last executing test programs:

5.231677553s ago: executing program 2 (id=11587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f00000032c0), 0x38, 0xffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'wlan1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000208010100000000000000004a00000a0400048005000300be0000000900010073797a30000000000900010073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c810)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r4)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

5.161004285s ago: executing program 2 (id=11589):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020000}, 0x4044080)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
unshare(0x6a040000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000480)=0x400)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={<r9=>0x0, @local, @private}, &(0x7f0000000240)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r8, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8}, 0x28000000)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)

4.331207401s ago: executing program 2 (id=11598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000880)=0x7fff, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}}, 0x40880)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010004b0400000000000c00007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005000700070000000a0014000180c200000d0000"], 0x48}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x37, 0x1, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, 0x0, 0x25, 0x6, @val=@perf_event={0x43ea}}, 0x18)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x7, 0x1, 0x2, 0xffff, 0xf2})
ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040))

4.080627005s ago: executing program 2 (id=11599):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x424, @loopback, 0x1}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x4, 0x5, 0x8000, 0x11, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x20, 0x8, 0xffffff81}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r5, 0x700, 0x80, 0x2, 0x3, {{0x13, 0x4, 0x2, 0xb, 0x4c, 0x64, 0x0, 0x8, 0x0, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0xb, 0x99, [@dev={0xac, 0x14, 0x14, 0x3a}, @local]}, @timestamp_addr={0x44, 0x2c, 0xcb, 0x1, 0x8, [{@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@local, 0xed6}, {@private=0xa010100, 0x198a}, {@broadcast, 0x6}]}]}}}}})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf000014000380040004000400050008000200000000000c00018008000100000000", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a)

3.206000996s ago: executing program 2 (id=11606):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x2, 0x8007, 0xff}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b32, &(0x7f0000000040))
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="01072bbd74000000000005000000", @ANYBLOB="df0bcdd530386bba72e7672787732163"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x70}}, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0xfcb4, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x4000001}, 0x4004)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000186517a294859c4f2958d08"], 0x7c}}, 0x40014)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a58000000060a09040000000000000000020000032c00048018000180080001006c6f67000c0002800800054000000008100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r8 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0x1, 0x0)
vmsplice(r10, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6)

1.754896676s ago: executing program 1 (id=11630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
close(0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa00000008000400fc"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000008850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) (async)
close(0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa00000008000400fc"], 0x48}}, 0x0) (async)

1.54236197s ago: executing program 1 (id=11632):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x90646}}, 0x44}, 0x1, 0x0, 0x0, 0x4e44}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.3815724s ago: executing program 1 (id=11633):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl(r0, 0x8b29, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x5, 0xcd2c, 0x4, 0x6, 0x80000001, 0x101, 0x3, [0x2, 0x8]}})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000a40)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3, 0x0, 0xffff}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x1, 0x0, @private=0xa010100}}}, 0x2a)

1.150777314s ago: executing program 1 (id=11634):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x2, 0x1}]}]}, {0x0, [0x71]}}, 0x0, 0x33, 0x0, 0xa, 0x2}, 0x28)
close(0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x80, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd0}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0, <r7=>0x0}, &(0x7f0000000840)=0xc)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x3, [@datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x3, 0x589ec0f2, 0x3}, {0x3, 0x6, 0x5}], "d7"}]}, {0x0, [0x0]}}, &(0x7f0000000ac0)=""/247, 0x43, 0xf7, 0x1, 0x2, 0x10000}, 0x28)
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = gettid()
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, <r13=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r13}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r14 = getgid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r15=>0xffffffffffffffff})
bind$unix(r15, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r15, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r17 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r17, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r17, 0x40107446, &(0x7f0000000080)={0x0, 0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000a00)=[{&(0x7f0000000340)={0x1d4, 0x1d, 0x0, 0x70bd2c, 0x25dfdbff, "", [@generic="d104665fa8eefff4d9189e303189cbb7c271d5fcc1e5dfc0e7ac252c69307d1eda332cccbde97df62bc4ea1c963dacc234a27610d3029f0c4c5411fe80aa0d2c5a0de0b9f1006eefa317275faea39c10409450a4b365968ebe960fbfa63da322138a251580ae79e734ca4843c0e179edec47518fdf24fe9ffa1034caaf6cc10279e17c04cfac776f865243bf7e57f6c1648b529941747be6b9bc31db821e91a06f07c0b2b8292867232c614f5ab6286e8896ba9c67c90fa335f1ee810c02c760b2c98f3b5fccd4daa3f9db8e0cd24271672349d062757ab82eb4251beb05c5efca43bed8", @nested={0x43, 0x8c, 0x0, 0x1, [@generic="5d1f8428be4a163c683edfed4f4b93da7cd536564496337a4b71812a143f0798c3a082302186f53a76dabe5518484a322076d1efb6a5e8108d47fa5b41f6de"]}, @generic="693a3625d9a5f170fb337a3b17c03c642275e7a395377198c7d86f981ea3684d3e59670e898858f865d0973984c9abb65934702f9626e32bd326879b44a843bf078387ae3963d5cec146052f39027fb14c29a0f1edb3eccc04cf62c0c8d7aade620b6e422c1922a23cf05f5dc31757adb330ad7eee78bbd8ddc166c28cad7f385c8b7ff982f4565581d433b91ac6994ea70d483faa88d4ee28"]}, 0x1d4}, {&(0x7f0000000540)={0x264, 0x14, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x253, 0x66, 0x0, 0x1, [@generic="baea8ef19664f60dbc285802274e39f98a9bb47adb206d89ffe2667a5e82014899d87bf7cddcb8ad4a347fa66da0c556a0cd33e723412061d54194e5a23e47c235eabe2c1de7d3baa88727786b3ddb1a6231bc409d8503103c3d4d402728b88a8131885aab59c66d9c39f558db", @typed={0x8, 0x3a, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="cda9909bded0fb11595378d045d901a0f114bc0a1349bf6c14fd38611581e4794cb1c200e6d672b4c4ca371737fbc21f006c557872a5ac4350de52835ae9bc6cd0050915680c29889a4bf83e754e9e674bff5f8f5b7814e483871a0688b9c62c0c93e43b25b2b7dcd9b0c5fea8c462a671bf9ee6736e512e37060a5c70824a40bb259f55da9103fbfc03dd46cccd0c1c9d25f0d0ff799a952e849ded4e5fc7453b8bb5ed1a9cab07d90536d443df2a526c4b006b7712aad3c4908d92", @generic="9363732c69ee23d298fa95511a22faf55dc2cda68a0677b428fe7d4001d4b352fe2b9a106c55acc63d5237fd492b2e33cf57460ade3bdfa9545964947b9f86aa21fa0e1535c89a8ecc24b6967845e6a91a6035f7cff446df859ab24bdea1dd12856a9dcb163f84", @generic="f8290b889d1c28229071c9846e85ac179999f95d3c2afc227f1da1a213969af63dab5653bca985437ae46b21d64e55a1bded352ed5ac627fa2ad12bf08f7035c3e5ff8c8ee7c53d98ccb41c7a4ac39d0300647d3dc7d7c6c0b0d45f3bcaefbb60cf432166372d34601e23410dcd90b34bc213523cf8dbae3ec0bedfe2a40efd4b2eec6130b649a78be863f3cd349fb7d7df6d2", @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@private=0xa010101}]}]}, 0x264}, {&(0x7f00000007c0)={0x1c, 0xd, 0x200, 0x70bd27, 0x25dfdbfc, "", [@typed={0x9, 0x137, 0x0, 0x0, @str='IPVS\x00'}]}, 0x1c}, {&(0x7f0000000880)={0x164, 0x1b, 0x4, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x68, 0x0, 0x0, @uid=r7}, @nested={0xc, 0x11b, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @ipv4=@empty}]}, @generic="a91a8e330e30759e773bacc15c7f740b0195a07579ac68c9059b8cb1173a59700408473d4296fb7ee8c28380eba0fffeda09904e1cd2d043d84f174b41396573572dfa9683c237d9ba437b6666130fc476efb87680da37702d5cfaabf1f3b023ab437c9f972b072ceff2d26acd6a9f8fc867706ecbc825bc2397af5c7a954322fdc47a5ba9c3f313f66d01551f0702209749ed1439a196e6aa90d162f74bdc2c3815ecd17e41b282", @nested={0x98, 0x11, 0x0, 0x1, [@typed={0x4, 0x71}, @generic="5b1af4f3a05fe91447ee4cabc16b8583ed54118161286258ef9d601416712f8b103071b48e9d5731a477ccf9f7527b5d6412a62c1189710cc16b9b6b1ca424932f20ef08126ad9ac25a30a091ba2835af5f82f1021b5e03b4251ec46d5d507032ba0291395d58a59766510209de6700a9e01a57a6d921efe06642593823af63b855fe30bc65713bdbdbb3922908f0631"]}]}, 0x164}], 0x4, &(0x7f0000000c00)=[@rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, r8, r3, r5, r6, r9, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r1, r15, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r6, r3, r5, r0, r6]}}, @rights={{0x38, 0x1, 0x1, [r5, r6, r5, r6, r16, r17, r3, r0, r0, r2]}}], 0xd8, 0x40}, 0x84)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

661.359036ms ago: executing program 0 (id=11640):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000005000000010000000400000004200000", @ANYRES32, @ANYBLOB="0000000000000000000020000500008a171af000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000020000000400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff9d21274303e5c342970400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1)
writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f66"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr=0x64010101, @multicast2}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f00000100000000"], 0x57)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)="4f72fb8858", 0x5}], 0x1}}], 0x2, 0xc000)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000280)={@loopback, @empty, @initdev}, &(0x7f00000002c0)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000003c0)={r10, 0x0, 0x20}, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={r10, 0x19, "5ec4dd963f7453384f9ad5a105a89a46579c525d342ff3ee9e"}, &(0x7f0000000080)=0x21)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

482.229832ms ago: executing program 0 (id=11641):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x6, 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010)

360.688413ms ago: executing program 0 (id=11642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000200000e"], 0x0, 0x37}, 0x28)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close(r1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a00ffffff7f00240001801400018008000100e000000108000200e00000010c00029c0500010000000000240002801400018008000100ac1e000108000200ac1e00010c000297050001000000000008000740ffff639c8b2e865f1c48b55afd4badce61a910a3299de1c3d631385a9a9138b25240613c6d037d65d50d"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
shutdown(r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d380009111af000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={<r10=>0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c)

303.731047ms ago: executing program 1 (id=11643):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0xce040) (async)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) (async, rerun: 32)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r3, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, 0x0, &(0x7f0000000500)) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028006000f000200000014000200fe8000000000000000000000000000aa0400130006000f000200000008000a00", @ANYRES32, @ANYBLOB="1eaa5f834b82a405d311e732d3b0ad87da9727902361c0560ed137740bf0fd"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0xffffffffffffff84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r6 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) (async, rerun: 32)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r9) (rerun: 32)
getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000fe05486a7c6109259334d7220d40eadd34809c0b55b132e79c0ea9566e1c4dbc484319dc83d0e7ca98f1e361e0826be97377c89bf21c5a67d55a67a0921f55a9ab206ec7ec0b28794a5113a4c43a8823261a1b8cba0b35e1caaa09ec195ace508440726effd7d4ba0a03000000000000005f7382727cf242047216367dd857346530d45f54a1593d1e4378f331c895819880b0fedba65c23a6b9e76c80123e4dec5480cbbda47fbcec70a2fb851c2f027cb3fecc1ce1a8a5c8045b94f079042ac790519fece3cbd40ece076caa5cf89f26b4f78a"], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r10}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

302.744503ms ago: executing program 0 (id=11644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x12c, 0x30, 0x9, 0x0, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}]}, {0xde, 0x4, "5cd945cb432d44870b5895ac477b8149bf0622ea77df3ed3035a6985a0cbcdcd16ae384e29481a72dbce363497bae9a4f360034c5b97ebbf61121ebbf493ca85712bc72ac2e72752fce9e8d35473505e9090ae90cb50469902f6ef7d3d58f72763e375fa24fa006044d96ff46e34b33f0389fea5a71b77133c1033308bc424ca958e0f53a0532408fa98b7d0649ccc4089daa144ff1fc2f9cc17a0550bd6d3cf0f39a5495193a9092ac91dcd6cc7d1fc8adbc8406fd3aab9260f1f7a81a8318d72936be6c70000d2f9fb3737724605b9a1121f10e7fc38524efb"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x880)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008"], 0x70}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000060001280080001007674690054000280080006000d000000220001"], 0x80}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1=0xe00005a8}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000000000007000000441c6693ac1414aa00000001e000000200000dcdac1414aa00000057940401001c000000000000000000000008000000b1"], 0x50}, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x294, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff80000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8a}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}}]}, @TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd, @private0, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffc}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5a482c25}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2427}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500bf000000090000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40488c4}, 0x48000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000c2955bbad54dc436541dbaff09b4be0010", @ANYRES32=0x0, @ANYBLOB="0380000040020000140012800b0001006970766c616e0000dbff028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

201.787244ms ago: executing program 1 (id=11645):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x5, 0x3, 0xfffb}, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0xe8, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x10}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f25}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x134f}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xe8}}, 0x4000050)
sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x8, 0x7, 0x4, <r2=>0x0}, &(0x7f0000000100)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001d00010025bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES64=r3, @ANYBLOB="bd3493387e27ba19383ca06584b639ca632135f2d5f4c5732d6e7293d579c02a17ce22fbe475327402874c3a1fc2849b3d0273e434adb0775c5b4c1c90c6c9d7d0ea134c99486447b3b20983899b7e8f9250cb1730b37c7e17fb1d89758162360825780da51d633baa74c97640da7804afe0e70a5f08e6ed56e1a888d757027cda9b380ca05a6cb39d107cbb5513129f230ac21d2ae407a213686d51a418e1993bba2355d99d5a3e", @ANYRES32=r2, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x2094)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x84, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2c707}, @IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1d}]}, @AF_MPLS={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x0)

