disabling bearer <eth:syzkaller0>
[   80.644778][ T6991] 8021q: adding VLAN 0 to HW filter on device bond7
[   80.679342][ T6994] vlan2: entered promiscuous mode
[   80.681094][ T6994] bond7: entered promiscuous mode
[   80.683320][ T6994] vlan2: entered allmulticast mode
[   80.686868][ T6994] bond7: entered allmulticast mode
[   80.703616][ T6991] bond7: (slave gretap2): making interface the new active one
[   80.709504][ T6991] gretap2: entered promiscuous mode
[   80.711606][ T6991] gretap2: entered allmulticast mode
[   80.714871][ T6991] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   80.766809][ T7003] team0: Port device bond0 removed
[   80.771694][ T7003] bridge_slave_0: left allmulticast mode
[   80.773630][ T7003] bridge_slave_0: left promiscuous mode
[   80.779613][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.787162][ T7003] bridge_slave_1: left allmulticast mode
[   80.789022][ T7003] bridge_slave_1: left promiscuous mode
[   80.790864][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.800879][ T7003] bond0: (slave bond_slave_0): Releasing backup interface
[   80.810728][ T7003] bond0: (slave bond_slave_1): Releasing backup interface
[   80.820854][ T7003] team0: Port device team_slave_0 removed
[   80.826295][ T7003] team0: Port device team_slave_1 removed
[   80.828687][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.831717][ T7003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.834073][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.841866][ T7003] bond0: (slave wlan1): Releasing backup interface
[   80.960018][ T7015] netlink: 'syz.0.261': attribute type 10 has an invalid length.
[   80.964088][ T7015] !: entered promiscuous mode
[   80.982043][ T7015] bridge0: port 1(0!) entered blocking state
[   80.984767][ T7015] bridge0: port 1(0!) entered disabled state
[   80.993862][ T7015] !: entered allmulticast mode
[   81.003438][ T7020] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[   81.053483][ T7024] team0: Port device dummy0 removed
[   81.060284][ T7024] bridge_slave_0: left allmulticast mode
[   81.062156][ T7024] bridge_slave_0: left promiscuous mode
[   81.064189][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.069280][ T7024] bridge_slave_1: left allmulticast mode
[   81.071215][ T7024] bridge_slave_1: left promiscuous mode
[   81.073176][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.082673][ T7024] team0: Port device team_slave_0 removed
[   81.090138][ T7024] team0: Port device team_slave_1 removed
[   81.092510][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.097386][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.100846][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.109305][ T7024] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   81.111615][ T7024] batman_adv: batadv0: Removing interface: ip6gretap1
[   81.118374][ T7024] bond5: (slave ip6gretap2): Releasing backup interface
[   81.120593][ T7024] bond5: (slave ip6gretap2): the permanent HWaddr of slave - 4e:38:d2:0d:d0:6b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   81.129887][ T7024] bond5: (slave veth5): Releasing backup interface
[   81.133874][ T7024] bond6: (slave bridge6): Releasing active interface
[   81.141030][ T7024] bond7: (slave gretap2): Releasing active interface
[   81.143197][ T7024] gretap2: left promiscuous mode
[   81.144866][ T7024] gretap2: left allmulticast mode
[   81.523662][ T7052] netlink: 'syz.2.270': attribute type 10 has an invalid length.
[   81.531164][ T7054] !: left allmulticast mode
[   81.533296][ T7054] bridge0: port 1(0!) entered disabled state
[   81.539829][ T7052] bond0: (slave wlan1): Opening slave failed
[   81.541629][ T7054] netlink: 'syz.0.271': attribute type 10 has an invalid length.
[   81.557812][ T7052] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   81.597334][ T7056] netlink: 'syz.2.273': attribute type 10 has an invalid length.
[   81.971592][ T7096] trusted_key: syz.1.285 sent an empty control message without MSG_MORE.
[   82.064158][ T7098] pim6reg1: entered promiscuous mode
[   82.066063][ T7098] pim6reg1: entered allmulticast mode
[   82.148405][ T7101] vlan3: entered allmulticast mode
[   82.150106][ T7101] erspan0: entered allmulticast mode
[   82.530579][ T7125] pim6reg1: entered promiscuous mode
[   82.532405][ T7125] pim6reg1: entered allmulticast mode
[   83.248923][ T5873] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   83.255008][ T5873] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   83.258577][ T5873] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   83.261347][ T5873] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   83.263907][ T5873] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   83.267912][ T5873] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   83.270522][ T5873] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   83.273135][ T5873] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   83.307817][ T7153] 8021q: adding VLAN 0 to HW filter on device team0
[   83.313092][ T7153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.382062][ T7157] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   83.693581][ T7178] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   83.709246][ T7186] netlink: 'syz.2.307': attribute type 4 has an invalid length.
[   83.710677][ T7178] 8021q: adding VLAN 0 to HW filter on device bond8
[   83.724402][ T7178] netlink: 'syz.1.306': attribute type 8 has an invalid length.
[   83.792727][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.840236][ T7197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.843566][ T7197] syzkaller0: entered promiscuous mode
[   83.846498][ T7197] syzkaller0: entered allmulticast mode
[   83.852619][ T7197] tipc: Resetting bearer <eth:syzkaller0>
[   83.857929][ T7196] tipc: Resetting bearer <eth:syzkaller0>
[   83.858240][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.871674][ T7196] tipc: Disabling bearer <eth:syzkaller0>
[   84.513821][ T7202] __nla_validate_parse: 26 callbacks suppressed
[   84.513836][ T7202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.312'.
[   84.554040][ T7208] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.314'.
[   84.561092][ T7208] netlink: 248 bytes leftover after parsing attributes in process `syz.2.314'.
[   84.610036][ T7212] netlink: 216 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.613259][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.616524][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.622102][ T7210] bridge: RTM_NEWNEIGH with invalid ether address
[   84.648575][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.652042][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.822113][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'.
[   84.986108][ T7231] netlink: 68 bytes leftover after parsing attributes in process `syz.0.321'.
[   85.057618][ T7237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.224165][ T7237] tipc: Disabling bearer <eth:syzkaller0>
[   85.310232][ T7241] batadv1: entered promiscuous mode
[   85.523422][ T7245] netlink: 'syz.0.324': attribute type 4 has an invalid length.
[   85.643932][ T7255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.649333][ T7255] syzkaller0: entered promiscuous mode
[   85.655218][ T7255] syzkaller0: entered allmulticast mode
[   85.661053][ T7254] tipc: Resetting bearer <eth:syzkaller0>
[   85.667229][ T7253] tipc: Resetting bearer <eth:syzkaller0>
[   85.676471][ T7253] tipc: Disabling bearer <eth:syzkaller0>
[   85.821870][ T7262] delete_channel: no stack
[   85.918212][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.920649][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.992031][ T7283] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[   86.034146][ T7283] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.066587][ T7283] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.069833][ T7283] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.074350][ T7283] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   86.349363][ T7290] veth3: entered promiscuous mode
[   86.729836][   T10] cfg80211: failed to load regulatory.db
[   86.759165][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.765189][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.767868][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.770417][ T5872] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.152793][ T7320] pim6reg1: entered promiscuous mode
[   87.154813][ T7320] pim6reg1: entered allmulticast mode
[   87.292256][ T7337] netlink: 'syz.0.351': attribute type 10 has an invalid length.
[   87.313951][ T7337] 8021q: adding VLAN 0 to HW filter on device team0
[   87.413347][ T7346] netlink: 'syz.0.353': attribute type 4 has an invalid length.
[   87.416683][ T7347] netlink: 'syz.0.353': attribute type 4 has an invalid length.
[   87.584175][ T7362] 8021q: adding VLAN 0 to HW filter on device bond10
[   87.587564][ T7363] bond10: option mode: unable to set because the bond device is up
[   87.601063][ T7362] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.605791][ T7362] bond10: (slave macvlan2): Enslaving as a backup interface with a down link
[   87.616854][ T7363] bond10: (slave macvlan3): Error -98 calling set_mac_address
[   87.649439][ T7362] bond10: (slave macvlan2): Releasing backup interface
[   87.799228][ T7387] vlan3: entered promiscuous mode
[   87.804069][ T7387] team0: entered promiscuous mode
[   88.172565][ T7411] xfrm0: entered promiscuous mode
[   88.174598][ T7411] xfrm0: entered allmulticast mode
[   88.218854][ T7408] rdma_op ffff88802ad1b1f0 conn xmit_rdma 0000000000000000
[   88.223825][ T7408] netlink: 'syz.1.365': attribute type 10 has an invalid length.
[   88.491662][ T7436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.494611][ T7436] syzkaller0: entered promiscuous mode
[   88.497867][ T7436] syzkaller0: entered allmulticast mode
[   88.511854][ T7436] tipc: Resetting bearer <eth:syzkaller0>
[   88.514926][ T7435] tipc: Resetting bearer <eth:syzkaller0>
[   88.523897][ T7435] tipc: Disabling bearer <eth:syzkaller0>
[   88.786108][ T7444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.032281][ T7466] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   89.122302][ T7471] netlink: 'syz.1.383': attribute type 4 has an invalid length.
[   89.128978][ T7471] netlink: 'syz.1.383': attribute type 4 has an invalid length.
[   89.154749][ T7473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.159472][ T7474] syzkaller0: entered promiscuous mode
[   89.161940][ T7474] syzkaller0: entered allmulticast mode
[   89.181366][ T7474] tipc: Resetting bearer <eth:syzkaller0>
[   89.193891][ T7474] tipc: Disabling bearer <eth:syzkaller0>
[   89.248240][ T7478] netlink: 'syz.2.385': attribute type 10 has an invalid length.
