last executing test programs:

1.815213698s ago: executing program 1 (id=2231):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000a080002400c00000008000340001ae05f8f9438000100727066000000000000000000000000000000000000ff0fba436ec771003b480b5259be2ff2669612b14e00ea59bb084582c79354607011ec"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, 0x0, 0x0) (async)
sendmsg$nl_route_sched_retired(r5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) (async)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

1.270617923s ago: executing program 2 (id=2239):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x15, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fedbdf250c0000000c00058008000100756470000c00098006000000001000001c000380080001000002000008000300780500ec07000100070000003000048014000780080001000000f00008000200001000000912ca0073797a31000000000900010073797a300000000040eccbfdfcad149832f7a41d1174d0c388ff5df312f636670cce963a2c6c86261f63f9fe44bc76e03544ef8ecfc0c04aded72d948d5e2665c5bf396708f2e48321c416f9ca25c1a750b61d25cc8d1aa29e379da75397083dc55883713f9b8ce610769325b8af11e62527e1d9afa76fd9913be78eca9acedf6396f13c33423abfaa37257e182d60728ab94d201f8326129c752a83f9c65e6a13fe464a96dea602c7"], 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000200)=0x3a7b, 0x4)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r9], 0x448}}, 0x0)
sendmmsg$inet(r9, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x2d, 0x20040040)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x58, 0x1a, 0x1, 0x70bd26, 0x25dfdbf0, {0x4}, [@nested={0x43, 0xe, 0x0, 0x1, [@typed={0xc, 0x73, 0x0, 0x0, @u64}, @generic="282002271dd99ae06d98f242a4ab6b69e7156a4b", @generic, @typed={0x8, 0x78, 0x0, 0x0, @u32=0xffffffff}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0xc29a}, @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x9}, @generic="a2e361"]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ppoll(&(0x7f00000000c0)=[{r8, 0x100a}, {r8, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0)
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r11, 0x8004b707, 0x0)
connect$unix(r8, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000180)={0x20000010})

1.170265893s ago: executing program 2 (id=2240):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="0148"], 0xc4}}, 0x4004)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2300000002a5000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="26e24c82fffffffff94f5b91a52d375da01534f5aefb2a68cc555fd299456c723f17a5c6b9e164cf73a6e6503e673b6b1a64d1835a3f8719715508d408dac7839cfc54500577ef15cdcfded623b24be1e205ab74fa195ecc79b6bda332aa9e0f0eb6b5435c17e37d14d710701a4dd09343ef43facce9494554f10a8c212ade6e19b2f9d10174e1b13e31f65e94d35d2449b05e417ebb35d5681699a6ecff323d90121922864469a1dcaf62dd3d8f0914963bdf75121823a1be2a3b21cf3311ed2c93dc3833d3754c162635ecd0"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x9, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="68020000", @ANYRES16=r2, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044040)

1.078238755s ago: executing program 2 (id=2241):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000a0000000004000000000000f0baa3d9a5f6", @ANYRES32=r4, @ANYBLOB="00050000000000000a0001000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004890)

998.342666ms ago: executing program 2 (id=2243):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0)
write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)