79.663828ms ago: executing program 2 (id=11646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000050000083c"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd)
close(r2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={<r3=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000003b00))
accept4$phonet_pipe(r2, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000009b80)={0xbf6, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010145}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmmsg(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680})
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x4, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000700600000000000009000000731132009f0b000095000000000000001444963de02a84b71b718280ffa0ed1d99897503aed196f5a1f5fbafa9beddf35c032731490406fd2be034d63b7bf63497a26a102cb0f884ffbb20b9dd44ff4381a37b96f4b93b558adf81dbda58865468320e55547093978b2dd7118fae9e25c38a8ffedeb5d5f4c38070a3fb8d05938b39f034d39b7ac2598a338b9af37efcfa785089797c672baa17b8f682deb330c199ddc8f89b42384246ec77"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000380)={0x20, r10, 0x5, 0x0, 0x25dfdc01, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmmsg(r3, &(0x7f0000003a00)=[{{&(0x7f0000000580)=@nl=@unspec, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000600)="834dadfa069cb27cf82aa32306c298f1e86bcdc054088d9fab08860207d99f9b35f167f91db22edf77a5af1a081b9b1271317f7cad45807fedfb614386bf7ce5d8177d3051eb22cf6a22ca48635b6aa1eb5e138fd77a", 0x56}, {&(0x7f0000000680)="97053630278aa815964bce5234a638ac0d3bcc07546b7a2143f280e859717cb9d32ab986605a5906ba7ba0d39d8cb2d7a6d5e88b207a1cad8293bca814660e3d2cf4f2e9374fc77feb66024a5f56ee9a03ca62294648fc797504b6a22b429c4e73c7de421a6dfee52dcdef4b6a76819924027dd87a69819301db182718e7a424502fa7b98289c68caee890f0c027fd74ef2019d8ce1c9cb8b1667dd9e08b441c140988871d2a1f2158edcac4bd6842f93830635554bff6094016a3538568b8997fb82acffe1bae2e7ff0177e", 0xcc}, {&(0x7f0000000780)="a7cd2bae11a154aca68d3c61c238bdf95b30586068811c4451569e33ec1697a8e27f8cf9f490bb3623b3715c71fc750fffe74857486f735d8d15d54bea3fcfa184814b77ab49bee427cf042e30068fe438bb994b5ab747bcaff1ac20b7354cfe6c7528b610270047e995d77a96c6b1782447a747e21a6d7bfd05100fdeab9031fcd3765faf2d8106c7314536abf3b96671f06af643d3681393eb66883e38951b97b1440dd82c35757d8a4c3786bdc8f6e064542b4e657aeb9eab4cfd384a10a463340caeb93abb8b812d56ae0d167fb5eb", 0xd1}, {&(0x7f0000000880)="f6dcfb9f4c96eea7efb90d8f00357a3053e546897caf85706fa809d5d0743694267b59046d15876797151da50c36f4020f9d61a165255e3e02646c76177c3ba859b0120a03d13b4dfee6e56b6333a0070597245621cf0c0bd33e2d6debb4f0b0e411e73e83d0ad78f923786d39a30a4e1ae0615bc85ad5295378de7baa0b8453514be5f4d58fc922e05fe5078ae8d5a266f5cab8ee2f6e5a6538b43af9ceb9af768c0cd85e66c62965b8951c9aef8f0ba34dbc58da1095e78a1f7c5dc80209a6873ad5979d1200986b512b6674adbd724baf4d8956866c4ee1b0b44eeec26aca6e33863b30f82b1fd5126f9f9db54ddf4cc982276e", 0xf5}, {&(0x7f0000000980)="129f584dd15827f5e608013b76e830a10e630519b8b680c83b3ed97515504d91d231555b02c713bc4ac0e42cb64a9fd1dbe62aa3f9d2f20e0f8ffced05492eae807fb942f53bddad859864ed504db54fff2962e06638961376754dcbbb6a4e142d8a2a02806cbb27242fb745af0f9ad1c93c8026a61c174504a308f07f9a7301fd62db12ecf1cdda4c358f8fdbb97254a88a4a8548d5b995f4a5f78c8211f18b5b9e594137e3493e24833a1b0f8c625a70fce197b986c7ad3f31c2308bd0c33725dac89503e246d77b16aa496eaf5b802659c000de147ab5f0461efd66a141319efa3664210ef81829926bfd7b03a624832eaf21c4", 0xf5}, {&(0x7f0000000b80)="f16e7a6fd10873c1e6868a94e745fd30faba457f2d7e4147a0a2d0552047b8d622670fc96dbc1edb95c8ca770a23acc49ba4526c617bd98cca684dec0c46d5ece97f3561b70381258ea3dd0a084dfe4174897a9a99524766f891241d7602ea97e74123e61ba6fcc2657ede4dff052d8cf072149962aa123ecd3b", 0x7a}], 0x6, &(0x7f0000003b40)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1], 0x10f8}}, {{&(0x7f0000003180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003200)="bb391fce6bc0e21d07f44f4e02ee4800226a04823196f8e6013ed40065f8ade18d858d8a2cc65af207b78c3989c7c53b5496656954b4dcdc50ab3241e868478b3570cbd59fb0e5eaa2d58eaf39626de1e532ef390a75c11931c438bf3251ce36843de6fe384ef34ea44687067536ea81fe43bd9b0d72a3690736deb67743996bf992e4e60062425efef1d0a579be717c1ef610", 0x93}, {&(0x7f00000032c0)="422c357e66e962", 0x7}, {&(0x7f0000003300)="1ed9d93051f14396", 0x8}, {&(0x7f0000003340)="21dee60316127fcd0a1dee7a0116b05c5429a2d1a9e817aca03659a66570b1fb5bbb83077233f891f0485855e30e5a201fba0d988e2d26a4cd7574837fb658308530f3b3ab457161cfb165887fc8e9be69de470a11b8b9a66c6cab262bd888f88a8483df2f638baa2881bb44d43058080429e557dc497996ea0a3475ca5677e395eb7617d9a15e57beb68426cfea9030f8acdf17c20f98ed4d213afbb8a53133e2f06d15a23d7568fbc4623a132f5565512558716c9c2ceeeae0e989cc44e16ebbde444bfd38ca08ea17a0275e16afe1c632c62e07b4619af3050897c6f6a318de804a", 0xe3}], 0x4, &(0x7f0000003480)=[{0x48, 0x10d, 0x40, "be7f23a94f9b01862123a5fd41bf6a2284b51ea2a6d95d9a9917bc51e052c90c7886a1e21793ba27810fc56afb8a6981e1866fcbdbe0950f"}], 0x48}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003500)="83094794337482a9ea37018644b37fc82116298146360084a2b8b985a22ce2d39fc2ed61243299483b3c2bebe77135e71ac2c959b737f41ded0f4c3b0bd80cbad9aed3800f170367a3a0ed50f1ca87d77a8cd9b592092879910eaf4f54c20c6bdd2a1bbe", 0x64}, {&(0x7f0000003580)="e1b75d5308e394f7ce3508f8fa816e9dcb72e2a43e838820131a22bb01d1dc5c43d4bba67f41087fa468406e5894d7a0af1f81d9d08a0a18e2d4b38c26d982c55535b171932f15a3e96b8ef7", 0x4c}, {&(0x7f0000003600)="1acaeea8e1e5e87228e50046c7d5c4de73c0c4d2e831867320789ec0a6a065569988a676483b55693600f2bcf0bb395b89a511ac8ee7bc02d8e6c7fff7fa84e49fb2a12ccaea17fc48b202ad1a4d7f02b0c1e0f8516b74cd4fa6de427ac4b22984658ff1792ebbc31a692ae0ec32a01f0f31d594fb4fb3410f03b185c50473a4ffa4652ab62c0197cd8a11bc947242cfe4955346b6b2acbdd468755cb645", 0x9e}, {&(0x7f00000036c0)="f4b0fcf5d15f4beba791872467e2b9aef5ee06922e06acf3929bd1ddc704c5d21c921ce5d3d1cc5260ac7d130ab23b140a381d08cf160b81aa989d02ea645c8684c48f007aaf991083cd4d984aa20e6e8bba54f6a32702edaece4aca65c738da830bbad8417ebf469c954aa6ba111b8c68ec29a39a8a19a50ad56d5c6a123a466f84260cfc60dcd9719df632133c924484698fff147f37d8f1df3608edf3046473bcb2d4edfe6be49f", 0xa9}, {&(0x7f0000003780)="feaee67f93b7a9c491e1bb1427334c3c88f56928d2c527dcf0fc3d32addf9cc29e6e02c586ebb0151e2bfd83848b", 0x2e}, {&(0x7f00000037c0)="d447f96dcc6fabb8a094", 0xa}, {&(0x7f0000003800)="2a0c67e68a37bacbe6397c97fd22370b", 0x10}, {&(0x7f0000003840)="3d1daf7a", 0x4}, {&(0x7f0000000c80)="9131ac215771bdf1e9b936b0932bb2823a85de140cbdbb096a9de33e50ada88b345ae87f9255893301f99d0d0e58bd08cc4406b46c2376d7cb42a7580119855914a823c65a596c1d110268c42a25b2dff14537718a0fa7032a54ca88ff9969a34a65336dcbd8e9091ed6141991e15fc2bbd6768e7ca48e452828afe7fe4a91682623ab2dbf2d906f2e476e7d1b2b2aa54e05df8041b20b4fc7eadd42640542608a1e9819aca56b5de170b85a9a252e460302a254502e108fb29dc9", 0xbb}], 0x9}}], 0x3, 0x8000000)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030129bd7000fddbdf252100000005002000010000000c0005000201aaaaaaaaaaaa050020000000000009001f00706879330000000005002000f1ff0000"], 0x44}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044)
r11 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x68, r12, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:ssh_keysign_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8881}, 0x4000000)
setsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000000280)={0x0, 0xea60}, 0x10)

77.874797ms ago: executing program 0 (id=11647):
socket$netlink(0x10, 0x3, 0x14)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x848000000015, 0x805, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000090000000000001c040f9622ddd4a3d535a317663f1d80e1c1288971889de61184e7aa57dfc89dab682f840cd81d2d174718e252659cadc1a349a669e7b190597f94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfb00000000000000005ff000000000000000000080000e2b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gre0\x00', <r5=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f000114600000110600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10, &(0x7f000000c540)=[{&(0x7f0000000280)='\b\r', 0x2}, {&(0x7f000000b540)="920ca227df65", 0x6}], 0x2, &(0x7f0000000080)=ANY=[], 0x20}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="0300f1f3"], 0x4)
ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r9, 0x29, 0x31, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0xec)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02010009070000002cbd7040fcdbdf250500060000a000000a00ff0100000000000000000000000000010100008000000069000000000000"], 0x38}, 0x1, 0x7}, 0x0)
r11 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r11, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d", 0x86, 0x0, &(0x7f00000001c0)={0x23, 0x95, 0x81, 0x2}, 0x10)

0s ago: executing program 0 (id=11648):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r4], 0x1c}}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000000300)={&(0x7f0000000280)=@in6={0xa, 0x4e22, 0xc, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c, &(0x7f00000002c0)}, 0x800)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r6=>r5, 0xb37f, 0x0, 0x2})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00021abd7000ffdbdf2514000000080015000008b538"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) (async)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x8c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NET_NS_FD={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x200}, @IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x59}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa030100}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x228, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x20000014)

kernel console output (not intermixed with test programs):