[   89.611840][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.619185][ T7487] bond0: (slave rose0): Enslaving as an active interface with an up link
[   89.670493][ T7492] __nla_validate_parse: 15 callbacks suppressed
[   89.670504][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   89.716015][ T7492] bond3: (slave gretap1): making interface the new active one
[   89.718806][ T7492] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   89.724562][ T7492] netlink: 68 bytes leftover after parsing attributes in process `syz.2.390'.
[   89.781242][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'.
[   89.821327][ T7497] bridge2: the hash_elasticity option has been deprecated and is always 16
[   89.833586][ T7497] bridge2: entered allmulticast mode
[   89.953322][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.969653][ T7507] team0: Port device bond0 added
[   89.994700][ T7513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'.
[   90.011140][ T7513] dummy0: entered promiscuous mode
[   90.013335][ T7513] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   90.068124][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'.
[   90.166909][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'.
[   90.190171][ T7526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.192876][ T7526] syzkaller0: entered promiscuous mode
[   90.193904][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[   90.194585][ T7526] syzkaller0: entered allmulticast mode
[   90.201598][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'.
[   90.207068][ T7528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.400'.
[   90.210611][ T7528] netlink: 540 bytes leftover after parsing attributes in process `syz.2.400'.
[   90.226254][ T7526] gre0: mtu less than device minimum
[   90.229284][ T7525] tipc: Resetting bearer <eth:syzkaller0>
[   90.242675][ T7525] tipc: Disabling bearer <eth:syzkaller0>
[   90.507412][ T7556] syzkaller0: entered promiscuous mode
[   90.509205][ T7556] syzkaller0: entered allmulticast mode
[   90.661764][ T7564] validate_nla: 5 callbacks suppressed
[   90.661788][ T7564] netlink: 'syz.2.409': attribute type 1 has an invalid length.
[   90.701910][ T7564] bond4: entered promiscuous mode
[   90.703775][ T7564] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.725673][ T7564] batadv1: entered promiscuous mode
[   90.727878][ T7564] batadv1: entered allmulticast mode
[   90.732226][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv1
[   90.736920][ T7564] bond4: (slave batadv1): making interface the new active one
[   90.740784][ T7564] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   90.770977][ T7569] xfrm0: entered allmulticast mode
[   90.773828][ T7573] batadv_slave_1: entered promiscuous mode
[   90.902660][ T7572] batadv_slave_1: left promiscuous mode
[   90.987922][ T7587] syzkaller0: entered promiscuous mode
[   90.992465][ T7587] syzkaller0: entered allmulticast mode
[   91.012994][ T7587] batadv1: entered promiscuous mode
[   91.079244][ T7602] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[   91.108509][ T7602] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.134548][ T7598] bond5: (slave geneve2): making interface the new active one
[   91.141002][ T7598] bond5: (slave geneve2): Enslaving as an active interface with an up link
[   91.169837][ T7598] bond5: entered promiscuous mode
[   91.172098][ T7598] geneve2: entered promiscuous mode
[   91.236521][ T7613] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   91.314231][ T7621] netlink: 'syz.2.422': attribute type 2 has an invalid length.
[   91.319761][ T7619] netlink: 'syz.2.422': attribute type 2 has an invalid length.
[   91.421993][ T7628] IPv6: sit1: Disabled Multicast RS
[   91.425133][ T7628] sit1: entered allmulticast mode
[   91.598656][ T7647] syz_tun: entered allmulticast mode
[   91.604513][ T7647] dvmrp8: entered allmulticast mode
[   91.637352][ T7649] team0: Mode changed to "loadbalance"
[   91.690063][ T7646] syz_tun: left allmulticast mode
[   91.693937][ T7646] dvmrp8: left allmulticast mode
[   91.713143][ T7656] ip6erspan0: entered allmulticast mode
[   91.982349][ T7673] netlink: 'syz.2.437': attribute type 1 has an invalid length.
[   92.021884][ T7673] 8021q: adding VLAN 0 to HW filter on device bond6
[   92.183200][ T7691] syzkaller0: entered promiscuous mode
[   92.185231][ T7691] syzkaller0: entered allmulticast mode
[   92.271245][ T7695] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[   92.292233][ T7697] netlink: 'syz.0.440': attribute type 9 has an invalid length.
[   92.300476][ T7695] vlan4: entered allmulticast mode
[   92.302475][ T7695] bond7: entered allmulticast mode
[   92.573369][ T7704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.576259][ T7704] syzkaller0: entered promiscuous mode
[   92.578203][ T7704] syzkaller0: entered allmulticast mode
[   92.673525][ T7703] tipc: Resetting bearer <eth:syzkaller0>
[   92.688988][ T7703] tipc: Disabling bearer <eth:syzkaller0>
[   92.792266][ T7707] syz_tun: entered allmulticast mode
[   92.882427][ T7707] batadv_slave_0: left promiscuous mode
[   92.930614][ T7707] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   92.934978][ T7707] sit1: left promiscuous mode
[   92.940225][ T7707] veth3: left promiscuous mode
[   92.941962][ T7707] xfrm0: left promiscuous mode
[   92.943585][ T7707] xfrm0: left allmulticast mode
[   92.949692][ T7707] bridge2: left allmulticast mode
[   92.953656][ T7707] bond4: left promiscuous mode
[   92.957882][ T7707] batadv1: left promiscuous mode
[   92.959750][ T7707] batadv1: left allmulticast mode
[   92.961907][ T7707] bond5: left promiscuous mode
[   92.963603][ T7707] geneve2: left promiscuous mode
[   92.974797][ T5873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.979628][ T5873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.984868][ T5873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.988125][ T5873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.223275][ T7727] _Z`Ԁ@: entered promiscuous mode
[   93.339245][ T7736] syzkaller0: entered promiscuous mode
[   93.341169][ T7736] syzkaller0: entered allmulticast mode
[   93.491597][ T7742] netlink: 'syz.1.456': attribute type 9 has an invalid length.
[   93.504315][ T7742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.509277][ T7742] syzkaller0: entered promiscuous mode
[   93.511768][ T7742] syzkaller0: entered allmulticast mode
[   93.522805][ T7742] tipc: Resetting bearer <eth:syzkaller0>
[   93.542612][ T7745] tipc: Resetting bearer <eth:syzkaller0>
[   93.552589][ T7745] tipc: Disabling bearer <eth:syzkaller0>
[   94.321659][ T7767] macsec0: entered promiscuous mode
[   94.323653][ T7767] ip6gretap0: entered promiscuous mode
[   94.327331][ T7767] macsec0: entered allmulticast mode
[   94.329540][ T7767] ip6gretap0: entered allmulticast mode
[   94.370050][ T7769] ip6tnl2: entered promiscuous mode
[   94.418761][ T7779] netlink: 'syz.0.468': attribute type 22 has an invalid length.
[   94.428788][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.431658][ T7779] netlink: 'syz.0.468': attribute type 22 has an invalid length.
[   94.434114][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.440658][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.446028][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.490172][ T7782] openvswitch: netlink: Key type 29 is not supported
[   94.493802][ T7784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   94.604204][ T7791] 8021q: adding VLAN 0 to HW filter on device team0
[   94.708033][ T7801] __nla_validate_parse: 29 callbacks suppressed
[   94.708083][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[   94.714470][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'.
[   94.810035][ T7805] 8021q: adding VLAN 0 to HW filter on device team0
[   94.813166][ T7805] dummy0: left promiscuous mode
[   94.815912][ T7805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.931227][ T7808] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   95.004418][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'.
[   95.030424][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'.
[   95.278444][ T7820] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.481'.
[   95.281416][ T7820] netlink: zone id is out of range
[   95.283104][ T7820] netlink: zone id is out of range
[   95.284715][ T7820] netlink: zone id is out of range
[   95.286892][ T7820] netlink: zone id is out of range
[   95.288534][ T7820] netlink: zone id is out of range
[   95.290157][ T7820] netlink: zone id is out of range
[   95.294471][ T7820] netlink: zone id is out of range
[   95.393645][ T7831] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   95.504731][ T7843] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[   95.522190][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.0.486'.
[   95.533937][ T7847] netlink: 720 bytes leftover after parsing attributes in process `syz.1.487'.
[   95.536834][ T7843] netlink: 35 bytes leftover after parsing attributes in process `syz.0.486'.
[   95.540389][ T7847] bond10: entered promiscuous mode
[   95.540648][ T7843] netlink: 35 bytes leftover after parsing attributes in process `syz.0.486'.
[   95.542318][ T7847] bond10: entered allmulticast mode
[   95.543535][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'.
[   95.683961][ T7866] validate_nla: 6 callbacks suppressed
[   95.683975][ T7866] netlink: 'syz.0.492': attribute type 10 has an invalid length.