900.375758ms ago: executing program 1 (id=2244):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = gettid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x403, 0xe, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xba}, @IFLA_MAP={0x24, 0xe, {0x1, 0x2, 0x7f, 0xe85, 0x7, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=<r4=>0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)=<r5=>0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={<r8=>0x0, <r9=>0x0, <r10=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00\b\x00\f\x00'/20, @ANYRES32=r9, @ANYBLOB="0b000080976b640868603000180001801400f6801000468008004a00b300000004004d80"], 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
r11 = getgid()
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000080)=<r13=>0x0)
syz_open_procfs$namespace(r13, &(0x7f0000000040)='ns/ipc\x00')
getpid() (async)
r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000b40)={<r15=>r0, 0x1, 0xf, 0x10001})
r16 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) (async)
r17 = socket(0x18, 0x4, 0x0)
bind$alg(r17, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff]}}], 0x20, 0x40001}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000380)="852b8e48c2fea2fb349a229a9617f05e9089d479c9ba31e80793372693cd6be9c8e5d911e9224724f2f6195319fef1ca41616263900e9c5cdd81ea9127bd13271aa2", 0x42}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r14, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r4, r11}}}], 0x88, 0x4008045}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)="c7759236ef61107f6d72143b82aecb218a80f0e9f5ce95787c90b25c9e8c76a58cf90c68f058cac3cc932dab99b5db62a868655fd918bc4f3149023b712e5a839f0de437e141acae45cec7b53f8df1abf48789bdaeb3882acf0bce25fe5b8dca930d326005b2053b40feee85bf8bb0e16cb98c6ec8cc512c1b888f18c33b4a6151b15bebe7d010641e4d7364e07d09a44bc223457224f0bc962c1b765509cd0e575b7b1b4b420a7daaf66be8bb541704ed97a6c2a206b1988d4f14fadf9fcb24008878162c8c657bf62d8b60588371ef81332df2f4826c42978880e0e37324daa88144b142af881cee59e8d6201687f45b5358", 0xf3}, {&(0x7f0000000780)="60be9d8ea5dfc3b7437b3542dfe36294c51892a38c5bf7cd634bda6ba6be8cde052d99988b24068baf0bc81a4083010ac0224642e59b90b39f9029e32e4c7b705ffb076a13a57e8b4e9979a6e109741ce1f6c2712977a02286cf3b1fd79bb43dd58a109e0a99e2ffa8cba1c67465ad42f3fd5a7e2120b9a15cafac6f918107a67a5550f0d9a6524a03cfa57f91c7c51e5c3c309b486ab0e56cac4cd9f4087c061e2c8485ad5350f6c1d18594067d903508badca6bde67fe27a01f48e7df60fc0f6999db805fba825462c889058d7d67ca4247ace2d14", 0xd6}, {&(0x7f0000000880)="1ecf71e5689283977e1fad398aa707c94f1cd7811a5253d88da4613c5733c0579977183d5eb4c18062d4a77f96472c42befdf4f072d1c1719fc1d900742a82e744773f23b43a3667f53791dcbe0059930c545d87d4bd13b365b3053a81158b17db8b78b40e644eb16d7d18f287d50b58698625754c4fb0c850d01f96562690f8afb370dba94d80fed5d5415d", 0x8c}, {&(0x7f0000000940)="164e44ce55c6fdc5bd43fd24d98d47ad21324c92af6a3342bb708d0cdac0ac2f46e8a8b8d881d9d16946e97d9c725c2dacac380bde6ae0826d8d8532d7b9990a680cb93010d54a28b563fb4c3aece041a1b6590f52b5301960d8c6aaccbb410cac0d0f27ef83a914fb36978c3dc5865807b2e615ff20a428a9bfac0ae7f04fed6fded02a5ccc39a3e8b5cb92111a08b1ac1412401df33f420f6ebac0", 0x9c}, {&(0x7f0000000a00)="01ceaef4f23489a0be3e2a5940903beb5f302f56a3b69378835afeeed6d3df14f6a7e7cdef555040a0b15e22c3f235427149154082507b562a564aee34e61ef43a66c05dd02af6bdec6ba0c766ee129e5dffb4bddf70c723b06f66df75ff590d69", 0x22}], 0x5, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r13, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r0, r17, r1, r15, r12]}}, @cred={{0x1c, 0x1, 0x2, {r2, r9, r10}}}, @cred={{0x4a, 0x1, 0x2, {r2, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r14, r3, 0xffffffffffffffff, r0, r15]}}, @rights={{0x1c, 0x1, 0x1, [r7, r16, r3]}}], 0xf0, 0x48840}}], 0x4, 0x4008000)
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket$inet_udp(0x2, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r20 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r20, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
getsockname$l2tp(r20, 0x0, &(0x7f0000000280)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f)
ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r21=>0x0})
sendmsg$nl_route(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r21, 0x60338, 0x20240}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4)

840.408102ms ago: executing program 1 (id=2245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x321c0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r2, 0x211, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4885}, 0x40000)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="b3", 0x1, 0x0, 0x0, 0x0)
close(0x3)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r4, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000250001ff81000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

769.40237ms ago: executing program 0 (id=2246):
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
listen(0xffffffffffffffff, 0xfffffffc)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x40440c0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), 0x4)
r10 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="1400000000000000010000000c0000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100010000"], 0x6b}, 0xfc00)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