promiscuous mode
[ 1088.329646][T17148] veth95: left allmulticast mode
[ 1088.331380][T17148] veth95: left promiscuous mode
[ 1088.333375][T17148] bridge154: port 1(veth95) entered disabled state
[ 1088.338494][T17148] veth97: left allmulticast mode
[ 1088.339958][T17148] veth97: left promiscuous mode
[ 1088.341506][T17148] bridge154: port 2(veth97) entered disabled state
[ 1088.346949][T17148] bond277: (slave bridge155): Releasing backup interface
[ 1088.351051][T17148] bond282: (slave bridge157): Releasing backup interface
[ 1088.356458][T17148] bond322: (slave bridge159): Releasing active interface
[ 1088.361737][T17148] bond324: (slave ip6gretap0): Releasing active interface
[ 1088.366700][T17148] bond326: (slave veth108): Releasing active interface
[ 1088.371291][T17148] bond339: (slave veth116): Releasing backup interface
[ 1088.377589][T17148] bond340: (slave bond341): Releasing backup interface
[ 1088.382848][T17148] bond343: (slave veth120): Releasing active interface
[ 1088.390112][T17148] bond346: (slave bond347): Releasing backup interface
[ 1088.394700][T17148] bond348: (slave bridge166): Releasing active interface
[ 1088.399298][T17148] bond355: (slave veth126): Releasing backup interface
[ 1088.405892][T17148] bond365: (slave vcan5): Releasing backup interface
[ 1088.407876][T17148] vcan5: left promiscuous mode
[ 1088.412080][T17148] bond368: (slave veth136): Releasing active interface
[ 1088.418879][T17148] bond370: (slave bridge169): Releasing active interface
[ 1088.450991][T17157] ip6tnl14: entered allmulticast mode
[ 1088.459609][   T13] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[ 1088.618974][T17178] 8021q: adding VLAN 0 to HW filter on device bond322
[ 1088.657417][T17177] bond257: entered promiscuous mode
[ 1088.659835][T17177] 8021q: adding VLAN 0 to HW filter on device bond257
[ 1088.688675][T17178] 8021q: adding VLAN 0 to HW filter on device bond323
[ 1088.694008][T17178] bond322: (slave bond323): Enslaving as an active interface with an up link
[ 1088.714880][T17185] 8021q: adding VLAN 0 to HW filter on device bond258
[ 1088.730001][T17185] bond258: entered promiscuous mode
[ 1088.734573][T17185] bond257: (slave bond258): Enslaving as an active interface with an up link
[ 1088.757171][T17188] bond322 (unregistering): (slave bond323): Releasing backup interface
[ 1088.770053][T17188] bond322 (unregistering): Released all slaves
[ 1088.861600][T17196] netlink: 'syz.1.10584': attribute type 1 has an invalid length.
[ 1088.927144][T17205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1088.995203][T17203] dvmrp1: entered allmulticast mode
[ 1089.002168][T17205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1089.052264][T17212] netlink: 'syz.0.10588': attribute type 1 has an invalid length.
[ 1089.078159][T17212] 8021q: adding VLAN 0 to HW filter on device bond322
[ 1090.914499][ T6331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1090.935432][T17212] bond322: (slave veth125): Enslaving as an active interface with a down link
[ 1090.947621][T17215] 8021q: adding VLAN 0 to HW filter on device batadv18
[ 1090.953165][T17215] bond322: (slave batadv18): making interface the new active one
[ 1090.958693][T17215] batadv18: entered promiscuous mode
[ 1090.961251][T17215] bond322: (slave batadv18): Enslaving as an active interface with an up link
[ 1091.005803][T17216] bond322 (unregistering): (slave veth125): Releasing active interface
[ 1091.017131][T17216] bond322 (unregistering): (slave batadv18): Releasing active interface
[ 1091.026505][T17216] bond322 (unregistering): Released all slaves
[ 1091.113452][T17223] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1091.118277][T17223] __nla_validate_parse: 145 callbacks suppressed
[ 1091.118293][T17223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10590'.
[ 1091.156660][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10589'.
[ 1091.196257][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10592'.
[ 1091.872905][    T9] syz0: Port: 1 Link DOWN
[ 1091.874135][T10632] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.877973][T10632] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.880675][T10632] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.883670][T10632] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.886721][T10632] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.889396][T10632] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.892041][T10632] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.895746][T10632] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.946627][T17243] netlink: 'syz.1.10595': attribute type 1 has an invalid length.
[ 1091.976835][T17243] bond372: entered promiscuous mode
[ 1091.979439][T17243] 8021q: adding VLAN 0 to HW filter on device bond372
[ 1091.987034][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10595'.
[ 1092.015120][T17243] netlink: 'syz.1.10595': attribute type 1 has an invalid length.
[ 1092.028793][T17243] bond372: (slave bridge170): making interface the new active one
[ 1092.031658][T17243] bridge170: entered promiscuous mode
[ 1092.035384][T17243] bond372: (slave bridge170): Enslaving as an active interface with an up link
[ 1092.111876][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10597'.
[ 1092.258485][T17264] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[ 1092.284572][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'.
[ 1092.288539][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'.
[ 1092.294070][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'.
[ 1092.298405][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'.
[ 1092.311967][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'.
[ 1092.344067][T17274] IPv6: Can't replace route, no match found
[ 1092.347161][T17268] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1092.352336][T17268] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1092.355978][T17268] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1092.363686][T17268] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1092.368777][T17268] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1092.371806][T17268] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1092.376982][T17268] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1092.381430][T17268] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1092.385427][T17268] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1092.388193][T17268] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1092.393162][T17268] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1092.405685][ T5728] syz0: Port: 1 Link ACTIVE
[ 1092.405735][ T5477] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.412831][ T5477] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.417009][ T5477] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.420756][ T5477] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.430613][ T5477] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.435617][ T5477] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.441670][ T5477] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.447684][ T5477] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1092.454404][T17278] openvswitch: : Dropping previously announced user features
[ 1092.829408][T17298] netlink: 'syz.0.10611': attribute type 10 has an invalid length.
[ 1092.881110][T17301] bridge185: the hash_elasticity option has been deprecated and is always 16
[ 1093.122007][   T55] block nbd0: Receive control failed (result -32)
[ 1093.126973][T17314] lo speed is unknown, defaulting to 1000
[ 1093.198755][T17317] tipc: Resetting bearer <eth:syzkaller0>
[ 1093.489278][T17323] netlink: 'syz.2.10617': attribute type 1 has an invalid length.
[ 1093.654285][T17328] bond259: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 1093.674492][T17328] bond259: (slave vxcan2): Error -95 calling set_mac_address
[ 1093.725747][T17323] bond259: (slave bridge146): Enslaving as an active interface with a down link
[ 1093.732379][T17314] lo speed is unknown, defaulting to 1000
[ 1093.969673][T17340] netlink: 'syz.2.10621': attribute type 1 has an invalid length.
[ 1094.151136][T17360] netlink: 'syz.2.10626': attribute type 4 has an invalid length.
[ 1094.319491][T17377] netlink: 'syz.2.10630': attribute type 4 has an invalid length.
[ 1094.462456][T17383] geneve1: entered promiscuous mode
[ 1094.469928][T17389] tipc: Invalid UDP bearer configuration
[ 1094.469960][T17389] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1094.472140][T17387] sctp: [Deprecated]: syz.0.10633 (pid 17387) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1094.472140][T17387] Use struct sctp_sack_info instead
[ 1094.541301][T17390] netlink: 'syz.0.10633': attribute type 1 has an invalid length.
[ 1094.578661][T17390] netlink: 'syz.0.10633': attribute type 1 has an invalid length.
[ 1094.777746][T17402] bridge171: the hash_elasticity option has been deprecated and is always 16
[ 1094.780430][T17402] bridge171: entered allmulticast mode
[ 1094.980449][T17416] lo speed is unknown, defaulting to 1000
[ 1095.119823][T17416] lo speed is unknown, defaulting to 1000
[ 1095.758704][T17468] netlink: 'syz.1.10653': attribute type 1 has an invalid length.
[ 1095.822529][T17468] 8021q: adding VLAN 0 to HW filter on device bond373
[ 1095.866861][T17468] nbd: must specify at least one socket
[ 1095.878049][T17468] nbd: must specify at least one socket
[ 1096.124245][T17485] __nla_validate_parse: 68 callbacks suppressed
[ 1096.124263][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10657'.
[ 1096.309338][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10657'.
[ 1096.333882][T17493] bond260: (slave vxcan2): The slave device specified does not support setting the MAC address
[ 1096.339683][T17493] bond260: (slave vxcan2): Error -95 calling set_mac_address
[ 1096.380496][T17490] macvlan0: entered promiscuous mode
[ 1096.385016][T17490] macvlan0: entered allmulticast mode
[ 1096.389896][T17490] bond260: entered promiscuous mode
[ 1096.390958][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10659'.
[ 1096.393531][T17490] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1096.404345][T17490] bond260: left promiscuous mode
[ 1096.447761][T17495] bond374: entered promiscuous mode
[ 1096.450282][T17495] 8021q: adding VLAN 0 to HW filter on device bond374
[ 1096.473511][T17497] bridge172: entered promiscuous mode
[ 1096.476602][T17497] bond374: (slave bridge172): Enslaving as an active interface with an up link
[ 1096.488582][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10659'.
[ 1096.512041][T17495] bond374 (unregistering): (slave bridge172): Releasing backup interface
[ 1096.516586][T17499] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10660'.
[ 1096.516793][T17495] bridge172: left promiscuous mode
[ 1096.527984][T17495] bond374 (unregistering): Released all slaves
[ 1096.579066][T17499] bond261 (unregistering): Released all slaves
[ 1096.706746][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10663'.
[ 1096.720739][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10663'.
[ 1096.729923][T17510] macvlan7: entered allmulticast mode
[ 1096.731672][T17510] hsr0: entered allmulticast mode
[ 1096.734110][T17510] : entered allmulticast mode
[ 1096.736243][T17510] 8021q: adding VLAN 0 to HW filter on device macvlan7
[ 1096.739099][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10662'.
[ 1096.844284][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10668'.
[ 1096.848954][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10668'.
[ 1096.866181][T17529] wireguard: wg0: Could not create IPv4 socket
[ 1096.873302][T17529] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1096.884164][ T7159] lo speed is unknown, defaulting to 1000
[ 1096.894446][ T7159] syz2: Port: 1 Link ACTIVE
[ 1096.898391][ T7159] lo speed is unknown, defaulting to 1000
[ 1097.130800][T17547] veth175: entered allmulticast mode
[ 1097.179710][T17547] veth175: entered allmulticast mode
[ 1097.238743][T17547] veth175: entered allmulticast mode
[ 1097.300647][T17547] veth175: entered allmulticast mode
[ 1097.366394][T17547] veth175: entered allmulticast mode
[ 1097.422986][T17547] veth175: entered allmulticast mode
[ 1097.492355][T17547] veth175: entered allmulticast mode
[ 1097.558953][T17547] veth175: entered allmulticast mode
[ 1097.603980][T17547] veth175: entered allmulticast mode
[ 1097.663279][T17547] veth175: entered allmulticast mode
[ 1097.720072][T17547] veth175: entered allmulticast mode
[ 1097.783895][T17547] veth175: entered allmulticast mode
[ 1097.841787][T17547] veth175: entered allmulticast mode
[ 1097.889397][T17547] veth175: entered allmulticast mode
[ 1100.027910][T17541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1100.171258][T17570] lo speed is unknown, defaulting to 1000
[ 1100.292337][T17587] validate_nla: 1 callbacks suppressed
[ 1100.292354][T17587] netlink: 'syz.2.10682': attribute type 4 has an invalid length.
[ 1100.300904][T17587] netlink: 'syz.2.10682': attribute type 4 has an invalid length.
[ 1100.312270][ T5697] lo speed is unknown, defaulting to 1000
[ 1100.316782][ T5697] sqz0: Port: 1 Link ACTIVE
[ 1100.319917][ T5697] lo speed is unknown, defaulting to 1000
[ 1100.328207][T17587] netlink: 'syz.2.10682': attribute type 4 has an invalid length.
[ 1100.346689][ T5697] lo speed is unknown, defaulting to 1000
[ 1100.353547][ T5697] sqz0: Port: 1 Link DOWN
[ 1100.358914][ T1007] lo speed is unknown, defaulting to 1000
[ 1100.419165][T17592] netlink: 'syz.1.10683': attribute type 1 has an invalid length.
[ 1100.458714][T17570] lo speed is unknown, defaulting to 1000
[ 1100.534119][T17600] netlink: 'syz.2.10684': attribute type 13 has an invalid length.
[ 1100.541523][T17600] netlink: 'syz.2.10684': attribute type 17 has an invalid length.
[ 1100.631793][T17594] veth140: entered allmulticast mode
[ 1100.641148][T17600] erspan0: left promiscuous mode
[ 1100.674797][T17600] geneve1: left promiscuous mode
[ 1100.681273][T17600] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[ 1100.687886][T17600] erspan0: entered promiscuous mode
[ 1100.690093][T17600] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1100.696454][T17600] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[ 1100.698823][T17600] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[ 1100.701835][T17600] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[ 1100.707611][ T7159] lo speed is unknown, defaulting to 1000
[ 1100.713340][ T7159] sqz0: Port: 1 Link ACTIVE
[ 1100.716368][ T6287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.719078][ T6287] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.722070][ T6287] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.726021][ T7159] lo speed is unknown, defaulting to 1000
[ 1100.727978][ T6287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.828338][T17606] siw: device registration error -23
[ 1100.833600][T17607] smbdirect: ib_dev[syz1] removed
[ 1100.946508][T17611] SET target dimension over the limit!
[ 1100.978946][T17612] openvswitch: netlink: Key 12 has unexpected len 25 expected 2
[ 1100.979658][T17611] openvswitch: netlink: Key 12 has unexpected len 25 expected 2
[ 1101.451247][T17619] __nla_validate_parse: 20 callbacks suppressed
[ 1101.451265][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10689'.
[ 1101.480087][T17619] lo speed is unknown, defaulting to 1000
[ 1101.513339][T17621] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10689'.
[ 1101.518839][T17621] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10689'.
[ 1101.529419][T17621] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[ 1101.599024][T17619] lo speed is unknown, defaulting to 1000
[ 1101.678033][T17625] 1{X: entered promiscuous mode
[ 1101.747411][T17627] lo speed is unknown, defaulting to 1000
[ 1102.009972][T17627] lo speed is unknown, defaulting to 1000
[ 1102.123302][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10692'.
[ 1103.169209][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10698'.
[ 1103.188288][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10698'.
[ 1103.235971][T17650] netlink: 'syz.2.10699': attribute type 1 has an invalid length.
[ 1103.324068][T17650] 8021q: adding VLAN 0 to HW filter on device bond261
[ 1103.574078][T17665] netlink: 'syz.2.10702': attribute type 4 has an invalid length.
[ 1103.577086][T17664] netlink: 'syz.2.10702': attribute type 4 has an invalid length.
[ 1103.593327][ T7159] lo speed is unknown, defaulting to 1000
[ 1103.598481][ T7159] sqz0: Port: 1 Link DOWN
[ 1103.601861][ T7159] lo speed is unknown, defaulting to 1000
[ 1103.711238][T17670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10704'.
[ 1103.818803][T17676] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10705'.
[ 1103.889847][T17679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10706'.
[ 1103.988040][T17651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1104.260366][T17716] netlink: 'syz.0.10714': attribute type 1 has an invalid length.
[ 1104.284714][T17716] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10714'.
[ 1104.498129][T17731] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1104.525716][T17731] bond325: (slave bridge187): Enslaving as a backup interface with an up link
[ 1104.610003][T17738] geneve1: left promiscuous mode
[ 1104.617125][T17738] bond0: left promiscuous mode
[ 1104.619741][T17738] team0: left promiscuous mode
[ 1104.623344][T17738] bond360: left promiscuous mode
[ 1104.625269][T17738] bond360: left allmulticast mode
[ 1104.627783][T17738] bond364: left promiscuous mode
[ 1104.630184][T17738] bond365: left promiscuous mode
[ 1104.634251][T17738] bond369: left promiscuous mode
[ 1104.648399][T17738] bond372: left promiscuous mode
[ 1104.652973][T17738] bridge170: left promiscuous mode
[ 1104.668864][T17738] bridge171: left allmulticast mode
[ 1104.681338][T17738] veth140: left allmulticast mode
[ 1104.693347][T32438] lo speed is unknown, defaulting to 1000
[ 1104.698975][T32438] syz2: Port: 1 Link DOWN
[ 1104.700610][T32438] lo speed is unknown, defaulting to 1000
[ 1104.762306][T17745] 8021q: adding VLAN 0 to HW filter on device bond262
[ 1104.837638][T17761] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[ 1120.087167][T17777] validate_nla: 2 callbacks suppressed
[ 1120.087184][T17777] netlink: 'syz.1.10727': attribute type 3 has an invalid length.
[ 1120.110155][T17780] bridge147: entered promiscuous mode
[ 1120.171745][T17786] __nla_validate_parse: 4 callbacks suppressed
[ 1120.171763][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10729'.
[ 1120.176041][T17788] netlink: 'syz.1.10730': attribute type 4 has an invalid length.
[ 1120.188702][ T5697] lo speed is unknown, defaulting to 1000
[ 1120.191814][ T5697] syz2: Port: 1 Link ACTIVE
[ 1120.196411][ T5697] lo speed is unknown, defaulting to 1000
[ 1120.197268][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10729'.
[ 1120.278609][T17796] netlink: 'syz.0.10732': attribute type 1 has an invalid length.
[ 1120.320304][T17796] 8021q: adding VLAN 0 to HW filter on device bond326
[ 1120.398761][T17807] netlink: 'syz.1.10734': attribute type 1 has an invalid length.
[ 1120.431538][T17807] 8021q: adding VLAN 0 to HW filter on device bond375
[ 1120.459308][T17807] bond375: (slave geneve0): making interface the new active one
[ 1120.466325][T17807] bond375: (slave geneve0): Enslaving as an active interface with an up link
[ 1120.469588][T10632] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[ 1120.475925][T10632] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[ 1120.480714][T10632] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[ 1120.505239][T10632] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[ 1123.168435][T17790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1123.292225][T17821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10736'.
[ 1123.391926][T17824] bond263 (unregistering): Released all slaves
[ 1123.521637][T17837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10743'.
[ 1123.690496][   T34] audit: type=1800 audit(1778113309.720:30): pid=17849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10746" name="blkio.bfq.time_recursive" dev="tmpfs" ino=18489 res=0 errno=0
[ 1123.908734][T17873] : option downdelay: invalid value (18446744073709547007)
[ 1123.911187][T17873] : option downdelay: allowed values 0 - 2147483647
[ 1123.916050][T17873]  (unregistering): Released all slaves
[ 1123.965778][T17866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10752'.
[ 1124.086522][T17881] netlink: 'syz.2.10757': attribute type 1 has an invalid length.
[ 1124.088900][T17881] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10757'.
[ 1124.093176][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10757'.
[ 1124.132523][T17885] netlink: 'syz.2.10759': attribute type 1 has an invalid length.
[ 1124.176135][T17885] 8021q: adding VLAN 0 to HW filter on device bond263
[ 1124.185092][T17890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10758'.
[ 1124.217643][T17891] bond376: entered promiscuous mode
[ 1124.220257][T17891] 8021q: adding VLAN 0 to HW filter on device bond376
[ 1124.224666][T17891] bridge0: port 1(bond376) entered blocking state
[ 1124.227484][T17891] bridge0: port 1(bond376) entered disabled state
[ 1124.230465][T17891] bond376: entered allmulticast mode
[ 1124.394842][T17907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10765'.
[ 1124.455876][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10767'.
[ 1124.720456][T17923] netlink: 'syz.0.10770': attribute type 13 has an invalid length.
[ 1124.726431][T17923] netlink: 'syz.0.10770': attribute type 17 has an invalid length.
[ 1125.051091][T17923] 1{X: left promiscuous mode
[ 1125.092188][T17923] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1125.099755][ T5677] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1125.139589][ T5677] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1125.145722][ T5677] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1125.169941][ T5677] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1125.210876][T17935] bond327 (unregistering): Released all slaves