[   95.753916][ T7860] team0: Port device bond0 removed
[   95.762551][ T7860] bond3: (slave gretap1): Releasing active interface
[   95.768874][ T7860] bond4: (slave batadv1): Releasing active interface
[   95.772404][ T7860] bond5: (slave geneve2): Releasing active interface
[   96.019131][ T7894] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   96.288693][ T7910] batadv_slave_0: left promiscuous mode
[   96.290897][ T7910] xfrm0: left promiscuous mode
[   96.292894][ T7910] xfrm0: left allmulticast mode
[   96.295006][ T7910] ..0: left allmulticast mode
[   96.298029][ T7910] hsr_slave_0: left allmulticast mode
[   96.300868][ T7910] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   96.303794][ T7910] geneve2: left promiscuous mode
[   96.305674][ T7910] geneve2: left allmulticast mode
[   96.307821][ T7910] bridge3: left allmulticast mode
[   96.310338][ T7910] veth3: left promiscuous mode
[   96.312224][ T7910] bond3: left promiscuous mode
[   96.314168][ T7910] bond3: left allmulticast mode
[   96.319325][ T7910] veth5: left promiscuous mode
[   96.321617][ T7910] vlan2: left promiscuous mode
[   96.323401][ T7910] bond7: left promiscuous mode
[   96.325808][ T7910] vlan2: left allmulticast mode
[   96.328036][ T7910] bond7: left allmulticast mode
[   96.330033][ T7910] vlan3: left allmulticast mode
[   96.331728][ T7910] erspan0: left allmulticast mode
[   96.340531][ T7910] bond10: left promiscuous mode
[   96.342243][ T7910] bond10: left allmulticast mode
[   96.345526][ T7910] sit1: left allmulticast mode
[   96.349051][ T7910] ip6erspan0: left allmulticast mode
[   96.352478][ T7910] ip6tnl2: left promiscuous mode
[   96.355259][ T5873] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.361256][ T5873] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.364207][ T5873] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.369054][ T5873] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.919848][ T7917] dvmrp8: entered allmulticast mode
[   97.034622][ T7916] dvmrp8: left allmulticast mode
[   97.167713][ T7922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.478545][ T7943] syzkaller0: entered promiscuous mode
[   97.480694][ T7943] syzkaller0: entered allmulticast mode
[   97.523947][ T7947] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[   97.823029][ T7972] syz_tun: left allmulticast mode
[   97.929710][ T7989] netlink: 'syz.2.523': attribute type 12 has an invalid length.
[   97.943287][ T7983] delete_channel: no stack
[   98.000341][ T7995] lo speed is unknown, defaulting to 1000
[   98.002815][ T7995] lo speed is unknown, defaulting to 1000
[   98.008331][ T7995] lo speed is unknown, defaulting to 1000
[   98.020127][ T7995] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   98.035610][ T7995] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.083055][ T8000] netlink: 'syz.2.526': attribute type 39 has an invalid length.
[   98.085749][ T7995] lo speed is unknown, defaulting to 1000
[   98.103695][ T7995] lo speed is unknown, defaulting to 1000
[   98.107773][ T7995] lo speed is unknown, defaulting to 1000
[   98.152403][ T8005] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   98.165888][ T5909] tipc: Node number set to 1350796719
[   98.200357][ T8010] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[   98.421905][ T8031] netlink: 'syz.0.535': attribute type 1 has an invalid length.
[   98.459752][ T8031] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.521083][ T8037] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[   98.567821][ T8037] 8021q: adding VLAN 0 to HW filter on device bond8
[   98.596682][ T8037] bond8: (slave ip6gretap4): making interface the new active one
[   98.600411][ T8037] bond8: (slave ip6gretap4): Enslaving as an active interface with an up link
[   98.627143][ T8037] veth7: entered promiscuous mode
[   98.630419][ T8037] bond8: (slave veth7): Enslaving as an active interface with a down link
[   98.635015][ T8037] erspan0: entered allmulticast mode
[   98.642611][ T8037] bond8: (slave erspan0): Enslaving as an active interface with an up link
[   98.924430][ T5872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.929929][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.932988][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.935936][ T5872] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.984990][ T8068] syzkaller1: entered promiscuous mode
[   98.992528][ T8068] syzkaller1: entered allmulticast mode
[   99.053975][ T8072] vlan3: entered promiscuous mode
[   99.057134][ T8072] vlan3: entered allmulticast mode
[   99.059070][ T8072] hsr_slave_1: entered allmulticast mode
[   99.100472][ T8077] macvlan3: entered promiscuous mode
[   99.102385][ T8077] bond0: entered promiscuous mode
[   99.107910][ T8077] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   99.547993][ T8114] Bluetooth: MGMT ver 1.23
[   99.554593][ T8114] macvlan6: entered allmulticast mode
[   99.557488][ T8114] bond0: entered allmulticast mode
[   99.559523][ T8114] 8021q: adding VLAN 0 to HW filter on device macvlan6
[   99.563279][ T8114] bond0: left allmulticast mode
[   99.677251][ T8124] netlink: 'syz.0.561': attribute type 1 has an invalid length.
[   99.710516][ T8124] 8021q: adding VLAN 0 to HW filter on device bond8
[   99.719147][ T8127] __nla_validate_parse: 23 callbacks suppressed
[   99.719162][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[   99.725263][ T8127] netlink: 'syz.1.562': attribute type 30 has an invalid length.
[   99.735546][ T5873] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.741612][ T5873] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.745368][ T5873] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.748543][ T5873] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.070641][ T8161] net_ratelimit: 11 callbacks suppressed
[  100.070652][ T8161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.238683][ T8175] netlink: 'syz.2.570': attribute type 1 has an invalid length.
[  100.302247][ T8179] netlink: 6 bytes leftover after parsing attributes in process `syz.1.571'.
[  100.308755][ T8179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.438364][ T8188] macvlan1: entered promiscuous mode
[  100.441070][ T8188] veth0: entered promiscuous mode
[  100.443466][ T8188] debugfs: 'hsr0' already exists in 'hsr'
[  100.448762][ T8188] Cannot create hsr debugfs directory
[  100.547138][ T8196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'.
[  100.658200][ T8204] syzkaller1: entered promiscuous mode
[  100.660423][ T8204] syzkaller1: entered allmulticast mode
[  100.664151][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'.
[  100.688439][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  100.692575][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  100.696914][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  100.701624][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  100.705440][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  100.709093][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'.
[  100.827912][ T8212] lo speed is unknown, defaulting to 1000
[  100.883005][ T8217] dvmrp0: entered allmulticast mode
[  101.022317][ T8226] netlink: 'syz.1.586': attribute type 6 has an invalid length.
[  101.056731][ T8230] !: renamed from dummy0
[  101.060420][ T8226] netlink: 'syz.1.586': attribute type 12 has an invalid length.
[  101.231842][ T8238] lo speed is unknown, defaulting to 1000
[  102.160795][ T8311] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[  102.177909][ T8315] macvtap0: entered promiscuous mode
[  102.179692][ T8315] macvtap0: entered allmulticast mode
[  102.201999][ T8311] gretap3: entered promiscuous mode
[  102.314527][ T8327] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[  102.530454][ T8339] 8021q: adding VLAN 0 to HW filter on device bond9
[  102.640149][ T8349] 8021q: VLANs not supported on syzkaller1
[  102.788383][ T8359] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  102.880250][ T8361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.968618][ T8361] tipc: Disabling bearer <eth:syzkaller0>
[  103.050042][ T8368] ipvlan2: entered promiscuous mode
[  103.053037][ T8368] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  103.061104][ T8368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.064629][ T8368] syzkaller0: entered promiscuous mode
[  103.067951][ T8368] syzkaller0: entered allmulticast mode
[  103.077502][ T8368] tipc: Resetting bearer <eth:syzkaller0>
[  103.082250][ T8367] tipc: Resetting bearer <eth:syzkaller0>
[  103.097467][ T8367] tipc: Disabling bearer <eth:syzkaller0>
[  103.202298][ T8373] netlink: 'syz.2.608': attribute type 10 has an invalid length.
[  103.206809][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.209274][ T8373] team0: Device bond0 failed to register rx_handler
[  103.271532][ T8377] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  103.274213][ T8377] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  104.473644][ T8387] netlink: 'syz.1.613': attribute type 10 has an invalid length.
[  104.578495][ T8398] policy can only be matched on NF_INET_PRE_ROUTING
[  104.578520][ T8398] unable to load match
[  104.599247][ T8398] lo speed is unknown, defaulting to 1000
[  104.851441][ T8419] __nla_validate_parse: 64 callbacks suppressed
[  104.851460][ T8419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.621'.
[  104.917783][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.007792][ T8427] netlink: 'syz.2.624': attribute type 2 has an invalid length.
[  105.212677][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.215789][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.223951][ T8432] geneve3: entered promiscuous mode
[  105.227344][ T8432] geneve3: entered allmulticast mode
[  105.230660][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.234166][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  105.238029][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.240784][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  105.243551][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  105.247288][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  105.288835][ T8434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.310133][ T8434] tipc: Resetting bearer <eth:syzkaller0>
[  105.478467][ T8433] tipc: Disabling bearer <eth:syzkaller0>
[  105.658588][ T8442] bridge5: entered promiscuous mode
[  105.661199][ T8442] bridge5: entered allmulticast mode
[  105.666709][ T8442] team0: Port device bridge5 added
[  105.755992][ T8449] netlink: 'syz.0.632': attribute type 4 has an invalid length.
[  105.792317][ T8449] lo speed is unknown, defaulting to 1000
[  105.803416][ T8446] veth0_to_bridge: entered allmulticast mode
[  105.833215][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[  105.864486][ T8456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.634'.
[  106.044412][ T8468] syzkaller0: entered promiscuous mode
[  106.048562][ T8468] syzkaller0: entered allmulticast mode
[  106.054769][ T8468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.059462][ T8474] 8021q: VLANs not supported on gre0
[  106.067703][ T8467] tipc: Resetting bearer <eth:syzkaller0>
[  106.087495][ T8475] sctp: [Deprecated]: syz.1.637 (pid 8475) Use of int in max_burst socket option deprecated.
[  106.087495][ T8475] Use struct sctp_assoc_value instead
[  106.087864][ T8467] tipc: Disabling bearer <eth:syzkaller0>
[  106.108451][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'.