768.577649ms ago: executing program 1 (id=2247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x67)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
vmsplice(r5, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000180)="015a3c52eb64d54e06f9eea919637b3e88b9ebd0f3009f8d8b4dcee4206375efba00cf25b23693f9700a1984", 0x2c}, {&(0x7f00000003c0)="b89cfb0c51b202735f37413c36fbdac3c3bfb01cdec6ce4f07ce10d9bf71b4acc66e25f8495e367866c50997bfc0667d2f0ebd1c042ef7c9d54d774c74ea1411339fa70258fd85ca9d497bb66adc9240d791c3a51bb70fda873e0639f104c098081bd92590afe839200a71befc4706ab26621af90758cb4a286d49adadf1ef64dfb3fe5eb97e50ec20fb61604a72c568a3d550b716a3be", 0x97}, {0x0}], 0x4, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

530.656582ms ago: executing program 0 (id=2248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x2}, {0x9}, 0x108, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000007c0)="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", 0x144, 0x0, &(0x7f0000000940)={0x2, 0x163, {0x0, 0xc, 0xb8, "f9e3fcb9d51eb8929e259f65e205ce8d30b3c3fba2abdb6a3b0fdba4f5437b6e5d2a70cbfe508be122cc5069dd3409ea719f4e5997d9fc0a29f684151d2396273bd59c5ec34325822ee2457b2895a9fa95323b68c35c510c72e055a593811c5fb864c9012b861695d34987ee5c97b26c7cd714f1f3df854ae0c5a8b1ef3718e6560c8fb24666f4937b338c7b3ff4a230a2d58b22f386d087577576a32beb1b83d25cc4063fb8412454269cd464c187cd0e0aabd6a10ec1e2", 0x9e, "9939b33a52f5bc36d4bd8d042f581dab327e9d0b06d1172d46bc2873844c2987effb713e6b29f48301ec744bde4e0a98ea74441e20fd56b3ee2f1c588c37652dc49daf8f98c08aba6b5d70ad7613539b25d581ec8526d3395726f5cce5bde56ab32fd9050ce8bd3c2d7e9b880de51388c883475edbb1d65eef842dcf2f4ddfdfd5fb61b5f78751d32826a2952aa365b062f2a3b8e7d00cc098198d65832f"}, 0x69, "20447f5d1338f5f3d3537cb6e3d39fafd3ed885627b929241248d3ff6c6f80c15fd2b505847ac5ccb4d47b7e62bf4d6399aa18d3991e60c918505fc49a7d9f298ded3822c05b3be0beba71a52a71d82cc410be25e45f463248110303e506b5f790f3b527d2333e8947"}, 0x1d8})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r4, 0x7ca8e000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c0226bd7000fcdbdf25030000000c000300020000000020000008000400000000000562442bd3730064bc000d0025000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, r4}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x60, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40104, 0x8095}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8, 0x1b, 0x6c}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3018a}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0)

470.688074ms ago: executing program 0 (id=2249):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r2, r1, 0x0, 0x8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20040841}, 0x4000000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000011)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00092a00000000000000000000000600360028000000060036003e0000000600360006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20)
r7 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000040)=0x7f00, 0x4)
setsockopt(r1, 0x84, 0x8001, &(0x7f0000000540)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@getchain={0x3c, 0x66, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0xfff3}, {0x6, 0xc}}, [{0x8, 0xb, 0x245}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3868}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)