[ 1125.326611][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10775'.
[ 1125.335436][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10775'.
[ 1125.342011][T17948] netlink: 'syz.2.10776': attribute type 1 has an invalid length.
[ 1125.368263][T17949] bond327: option lacp_active: invalid value (8)
[ 1125.373113][T17949] bond327 (unregistering): Released all slaves
[ 1125.465771][T17959] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10778'.
[ 1125.499285][T17961] pim6reg1: entered promiscuous mode
[ 1125.500978][T17961] pim6reg1: entered allmulticast mode
[ 1125.535360][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10778'.
[ 1125.544221][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10778'.
[ 1125.589060][T17959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10778'.
[ 1125.686300][T17975] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1125.697292][T17975] bond10: (slave lo): Enslaving as an active interface with an up link
[ 1125.700612][T17975] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1125.735810][   T24] lo speed is unknown, defaulting to 1000
[ 1125.756662][   T24] lo speed is unknown, defaulting to 1000
[ 1125.760668][ T1007] lo speed is unknown, defaulting to 1000
[ 1125.822369][T17985] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1126.007842][T17991] lo speed is unknown, defaulting to 1000
[ 1126.110386][T17991] lo speed is unknown, defaulting to 1000
[ 1126.512981][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10789'.
[ 1126.522704][T18001] netlink: 'syz.2.10789': attribute type 30 has an invalid length.
[ 1126.525578][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10789'.
[ 1126.528230][T18001] netlink: 'syz.2.10789': attribute type 30 has an invalid length.
[ 1126.639266][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10793'.
[ 1126.646032][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10793'.
[ 1126.677719][T18008] ipip7: entered promiscuous mode
[ 1126.777199][T18015] netlink: 'syz.2.10795': attribute type 1 has an invalid length.
[ 1126.863459][T18015] 8021q: adding VLAN 0 to HW filter on device bond265
[ 1126.875256][T18017] netlink: 'syz.0.10794': attribute type 2 has an invalid length.
[ 1127.094430][T18033] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1127.099970][T18033] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[ 1127.105040][T18033] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[ 1127.164947][T18036] netlink: 'syz.1.10801': attribute type 1 has an invalid length.
[ 1127.189612][T18036] 8021q: adding VLAN 0 to HW filter on device bond377
[ 1127.336756][T18047] vxcan0: entered allmulticast mode
[ 1127.408918][T18050] netlink: 'syz.2.10805': attribute type 13 has an invalid length.
[ 1127.411968][T18050] netlink: 'syz.2.10805': attribute type 17 has an invalid length.
[ 1127.627916][T18050] erspan0: left promiscuous mode
[ 1127.661628][T18050] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[ 1127.674273][T18050] erspan0: entered promiscuous mode
[ 1127.677122][T18050] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1127.681317][T18050] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[ 1127.737968][    T9] lo speed is unknown, defaulting to 1000
[ 1127.742378][    T9] sqz0: Port: 1 Link ACTIVE
[ 1127.745603][    T9] lo speed is unknown, defaulting to 1000
[ 1127.866219][T18065] lo speed is unknown, defaulting to 1000
[ 1127.987281][T18065] lo speed is unknown, defaulting to 1000
[ 1128.662178][T18094] 0{X: renamed from 31{X
[ 1128.665292][T18094] 0{X: entered allmulticast mode
[ 1128.669533][T18094] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 1128.941349][T18102] syzkaller1: entered promiscuous mode
[ 1128.943631][T18102] syzkaller1: entered allmulticast mode
[ 1129.723793][T18119] sctp: [Deprecated]: syz.2.10823 (pid 18119) Use of int in maxseg socket option.
[ 1129.723793][T18119] Use struct sctp_assoc_value instead
[ 1130.081829][T18126] lo speed is unknown, defaulting to 1000
[ 1130.254302][T18126] lo speed is unknown, defaulting to 1000
[ 1131.079681][T18142] __nla_validate_parse: 10 callbacks suppressed
[ 1131.079698][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10829'.
[ 1131.575510][T18167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10836'.
[ 1131.579557][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10836'.
[ 1131.706597][T18173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10837'.
[ 1131.744190][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10838'.
[ 1131.878596][T18179] netlink: 'syz.1.10840': attribute type 1 has an invalid length.
[ 1131.880988][T18179] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10840'.
[ 1133.759954][T18190] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10842'.
[ 1133.770162][T18190] tipc: Invalid UDP bearer configuration
[ 1133.770207][T18190] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1133.776971][T18190] netlink: 'syz.0.10842': attribute type 58 has an invalid length.
[ 1133.784461][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10842'.
[ 1133.914843][T18193] syzkaller1: entered promiscuous mode
[ 1133.923750][T18193] syzkaller1: entered allmulticast mode
[ 1134.076171][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10846'.
[ 1134.111918][T18206] netlink: 'syz.0.10846': attribute type 13 has an invalid length.
[ 1134.121952][T18207] netlink: 'syz.0.10846': attribute type 13 has an invalid length.
[ 1134.128770][T18206] netlink: 'syz.0.10846': attribute type 17 has an invalid length.
[ 1134.131788][T18207] netlink: 'syz.0.10846': attribute type 17 has an invalid length.
[ 1134.136481][T18206] netlink: 'syz.0.10846': attribute type 27 has an invalid length.
[ 1134.139525][T18207] netlink: 'syz.0.10846': attribute type 27 has an invalid length.
[ 1134.404327][T18236] netlink: 'syz.2.10853': attribute type 1 has an invalid length.
[ 1134.407250][T18236] netlink: 'syz.2.10853': attribute type 2 has an invalid length.
[ 1134.558472][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10854'.
[ 1134.739585][T18245] bond267: entered promiscuous mode
[ 1134.742119][T18245] 8021q: adding VLAN 0 to HW filter on device bond267
[ 1134.891737][T18254] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1135.190887][T18283] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[ 1135.221847][T18280] 8021q: adding VLAN 0 to HW filter on device bond327
[ 1135.386025][T18304] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1135.391213][T18304] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1135.394229][T18304] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1135.397368][T18304] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1135.406136][T18304] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1135.607693][T18324] bond328 (unregistering): Released all slaves
[ 1135.620493][T18329] openvswitch: : Dropping previously announced user features
[ 1135.700245][T18338] xt_TCPMSS: Only works on TCP SYN packets
[ 1138.611349][T18331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1138.761922][T18356] __nla_validate_parse: 12 callbacks suppressed
[ 1138.761936][T18356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10885'.
[ 1138.785264][T18358] validate_nla: 4 callbacks suppressed
[ 1138.785279][T18358] netlink: 'syz.0.10884': attribute type 1 has an invalid length.
[ 1138.791351][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10884'.
[ 1138.796771][T18358] netlink: 'syz.0.10884': attribute type 2 has an invalid length.
[ 1138.858738][T18362] bond328: entered allmulticast mode
[ 1138.873644][T18362] macvlan10: entered promiscuous mode
[ 1138.875524][T18362] macvlan10: entered allmulticast mode
[ 1138.878801][T18362] bond328: entered promiscuous mode
[ 1138.880961][T18362] 8021q: adding VLAN 0 to HW filter on device macvlan10
[ 1138.889973][T18362] bond328: left promiscuous mode
[ 1138.957089][T18366] pim6reg1: entered promiscuous mode
[ 1138.959402][T18366] pim6reg1: entered allmulticast mode
[ 1139.045053][T18368] netlink: 'syz.0.10888': attribute type 4 has an invalid length.
[ 1139.053158][T18368] netlink: 'syz.0.10888': attribute type 4 has an invalid length.
[ 1139.192411][T18377] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10890'.
[ 1139.379974][T18391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10893'.
[ 1139.475694][T18401] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10895'.
[ 1139.526548][T18406] netlink: 'syz.0.10896': attribute type 1 has an invalid length.
[ 1139.564787][T18406] bond329: entered promiscuous mode
[ 1139.567360][T18406] 8021q: adding VLAN 0 to HW filter on device bond329
[ 1139.571833][T18406] bridge0: Device is already in use.
[ 1139.613738][T18412] netlink: 'syz.2.10897': attribute type 1 has an invalid length.
[ 1139.633067][T18412] 8021q: adding VLAN 0 to HW filter on device bond268
[ 1139.684582][T18412] bond268: (slave veth180): Enslaving as an active interface with a down link
[ 1139.774913][T18425] netlink: 'syz.1.10900': attribute type 1 has an invalid length.
[ 1139.792931][T18425] bond379: entered promiscuous mode
[ 1139.796355][T18425] 8021q: adding VLAN 0 to HW filter on device bond379
[ 1139.808856][T18425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10900'.
[ 1139.816420][T18425] bond379: entered allmulticast mode
[ 1139.834864][T18425] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10900'.
[ 1139.890052][T18433] veth182: entered promiscuous mode
[ 1139.902361][T18435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10903'.
[ 1139.919426][T18435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10903'.
[ 1139.929073][T18437] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1139.961300][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10905'.
[ 1139.976692][T18443] netlink: 'syz.1.10907': attribute type 4 has an invalid length.
[ 1139.989640][T18443] netlink: 'syz.1.10907': attribute type 4 has an invalid length.
[ 1140.180305][ T5477] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1140.184559][ T5477] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1140.188585][ T5477] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1140.192407][ T5477] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[ 1140.424803][T18451] bridge188: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1140.459176][T18460] netlink: 'syz.2.10911': attribute type 3 has an invalid length.
[ 1140.497385][T18460] block nbd2: NBD_DISCONNECT
[ 1140.509160][T18462] dvmrp0: entered allmulticast mode
[ 1140.597799][T18473] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[ 1140.669147][T18474] lo speed is unknown, defaulting to 1000
[ 1140.715903][T18483] 8021q: adding VLAN 0 to HW filter on device bond269
[ 1141.056087][T18497] wireguard: wg0: Could not create IPv4 socket
[ 1141.058298][T18497] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1141.110656][T18474] lo speed is unknown, defaulting to 1000
[ 1141.907694][T18522] bond270: option all_slaves_active: invalid value (5)
[ 1141.911849][T18522] bond270 (unregistering): Released all slaves
[ 1142.319134][T18548] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.364495][T18548] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.418219][T18548] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.501201][T18548] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.613814][ T5477] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.640979][ T5477] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.672070][ T5477] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.688303][ T5477] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1142.896822][T18590] bond270: (slave bridge149): making interface the new active one
[ 1142.904959][T18590] bond270: (slave bridge149): Enslaving as an active interface with an up link
[ 1142.925229][T18590] xt_hashlimit: max too large, truncated to 1048576
[ 1142.940569][T18590] macvlan3: entered promiscuous mode
[ 1142.945603][T18590] macvlan3: entered allmulticast mode
[ 1142.949185][T18590] bond270: entered promiscuous mode
[ 1142.951229][T18590] bridge149: entered promiscuous mode
[ 1142.955580][T18590] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1142.959674][T18590] bond270: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1142.968480][T18590] bond270: left promiscuous mode
[ 1142.970525][T18590] bridge149: left promiscuous mode
[ 1143.657493][T18619] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode
[ 1143.660505][T18619] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode
[ 1143.786428][T18630] __nla_validate_parse: 10 callbacks suppressed
[ 1143.786441][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10951'.
[ 1144.115362][ T5697] lo speed is unknown, defaulting to 1000
[ 1144.118281][ T5477] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.121800][ T5697] sqz0: Port: 1 Link DOWN
[ 1144.124675][ T5477] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.131766][ T5697] lo speed is unknown, defaulting to 1000
[ 1144.134625][ T5477] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.140321][ T5477] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.188578][T18649] validate_nla: 4 callbacks suppressed
[ 1144.188596][T18649] netlink: 'syz.2.10956': attribute type 39 has an invalid length.
[ 1144.213457][T18649] bond267 (unregistering): Released all slaves
[ 1144.248260][T18653] pim6reg1: entered allmulticast mode
[ 1144.331959][T18652] bond0: left allmulticast mode
[ 1144.337063][T18652] bridge175: port 1(bond0) entered disabled state
[ 1144.376867][T18658] netlink: 'syz.2.10959': attribute type 2 has an invalid length.
[ 1144.383211][T18658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10959'.
[ 1144.388418][T18658] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1144.391439][T18658] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[ 1144.394346][T18658] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[ 1144.429825][T18665] netlink: 'syz.1.10962': attribute type 2 has an invalid length.
[ 1144.435299][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10962'.
[ 1144.529736][T18667] netlink: 'syz.0.10963': attribute type 1 has an invalid length.
[ 1144.533746][T18667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10963'.
[ 1144.591495][T18681] netlink: 'syz.0.10965': attribute type 11 has an invalid length.
[ 1145.280211][T18728] lo speed is unknown, defaulting to 1000
[ 1145.303816][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10972'.
[ 1145.307437][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10972'.
[ 1145.314533][T18732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10973'.
[ 1145.346936][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10973'.
[ 1145.353718][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10973'.
[ 1145.358330][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10973'.
[ 1145.426465][T18737] netlink: 'syz.0.10974': attribute type 1 has an invalid length.
[ 1145.474746][T18737] 8021q: adding VLAN 0 to HW filter on device bond330
[ 1145.560259][T18737] bond330: (slave veth127): Enslaving as an active interface with a down link
[ 1145.607678][T18728] lo speed is unknown, defaulting to 1000
[ 1145.765306][T18748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1145.913324][T18756] netlink: 'syz.2.10979': attribute type 10 has an invalid length.
[ 1146.072240][T18766] netlink: 'syz.1.10981': attribute type 14 has an invalid length.
[ 1146.188600][T18770] vlan20: entered promiscuous mode
[ 1146.193056][T18770] bridge0: entered promiscuous mode
[ 1146.360593][T18781] : renamed from bond0
[ 1146.640864][T18788] netlink: 'syz.1.10987': attribute type 1 has an invalid length.
[ 1146.697561][T18788] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1146.741367][T18794] netlink: 'syz.2.10989': attribute type 1 has an invalid length.
[ 1146.810225][T18796] bond381: entered allmulticast mode
[ 1146.815837][T18796] 8021q: adding VLAN 0 to HW filter on device bond381
[ 1146.826826][T18799] batadv13: entered allmulticast mode
[ 1146.920314][T18801] lo speed is unknown, defaulting to 1000
[ 1147.110271][T18806] netlink: 'syz.0.10993': attribute type 16 has an invalid length.
[ 1147.217004][T18806] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1147.229406][T18801] lo speed is unknown, defaulting to 1000
[ 1147.391655][T18827] macsec5: entered promiscuous mode
[ 1147.746511][T18847] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1148.266157][T18871] erspan0: left promiscuous mode
[ 1148.301637][T18871] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[ 1148.308810][T18871] erspan0: entered promiscuous mode
[ 1148.311819][T18871] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1148.317063][T18871] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[ 1148.319225][T18871] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[ 1148.338123][ T5697] lo speed is unknown, defaulting to 1000
[ 1148.342188][ T5697] sqz0: Port: 1 Link ACTIVE
[ 1148.350048][T10632] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.353084][T10632] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.388637][ T5697] lo speed is unknown, defaulting to 1000
[ 1148.392151][T10632] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.395285][T10632] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.677714][T18880] bond267: entered allmulticast mode
[ 1148.706165][T18880] macvlan3: entered promiscuous mode
[ 1148.708156][T18880] macvlan3: entered allmulticast mode
[ 1148.712234][T18880] bond267: entered promiscuous mode
[ 1148.715516][T18880] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1148.732975][T18880] bond267: left promiscuous mode
[ 1148.828961][T18886] __nla_validate_parse: 14 callbacks suppressed
[ 1148.828978][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11014'.
[ 1148.875500][T18885] bond382: entered promiscuous mode
[ 1148.878529][T18885] 8021q: adding VLAN 0 to HW filter on device bond382
[ 1148.895084][T18890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11015'.
[ 1148.924500][T18890] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1148.939337][T18894] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11016'.
[ 1148.992254][T18890] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.035825][T18890] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.154114][T18910] 8021q: adding VLAN 0 to HW filter on device bond331
[ 1149.159315][T18890] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.191103][T18911] bond331: (slave veth129): Enslaving as an active interface with a down link
[ 1149.250550][T18915] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11020'.
[ 1149.291856][ T6287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.326387][ T6287] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.330029][T18915] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11020'.
[ 1149.352009][T18919] validate_nla: 6 callbacks suppressed
[ 1149.352025][T18919] netlink: 'syz.0.11021': attribute type 1 has an invalid length.
[ 1149.361164][ T6287] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.365943][ T6287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.400426][T18919] bond332: entered promiscuous mode
[ 1149.402409][T18919] 8021q: adding VLAN 0 to HW filter on device bond332
[ 1149.406718][T18921] bridge0: Device is already in use.
[ 1149.438443][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11021'.
[ 1149.531726][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11023'.
[ 1149.587220][T18942] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11025'.
[ 1149.661759][T18947] pim6reg: entered allmulticast mode
[ 1149.727397][T18949] lo speed is unknown, defaulting to 1000
[ 1149.836539][T18952] netlink: 'syz.1.11028': attribute type 1 has an invalid length.
[ 1149.879892][T18952] bond383: entered promiscuous mode
[ 1149.883802][T18952] 8021q: adding VLAN 0 to HW filter on device bond383
[ 1149.905022][T18949] lo speed is unknown, defaulting to 1000
[ 1149.907490][T18952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11028'.
[ 1149.918669][T18952] bond383: left promiscuous mode
[ 1149.920957][T18952] bond383: entered allmulticast mode
[ 1149.958100][T18952] bond383: (slave bridge177): making interface the new active one
[ 1149.961176][T18952] bridge177: entered allmulticast mode
[ 1149.965526][T18952] bond383: (slave bridge177): Enslaving as an active interface with an up link
[ 1150.102436][T18973] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1150.107530][T18973] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1150.110533][T18973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11033'.
[ 1150.175127][T18975] bond384 (unregistering): Released all slaves
[ 1150.198662][T18978] netlink: 'syz.0.11035': attribute type 1 has an invalid length.
[ 1150.284204][T18978] 8021q: adding VLAN 0 to HW filter on device bond333
[ 1150.789840][T19004] netlink: 'syz.1.11041': attribute type 13 has an invalid length.
[ 1150.795270][T19004] netlink: 'syz.1.11041': attribute type 17 has an invalid length.
[ 1150.915350][T19004] 0{X: left allmulticast mode
[ 1150.941163][T19004] wireguard: wg0: Could not create IPv4 socket
[ 1150.944188][T19004] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1151.065999][T19018] netlink: 'syz.1.11043': attribute type 2 has an invalid length.
[ 1151.073135][T19018] netlink: 'syz.1.11043': attribute type 2 has an invalid length.
[ 1151.394075][T19042] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1151.396502][T19041] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1151.453453][T19046] netlink: 'syz.2.11050': attribute type 12 has an invalid length.