[  106.269809][ T8487] validate_nla: 1 callbacks suppressed
[  106.269833][ T8487] netlink: 'syz.0.641': attribute type 30 has an invalid length.
[  106.284679][ T8492] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[  106.320172][ T8492] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  106.326108][ T8492] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  106.371728][ T8496] gretap3: entered promiscuous mode
[  106.377614][ T8496] bond13: (slave gretap3): making interface the new active one
[  106.381680][ T8496] bond13: (slave gretap3): Enslaving as an active interface with an up link
[  106.410105][ T8498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.417974][ T8498] syzkaller0: mtu less than device minimum
[  106.430766][ T8497] tipc: Disabling bearer <eth:syzkaller0>
[  106.478059][ T8507] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  106.482524][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'.
[  106.529383][ T8511] delete_channel: no stack
[  106.572732][ T8510] lo speed is unknown, defaulting to 1000
[  106.600093][ T8515] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  106.610723][ T8515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.651'.
[  106.703747][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'.
[  106.884431][ T8535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.891879][ T8535] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  106.894708][ T8535] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  106.912443][ T8535] tipc: Resetting bearer <eth:syzkaller0>
[  106.991532][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'.
[  107.054923][ T8542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.068910][ T8541] tipc: Disabling bearer <eth:syzkaller0>
[  107.092523][ T8544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'.
[  107.308245][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'.
[  107.624356][ T8585] erspan0: left allmulticast mode
[  107.673108][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.683073][ T8585] 8021q: adding VLAN 0 to HW filter on device team0
[  107.692112][ T8585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.863104][ T8603] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20002
[  108.316224][ T8637] 8021q: adding VLAN 0 to HW filter on device bond14
[  108.729282][ T8659] netlink: 'syz.0.688': attribute type 16 has an invalid length.
[  108.813462][ T8663] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  108.832290][ T8663] netlink: 'syz.0.690': attribute type 4 has an invalid length.
[  108.840413][ T8663] netlink: 'syz.0.690': attribute type 4 has an invalid length.
[  108.946281][ T8665] netlink: 'syz.2.691': attribute type 4 has an invalid length.
[  109.028887][ T8678] syzkaller1: entered promiscuous mode
[  109.033128][ T8678] syzkaller1: entered allmulticast mode
[  109.118811][ T8684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.123914][ T8684] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1986356271)
[  109.128658][ T8684] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  109.129928][ T8686] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  109.161116][ T8690] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[  109.168352][ T8690] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  109.273008][ T8703] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  109.276681][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.0.702 Not tainted syzkaller #0 PREEMPT(full) 
[  109.276695][ T8703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.276702][ T8703] Call Trace:
[  109.276707][ T8703]  <TASK>
[  109.276711][ T8703]  dump_stack_lvl+0x189/0x250
[  109.276731][ T8703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.276742][ T8703]  ? __pfx__printk+0x10/0x10
[  109.276759][ T8703]  ? kernfs_path_from_node+0x2f/0x290
[  109.276770][ T8703]  ? kernfs_path_from_node+0x250/0x290
[  109.276778][ T8703]  ? kernfs_path_from_node+0x2f/0x290
[  109.276789][ T8703]  sysfs_warn_dup+0x8e/0xa0
[  109.276799][ T8703]  sysfs_do_create_link_sd+0xc0/0x110
[  109.276833][ T8703]  device_add_class_symlinks+0x1cf/0x240
[  109.276848][ T8703]  device_add+0x475/0xb50
[  109.276859][ T8703]  wiphy_register+0x1ba6/0x28d0
[  109.276880][ T8703]  ? __pfx_wiphy_register+0x10/0x10
[  109.276889][ T8703]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  109.276906][ T8703]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  109.276923][ T8703]  ieee80211_register_hw+0x3484/0x4100
[  109.276944][ T8703]  ? ieee80211_register_hw+0x14a1/0x4100
[  109.276961][ T8703]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  109.276975][ T8703]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.276987][ T8703]  ? __hrtimer_setup+0x187/0x210
[  109.276996][ T8703]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  109.277011][ T8703]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  109.277037][ T8703]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  109.277048][ T8703]  ? trace_kmalloc+0x1f/0xd0
[  109.277061][ T8703]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  109.277073][ T8703]  ? kstrndup+0xbf/0x160
[  109.277087][ T8703]  hwsim_new_radio_nl+0xea4/0x1b10
[  109.277100][ T8703]  ? __pfx___nla_validate_parse+0x10/0x10
[  109.277121][ T8703]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.277164][ T8703]  ? __nla_parse+0x40/0x60
[  109.277173][ T8703]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  109.277191][ T8703]  genl_family_rcv_msg_doit+0x215/0x300
[  109.277208][ T8703]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  109.277225][ T8703]  ? bpf_lsm_capable+0x9/0x20
[  109.277236][ T8703]  ? security_capable+0x7e/0x2e0
[  109.277252][ T8703]  genl_rcv_msg+0x60e/0x790
[  109.277265][ T8703]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.277275][ T8703]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.277292][ T8703]  netlink_rcv_skb+0x208/0x470
[  109.277299][ T8703]  ? __lock_acquire+0xab9/0xd20
[  109.277313][ T8703]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.277324][ T8703]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.277341][ T8703]  ? down_read+0x1ad/0x2e0
[  109.277353][ T8703]  genl_rcv+0x28/0x40
[  109.277362][ T8703]  netlink_unicast+0x82f/0x9e0
[  109.277378][ T8703]  ? __pfx_netlink_unicast+0x10/0x10
[  109.277391][ T8703]  ? netlink_sendmsg+0x642/0xb30
[  109.277398][ T8703]  ? skb_put+0x11b/0x210
[  109.277410][ T8703]  netlink_sendmsg+0x805/0xb30
[  109.277423][ T8703]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.277433][ T8703]  ? aa_sock_msg_perm+0xf1/0x1d0
[  109.277442][ T8703]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.277451][ T8703]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.277459][ T8703]  __sock_sendmsg+0x21c/0x270
[  109.277472][ T8703]  ____sys_sendmsg+0x505/0x830
[  109.277485][ T8703]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.277499][ T8703]  ? import_iovec+0x74/0xa0
[  109.277511][ T8703]  ___sys_sendmsg+0x21f/0x2a0
[  109.277521][ T8703]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.277549][ T8703]  ? __fget_files+0x2a/0x420
[  109.277556][ T8703]  ? __fget_files+0x3a0/0x420
[  109.277568][ T8703]  __x64_sys_sendmsg+0x19b/0x260
[  109.277579][ T8703]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  109.277593][ T8703]  ? rcu_is_watching+0x15/0xb0
[  109.277605][ T8703]  ? do_syscall_64+0xbe/0x3b0
[  109.277617][ T8703]  do_syscall_64+0xfa/0x3b0
[  109.277625][ T8703]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.277633][ T8703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.277641][ T8703]  ? exc_page_fault+0x9f/0xf0
[  109.277651][ T8703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.277659][ T8703] RIP: 0033:0x7f0b5f38ebe9
[  109.277668][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.277675][ T8703] RSP: 002b:00007f0b6021a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.277684][ T8703] RAX: ffffffffffffffda RBX: 00007f0b5f5c5fa0 RCX: 00007f0b5f38ebe9
[  109.277690][ T8703] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  109.277696][ T8703] RBP: 00007f0b5f411e19 R08: 0000000000000000 R09: 0000000000000000
[  109.277702][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.277707][ T8703] R13: 00007f0b5f5c6038 R14: 00007f0b5f5c5fa0 R15: 00007ffd05423ec8
[  109.277722][ T8703]  </TASK>
[  109.492848][ T8710] netlink: 'syz.1.705': attribute type 4 has an invalid length.
[  109.700905][ T8727] IPv6: sit4: Disabled Multicast RS
[  109.704025][ T8727] sit4: entered allmulticast mode
[  109.901987][ T8744] syzkaller1: entered promiscuous mode
[  109.904731][ T8744] syzkaller1: entered allmulticast mode
[  109.914697][ T8744] __nla_validate_parse: 13 callbacks suppressed
[  109.914712][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'.
[  109.942832][ T8743] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.952687][ T8738] netlink: 6 bytes leftover after parsing attributes in process `syz.2.714'.
[  109.957045][ T8738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.989488][ T8743] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.064391][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'.
[  110.068241][ T8748] netlink: 'syz.2.717': attribute type 29 has an invalid length.
[  110.071559][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'.
[  110.083787][ T8743] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.087741][ T8748] netlink: 'syz.2.717': attribute type 9 has an invalid length.
[  110.131021][ T8743] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.201354][ T5872] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.212243][ T5872] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.223654][ T5872] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.237091][ T5872] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.401211][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.407176][ T8753] 8021q: adding VLAN 0 to HW filter on device team0
[  110.411200][ T8753] !: left promiscuous mode
[  110.415892][ T8753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.424526][ T5872] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.428745][ T5872] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.435829][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.453001][ T8754] lo speed is unknown, defaulting to 1000
[  110.464001][ T8752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.719'.
[  110.635411][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.666421][ T8757] 8021q: adding VLAN 0 to HW filter on device bond15
[  110.670208][ T8757] bond0: (slave bond15): Enslaving as a backup interface with a down link
[  110.709137][ T8761] 8021q: adding VLAN 0 to HW filter on device bond10
[  110.715624][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  110.758992][ T8761] bond13: (slave gretap3): Releasing active interface
[  110.764117][ T8761] bond0: (slave bond15): Releasing backup interface
[  110.816532][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'.
[  110.869346][ T8767] netlink: 96 bytes leftover after parsing attributes in process `syz.1.723'.