259.010785ms ago: executing program 0 (id=2250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x232, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x4c}}, 0x11)
r3 = socket$phonet(0x23, 0x2, 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xde}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc00, 0x140000}}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000041}, 0x4840)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000017c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000000580)={0x1200, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xd, 0x5b, "baa5c050f4d64de209"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "d597a6350920a71891474d5396134b81d9224b095b8e6817fe1572575a3f5454326a23a7e4342c71dca696f360269915b95b7e01b556de77d9eccc5c2bd9001995378e5ccf35593abee06dd3032ab55b90aac6e450ee111198b076780276f7cbb12d45e0b1ac969fbfcdea50bbe12f49ed1d52d44a2ffa2e108f2ba402cc0367f1f132b347c303c0155ece69b2e6324f4295487da710"}, @NL80211_ATTR_FRAME_MATCH={0x9a, 0x5b, "d55d3da4e071301f0c0414cfd10a52fdff707285a9003f1d735b18d2beca02b50e753ef1b1d6b3f8d1b1504f1532d314bc3da2f0a9f01d1ff109dc5f6f6aea552d45745e08f5dfd213c65ba0cad404f807c386c26df6fc955bd206418a9680ced750bd9a290b10c3243da2ea067615ae22c3e882826b20e3bfe7985bea1d6f22f05fd2fa0b64cc5c8f0a2ae044b941132a3f63f42a7f"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "84c507f34d87be4dd10ac85faa14ec431b136860576562f0fe99c838b8a722af58a0d99cb02c6fa1ab11bf4945bf5fb946645eb76663292571f4b297e0914aa56b577ab5bed9317382a2afeace954a6fc4946fceb8fc3bd2cceeb26567263c3b33caec7ee97b09cae1e68b9c2c9a2c632e9481f39c0dcdac933ab422663d72ec231f76225729d5b0557ac7894ef17cc60f1c71dcf7e81507272a5e3dc4ef1d444f16e82021ca93231ffa8e12cbacb1ef57ae5f027beb5f414f5d1cd12cf8f6d45bac70a38b421b489204fa7c8e89a60925b77b4dc1688d852050e8c7ca36e96a8ba93c33006f04a46b6435cd00201c46a6a1b788449e4ebf1b018e04c4c7bbd60d176a996bc09d26fab9832812293a4e1b2a8657e824d5a156a7f9ed09fe0b436910116a34e3fb3888a4ced15860bfb3f6a5f370affcad49c4f61b1ad8add75ecfb8bcb9f7bab85c90959c96cc0d02264c024bdbdb58eeeace00a36441ac0c235b90f09aa7b816d00a5b4a819bc060fb1ba19defa99ed69975a7cbdc8b3eacc514a50c836a94d97fdad91a65cefddd31b90e7032048672c2cea84f12b9481f8c563bc073a8fa5006f85adda500c8b033a31e7f9b075319d6b968783522ce94706eef453460b99040b3807c29d540c8c7dfaeaa6f14fec7c448d2216dd7a75c64d4276c8ac2ff5a3e5bd448ba791a86ff9d5ebef870a25fad95898326d7dc7f8cb191f6e4cdb8fc57b4fad3a2cb206785ab1110725cf2820a1cf64fdefb196ac5e59cf95da7a5beffac676a1e2bace912ba7ebe342e1c657da3a9888db9f1bbaad166c7e4cf82f6b9ae9153ab24028d1b1710cce6f85bafe2dc275d84a4116e87ec53f599639aa5c0f597604e782df02737c3f148ff0aa91469d2930329bd6fb89bf53d4e1c184082ab34f1109bebf8f229725d73e793b94a738c70fbf718a3488934c32e0b35faf4657d921da704b8e420c50a7970e4cd1cf5aac045cc3d03e3fe8f9d6917101efbbd4405a5d04f32c304f0e3e2422d65247a67a2e266482cece655d00298e9ae1d3f0f5c705f536d6c8145046473d8068168ba120daa965fd615857fdfc204c67fa7239b4fd289cbd73b109371d02df94cb4d0cc009bc1f4c3321bb59bb4773a150e1673dd68a123907c61eabac6352bdf4f952e3555141674bcf6b1bea332c1d0e2d87688aed