[ 1151.457870][T19044] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1151.654071][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.660633][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.668644][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.672138][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.683322][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.686964][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.694958][T19051] sctp: [Deprecated]: syz.2.11050 (pid 19051) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1151.694958][T19051] Use struct sctp_sack_info instead
[ 1151.695012][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.708183][T19051] sctp: [Deprecated]: syz.2.11050 (pid 19051) Use of int in max_burst socket option deprecated.
[ 1151.708183][T19051] Use struct sctp_assoc_value instead
[ 1151.723234][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.726918][T19046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1151.899163][T19077] netlink: 'syz.2.11058': attribute type 1 has an invalid length.
[ 1151.965884][T19077] 8021q: adding VLAN 0 to HW filter on device bond272
[ 1151.981988][T19084] 8021q: adding VLAN 0 to HW filter on device batadv14
[ 1151.994081][T19084] bond272: (slave batadv14): making interface the new active one
[ 1152.000790][T19084] bond272: (slave batadv14): Enslaving as an active interface with an up link
[ 1152.088010][T19091] lo speed is unknown, defaulting to 1000
[ 1152.114753][T19100] netlink: 'syz.1.11063': attribute type 1 has an invalid length.
[ 1152.141214][T19100] syzkaller1: entered promiscuous mode
[ 1152.144933][T19100] syzkaller1: entered allmulticast mode
[ 1152.244018][T19091] lo speed is unknown, defaulting to 1000
[ 1152.322207][T19107] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[ 1152.333781][T19107] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[ 1152.505456][T19117] bond384: entered promiscuous mode
[ 1152.507344][T19117] bond384: entered allmulticast mode
[ 1152.509483][T19117] 8021q: adding VLAN 0 to HW filter on device bond384
[ 1153.357234][T19147] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap19
[ 1153.826271][T19163] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[ 1153.925928][T19175] __nla_validate_parse: 18 callbacks suppressed
[ 1153.925943][T19175] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.11078'.
[ 1153.925970][T19176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11078'.
[ 1154.137219][T19179] 8021q: VLANs not supported on ip6gre0
[ 1154.228981][T19184] lo speed is unknown, defaulting to 1000
[ 1154.401711][T19184] lo speed is unknown, defaulting to 1000
[ 1154.530150][T19194] ipt_REJECT: ECHOREPLY no longer supported.
[ 1154.675732][T19199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11083'.
[ 1154.890087][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11085'.
[ 1154.948648][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11085'.
[ 1155.686768][T19220] validate_nla: 2 callbacks suppressed
[ 1155.686784][T19220] netlink: 'syz.2.11090': attribute type 1 has an invalid length.
[ 1155.697963][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11090'.
[ 1155.788825][T19222] bond334 (unregistering): Released all slaves
[ 1155.905786][T19227] netlink: 'syz.0.11093': attribute type 8 has an invalid length.
[ 1155.915577][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11093'.
[ 1155.955079][T19229] bond273: option all_slaves_active: invalid value (5)
[ 1155.959956][T19229] bond273 (unregistering): Released all slaves
[ 1156.005385][T19232] bridge0: Device is already in use.
[ 1156.060640][T19236] netlink: 'syz.0.11096': attribute type 1 has an invalid length.
[ 1156.093636][T19236] bond334: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1156.098652][T19236] bond334: (slave vxcan1): Error -95 calling set_mac_address
[ 1156.135094][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11096'.
[ 1156.171603][T19241] bond334: (slave bridge190): Enslaving as an active interface with a down link
[ 1156.178317][T19241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11096'.
[ 1156.187324][T19241] 8021q: adding VLAN 0 to HW filter on device bond334
[ 1156.198051][T19241] macvlan10: entered promiscuous mode
[ 1156.199721][T19241] macvlan10: entered allmulticast mode
[ 1156.202296][T19241] bond334: entered promiscuous mode
[ 1156.204989][T19241] 8021q: adding VLAN 0 to HW filter on device macvlan10
[ 1156.209245][T19241] bond334: left promiscuous mode
[ 1156.290495][T19249] netlink: 'syz.2.11099': attribute type 1 has an invalid length.
[ 1156.315610][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11099'.
[ 1156.319419][T19249] 8021q: adding VLAN 0 to HW filter on device bond273
[ 1156.512272][T19260] netlink: 'syz.0.11103': attribute type 1 has an invalid length.
[ 1156.618680][T19268] netlink: 'syz.2.11105': attribute type 8 has an invalid length.
[ 1156.730020][T19275] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1156.841037][T19278] netlink: 'syz.0.11107': attribute type 2 has an invalid length.
[ 1156.874872][T19278] net_ratelimit: 317 callbacks suppressed
[ 1156.874892][T19278] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1156.956401][T19280] netlink: 'syz.0.11108': attribute type 29 has an invalid length.
[ 1157.081001][T19282] IPVS: Scheduler module ip_vs_sip not found
[ 1157.231264][T19287] netlink: 'syz.0.11111': attribute type 8 has an invalid length.
[ 1157.545960][T19303] netlink: 'syz.2.11114': attribute type 1 has an invalid length.
[ 1157.575156][T19303] bond274: entered promiscuous mode
[ 1157.577843][T19303] 8021q: adding VLAN 0 to HW filter on device bond274
[ 1157.901935][T19318] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1157.928001][T19319] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1158.027067][T19327] bond385: Removing last ns target with arp_interval on
[ 1158.090292][T19334] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1158.554338][T19360] bond386: entered promiscuous mode
[ 1158.556445][T19360] 8021q: adding VLAN 0 to HW filter on device bond386
[ 1158.570931][T19360] bond386: (slave bridge178): making interface the new active one
[ 1158.574030][T19360] bridge178: entered promiscuous mode
[ 1158.574452][T19364] SET target dimension over the limit!
[ 1158.578469][T19360] bond386: (slave bridge178): Enslaving as an active interface with an up link
[ 1158.607414][T19361] bond386: (slave bridge179): Enslaving as a backup interface with an up link
[ 1158.630923][T19360] bond386: (slave ipvlan17): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1158.635670][T19360] bond386: (slave ipvlan17): The slave device specified does not support setting the MAC address
[ 1158.881663][T19376] bond276: Unable to set up delay as MII monitoring is disabled
[ 1158.889099][T19376] bond276 (unregistering): Released all slaves
[ 1158.943332][T19379] wireguard: wg0: Could not create IPv4 socket
[ 1158.945868][T19379] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1159.026441][T19385] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 1159.038559][T19385] __nla_validate_parse: 14 callbacks suppressed
[ 1159.038576][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11135'.
[ 1159.139866][T19390] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11137'.
[ 1159.204617][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11140'.
[ 1159.423070][T19402] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode
[ 1159.425951][T19402] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode
[ 1159.512323][T19402] bond379: left promiscuous mode
[ 1159.514831][T19402] bond379: left allmulticast mode
[ 1159.517644][T19402] bond381: left allmulticast mode
[ 1159.519700][T19402] bond382: left promiscuous mode
[ 1159.521599][T19402] bond383: left allmulticast mode
[ 1159.526841][T19402] bridge177: left allmulticast mode
[ 1159.529609][T19402] bond384: left promiscuous mode
[ 1159.531229][T19402] bond384: left allmulticast mode
[ 1159.539773][T19402] bond386: left promiscuous mode
[ 1159.541500][T19402] bridge178: left promiscuous mode
[ 1159.820837][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11145'.
[ 1159.943642][T19418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1159.953986][T19418] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[ 1159.956619][T19418] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[ 1159.988836][T19418] syzkaller0: mtu less than device minimum
[ 1160.457990][T19440] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11150'.
[ 1160.750105][T19449] ..@: renamed from bond_slave_0
[ 1161.099331][T19456] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11153'.
[ 1161.108405][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11153'.
[ 1161.211443][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11154'.
[ 1161.496009][T19466] validate_nla: 12 callbacks suppressed
[ 1161.496026][T19466] netlink: 'syz.2.11156': attribute type 1 has an invalid length.
[ 1161.537109][T19466] 8021q: adding VLAN 0 to HW filter on device bond276
[ 1161.584000][T19466] vlan0: entered promiscuous mode
[ 1161.585700][T19466] bond276: entered promiscuous mode
[ 1161.587332][T19466] vlan0: entered allmulticast mode
[ 1161.588862][T19466] bond276: entered allmulticast mode
[ 1161.640997][T19466] bond276: (slave bridge151): making interface the new active one
[ 1161.646797][T19466] bridge151: entered promiscuous mode
[ 1161.649067][T19466] bridge151: entered allmulticast mode
[ 1161.652481][T19466] bond276: (slave bridge151): Enslaving as an active interface with an up link
[ 1161.750798][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11159'.
[ 1161.753891][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11159'.
[ 1161.949827][T19489] bond387: entered promiscuous mode
[ 1161.952392][T19489] 8021q: adding VLAN 0 to HW filter on device bond387
[ 1161.974872][T19489] netlink: 'syz.1.11163': attribute type 1 has an invalid length.
[ 1162.091402][T19502] tipc: Failed to remove unknown binding: 66,0,0/2955586151:4043246368/4043246370
[ 1162.105128][T19502] tipc: Failed to remove unknown binding: 66,0,0/2955586151:4043246368/4043246369
[ 1162.115062][T19502] tipc: Failed to remove unknown binding: 66,0,0/2955586151:4043246368/4043246370
[ 1162.121124][T19502] tipc: Failed to remove unknown binding: 66,0,0/2955586151:4043246368/4043246369
[ 1162.431474][T19514] netlink: 'syz.2.11169': attribute type 4 has an invalid length.
[ 1162.441255][ T8244] lo speed is unknown, defaulting to 1000
[ 1162.446636][ T8244] sqz0: Port: 1 Link DOWN
[ 1162.452820][ T8244] lo speed is unknown, defaulting to 1000
[ 1162.523398][T19516] bond277: Unable to set peer notification delay as MII monitoring is disabled
[ 1162.528599][T19516] bond277 (unregistering): Released all slaves
[ 1162.879403][T19542] netlink: 'syz.1.11176': attribute type 3 has an invalid length.
[ 1163.035435][T19545] netlink: 'syz.1.11177': attribute type 10 has an invalid length.
[ 1163.039660][T19544] netlink: 'syz.1.11177': attribute type 10 has an invalid length.
[ 1163.068616][T19547] syzkaller1: entered promiscuous mode
[ 1163.070888][T19547] syzkaller1: entered allmulticast mode
[ 1163.309827][T19553] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode
[ 1163.313589][T19553] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode
[ 1163.336150][T19553] bond387: left promiscuous mode
[ 1163.736861][T19580] 1{X: renamed from 30{X
[ 1163.744953][T19580] 1{X: entered allmulticast mode
[ 1163.747229][T19580] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1163.958602][T19597] netlink: 'syz.1.11191': attribute type 5 has an invalid length.
[ 1164.086832][T19616] __nla_validate_parse: 18 callbacks suppressed
[ 1164.086849][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11194'.
[ 1164.098224][T19616] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1164.104898][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11189'.
[ 1164.109093][T19616] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1164.182301][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11195'.
[ 1164.287133][T19627] netlink: 666 bytes leftover after parsing attributes in process `syz.2.11197'.
[ 1164.291220][T19627] netlink: 'syz.2.11197': attribute type 1 has an invalid length.
[ 1164.293573][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11199'.
[ 1164.323511][T19630] bond388 (unregistering): Released all slaves
[ 1164.337997][T19631] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1164.348861][T19631] xt_hashlimit: max too large, truncated to 1048576
[ 1164.584424][T19652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1164.602490][T19653] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[ 1164.605624][T19653] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[ 1164.646079][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11205'.
[ 1164.721310][T19661] tun0: tun_chr_ioctl cmd 1074812118
[ 1164.730376][T19661] tun0: tun_chr_ioctl cmd 1074033169
[ 1164.774553][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11207'.
[ 1164.848107][T19677] geneve1: entered promiscuous mode
[ 1164.870558][T10632] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1164.876637][T10632] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1164.882622][T10632] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1164.887200][T10632] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1164.913448][T19689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11212'.
[ 1164.917457][T19686] netlink: 'syz.2.11212': attribute type 1 has an invalid length.
[ 1164.952803][T19693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11213'.
[ 1164.957044][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11210'.
[ 1164.992351][T19693] 8021q: adding VLAN 0 to HW filter on device bond277
[ 1165.019616][T19693] bond277: entered promiscuous mode
[ 1165.023249][T19693] bond277: entered allmulticast mode
[ 1165.034212][T19693] bond0: entered promiscuous mode
[ 1165.079504][T19701] netlink: 'syz.2.11214': attribute type 1 has an invalid length.
[ 1165.138907][T19701] 8021q: adding VLAN 0 to HW filter on device bond278
[ 1165.365117][T19705] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode
[ 1165.368001][T19705] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode
[ 1165.824619][T19721] lo speed is unknown, defaulting to 1000
[ 1165.970004][T19721] lo speed is unknown, defaulting to 1000
[ 1166.018188][T19725] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001
[ 1166.175359][T19732] macsec6: entered promiscuous mode
[ 1166.212388][T19735] batman_adv: batadv0: Removing interface: ip6gretap13
[ 1166.216824][T19735] batman_adv: batadv0: Removing interface: ip6gretap17
[ 1166.222364][T19735] bond0: (slave batadv0): Releasing backup interface
[ 1166.320244][T19738] sctp: [Deprecated]: syz.2.11225 (pid 19738) Use of int in max_burst socket option deprecated.
[ 1166.320244][T19738] Use struct sctp_assoc_value instead
[ 1167.058264][T19752] lo speed is unknown, defaulting to 1000
[ 1167.128954][T19754] bond388: entered promiscuous mode
[ 1167.131446][T19754] 8021q: adding VLAN 0 to HW filter on device bond388
[ 1167.157148][T19757] validate_nla: 2 callbacks suppressed
[ 1167.157161][T19757] netlink: 'syz.0.11230': attribute type 1 has an invalid length.
[ 1167.176052][T19754] 8021q: adding VLAN 0 to HW filter on device bond388
[ 1167.179500][T19754] bond388: (slave vti8): The slave device specified does not support setting the MAC address
[ 1167.192248][T19754] bond388: (slave vti8): Error -95 calling set_mac_address
[ 1167.234129][T19757] 8021q: adding VLAN 0 to HW filter on device bond337
[ 1167.237860][T19752] lo speed is unknown, defaulting to 1000
[ 1167.273390][T19759] bond337: (slave veth131): Enslaving as an active interface with a down link
[ 1167.378732][T19766] lo speed is unknown, defaulting to 1000
[ 1167.617313][T19766] lo speed is unknown, defaulting to 1000
[ 1167.817651][T19785] netlink: 'syz.2.11234': attribute type 1 has an invalid length.
[ 1169.216096][T19808] __nla_validate_parse: 13 callbacks suppressed
[ 1169.216196][T19808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11239'.
[ 1169.226087][T19808] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1169.477173][T19817] netlink: 'syz.1.11242': attribute type 13 has an invalid length.
[ 1169.507078][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11243'.
[ 1169.601518][T19824] bond247: entered allmulticast mode
[ 1169.650775][T19828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11247'.
[ 1169.679282][T19829] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.11245'.
[ 1169.789183][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11247'.
[ 1169.922235][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11250'.
[ 1169.999248][T19849] netlink: 'syz.0.11251': attribute type 13 has an invalid length.
[ 1170.293370][T19854] netlink: 'syz.0.11252': attribute type 10 has an invalid length.
[ 1170.296211][T19854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11252'.
[ 1170.341587][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11253'.
[ 1170.345869][T19857] netlink: 'syz.0.11253': attribute type 5 has an invalid length.
[ 1170.349281][T19857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11253'.
[ 1170.363269][T19857] geneve0: entered promiscuous mode
[ 1170.364889][T19857] geneve0: entered allmulticast mode
[ 1170.367747][ T6287] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[ 1170.371342][ T6287] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[ 1170.376219][ T6287] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[ 1170.379392][ T6287] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[ 1170.435566][T19823] bond247: left allmulticast mode
[ 1170.537447][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11256'.
[ 1170.587441][T19872] x_tables: duplicate underflow at hook 1
[ 1170.603740][T19869] tipc: Enabling <eth:lo> not permitted
[ 1170.605806][T19869] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 1170.775836][T19893] bond338: option min_links: invalid value (18446744073709551612)
[ 1170.778218][T19893] bond338: option min_links: allowed values 0 - 2147483647
[ 1170.785397][T19893] bond338 (unregistering): Released all slaves
[ 1170.903934][T19912] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1170.907964][T19912] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[ 1170.910869][T19912] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[ 1170.959199][T19915] lo speed is unknown, defaulting to 1000
[ 1171.146224][T19915] lo speed is unknown, defaulting to 1000
[ 1171.380667][T19947] netlink: 'syz.0.11278': attribute type 1 has an invalid length.
[ 1171.391412][T19947] netlink: 'syz.0.11278': attribute type 2 has an invalid length.
[ 1171.506039][T19948] lo speed is unknown, defaulting to 1000
[ 1171.786683][T19948] lo speed is unknown, defaulting to 1000
[ 1171.919969][T19971] dvmrp0: entered allmulticast mode
[ 1172.718612][T19977] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 1172.860531][T19983] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1173.610621][T20009] openvswitch: : Dropping previously announced user features
[ 1173.637319][T20009] openvswitch: : Dropping previously announced user features
[ 1173.959467][T20036] vlan2: entered promiscuous mode
[ 1174.100816][T20036] netlink: 'syz.0.11297': attribute type 4 has an invalid length.
[ 1174.856277][    T9] syz0: Port: 1 Link DOWN
[ 1174.858558][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.866005][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[ 1174.885485][T20070] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[ 1174.888243][T20070] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[ 1174.890895][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.895525][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[ 1174.915353][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.918215][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[ 1174.920666][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.925623][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[ 1175.023290][T20078] __nla_validate_parse: 8 callbacks suppressed
[ 1175.023307][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11305'.
[ 1175.114310][T20075] netlink: 216 bytes leftover after parsing attributes in process `syz.0.11305'.
[ 1175.123101][T20075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11305'.
[ 1175.128186][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11305'.
[ 1175.149327][T20082] netlink: 'syz.2.11308': attribute type 1 has an invalid length.
[ 1175.173509][T20082] bond279: entered promiscuous mode
[ 1175.175579][T20082] 8021q: adding VLAN 0 to HW filter on device bond279
[ 1175.202841][T20082] 8021q: adding VLAN 0 to HW filter on device bond279
[ 1175.205609][T20082] bond279: (slave vcan2): The slave device specified does not support setting the MAC address
[ 1175.208640][T20082] bond279: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[ 1175.224167][T20082] bond279: (slave vcan2): making interface the new active one
[ 1175.226637][T20082] vcan2: entered promiscuous mode
[ 1175.230079][T20082] bond279: (slave vcan2): Enslaving as an active interface with an up link
[ 1175.358051][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11305'.
[ 1175.434418][T20093] netlink: 'syz.2.11311': attribute type 1 has an invalid length.
[ 1175.457734][T20093] 8021q: adding VLAN 0 to HW filter on device bond280
[ 1175.655246][T20109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1175.658480][T20109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1175.709567][T20110] netlink: 'syz.2.11314': attribute type 11 has an invalid length.
[ 1175.902300][T20112] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1175.994815][T20117] netlink: 'syz.0.11316': attribute type 12 has an invalid length.
[ 1176.059115][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11316'.
[ 1176.116008][T20125] openvswitch: netlink: IP tunnel dst address not specified
[ 1176.257977][T20127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11318'.