[  110.883273][ T8767] netlink: 27 bytes leftover after parsing attributes in process `syz.1.723'.
[  110.987143][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'.
[  111.077344][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'.
[  111.112157][ T8779] team1: entered promiscuous mode
[  111.113767][ T8779] team1: entered allmulticast mode
[  111.330082][ T8795] validate_nla: 3 callbacks suppressed
[  111.330097][ T8795] netlink: 'syz.1.733': attribute type 4 has an invalid length.
[  111.337861][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  111.393809][ T8800] netlink: 'syz.1.733': attribute type 4 has an invalid length.
[  111.400970][   T24] lo speed is unknown, defaulting to 1000
[  111.402879][   T24] syz1: Port: 1 Link ACTIVE
[  111.445399][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  111.624807][ T8810] netlink: 'syz.0.738': attribute type 10 has an invalid length.
[  111.634027][ T8810] bridge0: entered promiscuous mode
[  111.974345][ T8812] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  112.192764][ T8823] netlink: 'syz.1.742': attribute type 1 has an invalid length.
[  112.530888][ T8846] 8021q: adding VLAN 0 to HW filter on device bond11
[  112.748402][ T8853] dvmrp8: entered allmulticast mode
[  112.779377][ T8853] lo speed is unknown, defaulting to 1000
[  113.083196][ T8854] netlink: 'syz.0.750': attribute type 23 has an invalid length.
[  113.141034][ T8852] dvmrp8: left allmulticast mode
[  113.288458][ T8872] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  113.320956][ T8872] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  113.329245][ T8872] bond1: (slave vcan1): Error -95 calling set_mac_address
[  113.341581][ T8874] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  113.347504][ T8874] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  113.378181][ T8875] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  113.395313][ T8875] bond1: (slave vcan1): Error -95 calling set_mac_address
[  113.430600][ T8872] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.443606][ T8879] netlink: 'syz.2.757': attribute type 3 has an invalid length.
[  113.501147][ T8883] netlink: 'syz.2.758': attribute type 10 has an invalid length.
[  113.513626][ T8883] 8021q: adding VLAN 0 to HW filter on device team0
[  113.528531][ T8886] netlink: 'syz.0.759': attribute type 10 has an invalid length.
[  113.551974][ T8886] 8021q: adding VLAN 0 to HW filter on device team0
[  113.581490][ T8886] gtp2: entered promiscuous mode
[  113.583341][ T8886] gtp2: entered allmulticast mode
[  113.667938][ T8892] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  113.790430][ T8905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.793117][ T8905] syzkaller0: entered promiscuous mode
[  113.794950][ T8905] syzkaller0: entered allmulticast mode
[  113.835406][ T8905] tipc: Resetting bearer <eth:syzkaller0>
[  113.856431][ T8905] tipc: Disabling bearer <eth:syzkaller0>
[  114.027967][ T8925] bond0: Device is already in use.
[  114.095276][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.164886][ T8927] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.172469][ T8934] netlink: 'syz.0.772': attribute type 13 has an invalid length.
[  114.182057][ T8934] 8021q: adding VLAN 0 to HW filter on device team0
[  114.185606][ T8934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.223862][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.227710][ T8934] lo speed is unknown, defaulting to 1000
[  114.270921][ T8937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.278357][ T8937] syzkaller0: entered promiscuous mode
[  114.280391][ T8937] syzkaller0: entered allmulticast mode
[  114.302178][ T8937] tipc: Resetting bearer <eth:syzkaller0>
[  114.307651][ T8936] tipc: Resetting bearer <eth:syzkaller0>
[  114.324044][ T8936] tipc: Disabling bearer <eth:syzkaller0>
[  114.328759][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.739147][ T5873] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.742690][ T5873] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.750320][ T5873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.756047][ T5873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.937312][ T8961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.007583][ T8968] __nla_validate_parse: 146 callbacks suppressed
[  115.007605][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'.
[  115.054730][ T8961] 8021q: adding VLAN 0 to HW filter on device bond10
[  115.156794][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'.
[  115.187682][ T8982] veth0_to_bridge: left allmulticast mode
[  115.224707][ T8982] gretap3: left promiscuous mode
[  115.244067][    T9] lo speed is unknown, defaulting to 1000
[  115.246855][    T9] syz1: Port: 1 Link DOWN
[  115.248649][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.251681][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.254393][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.260549][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.353414][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  115.482519][ T8999] ip6gretap0: left allmulticast mode
[  115.498336][ T8999] tipc: Resetting bearer <eth:syzkaller0>
[  115.529956][ T8999] bond0: left promiscuous mode
[  115.623824][ T9000] geneve3: entered promiscuous mode
[  115.626812][ T9000] geneve3: entered allmulticast mode
[  115.630770][ T9001] netlink: 176 bytes leftover after parsing attributes in process `syz.0.788'.
[  115.634532][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.639048][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  115.642468][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.646884][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  115.658414][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.663247][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  115.666293][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.674686][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  115.692762][ T9004] netlink: 68 bytes leftover after parsing attributes in process `syz.2.789'.
[  115.707374][ T9004] netlink: 68 bytes leftover after parsing attributes in process `syz.2.789'.
[  115.714900][ T9004] netlink: 68 bytes leftover after parsing attributes in process `syz.2.789'.
[  115.793270][ T9011] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[  115.910474][ T9015] pim6reg: entered allmulticast mode
[  115.924952][ T9017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.930164][ T9017] syzkaller0: entered promiscuous mode
[  115.932453][ T9017] syzkaller0: entered allmulticast mode
[  115.950510][ T9017] tipc: Resetting bearer <eth:syzkaller0>
[  115.953523][ T9016] tipc: Resetting bearer <eth:syzkaller0>
[  115.968288][ T9016] tipc: Disabling bearer <eth:syzkaller0>
[  116.160591][ T9024] 8021q: adding VLAN 0 to HW filter on device bond16
[  116.173039][ T9024] vlan4: entered promiscuous mode
[  116.176044][ T9024] bond16: entered promiscuous mode
[  116.178276][ T9024] vlan4: entered allmulticast mode
[  116.180200][ T9024] bond16: entered allmulticast mode
[  116.294857][ T9029] 8021q: adding VLAN 0 to HW filter on device team0
[  116.299708][ T9029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.309018][    T9] lo speed is unknown, defaulting to 1000
[  116.311276][    T9] syz1: Port: 1 Link ACTIVE
[  116.343746][ T9028] lo speed is unknown, defaulting to 1000
[  116.671990][ T9013] pim6reg: left allmulticast mode
[  116.798820][ T9048] validate_nla: 11 callbacks suppressed
[  116.798836][ T9048] netlink: 'syz.2.802': attribute type 2 has an invalid length.
[  116.804135][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'.
[  116.863266][ T9053] netlink: 'syz.2.804': attribute type 7 has an invalid length.
[  116.871766][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'.
[  116.881006][ T9053] : entered promiscuous mode
[  116.940344][ T9059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.944013][ T9059] syzkaller0: entered promiscuous mode
[  116.949625][ T9059] syzkaller0: entered allmulticast mode
[  116.960024][ T9059] tipc: Resetting bearer <eth:syzkaller0>
[  116.965204][ T9058] tipc: Resetting bearer <eth:syzkaller0>
[  116.979095][ T9058] tipc: Disabling bearer <eth:syzkaller0>
[  117.076673][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'.
[  117.080273][ T9069] netlink: 'syz.1.808': attribute type 13 has an invalid length.
[  117.089769][ T9069] netlink: 'syz.1.808': attribute type 11 has an invalid length.
[  117.219917][ T9079] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96
[  117.224979][ T9079] netlink: zone id is out of range
[  117.227424][ T9079] netlink: zone id is out of range
[  117.229481][ T9079] netlink: zone id is out of range
[  117.231574][ T9079] netlink: get zone limit has 8 unknown bytes
[  117.655907][ T9102] dvmrp8: entered allmulticast mode
[  117.686371][ T9102] lo speed is unknown, defaulting to 1000
[  117.971311][ T9102] dvmrp8: left allmulticast mode
[  118.068707][ T9114] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  118.088458][ T9114] 8021q: adding VLAN 0 to HW filter on device bond17
[  118.097733][ T9113] lo speed is unknown, defaulting to 1000
[  118.124610][ T9114] vlan5: entered allmulticast mode
[  118.126861][ T9114] batadv0: entered allmulticast mode
[  118.129159][ T9114] bond17: (slave vlan5): Opening slave failed
[  118.137795][ T9110] lo speed is unknown, defaulting to 1000
[  118.169557][ T9118] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  118.395525][ T9133] geneve3: entered promiscuous mode
[  118.397873][ T9133] geneve3: entered allmulticast mode
[  118.401940][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.408452][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.411327][ T8977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.414685][ T8977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.625255][ T9150] dvmrp1: entered allmulticast mode
[  118.746278][ T9157] sctp: [Deprecated]: syz.2.829 (pid 9157) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.746278][ T9157] Use struct sctp_sack_info instead
[  118.754112][ T9157] netlink: 'syz.2.829': attribute type 14 has an invalid length.
[  118.759935][ T9157] netlink: 'syz.2.829': attribute type 13 has an invalid length.
[  118.889091][ T9168] nbd: must specify at least one socket
[  118.958568][ T9174] netlink: 'syz.2.836': attribute type 10 has an invalid length.
[  119.072096][ T9178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.072116][ T9180] netlink: 'syz.2.838': attribute type 10 has an invalid length.
[  119.080166][ T9178] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  119.086454][ T9180] bond0: (slave wlan1): Opening slave failed
[  119.211355][ T9178] tipc: Disabling bearer <eth:syzkaller0>
[  119.261348][ T9191] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  119.309445][ T9195] 8021q: adding VLAN 0 to HW filter on device bond18
[  119.556544][ T9209] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  119.560942][ T9209] gretap5: entered promiscuous mode
[  119.563070][ T9209] gretap5: entered allmulticast mode
[  119.747723][ T9223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.752079][ T9223] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  119.767660][ T9223] tipc: Resetting bearer <eth:syzkaller0>
[  119.774775][ T9222] tipc: Disabling bearer <eth:syzkaller0>
[  119.942128][ T9235] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  120.003603][ T9230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.012126][ T9230] syzkaller0: entered promiscuous mode
[  120.014342][ T9230] syzkaller0: entered allmulticast mode
[  120.027647][ T9230] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  120.053017][ T9230] tipc: Resetting bearer <eth:syzkaller0>
[  120.102071][ T9248] pim6reg: entered allmulticast mode
[  120.104783][ T9248] pim6reg: left allmulticast mode
[  120.198932][ T9256] __nla_validate_parse: 24 callbacks suppressed
[  120.198942][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'.
[  120.384253][ T9271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.721951][ T9229] tipc: Resetting bearer <eth:syzkaller0>
[  120.739309][ T9229] tipc: Disabling bearer <eth:syzkaller0>
[  120.749922][ T9292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.755339][ T9292] tipc: Resetting bearer <eth:syzkaller0>
[  120.821862][ T9296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.861'.
[  120.825945][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'.
[  120.848123][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'.
[  120.985706][ T9307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.052073][ T9307] lo speed is unknown, defaulting to 1000
[  121.090429][ T9309] vti1: entered promiscuous mode
[  121.255446][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'.
[  121.392883][ T9322] dvmrp8: entered allmulticast mode
[  121.417224][ T9323] netlink: 92 bytes leftover after parsing attributes in process `syz.2.868'.
[  121.431295][ T9322] lo speed is unknown, defaulting to 1000
[  121.506706][ T9320] dvmrp8: left allmulticast mode
[  121.759705][ T9336] lo speed is unknown, defaulting to 1000
[  121.879389][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.876'.
[  121.947209][ T9350] tipc: Resetting bearer <eth:syzkaller0>
[  121.971425][ T8977] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  121.976234][ T8977] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  121.985599][ T8977] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  121.989205][ T8977] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  122.372554][ T9356] validate_nla: 3 callbacks suppressed
[  122.372576][ T9356] netlink: 'syz.0.880': attribute type 2 has an invalid length.
[  122.392707][ T9356] k*]: entered promiscuous mode
[  122.407505][ T9356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.556406][ T9371] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.602361][ T9371] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.620746][ T9375] netlink: 'syz.0.883': attribute type 1 has an invalid length.
[  122.667509][ T9371] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.681217][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'.
[  122.727059][ T9371] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.749837][ T9380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.886'.
[  122.753209][ T9380] vlan0: entered promiscuous mode
[  122.777865][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'.
[  122.797626][ T9384] 8021q: adding VLAN 0 to HW filter on device bond13
[  122.819684][ T8977] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.846236][ T8977] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.861571][ T8977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.865393][ T9387] lo speed is unknown, defaulting to 1000
[  122.934665][ T8977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.236825][ T9408] netlink: 'syz.1.894': attribute type 1 has an invalid length.
[  123.967168][ T9421] pimreg: entered allmulticast mode
[  123.973835][ T9421] syzkaller0: tun_chr_ioctl cmd 1074025673
[  123.976084][ T9422] syzkaller0: tun_chr_ioctl cmd 1074812117
[  123.985675][ T9422] dvmrp8: entered allmulticast mode
[  123.987786][ T9421] pimreg: left allmulticast mode
[  123.989494][ T9421] dvmrp8: left allmulticast mode
[  124.030691][ T9432] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  124.036075][ T9430] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.040806][ T9430] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  124.053439][ T9432] netlink: 'syz.0.901': attribute type 10 has an invalid length.
[  124.058055][ T9432] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  124.078974][ T9432] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.082416][ T9432] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.109919][ T9430] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.113812][ T9430] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  124.200268][ T9430] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.204145][ T9430] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  124.243983][ T9430] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.249977][ T9430] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  124.354150][ T8977] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.357876][ T8977] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  124.371277][ T8977] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.376119][ T8977] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  124.391013][ T8977] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.394421][ T8977] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  124.412122][ T8977] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.415899][ T8977] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  124.535698][ T9443] bond0: Device is already in use.
[  124.582032][ T9446] netlink: 'syz.1.905': attribute type 11 has an invalid length.
[  124.890751][ T9454] netlink: 'syz.2.907': attribute type 32 has an invalid length.
[  124.898279][ T9454] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.901756][ T9454] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  124.943036][ T9454] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.946628][ T9454] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  124.993821][ T9454] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.999539][ T9454] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  125.032453][ T9454] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.036724][ T9454] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  125.043388][ T9472] netlink: 'syz.0.911': attribute type 6 has an invalid length.
[  125.062538][ T9472] netlink: 'syz.0.911': attribute type 12 has an invalid length.
[  125.151590][ T9474] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  125.154621][ T9474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.209344][ T9476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.370652][ T9478] __nla_validate_parse: 9 callbacks suppressed
[  125.370665][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[  125.478998][ T9480] netlink: 'syz.0.915': attribute type 10 has an invalid length.
[  125.614743][ T9489] xt_limit: Overflow, try lower: 271964/0
[  125.650212][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'.
[  125.650856][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'.
[  125.789304][ T9503] netlink: 'syz.1.922': attribute type 2 has an invalid length.
[  125.800453][ T9503] k*: entered promiscuous mode
[  125.813110][ T9503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.846415][ T9499] lo speed is unknown, defaulting to 1000
[  125.942142][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  125.972187][ T9518] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.926'.
[  126.192850][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  126.199120][ T9526] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  126.359035][ T9537] k*: entered promiscuous mode
[  126.370196][ T9537] erspan0: entered promiscuous mode
[  126.393258][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.396155][ T9537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  126.415464][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  126.641705][ T8977] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.646273][ T8977] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  126.660287][ T8977] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.663413][ T8977] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  126.673993][ T5873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.679630][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  126.693550][ T8977] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.697205][ T8977] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  126.741821][ T9550] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  126.804428][ T9552] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  126.810810][ T9552] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  126.816938][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'.
[  126.832890][ T9554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.837214][ T9552] syzkaller0: entered promiscuous mode
[  126.839537][ T9552] syzkaller0: entered allmulticast mode
[  126.849093][ T9551] tipc: Resetting bearer <eth:syzkaller0>
[  126.863366][ T9551] tipc: Disabling bearer <eth:syzkaller0>
[  126.905477][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.018322][ T9571] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  127.033865][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'.
[  127.053563][ T9574] veth9: entered promiscuous mode
[  127.057814][ T9573] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  127.070396][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'.
[  127.081785][ T9573] veth1: entered promiscuous mode
[  127.087676][ T9573] veth1: left promiscuous mode
[  127.143973][ T9578] vlan0: left promiscuous mode
[  127.149400][ T9578] veth7: left promiscuous mode
[  127.151343][ T9578] ipvlan2: left promiscuous mode
[  127.152935][ T9578] geneve3: left promiscuous mode
[  127.154945][ T9578] bridge5: left promiscuous mode
[  127.349930][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'.
[  127.502072][ T9590] bond0 (unregistering): Released all slaves
[  127.531261][ T9595] 8021q: adding VLAN 0 to HW filter on device bond11
[  127.534040][ T9595] bridge6: port 1(bond11) entered blocking state
[  127.536381][ T9595] bridge6: port 1(bond11) entered disabled state
[  127.539115][ T9595] bond11: entered allmulticast mode
[  127.543570][ T9595] bridge6: port 1(bond11) entered blocking state
[  127.545897][ T9595] bridge6: port 1(bond11) entered forwarding state
[  127.585749][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.807563][ T9615] lo speed is unknown, defaulting to 1000
[  127.813209][ T9616] validate_nla: 8 callbacks suppressed
[  127.813223][ T9616] netlink: 'syz.1.951': attribute type 4 has an invalid length.
[  127.835551][    T9] lo speed is unknown, defaulting to 1000
[  127.837832][    T9] syz1: Port: 1 Link DOWN
[  127.839823][ T9616] netlink: 'syz.1.951': attribute type 4 has an invalid length.
[  127.846545][ T9617] netlink: 'syz.0.950': attribute type 13 has an invalid length.
[  127.850591][ T9617] netlink: 'syz.0.950': attribute type 17 has an invalid length.
[  127.860485][ T8977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.868914][    T9] lo speed is unknown, defaulting to 1000
[  127.873355][    T9] syz1: Port: 1 Link ACTIVE
[  127.878069][ T9617] 8021q: adding VLAN 0 to HW filter on device team0
[  127.902428][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.909109][ T9617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.010196][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.014182][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.053151][ T9623] netlink: 'syz.2.952': attribute type 10 has an invalid length.
[  128.169163][ T9642] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  128.268765][ T6380] bridge6: port 1(bond11) entered disabled state
[  128.305466][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.318468][ T9653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.323990][ T9653] syzkaller0: entered promiscuous mode
[  128.327340][ T9653] syzkaller0: entered allmulticast mode
[  128.333970][ T9655] netlink: 'syz.2.962': attribute type 1 has an invalid length.