[ 1176.461743][T20134] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1176.466167][T20134] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1176.470767][T20134] hsr0: left allmulticast mode
[ 1176.473709][T20134] : left allmulticast mode
[ 1176.475948][T20134] bond0: left promiscuous mode
[ 1176.478154][T20134] macvlan1: left allmulticast mode
[ 1176.480710][T20134] xfrm3: left allmulticast mode
[ 1176.482367][T20134] bond280: left allmulticast mode
[ 1176.485383][T20134] macvlan3: left allmulticast mode
[ 1176.488528][T20134] vlan19: left allmulticast mode
[ 1176.494076][T20134] bond285: left allmulticast mode
[ 1176.496427][T20134] bond287: left allmulticast mode
[ 1176.498523][T20134] bridge163: left allmulticast mode
[ 1176.501003][T20134] bond292: left allmulticast mode
[ 1176.504451][T20134] bond294: left allmulticast mode
[ 1176.508362][T20134] bond296: left promiscuous mode
[ 1176.513386][T20134] bridge169: left promiscuous mode
[ 1176.515675][T20134] ipvlan15: left allmulticast mode
[ 1176.517640][T20134] bond296: left allmulticast mode
[ 1176.519546][T20134] bridge169: left allmulticast mode
[ 1176.521802][T20134] bond297: left promiscuous mode
[ 1176.523884][T20134] bond297: left allmulticast mode
[ 1176.525863][T20134] bond300: left promiscuous mode
[ 1176.527745][T20134] ip6tnl13: left allmulticast mode
[ 1176.530011][T20134] bond303: left promiscuous mode
[ 1176.531919][T20134] bond303: left allmulticast mode
[ 1176.539358][T20134] bond305: left promiscuous mode
[ 1176.541948][T20134] ipvlan16: left promiscuous mode
[ 1176.544346][T20134] bond311: left promiscuous mode
[ 1176.546617][T20134] bond317: left promiscuous mode
[ 1176.548434][T20134] bond317: left allmulticast mode
[ 1176.550502][T20134] veth123: left allmulticast mode
[ 1176.552545][T20134] bond320: left promiscuous mode
[ 1176.558569][T20134] bond321: left promiscuous mode
[ 1176.560666][T20134] bridge183: left promiscuous mode
[ 1176.563474][T20134] ip6tnl14: left allmulticast mode
[ 1176.566074][T20134] macvlan7: left allmulticast mode
[ 1176.568687][T20134] bond328: left allmulticast mode
[ 1176.570732][T20134] bond329: left promiscuous mode
[ 1176.574222][T20134] bond332: left promiscuous mode
[ 1176.577167][T20134] geneve0: left promiscuous mode
[ 1176.578988][T20134] geneve0: left allmulticast mode
[ 1176.696074][T20147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1176.709667][T20147] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1176.723350][T20147] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1176.727681][T20147] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1176.731430][T20147] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[ 1176.754554][T20147] syzkaller0: mtu less than device minimum
[ 1176.910947][T20161] xt_cgroup: path and classid specified
[ 1176.917329][T20156] netlink: 964 bytes leftover after parsing attributes in process `syz.0.11326'.
[ 1176.928144][T20156] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1176.999642][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11328'.
[ 1177.059523][T20168] netlink: 'syz.0.11329': attribute type 29 has an invalid length.
[ 1177.070004][T20168] netlink: 113576 bytes leftover after parsing attributes in process `syz.0.11329'.
[ 1177.258874][T20181] bridge0: port 1(vlan2) entered blocking state
[ 1177.264667][T20181] bridge0: port 1(vlan2) entered disabled state
[ 1177.268970][T20181] vlan2: entered allmulticast mode
[ 1177.270974][T20181] geneve0: entered allmulticast mode
[ 1177.281348][T20181] vlan2: entered promiscuous mode
[ 1177.283998][T20181] geneve0: entered promiscuous mode
[ 1177.504230][T20200] netlink: 'syz.2.11340': attribute type 39 has an invalid length.
[ 1177.792992][T20223] netlink: 'syz.0.11346': attribute type 12 has an invalid length.
[ 1178.790337][T20241] netlink: 'syz.2.11349': attribute type 1 has an invalid length.
[ 1178.850928][T20244] netlink: 'syz.0.11350': attribute type 13 has an invalid length.
[ 1178.856178][T20244] netlink: 'syz.0.11350': attribute type 17 has an invalid length.
[ 1178.866048][T20246] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[ 1178.868815][T20246] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[ 1179.132183][T20269] can: request_module (can-proto-5) failed.
[ 1179.258116][T20275] validate_nla: 2 callbacks suppressed
[ 1179.258133][T20275] netlink: 'syz.2.11357': attribute type 4 has an invalid length.
[ 1179.270176][ T7160] lo speed is unknown, defaulting to 1000
[ 1179.272670][ T7160] sqz0: Port: 1 Link ACTIVE
[ 1179.274690][ T7160] lo speed is unknown, defaulting to 1000
[ 1179.322304][T20275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1179.414082][T20289] netlink: 'syz.0.11361': attribute type 1 has an invalid length.
[ 1179.431531][T20289] bond338: entered promiscuous mode
[ 1179.433929][T20289] 8021q: adding VLAN 0 to HW filter on device bond338
[ 1179.448450][T20289] vlan21: entered allmulticast mode
[ 1179.451639][T20289] bond338: entered allmulticast mode
[ 1179.464982][T20289] bond338: (slave bridge193): making interface the new active one
[ 1179.467403][T20289] bridge193: entered promiscuous mode
[ 1179.469259][T20289] bridge193: entered allmulticast mode
[ 1179.474474][T20289] bond338: (slave bridge193): Enslaving as an active interface with an up link
[ 1179.549413][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1180.380353][T20304] __nla_validate_parse: 17 callbacks suppressed
[ 1180.380369][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11365'.
[ 1180.696036][T20325] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[ 1180.698994][T20325] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[ 1180.809053][T20325] bond338: left promiscuous mode
[ 1180.810907][T20325] bridge193: left promiscuous mode
[ 1180.824619][T20325] vlan21: left allmulticast mode
[ 1180.830856][T20325] bond338: left allmulticast mode
[ 1180.833226][T20325] bridge193: left allmulticast mode
[ 1180.927133][T20335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11370'.
[ 1180.930196][T20335] vlan2: left allmulticast mode
[ 1180.931920][T20335] geneve0: left allmulticast mode
[ 1180.934922][T20335] vlan2: left promiscuous mode
[ 1180.936527][T20335] geneve0: left promiscuous mode
[ 1180.938257][T20335] bridge0: port 1(vlan2) entered disabled state
[ 1181.096716][T20340] netlink: 'syz.0.11372': attribute type 1 has an invalid length.
[ 1181.127168][T20340] bond339: entered promiscuous mode
[ 1181.129549][T20340] 8021q: adding VLAN 0 to HW filter on device bond339
[ 1181.168976][T20340] bond339: (slave bridge0): making interface the new active one
[ 1181.171285][T20340] bridge0: entered promiscuous mode
[ 1181.174223][T20343] netlink: 'syz.2.11373': attribute type 13 has an invalid length.
[ 1181.179083][T20343] netlink: 'syz.2.11373': attribute type 17 has an invalid length.
[ 1181.179141][T20340] bridge0: left promiscuous mode
[ 1181.245233][T20343] 1{X: left allmulticast mode
[ 1181.254232][T20343] erspan0: left promiscuous mode
[ 1181.308380][T20343] geneve1: left promiscuous mode
[ 1181.318717][T20343] hsr1: Slave B (31{X) is not up; please bring it up to get a fully working HSR network
[ 1181.327087][T20343] erspan0: entered promiscuous mode
[ 1181.330732][T20343] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1181.336942][T20343] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[ 1181.339782][T20343] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[ 1181.343558][T20343] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[ 1181.362911][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.369450][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.382878][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.391017][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1181.436964][T20348] netlink: 'syz.2.11374': attribute type 39 has an invalid length.
[ 1181.443221][T20348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11374'.
[ 1181.446818][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11374'.
[ 1181.488204][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11376'.
[ 1181.497393][T20352] netlink: 312 bytes leftover after parsing attributes in process `syz.0.11376'.
[ 1181.500905][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11376'.
[ 1181.517823][T20354] bridge0: Device is already in use.
[ 1181.727710][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11380'.
[ 1181.779606][T20367] vcan3: entered promiscuous mode
[ 1181.836697][T20375] workqueue: Failed to create a rescuer kthread for wq "bond282": -EINTR
[ 1181.931865][T20381] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11383'.
[ 1181.943870][T20381] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1181.986781][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11384'.
[ 1182.001562][T20384] bond282: entered promiscuous mode
[ 1182.005342][T20384] 8021q: adding VLAN 0 to HW filter on device bond282
[ 1182.030757][T20384] 8021q: adding VLAN 0 to HW filter on device bond283
[ 1182.037721][T20384] bond283: entered promiscuous mode
[ 1182.040052][T20384] bond282: (slave bond283): Enslaving as an active interface with an up link
[ 1182.101718][T20392] netlink: 'syz.2.11386': attribute type 1 has an invalid length.
[ 1182.130486][T20396] netlink: 'syz.1.11387': attribute type 1 has an invalid length.
[ 1182.132372][T20392] 8021q: adding VLAN 0 to HW filter on device bond284
[ 1182.231710][T20400] bond285 (unregistering): Released all slaves
[ 1182.484280][T20410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1182.491707][T20414] netlink: 'syz.1.11393': attribute type 7 has an invalid length.
[ 1182.496489][T20414] netlink: 'syz.1.11393': attribute type 7 has an invalid length.
[ 1182.970626][T20443] tipc: Failed to remove unknown binding: 66,0,0/2955586151:3831275975/3831275978
[ 1182.974086][T20443] tipc: Failed to remove unknown binding: 66,0,0/2955586151:3831275975/3831275977
[ 1182.977569][T20443] tipc: Failed to remove unknown binding: 66,0,0/2955586151:3831275975/3831275976
[ 1182.997306][T20440] bond339: left promiscuous mode
[ 1183.294206][T20448] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1185.804312][T20436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1186.021682][T20461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap20
[ 1186.201244][T20472] lo speed is unknown, defaulting to 1000
[ 1186.245613][T20480] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1186.366235][T20472] lo speed is unknown, defaulting to 1000
[ 1186.368754][T20476] lo speed is unknown, defaulting to 1000
[ 1186.442973][T20487] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[ 1186.511416][T20487] syzkaller1: entered promiscuous mode
[ 1186.514243][T20487] syzkaller1: entered allmulticast mode
[ 1186.588619][T20487] tipc: Resetting bearer <eth:syzkaller0>
[ 1186.813890][T20476] lo speed is unknown, defaulting to 1000
[ 1187.548860][T20507] __nla_validate_parse: 5 callbacks suppressed
[ 1187.548876][T20507] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11415'.
[ 1188.320521][T20509] can: request_module (can-proto-0) failed.
[ 1188.519620][T20523] syz.2.11419: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1188.527450][T20523] CPU: 0 UID: 0 PID: 20523 Comm: syz.2.11419 Not tainted syzkaller #0 PREEMPT(full) 
[ 1188.527464][T20523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1188.527472][T20523] Call Trace:
[ 1188.527476][T20523]  <TASK>
[ 1188.527480][T20523]  dump_stack_lvl+0xe8/0x150
[ 1188.527496][T20523]  warn_alloc+0x249/0x340
[ 1188.527512][T20523]  ? stack_trace_save+0xa9/0x100
[ 1188.527527][T20523]  ? __pfx_warn_alloc+0x10/0x10
[ 1188.527542][T20523]  ? kasan_save_track+0x4f/0x80
[ 1188.527552][T20523]  ? kasan_save_track+0x3e/0x80
[ 1188.527562][T20523]  ? __kasan_kmalloc+0x93/0xb0
[ 1188.527572][T20523]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1188.527587][T20523]  ? xskq_create+0x56/0x170
[ 1188.527596][T20523]  ? xsk_setsockopt+0x54c/0x990
[ 1188.527603][T20523]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1188.527613][T20523]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1188.527622][T20523]  ? do_syscall_64+0x15f/0xf80
[ 1188.527656][T20523]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1188.527685][T20523]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1188.527706][T20523]  ? __kasan_kmalloc+0x93/0xb0
[ 1188.527726][T20523]  vmalloc_user_noprof+0xad/0xe0
[ 1188.527744][T20523]  ? xskq_create+0xbf/0x170
[ 1188.527755][T20523]  xskq_create+0xbf/0x170
[ 1188.527766][T20523]  xsk_init_queue+0x8a/0xe0
[ 1188.527776][T20523]  xsk_setsockopt+0x54c/0x990
[ 1188.527786][T20523]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1188.527795][T20523]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1188.527813][T20523]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1188.527836][T20523]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1188.527850][T20523]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1188.527857][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11420'.
[ 1188.527859][T20523]  do_sock_setsockopt+0x17c/0x1b0
[ 1188.527872][T20523]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1188.527884][T20523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.527894][T20523]  do_syscall_64+0x15f/0xf80
[ 1188.527911][T20523]  ? trace_irq_disable+0x3b/0x140
[ 1188.527959][T20523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.527970][T20523] RIP: 0033:0x7f9280d9cdd9
[ 1188.527980][T20523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1188.527988][T20523] RSP: 002b:00007f9281c74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1188.527998][T20523] RAX: ffffffffffffffda RBX: 00007f9281015fa0 RCX: 00007f9280d9cdd9
[ 1188.528006][T20523] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 1188.528012][T20523] RBP: 00007f9280e32d69 R08: 0000000000000004 R09: 0000000000000000
[ 1188.528017][T20523] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1188.528023][T20523] R13: 00007f9281016038 R14: 00007f9281015fa0 R15: 00007ffcf33d90a8
[ 1188.528038][T20523]  </TASK>
[ 1188.528076][T20523] Mem-Info:
[ 1188.650265][T20523] active_anon:5612 inactive_anon:15 isolated_anon:0
[ 1188.650265][T20523]  active_file:11266 inactive_file:41742 isolated_file:0
[ 1188.650265][T20523]  unevictable:1768 dirty:35 writeback:0
[ 1188.650265][T20523]  slab_reclaimable:23213 slab_unreclaimable:272889
[ 1188.650265][T20523]  mapped:18296 shmem:2512 pagetables:3226
[ 1188.650265][T20523]  sec_pagetables:0 bounce:0
[ 1188.650265][T20523]  kernel_misc_reclaimable:0
[ 1188.650265][T20523]  free:902754 free_pcp:22666 free_cma:0
[ 1188.665101][T20523] Node 0 active_anon:7732kB inactive_anon:36kB active_file:13696kB inactive_file:129620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42468kB dirty:60kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16944kB pagetables:2688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1188.677879][T20523] Node 1 active_anon:14716kB inactive_anon:24kB active_file:31368kB inactive_file:37348kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30716kB dirty:80kB writeback:0kB shmem:5236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:30240kB pagetables:10216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1188.690179][T20531] netlink: 'syz.2.11419': attribute type 1 has an invalid length.
[ 1188.694320][T20523] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1188.706871][T20523] lowmem_reserve[]: 0 1587 2117 2117 2117
[ 1188.716666][T20523] Node 0 DMA32 free:1064480kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1408kB inactive_anon:8kB active_file:10508kB inactive_file:2096kB unevictable:0kB writepending:28kB zspages:0kB present:2080636kB managed:1625352kB mlocked:0kB bounce:0kB free_pcp:32696kB local_pcp:6136kB free_cma:0kB
[ 1188.728653][T20523] lowmem_reserve[]: 0 0 530 530 530
[ 1188.730379][T20523] Node 0 Normal free:16756kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6392kB inactive_anon:28kB active_file:3188kB inactive_file:127524kB unevictable:3536kB writepending:32kB zspages:0kB present:1572868kB managed:543156kB mlocked:0kB bounce:0kB free_pcp:2864kB local_pcp:1800kB free_cma:0kB
[ 1188.740244][T20523] lowmem_reserve[]: 0 0 0 0 0
[ 1188.741729][T20523] Node 1 Normal free:2514420kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14716kB inactive_anon:24kB active_file:31368kB inactive_file:37348kB unevictable:3536kB writepending:80kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:55656kB local_pcp:25336kB free_cma:0kB
[ 1188.758650][T20523] lowmem_reserve[]: 0 0 0 0 0
[ 1188.762366][T20523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1188.776027][T20523] Node 0 DMA32: 1162*4kB (UME) 1697*8kB (UME) 2065*16kB (UME) 113*32kB (UME) 27*64kB (UME) 46*128kB (UME) 258*256kB (UM) 180*512kB (UM) 158*1024kB (UME) 29*2048kB (UM) 152*4096kB (UM) = 1064480kB
[ 1188.795735][T20523] Node 0 Normal: 265*4kB (UME) 763*8kB (UM) 243*16kB (UM) 72*32kB (UM) 34*64kB (UM) 8*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16812kB
[ 1188.803099][T20523] Node 1 Normal: 5547*4kB (UME) 5673*8kB (UME) 3754*16kB (UME) 801*32kB (UME) 377*64kB (UME) 198*128kB (UM) 222*256kB (UM) 70*512kB (UME) 141*1024kB (U) 115*2048kB (UME) 449*4096kB (UM) = 2514420kB
[ 1188.810529][T20523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1188.815481][T20523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1188.818934][T20523] 55520 total pagecache pages
[ 1188.820742][T20523] 0 pages in swap cache
[ 1188.822157][T20523] Free swap  = 124996kB
[ 1188.824009][T20535] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11419'.
[ 1188.826995][T20523] Total swap = 124996kB
[ 1188.828383][T20523] 1834877 pages RAM
[ 1188.829700][T20523] 0 pages HighMem/MovableOnly
[ 1188.831480][T20523] 390239 pages reserved
[ 1188.834258][T20523] 0 pages cma reserved
[ 1188.900193][T20537] netlink: 'syz.0.11422': attribute type 1 has an invalid length.
[ 1188.943200][T20537] 8021q: adding VLAN 0 to HW filter on device bond340
[ 1188.986035][T20537] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 1188.989251][T20541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11423'.
[ 1189.025534][T20543] netlink: 'syz.0.11424': attribute type 1 has an invalid length.
[ 1189.050581][T20546] netlink: 'syz.2.11425': attribute type 1 has an invalid length.
[ 1189.106765][T20546] bond285: entered promiscuous mode
[ 1189.109224][T20546] 8021q: adding VLAN 0 to HW filter on device bond285
[ 1189.122869][T20546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11425'.
[ 1189.143613][T20547] bond342: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 1189.148143][T20543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11424'.
[ 1189.155312][T20547] bond342: (slave vxcan1): Error -95 calling set_mac_address
[ 1189.220536][T20543] bond342: (slave bridge0): Enslaving as an active interface with a down link
[ 1189.225986][T20549] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1189.238376][T20550] ip6gretap8: entered promiscuous mode
[ 1189.240400][T20550] ip6gretap8: entered allmulticast mode
[ 1189.247969][T20550] bond342: (slave ip6gretap8): making interface the new active one
[ 1189.251972][T20550] bond342: (slave ip6gretap8): Enslaving as an active interface with an up link
[ 1189.373690][T20559] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[ 1189.376672][T20559] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[ 1189.416343][T20559] syzkaller0: mtu less than device minimum
[ 1189.472257][T20572] netlink: 'syz.0.11431': attribute type 1 has an invalid length.
[ 1189.481261][T20572] workqueue: Failed to create a rescuer kthread for wq "bond343": -EINTR
[ 1189.557109][T20586] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11434'.
[ 1189.608456][T20592] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1189.611131][T20592] syzkaller0: mtu less than device minimum
[ 1189.623955][T20593] lo speed is unknown, defaulting to 1000
[ 1189.701289][T20602] netlink: 'syz.1.11438': attribute type 1 has an invalid length.
[ 1189.846306][T20593] lo speed is unknown, defaulting to 1000
[ 1189.922459][T20618] netlink: 'syz.2.11441': attribute type 83 has an invalid length.
[ 1189.940627][T20620] netlink: 'syz.1.11442': attribute type 4 has an invalid length.
[ 1192.909764][T20618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1193.103537][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11446'.
[ 1193.113142][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11446'.
[ 1193.181501][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11448'.
[ 1193.186125][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11448'.
[ 1193.195793][T20641] bond343: option fail_over_mac: invalid value (127)
[ 1193.199547][T20641] bond343 (unregistering): Released all slaves
[ 1193.217107][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11448'.
[ 1193.220508][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11448'.
[ 1193.334484][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11451'.
[ 1193.337527][T20650] netlink: 'syz.0.11451': attribute type 15 has an invalid length.
[ 1193.340141][T20650] netlink: 'syz.0.11451': attribute type 25 has an invalid length.
[ 1193.342513][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11451'.
[ 1193.425621][T20648] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11450'.
[ 1193.464672][T20648] lo speed is unknown, defaulting to 1000
[ 1193.492162][T20654] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20005
[ 1193.694102][T20648] lo speed is unknown, defaulting to 1000
[ 1193.694262][T20656] lo speed is unknown, defaulting to 1000
[ 1193.805619][T20672] veth148: entered promiscuous mode
[ 1193.899317][T20676] batadv_slave_0: entered promiscuous mode
[ 1193.944151][T20656] lo speed is unknown, defaulting to 1000
[ 1194.021973][T20675] batadv_slave_0: left promiscuous mode
[ 1194.159846][T20683] netlink: 'syz.1.11459': attribute type 1 has an invalid length.
[ 1194.180341][T20687] netlink: 'syz.2.11460': attribute type 11 has an invalid length.