[  128.384891][ T9653] tipc: Resetting bearer <eth:syzkaller0>
[  128.403032][ T9655] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  128.407636][ T9655] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  128.457720][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.571009][ T9664] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1635017058)
[  128.574454][ T9664] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  128.613005][ T9668] lo speed is unknown, defaulting to 1000
[  129.021013][ T9672] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.137817][ T9651] tipc: Resetting bearer <eth:syzkaller0>
[  129.149343][ T9651] tipc: Disabling bearer <eth:syzkaller0>
[  129.237222][ T9680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.244652][ T9680] syzkaller0: entered promiscuous mode
[  129.246994][ T9680] syzkaller0: entered allmulticast mode
[  129.268496][ T9680] tipc: Resetting bearer <eth:syzkaller0>
[  129.277263][ T9678] tipc: Resetting bearer <eth:syzkaller0>
[  129.290127][ T9678] tipc: Disabling bearer <eth:syzkaller0>
[  129.297041][ T9685] syzkaller1: entered promiscuous mode
[  129.299208][ T9685] syzkaller1: entered allmulticast mode
[  129.396348][ T9691] netlink: 'syz.0.972': attribute type 1 has an invalid length.
[  129.413712][ T9692] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  129.418286][ T9692] bond1: (slave vcan1): Error -95 calling set_mac_address
[  129.623449][ T9710] lo speed is unknown, defaulting to 1000
[  129.644033][ T9703] netlink: 'syz.0.975': attribute type 10 has an invalid length.
[  129.670007][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.721373][ T9706] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  129.724050][ T9706] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  129.745636][ T9706] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  129.756621][ T9706] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  129.797931][ T9717] bond14: entered promiscuous mode
[  129.800089][ T9717] bond14: entered allmulticast mode
[  129.802575][ T9717] 8021q: adding VLAN 0 to HW filter on device bond14
[  129.814087][ T9706] tipc: Resetting bearer <eth:syzkaller0>
[  130.028055][ T8977] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.031285][ T8977] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  130.036670][ T8977] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.040248][ T8977] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  130.048642][ T8977] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.051288][ T8977] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  130.070713][ T8977] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.073763][ T8977] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  131.855287][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.727411][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  139.765349][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.765262][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.485340][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.171043][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  250.487807][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.608597][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  274.165324][   T34] INFO: task kworker/0:4:5880 blocked for more than 143 seconds.
[  274.168381][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  274.172199][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.177146][   T34] task:kworker/0:4     state:D stack:21584 pid:5880  tgid:5880  ppid:2      task_flags:0x4208060 flags:0x00004000
[  274.181729][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  274.184425][   T34] Call Trace:
[  274.187511][   T34]  <TASK>
[  274.201978][   T34]  __schedule+0x1798/0x4cc0
[  274.203871][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  274.206257][   T34]  ? __pfx___schedule+0x10/0x10
[  274.208192][   T34]  ? schedule+0x91/0x360
[  274.209910][   T34]  schedule+0x165/0x360
[  274.211612][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.213791][   T34]  __mutex_lock+0x7e6/0x1350
[  274.217369][   T34]  ? __mutex_lock+0x5bb/0x1350
[  274.219248][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  274.221884][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.223918][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  274.226459][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  274.228846][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  274.231365][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  274.233744][   T34]  process_scheduled_works+0xae1/0x17b0
[  274.236300][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  274.238981][   T34]  worker_thread+0x8a0/0xda0
[  274.240957][   T34]  kthread+0x711/0x8a0
[  274.242615][   T34]  ? __pfx_worker_thread+0x10/0x10
[  274.244717][   T34]  ? __pfx_kthread+0x10/0x10
[  274.246808][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.248931][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.251106][   T34]  ? __pfx_kthread+0x10/0x10
[  274.253047][   T34]  ret_from_fork+0x3fc/0x770
[  274.254945][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.257526][   T34]  ? __switch_to_asm+0x39/0x70
[  274.259576][   T34]  ? __switch_to_asm+0x33/0x70
[  274.261561][   T34]  ? __pfx_kthread+0x10/0x10
[  274.263419][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.265755][   T34]  </TASK>
[  274.267087][   T34] INFO: task syz.1.969:9681 blocked for more than 143 seconds.
[  274.270160][   T34]       Not tainted syzkaller #0
[  274.272202][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.275851][   T34] task:syz.1.969       state:D stack:25096 pid:9681  tgid:9681  ppid:5850   task_flags:0x400040 flags:0x00004004
[  274.280762][   T34] Call Trace:
[  274.282120][   T34]  <TASK>
[  274.283288][   T34]  __schedule+0x1798/0x4cc0
[  274.285332][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.287345][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.289273][   T34]  ? __pfx___schedule+0x10/0x10
[  274.291206][   T34]  ? schedule+0x91/0x360
[  274.292945][   T34]  schedule+0x165/0x360
[  274.294767][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.297090][   T34]  __mutex_lock+0x7e6/0x1350
[  274.299059][   T34]  ? __mutex_lock+0x5bb/0x1350
[  274.300960][   T34]  ? rfkill_unregister+0xc8/0x220
[  274.302936][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.304935][   T34]  ? __pfx_device_del+0x10/0x10
[  274.307113][   T34]  rfkill_unregister+0xc8/0x220
[  274.309139][   T34]  nfc_unregister_device+0x96/0x2a0
[  274.311327][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  274.313730][   T34]  virtual_ncidev_close+0x56/0x90
[  274.315960][   T34]  __fput+0x44c/0xa70
[  274.317608][   T34]  task_work_run+0x1d4/0x260
[  274.319550][   T34]  ? __pfx_task_work_run+0x10/0x10
[  274.321658][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  274.323907][   T34]  exit_to_user_mode_loop+0xec/0x110
[  274.326273][   T34]  do_syscall_64+0x2bd/0x3b0
[  274.328153][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.330231][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.332715][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.334707][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.337907][   T34] RIP: 0033:0x7f51bc78ebe9
[  274.339703][   T34] RSP: 002b:00007ffd1b8bf728 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  274.342908][   T34] RAX: 0000000000000000 RBX: 00007f51bc9c7da0 RCX: 00007f51bc78ebe9
[  274.347373][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  274.350647][   T34] RBP: 00007f51bc9c7da0 R08: 0000000000017c6c R09: 000000161b8bfa1f
[  274.353915][   T34] R10: 00007f51bc9c7cb0 R11: 0000000000000246 R12: 000000000001fba3
[  274.357874][   T34] R13: 00007f51bc9c6180 R14: ffffffffffffffff R15: 00007ffd1b8bf840
[  274.361188][   T34]  </TASK>
[  274.362567][   T34] INFO: task syz.2.974:9706 blocked for more than 143 seconds.
[  274.367482][   T34]       Not tainted syzkaller #0
[  274.369554][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.373019][   T34] task:syz.2.974       state:D stack:25048 pid:9706  tgid:9704  ppid:5840   task_flags:0x400140 flags:0x00004004
[  274.378702][   T34] Call Trace:
[  274.380111][   T34]  <TASK>
[  274.381328][   T34]  __schedule+0x1798/0x4cc0
[  274.383182][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.387225][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.389267][   T34]  ? __pfx___schedule+0x10/0x10
[  274.391313][   T34]  ? schedule+0x91/0x360
[  274.393114][   T34]  schedule+0x165/0x360
[  274.394895][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.397370][   T34]  __mutex_lock+0x7e6/0x1350
[  274.399285][   T34]  ? __mutex_lock+0x5bb/0x1350
[  274.401183][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  274.403332][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.405502][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.407599][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  274.410069][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  274.412708][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  274.414933][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  274.417125][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  274.419487][   T34]  rfkill_set_block+0x1d2/0x440
[  274.421540][   T34]  rfkill_fop_write+0x44b/0x570
[  274.423593][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  274.425935][   T34]  ? security_kernfs_init_security+0x240/0x290
[  274.428525][   T34]  ? rw_verify_area+0x255/0x4d0
[  274.430556][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.432515][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  274.434711][   T34]  vfs_write+0x27e/0xb30
[  274.436609][   T34]  ? __pfx_vfs_write+0x10/0x10
[  274.438611][   T34]  ? __fget_files+0x2a/0x420
[  274.440565][   T34]  ? __fget_files+0x2a/0x420
[  274.442553][   T34]  ? __fget_files+0x3a0/0x420
[  274.444557][   T34]  ? __fget_files+0x2a/0x420
[  274.446561][   T34]  ksys_write+0x145/0x250
[  274.448401][   T34]  ? __pfx_ksys_write+0x10/0x10
[  274.450459][   T34]  ? rcu_is_watching+0x15/0xb0
[  274.452448][   T34]  ? do_syscall_64+0xbe/0x3b0
[  274.454391][   T34]  do_syscall_64+0xfa/0x3b0
[  274.456482][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.458708][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.461263][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.463150][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.465841][   T34] RIP: 0033:0x7f9b7878ebe9
[  274.467730][   T34] RSP: 002b:00007f9b796d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.471228][   T34] RAX: ffffffffffffffda RBX: 00007f9b789c5fa0 RCX: 00007f9b7878ebe9
[  274.474398][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  274.477818][   T34] RBP: 00007f9b78811e19 R08: 0000000000000000 R09: 0000000000000000
[  274.480982][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.484184][   T34] R13: 00007f9b789c6038 R14: 00007f9b789c5fa0 R15: 00007ffe3fc1a888
[  274.487579][   T34]  </TASK>
[  274.488935][   T34] INFO: task syz.0.976:9737 blocked for more than 143 seconds.
[  274.491895][   T34]       Not tainted syzkaller #0
[  274.493940][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.497606][   T34] task:syz.0.976       state:D stack:26696 pid:9737  tgid:9736  ppid:5839   task_flags:0x400040 flags:0x00004004
[  274.502812][   T34] Call Trace:
[  274.504155][   T34]  <TASK>
[  274.505561][   T34]  __schedule+0x1798/0x4cc0
[  274.507419][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.509471][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.511484][   T34]  ? __pfx___schedule+0x10/0x10
[  274.513530][   T34]  ? schedule+0x91/0x360
[  274.515481][   T34]  schedule+0x165/0x360
[  274.517262][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.519484][   T34]  __mutex_lock+0x7e6/0x1350
[  274.521419][   T34]  ? __mutex_lock+0x5bb/0x1350
[  274.523358][   T34]  ? rfkill_fop_open+0x12d/0x820
[  274.525501][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.527580][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  274.529806][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  274.532031][   T34]  rfkill_fop_open+0x12d/0x820
[  274.533976][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[  274.536379][   T34]  misc_open+0x2bc/0x330
[  274.538185][   T34]  chrdev_open+0x4cc/0x5e0
[  274.540071][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  274.542130][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  274.544691][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  274.546769][   T34]  do_dentry_open+0x953/0x13f0
[  274.548793][   T34]  vfs_open+0x3b/0x340
[  274.550454][   T34]  ? path_openat+0x2ecd/0x3830
[  274.552384][   T34]  path_openat+0x2ee5/0x3830
[  274.554217][   T34]  ? arch_stack_walk+0xfc/0x150
[  274.556343][   T34]  ? stack_depot_save_flags+0x40/0x860
[  274.558518][   T34]  ? __pfx_path_openat+0x10/0x10
[  274.560586][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.563057][   T34]  do_filp_open+0x1fa/0x410
[  274.564959][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.567595][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  274.569885][   T34]  ? _raw_spin_unlock+0x28/0x50
[  274.571923][   T34]  ? alloc_fd+0x64c/0x6c0
[  274.573733][   T34]  do_sys_openat2+0x121/0x1c0
[  274.575818][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  274.578003][   T34]  __x64_sys_openat+0x138/0x170
[  274.580057][   T34]  do_syscall_64+0xfa/0x3b0
[  274.581952][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.584130][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.586760][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.588624][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.591019][   T34] RIP: 0033:0x7f0b5f38ebe9
[  274.592813][   T34] RSP: 002b:00007f0b6021a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  274.596368][   T34] RAX: ffffffffffffffda RBX: 00007f0b5f5c5fa0 RCX: 00007f0b5f38ebe9
[  274.599419][   T34] RDX: 0000000000002642 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  274.602540][   T34] RBP: 00007f0b5f411e19 R08: 0000000000000000 R09: 0000000000000000
[  274.606107][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.609319][   T34] R13: 00007f0b5f5c6038 R14: 00007f0b5f5c5fa0 R15: 00007ffd05423ec8
[  274.612598][   T34]  </TASK>
[  274.613996][   T34] 
[  274.613996][   T34] Showing all locks held in the system:
[  274.617349][   T34] 1 lock held by khungtaskd/34:
[  274.619403][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  274.623407][   T34] 2 locks held by getty/5670:
[  274.625447][   T34]  #0: ffff8880200070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  274.629274][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  274.633323][   T34] 3 locks held by kworker/0:4/5880:
[  274.635680][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  274.640200][   T34]  #1: ffffc90003a4fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  274.645646][   T34]  #2: ffffffff8f8132e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  274.650151][   T34] 2 locks held by kworker/u9:9/6368:
[  274.652327][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  274.657324][   T34]  #1: ffffc90006457bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  274.662553][   T34] 2 locks held by syz.1.969/9681:
[  274.664649][   T34]  #0: ffff888035f25100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  274.669146][   T34]  #1: ffffffff8f8132e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  274.673244][   T34] 2 locks held by syz.2.974/9706:
[  274.675373][   T34]  #0: ffffffff8f8132e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  274.679412][   T34]  #1: ffff888035f25100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  274.683384][   T34] 2 locks held by syz.0.976/9737:
[  274.685609][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.689109][   T34]  #1: ffffffff8f8132e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  274.693212][   T34] 1 lock held by syz-executor/9757:
[  274.695525][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.699051][   T34] 1 lock held by syz-executor/9760:
[  274.701197][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.704685][   T34] 1 lock held by syz-executor/9761:
[  274.706993][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.710377][   T34] 1 lock held by syz-executor/9763:
[  274.712501][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.716182][   T34] 1 lock held by syz-executor/9766:
[  274.718350][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.721766][   T34] 1 lock held by syz-executor/9767:
[  274.723929][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.727458][   T34] 1 lock held by syz-executor/9773:
[  274.729571][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.733009][   T34] 1 lock held by syz-executor/9775:
[  274.735324][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.738759][   T34] 1 lock held by syz-executor/9777:
[  274.740954][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  274.745893][   T34] 
[  274.746927][   T34] =============================================
[  274.746927][   T34] 
[  274.750319][   T34] NMI backtrace for cpu 0
[  274.750334][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  274.750349][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.750357][   T34] Call Trace:
[  274.750365][   T34]  <TASK>
[  274.750373][   T34]  dump_stack_lvl+0x189/0x250
[  274.750395][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.750411][   T34]  ? __pfx__printk+0x10/0x10
[  274.750439][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  274.750463][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.750484][   T34]  ? __pfx__printk+0x10/0x10
[  274.750504][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.750528][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  274.750550][   T34]  watchdog+0xf93/0xfe0
[  274.750574][   T34]  ? watchdog+0x1de/0xfe0
[  274.750596][   T34]  kthread+0x711/0x8a0
[  274.750615][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.750633][   T34]  ? __pfx_kthread+0x10/0x10
[  274.750676][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.750691][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.750703][   T34]  ? __pfx_kthread+0x10/0x10
[  274.750720][   T34]  ret_from_fork+0x3fc/0x770
[  274.750736][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.750754][   T34]  ? __switch_to_asm+0x39/0x70
[  274.750771][   T34]  ? __switch_to_asm+0x33/0x70
[  274.750786][   T34]  ? __pfx_kthread+0x10/0x10
[  274.750802][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.750829][   T34]  </TASK>
[  274.750835][   T34] Sending NMI from CPU 0 to CPUs 1:
[  274.811178][    C1] NMI backtrace for cpu 1
[  274.811195][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  274.811205][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.811212][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  274.811234][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 97 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  274.811245][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  274.811258][    C1] RAX: 1959af02f8379400 RBX: ffffffff819683f8 RCX: 1959af02f8379400
[  274.811267][    C1] RDX: 0000000000000001 RSI: ffffffff8d9bb271 RDI: ffffffff8be33880
[  274.811276][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  274.811284][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39830
[  274.811293][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  274.811302][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  274.811311][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.811321][    C1] CR2: 00007f8f97c87e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  274.811351][    C1] Call Trace:
[  274.811357][    C1]  <TASK>
[  274.811361][    C1]  default_idle+0x13/0x20
[  274.811373][    C1]  default_idle_call+0x74/0xb0
[  274.811386][    C1]  do_idle+0x1e8/0x510
[  274.811395][    C1]  ? __pfx_do_idle+0x10/0x10
[  274.811406][    C1]  cpu_startup_entry+0x44/0x60
[  274.811413][    C1]  start_secondary+0x101/0x110
[  274.811432][    C1]  common_startup_64+0x13e/0x147
[  274.811447][    C1]  </TASK>
[  274.812209][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  274.879400][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  274.883111][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.887199][   T34] Call Trace:
[  274.888580][   T34]  <TASK>
[  274.889791][   T34]  dump_stack_lvl+0x99/0x250
[  274.891683][   T34]  ? __asan_memcpy+0x40/0x70
[  274.893548][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.895680][   T34]  ? __pfx__printk+0x10/0x10
[  274.897541][   T34]  vpanic+0x281/0x750
[  274.899218][   T34]  ? __pfx_vpanic+0x10/0x10
[  274.901116][   T34]  ? preempt_schedule+0xae/0xc0
[  274.903060][   T34]  ? preempt_schedule_common+0x83/0xd0
[  274.905319][   T34]  panic+0xb9/0xc0
[  274.906905][   T34]  ? __pfx_panic+0x10/0x10
[  274.908799][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  274.911051][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  274.913725][   T34]  watchdog+0xfd2/0xfe0
[  274.915498][   T34]  ? watchdog+0x1de/0xfe0
[  274.917343][   T34]  kthread+0x711/0x8a0
[  274.919080][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.921053][   T34]  ? __pfx_kthread+0x10/0x10
[  274.922996][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.925096][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.927169][   T34]  ? __pfx_kthread+0x10/0x10
[  274.929058][   T34]  ret_from_fork+0x3fc/0x770
[  274.930979][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.933067][   T34]  ? __switch_to_asm+0x39/0x70
[  274.935091][   T34]  ? __switch_to_asm+0x33/0x70
[  274.937049][   T34]  ? __pfx_kthread+0x10/0x10
[  274.938970][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.940982][   T34]  </TASK>
[  274.943022][   T34] Kernel Offset: disabled
[  274.944845][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:00:07  Registers:
info registers vcpu 0

CPU#0
RAX=3a8e2242dc672f00 RBX=ffffffff819683f8 RCX=3a8e2242dc672f00 RDX=0000000000000001
RSI=ffffffff8d9bb271 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce44612822 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f244d197d20
XMM02=0000000500000007 0008080800000001 XMM03=0025900370000000 01000a0e0803b003
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=10002080808a1000 01c0010000000007 XMM07=0401000000000000 0168e004a0a20800
XMM08=0ae0030010000ad0 0300100000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8880202b0237 R9 =1ffff11004056046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d4 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f7a1141000 CR3=00000000262ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