[ 1194.231351][T20688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11460'.
[ 1194.538851][T20707] netlink: 'syz.2.11463': attribute type 64 has an invalid length.
[ 1195.537059][T20718] vlan20: entered promiscuous mode
[ 1195.538665][T20718] bridge0: entered promiscuous mode
[ 1195.630019][T20718] netlink: 'syz.0.11466': attribute type 4 has an invalid length.
[ 1197.293724][T20700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1197.352991][T20725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1197.357974][T20726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1197.404721][T20728] netlink: 'syz.0.11468': attribute type 1 has an invalid length.
[ 1197.428377][T20728] 8021q: adding VLAN 0 to HW filter on device bond343
[ 1197.463700][T20730] bond390 (unregistering): Released all slaves
[ 1197.489541][T20728] vlan22: entered promiscuous mode
[ 1197.491375][T20728] bond343: entered promiscuous mode
[ 1197.494560][T20728] vlan22: entered allmulticast mode
[ 1197.496402][T20728] bond343: entered allmulticast mode
[ 1197.515629][T20728] bond343: (slave bridge194): making interface the new active one
[ 1197.541471][T20728] bridge194: entered promiscuous mode
[ 1197.547210][T20728] bridge194: entered allmulticast mode
[ 1197.554371][T20728] bond343: (slave bridge194): Enslaving as an active interface with an up link
[ 1197.611767][T20742] netlink: 'syz.0.11472': attribute type 30 has an invalid length.
[ 1197.626019][ T5477] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1197.629438][T20742] netlink: 'syz.0.11472': attribute type 30 has an invalid length.
[ 1197.632436][ T5477] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1197.636558][ T5477] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1197.643477][ T5477] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1197.861421][T20752] lo speed is unknown, defaulting to 1000
[ 1198.081307][T20752] lo speed is unknown, defaulting to 1000
[ 1198.081398][T20773] lo speed is unknown, defaulting to 1000
[ 1198.302346][T20790] __nla_validate_parse: 11 callbacks suppressed
[ 1198.302358][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11483'.
[ 1198.308429][T20773] lo speed is unknown, defaulting to 1000
[ 1198.313597][T20792] netlink: 'syz.1.11483': attribute type 1 has an invalid length.
[ 1198.357999][T20792] bond390: entered promiscuous mode
[ 1198.362407][T20792] 8021q: adding VLAN 0 to HW filter on device bond390
[ 1198.499129][T20798] bond391: entered promiscuous mode
[ 1198.505230][T20798] 8021q: adding VLAN 0 to HW filter on device bond391
[ 1198.639565][T20804] netlink: 324 bytes leftover after parsing attributes in process `syz.1.11486'.
[ 1198.777636][T20811] netlink: 'syz.1.11487': attribute type 8 has an invalid length.
[ 1199.008092][T20821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11490'.
[ 1199.020377][T20821] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1199.075204][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11491'.
[ 1199.079769][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11491'.
[ 1199.179363][T20826] netem: change failed
[ 1199.349580][T20826] bond392: option resend_igmp: invalid value (2878)
[ 1199.354385][T20826] bond392: option resend_igmp: allowed values 0 - 255
[ 1199.367712][T20826] bond392 (unregistering): Released all slaves
[ 1199.780354][T20832] bond392: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1199.785538][T20832] bond392 (unregistering): Released all slaves
[ 1200.051449][T20848] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[ 1200.060722][T20848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11495'.
[ 1200.063852][T20851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1200.065735][T20848] netlink: 'syz.1.11495': attribute type 7 has an invalid length.
[ 1200.066836][T20851] IPv6: NLM_F_CREATE should be set when creating new route
[ 1200.069339][T20848] netlink: 'syz.1.11495': attribute type 8 has an invalid length.
[ 1200.071750][T20851] IPv6: NLM_F_CREATE should be set when creating new route
[ 1200.075752][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11495'.
[ 1200.077124][T20851] IPv6: NLM_F_CREATE should be set when creating new route
[ 1200.323676][T20877] netlink: 'syz.0.11502': attribute type 4 has an invalid length.
[ 1200.336224][T20877] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11502'.
[ 1200.436323][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11503'.
[ 1200.468114][T20887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11504'.
[ 1200.565707][T20885] bond344: entered promiscuous mode
[ 1200.568072][T20885] 8021q: adding VLAN 0 to HW filter on device bond344
[ 1200.579290][T20885] openvswitch: netlink: IP tunnel dst address not specified
[ 1200.595930][T20891] netlink: 'syz.1.11505': attribute type 3 has an invalid length.
[ 1200.603830][T20891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1200.747081][T20896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1200.867831][T20906] netlink: 'syz.0.11508': attribute type 1 has an invalid length.
[ 1200.897777][T20906] bond345: entered promiscuous mode
[ 1200.899910][T20906] 8021q: adding VLAN 0 to HW filter on device bond345
[ 1200.943168][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1200.995488][T20913] xt_TCPMSS: Only works on TCP SYN packets
[ 1201.057278][T20918] lo speed is unknown, defaulting to 1000
[ 1201.162830][T20931] netlink: 'syz.2.11515': attribute type 30 has an invalid length.
[ 1201.173478][T20930] netlink: 'syz.1.11514': attribute type 1 has an invalid length.
[ 1201.180501][T20931] bridge20: port 1(vxlan7) entered blocking state
[ 1201.185964][T20931] bridge20: port 1(vxlan7) entered disabled state
[ 1201.190777][T20931] vxlan7: entered allmulticast mode
[ 1201.196926][T20931] vxlan7: entered promiscuous mode
[ 1201.204627][T10632] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.209476][T10632] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.272085][T20930] bond392: entered promiscuous mode
[ 1201.281088][T20930] 8021q: adding VLAN 0 to HW filter on device bond392
[ 1201.298553][T10632] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.302196][T10632] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.337669][T20930] 8021q: adding VLAN 0 to HW filter on device bond392
[ 1201.344021][T20930] bond392: (slave vcan0): The slave device specified does not support setting the MAC address
[ 1201.353192][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1201.357344][T20930] bond392: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[ 1201.393718][T20930] bond392: (slave vcan0): making interface the new active one
[ 1201.400869][T20930] vcan0: entered promiscuous mode
[ 1201.408846][T20930] bond392: (slave vcan0): Enslaving as an active interface with an up link
[ 1201.415583][T20918] lo speed is unknown, defaulting to 1000
[ 1201.419546][T20938] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1201.449434][T20938] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1201.461716][T20939] tipc: Resetting bearer <eth:syzkaller0>
[ 1202.162871][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1202.234377][T20964] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[ 1202.297800][T20966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1202.867305][T20974] bond393: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[ 1202.871092][T20974] bond393: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[ 1202.922276][T20985] netlink: 'syz.1.11527': attribute type 1 has an invalid length.
[ 1202.964496][T20985] bond394: entered promiscuous mode
[ 1202.966727][T20985] 8021q: adding VLAN 0 to HW filter on device bond394
[ 1203.115482][T20994] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[ 1203.291342][T20999] netlink: 'syz.0.11531': attribute type 1 has an invalid length.
[ 1203.315008][T20999] bond346: entered promiscuous mode
[ 1203.316899][T20999] 8021q: adding VLAN 0 to HW filter on device bond346
[ 1203.321200][T20999] __nla_validate_parse: 12 callbacks suppressed
[ 1203.321210][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11531'.
[ 1203.326478][T21001] netlink: 'syz.2.11532': attribute type 13 has an invalid length.
[ 1203.344987][T21001] tipc: Resetting bearer <eth:syzkaller0>
[ 1203.351722][T21004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11533'.
[ 1203.359383][T21001] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1203.366388][T21001] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1203.422137][T21001] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1203.430311][T21001] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1203.435100][T21001] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1203.439734][T21001] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1203.445802][T21001] bond6: entered promiscuous mode
[ 1203.448102][T21001] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1203.451350][T21001] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1203.454944][T21001] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1203.459932][T21001] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[ 1203.501032][T21007] bond346: (slave bridge196): making interface the new active one
[ 1203.504700][T21007] bridge196: entered promiscuous mode
[ 1203.508480][T21007] bond346: (slave bridge196): Enslaving as an active interface with an up link
[ 1203.591698][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.615770][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.625199][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.631985][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.639634][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.646811][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.654117][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.666120][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11535'.
[ 1203.705568][T21013] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1203.714156][T21013] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1203.718052][T21013] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1203.727978][T21013] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1203.734201][T21013] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[ 1203.763106][ T7155] syz0: Port: 1 Link ACTIVE
[ 1203.764521][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.767589][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.771243][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.777246][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1203.842864][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1203.850450][T21021] 8021q: adding VLAN 0 to HW filter on device bond347
[ 1203.906959][T21027] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1203.971152][T21027] tc_dump_action: action bad kind
[ 1204.108518][T21038] 8021q: adding VLAN 0 to HW filter on device bond395
[ 1204.117848][T21044] Timeout policy `syz1' can only be used by L3 protocol number 35119
[ 1204.126664][T21042] Timeout policy `syz1' can only be used by L3 protocol number 35119
[ 1204.206075][T21049] ipvlan17: entered promiscuous mode
[ 1204.261340][T21047] workqueue: Failed to create a rescuer kthread for wq "bond286": -EINTR
[ 1204.288418][T21053] bond348: option min_links: invalid value (18446744073709551612)
[ 1204.293996][T21053] bond348: option min_links: allowed values 0 - 2147483647
[ 1204.297992][T21053] bond348 (unregistering): Released all slaves
[ 1204.358933][T21060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1204.372077][T21060] bridge155: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1204.633799][T21060] tipc: Resetting bearer <eth:syzkaller0>
[ 1204.759434][T21060] bond6: left promiscuous mode
[ 1204.861303][    T9] lo speed is unknown, defaulting to 1000
[ 1204.863683][    T9] sqz0: Port: 1 Link DOWN
[ 1204.867179][ T6287] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1204.870719][ T6287] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1204.878194][ T6287] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1204.884444][ T6287] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1204.890743][T21075] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[ 1204.905850][    T9] lo speed is unknown, defaulting to 1000
[ 1204.905877][ T6287] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1204.911592][ T6287] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1204.917525][ T6287] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1204.923997][ T6287] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1205.106606][T21094] validate_nla: 4 callbacks suppressed
[ 1205.106622][T21094] netlink: 'syz.1.11556': attribute type 1 has an invalid length.
[ 1205.212003][T21101] netlink: 'syz.0.11558': attribute type 1 has an invalid length.
[ 1205.298167][T21101] bond348: (slave bridge197): making interface the new active one
[ 1205.304884][T21101] bond348: (slave bridge197): Enslaving as an active interface with an up link
[ 1205.416905][T21119] netlink: 'syz.0.11562': attribute type 1 has an invalid length.
[ 1205.437818][T21110] lo speed is unknown, defaulting to 1000
[ 1205.590998][T21139] netlink: 'syz.2.11566': attribute type 8 has an invalid length.
[ 1205.711270][T21159] netlink: 'syz.0.11567': attribute type 31 has an invalid length.
[ 1205.776427][T21165] netlink: 'syz.0.11569': attribute type 1 has an invalid length.
[ 1205.864957][T21110] lo speed is unknown, defaulting to 1000
[ 1205.890551][T21165] veth135: entered promiscuous mode
[ 1205.915799][T21170] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1205.940254][T21168] 8021q: adding VLAN 0 to HW filter on device bond349
[ 1206.399710][T21197] netlink: 'syz.0.11577': attribute type 1 has an invalid length.
[ 1206.499301][T21206] xt_l2tp: invalid flags combination: 8
[ 1206.651466][T21220] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 1206.938153][T21237] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1206.969171][T21239] netlink: 'syz.0.11588': attribute type 2 has an invalid length.
[ 1206.983667][T21239] netlink: 'syz.0.11588': attribute type 2 has an invalid length.
[ 1207.026971][T21241] lo speed is unknown, defaulting to 1000
[ 1207.171260][T21244] 8021q: adding VLAN 0 to HW filter on device bond350
[ 1207.185140][T21241] lo speed is unknown, defaulting to 1000
[ 1207.221664][T21246] 8021q: adding VLAN 0 to HW filter on device bond351
[ 1207.233269][T21246] bond350: (slave bond351): Enslaving as an active interface with an up link
[ 1207.268609][T21244] bond350 (unregistering): (slave bond351): Releasing backup interface
[ 1207.281416][T21244] bond350 (unregistering): Released all slaves
[ 1207.452234][T21263] netlink: 'syz.0.11593': attribute type 13 has an invalid length.
[ 1207.869907][T21278] bond350 (unregistering): Released all slaves
[ 1207.971850][T21280] bond350 (unregistering): Released all slaves
[ 1208.079143][T21287] syzkaller1: entered promiscuous mode
[ 1208.081574][T21287] syzkaller1: entered allmulticast mode
[ 1208.527432][T21296] __nla_validate_parse: 1999 callbacks suppressed
[ 1208.527449][T21296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11600'.
[ 1208.674574][T21305] bond396 (unregistering): Released all slaves
[ 1208.794193][T21309] 8021q: adding VLAN 0 to HW filter on device bond350
[ 1208.878976][T21309] bond350: (slave veth135): Enslaving as an active interface with a down link
[ 1208.916821][T21309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11603'.
[ 1208.925595][T21314] bond350: (slave veth137): Enslaving as an active interface with a down link
[ 1208.941228][T21316] syz.1.11605: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1208.954596][T21316] CPU: 0 UID: 0 PID: 21316 Comm: syz.1.11605 Not tainted syzkaller #0 PREEMPT(full) 
[ 1208.954613][T21316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1208.954619][T21316] Call Trace:
[ 1208.954624][T21316]  <TASK>
[ 1208.954629][T21316]  dump_stack_lvl+0xe8/0x150
[ 1208.954646][T21316]  warn_alloc+0x249/0x340
[ 1208.954661][T21316]  ? stack_trace_save+0xa9/0x100
[ 1208.954677][T21316]  ? __pfx_warn_alloc+0x10/0x10
[ 1208.954693][T21316]  ? kasan_save_track+0x4f/0x80
[ 1208.954704][T21316]  ? kasan_save_track+0x3e/0x80
[ 1208.954714][T21316]  ? __kasan_kmalloc+0x93/0xb0
[ 1208.954725][T21316]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 1208.954737][T21316]  ? xskq_create+0x56/0x170
[ 1208.954747][T21316]  ? xsk_setsockopt+0x54c/0x990
[ 1208.954754][T21316]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1208.954765][T21316]  ? __x64_sys_setsockopt+0x13d/0x1b0
[ 1208.954774][T21316]  ? do_syscall_64+0x15f/0xf80
[ 1208.954795][T21316]  __vmalloc_node_range_noprof+0x132/0x1750
[ 1208.954846][T21316]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1208.954868][T21316]  ? __kasan_kmalloc+0x93/0xb0
[ 1208.954883][T21316]  vmalloc_user_noprof+0xad/0xe0
[ 1208.954897][T21316]  ? xskq_create+0xbf/0x170
[ 1208.954907][T21316]  xskq_create+0xbf/0x170
[ 1208.954919][T21316]  xsk_init_queue+0x8a/0xe0
[ 1208.954931][T21316]  xsk_setsockopt+0x54c/0x990
[ 1208.954941][T21316]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1208.954951][T21316]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1208.954964][T21316]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1208.954977][T21316]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1208.954989][T21316]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1208.954999][T21316]  do_sock_setsockopt+0x17c/0x1b0
[ 1208.955012][T21316]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1208.955024][T21316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.955034][T21316]  do_syscall_64+0x15f/0xf80
[ 1208.955048][T21316]  ? trace_irq_disable+0x3b/0x140
[ 1208.955075][T21316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.955090][T21316] RIP: 0033:0x7f215539cdd9
[ 1208.955129][T21316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1208.955139][T21316] RSP: 002b:00007f21561cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1208.955150][T21316] RAX: ffffffffffffffda RBX: 00007f2155615fa0 RCX: 00007f215539cdd9
[ 1208.955157][T21316] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[ 1208.955163][T21316] RBP: 00007f2155432d69 R08: 0000000000000004 R09: 0000000000000000
[ 1208.955171][T21316] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1208.955181][T21316] R13: 00007f2155616038 R14: 00007f2155615fa0 R15: 00007ffe5e669338
[ 1208.955210][T21316]  </TASK>
[ 1208.955307][T21316] Mem-Info:
[ 1208.984015][T21309] bond350: (slave bridge199): Enslaving as an active interface with a down link
[ 1209.055780][T21316] active_anon:6003 inactive_anon:15 isolated_anon:0
[ 1209.055780][T21316]  active_file:11266 inactive_file:41750 isolated_file:0
[ 1209.055780][T21316]  unevictable:1768 dirty:73 writeback:0
[ 1209.055780][T21316]  slab_reclaimable:23759 slab_unreclaimable:300764
[ 1209.055780][T21316]  mapped:18246 shmem:2523 pagetables:3345
[ 1209.055780][T21316]  sec_pagetables:0 bounce:0
[ 1209.055780][T21316]  kernel_misc_reclaimable:0
[ 1209.055780][T21316]  free:880639 free_pcp:15833 free_cma:0
[ 1209.070853][T21316] Node 0 active_anon:7784kB inactive_anon:36kB active_file:13700kB inactive_file:129620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42492kB dirty:160kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17392kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1209.085253][T21316] Node 1 active_anon:16328kB inactive_anon:24kB active_file:31364kB inactive_file:37380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30492kB dirty:132kB writeback:0kB shmem:5256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:30520kB pagetables:10620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1209.098206][T21316] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1209.109317][T21316] lowmem_reserve[]: 0 1587 2117 2117 2117
[ 1209.111685][T21316] Node 0 DMA32 free:981692kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1380kB inactive_anon:8kB active_file:10512kB inactive_file:2096kB unevictable:0kB writepending:128kB zspages:0kB present:2080636kB managed:1625352kB mlocked:0kB bounce:0kB free_pcp:16756kB local_pcp:8012kB free_cma:0kB
[ 1209.123899][T21328] openvswitch: : Dropping previously announced user features
[ 1209.127700][T21316] lowmem_reserve[]: 0 0 530 530 530
[ 1209.129901][T21316] Node 0 Normal free:17248kB boost:6144kB min:14656kB low:16784kB high:18912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6440kB inactive_anon:28kB active_file:3188kB inactive_file:127524kB unevictable:3536kB writepending:32kB zspages:0kB present:1572868kB managed:543156kB mlocked:0kB bounce:0kB free_pcp:1052kB local_pcp:884kB free_cma:0kB
[ 1209.144733][T21316] lowmem_reserve[]: 0 0 0 0 0
[ 1209.146693][T21316] Node 1 Normal free:2508064kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16316kB inactive_anon:24kB active_file:31364kB inactive_file:37380kB unevictable:3536kB writepending:132kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:46048kB local_pcp:35060kB free_cma:0kB
[ 1209.160035][T21316] lowmem_reserve[]: 0 0 0 0 0
[ 1209.162017][T21316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1209.167632][T21316] Node 0 DMA32: 775*4kB (UME) 648*8kB (UME) 1884*16kB (UME) 879*32kB (UME) 237*64kB (UM) 73*128kB (UM) 265*256kB (UM) 175*512kB (UM) 156*1024kB (UME) 36*2048kB (UM) 122*4096kB (UM) = 981692kB
[ 1209.185269][T21316] Node 0 Normal: 258*4kB (UME) 861*8kB (UM) 235*16kB (UM) 68*32kB (UM) 33*64kB (UM) 8*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17248kB
[ 1209.194574][T21316] Node 1 Normal: 3106*4kB (UME) 6023*8kB (UM) 3880*16kB (UME) 175*32kB (UME) 471*64kB (UM) 206*128kB (UME) 220*256kB (UME) 67*512kB (UME) 140*1024kB (UE) 112*2048kB (UM) 454*4096kB (UM) = 2507744kB
[ 1209.209037][T21318] lo speed is unknown, defaulting to 1000
[ 1209.212427][T21316] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1209.218317][T21316] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1209.230864][T21316] 55541 total pagecache pages
[ 1209.237936][T21316] 0 pages in swap cache
[ 1209.239845][T21316] Free swap  = 124996kB
[ 1209.241857][T21316] Total swap = 124996kB
[ 1209.244988][T21316] 1834877 pages RAM
[ 1209.246602][T21316] 0 pages HighMem/MovableOnly
[ 1209.248681][T21316] 390239 pages reserved
[ 1209.250744][T21316] 0 pages cma reserved
[ 1209.436668][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11612'.
[ 1209.450936][T21347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11613'.
[ 1209.475394][T21318] lo speed is unknown, defaulting to 1000
[ 1209.618104][T21350] bond352: entered promiscuous mode
[ 1209.620836][T21350] 8021q: adding VLAN 0 to HW filter on device bond352
[ 1209.736792][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11615'.
[ 1210.061541][T21381] bond353: entered promiscuous mode
[ 1210.063684][T21381] 8021q: adding VLAN 0 to HW filter on device bond353
[ 1210.081399][T21381] 8021q: adding VLAN 0 to HW filter on device bond353
[ 1210.087696][T21381] bond353: (slave wireguard10): The slave device specified does not support setting the MAC address
[ 1210.092994][T21381] bond353: (slave wireguard10): Setting fail_over_mac to active for active-backup mode
[ 1210.109891][T21381] bond353: (slave wireguard10): making interface the new active one
[ 1210.113475][T21381] wireguard10: entered promiscuous mode
[ 1210.116860][T21381] bond353: (slave wireguard10): Enslaving as an active interface with an up link
[ 1210.209105][T21392] validate_nla: 3 callbacks suppressed
[ 1210.209121][T21392] netlink: 'syz.1.11625': attribute type 1 has an invalid length.
[ 1210.237972][T21392] bond396: entered promiscuous mode
[ 1210.240511][T21392] 8021q: adding VLAN 0 to HW filter on device bond396
[ 1210.438883][T21408] syzkaller1: entered promiscuous mode
[ 1210.440831][T21408] syzkaller1: entered allmulticast mode
[ 1210.560632][T21416] syzkaller1: entered promiscuous mode
[ 1210.563974][T21416] syzkaller1: entered allmulticast mode
[ 1210.588744][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11631'.
[ 1210.594954][T21420] netlink: 'syz.1.11632': attribute type 1 has an invalid length.
[ 1210.632525][T21420] bond397: entered promiscuous mode
[ 1210.635981][T21420] 8021q: adding VLAN 0 to HW filter on device bond397
[ 1210.651904][T21420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11632'.
[ 1210.657058][T21420] bond397: left promiscuous mode
[ 1210.659004][T21420] bond397: entered allmulticast mode
[ 1210.692331][T21420] bond397: (slave bridge185): making interface the new active one
[ 1210.696213][T21420] bridge185: entered allmulticast mode
[ 1210.700074][T21420] bond397: (slave bridge185): Enslaving as an active interface with an up link
[ 1210.997134][T21432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11635'.
[ 1211.051814][T21431] lo speed is unknown, defaulting to 1000
[ 1211.124652][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11637'.
[ 1211.136707][T21436] wireguard: wg0: Could not create IPv4 socket
[ 1211.139453][T21436] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1211.199545][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11638'.
[ 1211.274461][T21442] 8021q: adding VLAN 0 to HW filter on device bond355
[ 1211.299749][T21442] bond355 (unregistering): Released all slaves
[ 1211.314847][T21431] lo speed is unknown, defaulting to 1000
[ 1211.499220][T21448] netlink: 'syz.0.11640': attribute type 4 has an invalid length.
[ 1211.838564][T21457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1211.841697][T21457] IPv6: NLM_F_CREATE should be set when creating new route
[ 1211.844686][T21457] IPv6: NLM_F_CREATE should be set when creating new route
[ 1211.847502][T21457] IPv6: NLM_F_CREATE should be set when creating new route
[ 1211.965006][T21467] netlink: 'syz.0.11644': attribute type 1 has an invalid length.
[ 1211.997634][T21462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1212.081975][T21470] syzkaller1: entered promiscuous mode
[ 1212.091553][T21470] syzkaller1: entered allmulticast mode
[ 1212.162458][T21475] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1212.168411][T21475] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.206101][T21475] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1212.209175][T21475] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.264332][T21475] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1212.267700][T21475] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.319471][T21475] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1212.322513][T21475] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.388522][T10632] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.397759][T10632] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1212.438194][T10632] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.441393][T10632] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1212.466916][ T5677] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.469595][ T5677] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1212.509956][ T5677] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.512446][ T5677] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1212.524808][T21474] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1212.528670][T21474] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.548732][ T5677] ==================================================================
[ 1212.551724][ T5677] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15a/0x1550
[ 1212.554457][ T5677] Read of size 8 at addr ffff888175f6eca8 by task kworker/u8:3/5677
[ 1212.558081][ T5677] 
[ 1212.559326][ T5677] CPU: 1 UID: 0 PID: 5677 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[ 1212.559345][ T5677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1212.559356][ T5677] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[ 1212.559385][ T5677] Call Trace:
[ 1212.559393][ T5677]  <TASK>
[ 1212.559402][ T5677]  dump_stack_lvl+0xe8/0x150
[ 1212.559420][ T5677]  print_address_description+0x55/0x1e0
[ 1212.559435][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1212.559452][ T5677]  print_report+0x58/0x70
[ 1212.559465][ T5677]  kasan_report+0x117/0x150
[ 1212.559487][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1212.559508][ T5677]  __mutex_lock+0x15a/0x1550
[ 1212.559524][ T5677]  ? __lock_acquire+0x6b5/0x2cf0
[ 1212.559539][ T5677]  ? look_up_lock_class+0x57/0x110
[ 1212.559557][ T5677]  ? __mutex_lock+0x608/0x1550
[ 1212.559575][ T5677]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1212.559597][ T5677]  ? __pfx___mutex_lock+0x10/0x10
[ 1212.559618][ T5677]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1212.559638][ T5677]  ? process_scheduled_works+0xa70/0x1860
[ 1212.559654][ T5677]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1212.559679][ T5677]  ? process_scheduled_works+0xa70/0x1860
[ 1212.559692][ T5677]  ? process_scheduled_works+0xa70/0x1860
[ 1212.559707][ T5677]  process_scheduled_works+0xb5d/0x1860
[ 1212.559733][ T5677]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1212.559749][ T5677]  ? assign_work+0x3d5/0x5e0
[ 1212.559764][ T5677]  worker_thread+0xa53/0xfc0
[ 1212.559789][ T5677]  kthread+0x388/0x470
[ 1212.559814][ T5677]  ? __pfx_worker_thread+0x10/0x10
[ 1212.559828][ T5677]  ? __pfx_kthread+0x10/0x10
[ 1212.559845][ T5677]  ret_from_fork+0x514/0xb70
[ 1212.559862][ T5677]  ? __pfx_ret_from_fork+0x10/0x10
[ 1212.559877][ T5677]  ? __switch_to+0xc79/0x1410
[ 1212.559897][ T5677]  ? __pfx_kthread+0x10/0x10
[ 1212.559915][ T5677]  ret_from_fork_asm+0x1a/0x30
[ 1212.559937][ T5677]  </TASK>
[ 1212.559943][ T5677] 
[ 1212.625439][ T5677] Allocated by task 21475:
[ 1212.627022][ T5677]  kasan_save_track+0x3e/0x80
[ 1212.628829][ T5677]  __kasan_kmalloc+0x93/0xb0
[ 1212.630565][ T5677]  __kmalloc_noprof+0x35c/0x760
[ 1212.632382][ T5677]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[ 1212.634634][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.636499][ T5677]  register_netdevice+0x18c9/0x1ec0
[ 1212.638460][ T5677]  nsim_create+0xbed/0x1160
[ 1212.640172][ T5677]  __nsim_dev_port_add+0x857/0xd30
[ 1212.642048][ T5677]  nsim_dev_port_add_all+0x37/0xf0
[ 1212.643728][ T5677]  nsim_dev_reload_up+0x45f/0x7c0
[ 1212.645178][ T5677]  devlink_reload+0x4f8/0x8c0
[ 1212.646494][ T5677]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1212.648174][ T5677]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1212.650165][ T5677]  genl_rcv_msg+0x61c/0x7a0
[ 1212.651528][ T5677]  netlink_rcv_skb+0x232/0x4b0
[ 1212.652923][ T5677]  genl_rcv+0x28/0x40
[ 1212.654052][ T5677]  netlink_unicast+0x75c/0x8e0
[ 1212.655575][ T5677]  netlink_sendmsg+0x813/0xb40
[ 1212.657174][ T5677]  ____sys_sendmsg+0x972/0x9f0
[ 1212.659015][ T5677]  ___sys_sendmsg+0x2a5/0x360
[ 1212.660803][ T5677]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1212.662315][ T5677]  do_syscall_64+0x15f/0xf80
[ 1212.663656][ T5677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.665416][ T5677] 
[ 1212.666181][ T5677] Freed by task 21474:
[ 1212.667567][ T5677]  kasan_save_track+0x3e/0x80
[ 1212.668970][ T5677]  kasan_save_free_info+0x46/0x50
[ 1212.670459][ T5677]  __kasan_slab_free+0x5c/0x80
[ 1212.671881][ T5677]  kfree+0x1c5/0x640
[ 1212.673019][ T5677]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[ 1212.674832][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.676421][ T5677]  unregister_netdevice_many_notify+0x17a5/0x22c0
[ 1212.678467][ T5677]  unregister_netdevice_queue+0x31f/0x360
[ 1212.680332][ T5677]  nsim_destroy+0x24e/0x830
[ 1212.681793][ T5677]  __nsim_dev_port_del+0x14f/0x200
[ 1212.683713][ T5677]  nsim_dev_reload_destroy+0x288/0x490
[ 1212.685778][ T5677]  nsim_dev_reload_down+0x8a/0xc0
[ 1212.687542][ T5677]  devlink_reload+0x1eb/0x8c0
[ 1212.688915][ T5677]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1212.690755][ T5677]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1212.692834][ T5677]  genl_rcv_msg+0x61c/0x7a0
[ 1212.694561][ T5677]  netlink_rcv_skb+0x232/0x4b0
[ 1212.696366][ T5677]  genl_rcv+0x28/0x40
[ 1212.697832][ T5677]  netlink_unicast+0x75c/0x8e0
[ 1212.699311][ T5677]  netlink_sendmsg+0x813/0xb40
[ 1212.700716][ T5677]  ____sys_sendmsg+0x972/0x9f0
[ 1212.702295][ T5677]  ___sys_sendmsg+0x2a5/0x360
[ 1212.703736][ T5677]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1212.705179][ T5677]  do_syscall_64+0x15f/0xf80
[ 1212.706517][ T5677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.708232][ T5677] 
[ 1212.708965][ T5677] Last potentially related work creation:
[ 1212.710775][ T5677]  kasan_save_stack+0x3e/0x60
[ 1212.712411][ T5677]  kasan_record_aux_stack+0xbd/0xd0
[ 1212.714377][ T5677]  insert_work+0x3d/0x330
[ 1212.715759][ T5677]  __queue_work+0xbad/0xfc0
[ 1212.717145][ T5677]  queue_work_on+0x106/0x1d0
[ 1212.718636][ T5677]  __udp_tunnel_nic_add_port+0xb71/0xd60
[ 1212.720329][ T5677]  udp_tunnel_push_rx_port+0x186/0x210
[ 1212.722270][ T5677]  geneve_offload_rx_ports+0xc7/0x150
[ 1212.724211][ T5677]  geneve_netdevice_event+0x6a/0x80
[ 1212.726188][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.728011][ T5677]  call_netdevice_notifiers+0x90/0xd0
[ 1212.729971][ T5677]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[ 1212.732319][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.734270][ T5677]  register_netdevice+0x18c9/0x1ec0
[ 1212.736224][ T5677]  nsim_create+0xbed/0x1160
[ 1212.737858][ T5677]  __nsim_dev_port_add+0x857/0xd30
[ 1212.739718][ T5677]  nsim_dev_port_add_all+0x37/0xf0
[ 1212.741631][ T5677]  nsim_dev_reload_up+0x45f/0x7c0
[ 1212.743426][ T5677]  devlink_reload+0x4f8/0x8c0
[ 1212.745147][ T5677]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1212.747157][ T5677]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1212.749276][ T5677]  genl_rcv_msg+0x61c/0x7a0
[ 1212.750994][ T5677]  netlink_rcv_skb+0x232/0x4b0
[ 1212.752783][ T5677]  genl_rcv+0x28/0x40
[ 1212.754308][ T5677]  netlink_unicast+0x75c/0x8e0
[ 1212.756132][ T5677]  netlink_sendmsg+0x813/0xb40
[ 1212.758174][ T5677]  ____sys_sendmsg+0x972/0x9f0
[ 1212.760200][ T5677]  ___sys_sendmsg+0x2a5/0x360
[ 1212.762045][ T5677]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1212.763756][ T5677]  do_syscall_64+0x15f/0xf80
[ 1212.765324][ T5677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.767293][ T5677] 
[ 1212.768122][ T5677] Second to last potentially related work creation:
[ 1212.770286][ T5677]  kasan_save_stack+0x3e/0x60
[ 1212.771882][ T5677]  kasan_record_aux_stack+0xbd/0xd0
[ 1212.773609][ T5677]  insert_work+0x3d/0x330
[ 1212.775168][ T5677]  __queue_work+0xccf/0xfc0
[ 1212.776720][ T5677]  queue_work_on+0x106/0x1d0
[ 1212.778198][ T5677]  __udp_tunnel_nic_add_port+0xb71/0xd60
[ 1212.779908][ T5677]  udp_tunnel_push_rx_port+0x186/0x210
[ 1212.781620][ T5677]  vxlan_offload_rx_ports+0x129/0x1f0
[ 1212.783661][ T5677]  vxlan_netdevice_event+0x111/0x480
[ 1212.785551][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.787486][ T5677]  call_netdevice_notifiers+0x90/0xd0
[ 1212.789532][ T5677]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[ 1212.791846][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.793637][ T5677]  register_netdevice+0x18c9/0x1ec0
[ 1212.795219][ T5677]  nsim_create+0xbed/0x1160
[ 1212.796575][ T5677]  __nsim_dev_port_add+0x857/0xd30
[ 1212.798271][ T5677]  nsim_dev_port_add_all+0x37/0xf0
[ 1212.799887][ T5677]  nsim_dev_reload_up+0x45f/0x7c0
[ 1212.801437][ T5677]  devlink_reload+0x4f8/0x8c0
[ 1212.803217][ T5677]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1212.805383][ T5677]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1212.807139][ T5677]  genl_rcv_msg+0x61c/0x7a0
[ 1212.808505][ T5677]  netlink_rcv_skb+0x232/0x4b0
[ 1212.809956][ T5677]  genl_rcv+0x28/0x40
[ 1212.811387][ T5677]  netlink_unicast+0x75c/0x8e0
[ 1212.813225][ T5677]  netlink_sendmsg+0x813/0xb40
[ 1212.815017][ T5677]  ____sys_sendmsg+0x972/0x9f0
[ 1212.816886][ T5677]  ___sys_sendmsg+0x2a5/0x360
[ 1212.818640][ T5677]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1212.820485][ T5677]  do_syscall_64+0x15f/0xf80
[ 1212.822250][ T5677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.824459][ T5677] 
[ 1212.825385][ T5677] The buggy address belongs to the object at ffff888175f6ec00
[ 1212.825385][ T5677]  which belongs to the cache kmalloc-256 of size 256
[ 1212.830432][ T5677] The buggy address is located 168 bytes inside of
[ 1212.830432][ T5677]  freed 256-byte region [ffff888175f6ec00, ffff888175f6ed00)
[ 1212.835385][ T5677] 
[ 1212.836275][ T5677] The buggy address belongs to the physical page:
[ 1212.838519][ T5677] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x175f6e
[ 1212.841697][ T5677] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1212.844706][ T5677] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[ 1212.847527][ T5677] page_type: f5(slab)
[ 1212.848976][ T5677] raw: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[ 1212.852126][ T5677] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1212.855219][ T5677] head: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[ 1212.858372][ T5677] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1212.861518][ T5677] head: 057ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 1212.864741][ T5677] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1212.867913][ T5677] page dumped because: kasan: bad access detected
[ 1212.870259][ T5677] page_owner tracks the page as allocated
[ 1212.872260][ T5677] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5869, tgid 5867 (syz.0.26), ts 70195467822, free_ts 70176393457
[ 1212.881178][ T5677]  post_alloc_hook+0x231/0x280
[ 1212.882863][ T5677]  get_page_from_freelist+0x24ba/0x2540
[ 1212.885452][ T5677]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1212.887698][ T5677]  allocate_slab+0x77/0x660
[ 1212.889363][ T5677]  refill_objects+0x339/0x3d0
[ 1212.891053][ T5677]  __pcs_replace_empty_main+0x321/0x720
[ 1212.893170][ T5677]  __kmalloc_noprof+0x474/0x760
[ 1212.894909][ T5677]  __register_sysctl_table+0xba1/0x1340
[ 1212.896919][ T5677]  mpls_dev_sysctl_register+0x191/0x280
[ 1212.898929][ T5677]  mpls_dev_notify+0x394/0xd10
[ 1212.900695][ T5677]  notifier_call_chain+0x1ad/0x3d0
[ 1212.902617][ T5677]  register_netdevice+0x18c9/0x1ec0
[ 1212.904535][ T5677]  tun_set_iff+0x844/0xf00
[ 1212.906074][ T5677]  __tun_chr_ioctl+0x7bb/0x1e10
[ 1212.907782][ T5677]  __se_sys_ioctl+0xfc/0x170
[ 1212.909546][ T5677]  do_syscall_64+0x15f/0xf80
[ 1212.911268][ T5677] page last free pid 5869 tgid 5867 stack trace:
[ 1212.913588][ T5677]  __free_frozen_pages+0xbc7/0xd30
[ 1212.915455][ T5677]  __slab_free+0x274/0x2c0
[ 1212.917176][ T5677]  qlist_free_all+0x99/0x100
[ 1212.918885][ T5677]  kasan_quarantine_reduce+0x148/0x160
[ 1212.920931][ T5677]  __kasan_slab_alloc+0x22/0x80
[ 1212.922792][ T5677]  __kmalloc_noprof+0x316/0x760
[ 1212.924641][ T5677]  sk_prot_alloc+0xe7/0x210
[ 1212.926336][ T5677]  sk_alloc+0x3a/0x390
[ 1212.927802][ T5677]  tun_chr_open+0x79/0x520
[ 1212.929419][ T5677]  misc_open+0x2d5/0x350
[ 1212.930919][ T5677]  chrdev_open+0x4cd/0x5e0
[ 1212.932584][ T5677]  do_dentry_open+0x785/0x14e0
[ 1212.934602][ T5677]  vfs_open+0x3b/0x340
[ 1212.936225][ T5677]  path_openat+0x2e08/0x3860
[ 1212.937867][ T5677]  do_file_open+0x23e/0x4a0
[ 1212.939440][ T5677]  do_sys_openat2+0x113/0x200
[ 1212.941107][ T5677] 
[ 1212.942016][ T5677] Memory state around the buggy address:
[ 1212.944153][ T5677]  ffff888175f6eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1212.947052][ T5677]  ffff888175f6ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1212.949912][ T5677] >ffff888175f6ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1212.952819][ T5677]                                   ^
[ 1212.954676][ T5677]  ffff888175f6ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1212.957459][ T5677]  ffff888175f6ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1212.960058][ T5677] ==================================================================
[ 1212.992897][ T5677] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1212.995025][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[ 1212.997722][ T5677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1213.000504][ T5677] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[ 1213.002590][ T5677] Call Trace:
[ 1213.003558][ T5677]  <TASK>
[ 1213.004414][ T5677]  vpanic+0x56c/0xa60
[ 1213.005655][ T5677]  ? __pfx_vpanic+0x10/0x10
[ 1213.007029][ T5677]  panic+0xc5/0xd0
[ 1213.008197][ T5677]  ? __pfx_panic+0x10/0x10
[ 1213.009840][ T5677]  ? preempt_schedule_thunk+0x16/0x30
[ 1213.011882][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1213.013695][ T5677]  ? preempt_schedule_thunk+0x16/0x30
[ 1213.015745][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1213.017497][ T5677]  check_panic_on_warn+0x89/0xb0
[ 1213.019166][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1213.020786][ T5677]  end_report+0x73/0x170
[ 1213.022220][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1213.023842][ T5677]  kasan_report+0x128/0x150
[ 1213.025484][ T5677]  ? __mutex_lock+0x15a/0x1550
[ 1213.027169][ T5677]  __mutex_lock+0x15a/0x1550
[ 1213.028803][ T5677]  ? __lock_acquire+0x6b5/0x2cf0
[ 1213.030587][ T5677]  ? look_up_lock_class+0x57/0x110
[ 1213.032468][ T5677]  ? __mutex_lock+0x608/0x1550
[ 1213.034228][ T5677]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1213.036546][ T5677]  ? __pfx___mutex_lock+0x10/0x10
[ 1213.038370][ T5677]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1213.040374][ T5677]  ? process_scheduled_works+0xa70/0x1860
[ 1213.042528][ T5677]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1213.044764][ T5677]  ? process_scheduled_works+0xa70/0x1860
[ 1213.046869][ T5677]  ? process_scheduled_works+0xa70/0x1860
[ 1213.048783][ T5677]  process_scheduled_works+0xb5d/0x1860
[ 1213.050638][ T5677]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1213.052634][ T5677]  ? assign_work+0x3d5/0x5e0
[ 1213.054182][ T5677]  worker_thread+0xa53/0xfc0
[ 1213.055754][ T5677]  kthread+0x388/0x470
[ 1213.057137][ T5677]  ? __pfx_worker_thread+0x10/0x10
[ 1213.058942][ T5677]  ? __pfx_kthread+0x10/0x10
[ 1213.060702][ T5677]  ret_from_fork+0x514/0xb70
[ 1213.062198][ T5677]  ? __pfx_ret_from_fork+0x10/0x10
[ 1213.063603][ T5677]  ? __switch_to+0xc79/0x1410
[ 1213.064969][ T5677]  ? __pfx_kthread+0x10/0x10
[ 1213.066358][ T5677]  ret_from_fork_asm+0x1a/0x30
[ 1213.067991][ T5677]  </TASK>
[ 1213.069670][ T5677] Kernel Offset: disabled
[ 1213.071158][ T5677] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:23:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000c2b583 RBX=ffffffff819a815a RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dfa8972 RDI=ffffffff8c28abe0 RBP=ffffffff8e607eb0 RSP=ffffffff8e607dc0
R8 =ffff8881210339db R9 =1ffff1102420673b R10=dffffc0000000000 R11=ffffed102420673c
R12=0000000000000000 R13=1ffffffff1cd25d8 R14=0000000000000000 R15=1ffffffff1cd25d8
RIP=ffffffff8ba8412f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc90000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f867787c300 CR3=00000001d970a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=da4076c974aa3b63 1da50d7825083662 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=3e5a9dd95523ba3b 99e118a4516d6813
XMM06=a207e42a1dc20a23 9f121355bb7c109d XMM07=b36c5aa00c389bda 7c0257d788a8e156
XMM08=ede6085f0ae7e0af 0478da4076c974aa XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004f47270
R8 =ffff888104eb0237 R9 =1ffff110209d6046 R10=dffffc0000000000 R11=ffffffff8544a7e0
R12=dffffc0000000000 R13=ffffffff9a4869a6 R14=ffffffff9a79f840 R15=0000000000000000
RIP=ffffffff8544a85c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9290000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f86776d66c0 CR3=0000000035970000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=f75d377a72120d43 e6b34f7073b7ecb6
XMM06=26910da57093a814 891899f23caf196a XMM07=66d13d8cb54b081c 326648c1d4e28cfa
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