638624b88ee0c821e4112ba3c951772dfd99b3282a937a69581a99c5f4f70addf608ab172aaddbd383bfc67ef856a4d84715937492e252bfb4231b837a4ec63e971665e8f65ed4aca620478c74fcabe7249c8aae62b542d9ff04adf10233c08f93fef4ad50f9f86fa20c8f408e2d3c9b32813741160b23186b4d7773f2c5b052c391f859c7f4607edaa94a3892090e37c14466911744d761bac3ffd95cd71e0437ae6fa5688d4880bac7dc58e2115b87fe0c3a742b9ac5ec3dffedb466012d55aca02f495218633dcdb7fe81f58bd1d67f93ac68045f32a606daccc30faa1416488d371dc8bc9997b3c82e730844a84c405f7b8e9ebadb9207487b4984fa750db14b3d37aee226103e0565a66ff4e642e62e9f3416dbcc57f75f60c8edf6137d96584ad42f4062a29a09da0ec3e4a8918a44627aad052837c37e863d20eb01636972bd7f57d5d429078e6da40c55dde1f9342cd2573356f41831095cc7273cd4b8e61d876cc23afdd82cc713c94c84e77812b42406e723a2cba156054575b00b9db5fd766595fbcdb9a1daa0b42551975e5d414c2ea9c5f486f55c8959abc7bdc6e3eb8c6845be0306620cb6e90c48a838c041bbe85940982ff12fb58abc91970630188b1bb29912be0d4a99c8b2c50d83dc89191fe389751d799c4edc4290d502bfe2aa96288219084e8146e1360ea6e506f2941df24b348997b9243a0e39ef230873dbc4d5e86c0a2dc41c6a5f93eafb12939525ab1272782877af5b5d2d730059efa87b33de9becb2ac6d88e7a222c9c98a062dea87d643fafb313caa6ebada921a711649687ae5c877d920764c52cab532289b4209004615bbf51c973331682decbbb32f554b1533e4d2be4e553a6e6c0e382ae73b930871f2bc0ad42a8af02329ded1e2caa75282205e5bea4e0711212a8068c855bff0d53554ef7a63e8adc43647aaf3566c14ce81c185f582fc5a41925e41ab2fbd07a4530efab99bec972d6d92a5d0c8e2a4bf41ade2c747d4184d812e863edaf45035814d6f7915989f7c26411d7052641e57b22e47da8a52197940f9ff6d9a3cecf827de1e0f3a464544ac6b115672f60c65f09b45959627fb5d8c9f669ac2265be7e23a2d97a5308b1a6be5bd98d8d02a66aa7d3b3d23ad16bcc1e407bde9d576b975bc17acfdeaa000d752c2c7824bae726e0385e4f6bf1a4610b93be1eb7fb35101fcd395740d9e07ece11ab1524705bbbc1bea02da1960075203878f775c9a75fcc2c8c1cbfb92b9303d888d89d5ace270b6a0b365a4df529dd6d40a1a8e25e8bf41396d4db779dea082564cf15d4e6e8931bacd6c6d1cda969d7b01f76ead1e2b58f8b2ca3bd277d8ff108ca8f7d9dec82c5b8f9113ff4b517479c97384940ab4872392d2e58a15b3f6c4820c84a63ad63572b10073f5e0c854fad364e9696ae11bca1f9851460505b93fad70909ee9bf00ea56a77306870084b451fea2f72c1b7b57d72c9c6803e898520fad7033a681aafce295291d14337bc9471df659b6a576cfcc02365cf957581c89c6e223f80066e21643d2f19294f5450e0c1be357969801bfd419c79e21d58f144de59d877d6c4c67806f1031ad128c2d23ca6f8d5b07690775ea734fafdd47662b640f36e385aa7af485b51ccf5e280063ddc09823bd610f7e3036e9d3b4204c750046adc1dfb775c0186cabf73bd46f4d3762fa53a5c8ee0ec48b099659ccd04d1ca281f0e9974dfd38a7e0aff3e65c1fb169dc9ad2f0760a8137292a33574470d616b459107161a9f406b4962cbf1a320d59db9fc5bfe6a9be383c286358413f89a7fb3c67014d1bf2a2d85347645f6a8834f1f8a9ba76333ea07419a6658d44936238d9fe32afab44e9f9327ed72d03fda5b4f3f124127b34a5435540fc2bab2c5e0bd4fd515a2e2bafade346c5b6b6b3ea4bd61e662c6c8927adfdb65bb8040871d3f2ec3da7e7cf77442d9870414aa9dd8fc19af3f1a80b898c175abb64fd5e3119fa86349cb49c973533b79b313b922d84f2fb22a86594869c6f8225aa5c02403e9ba99257ce988657930fa61bbc3861589a95753b736e20599d11fd36b652e32f064da8a3076ecbed1d1dd9342ce782af44b9bb53399fe1d82e28717031bc93ea933b86662ad9e3d4f00e3d61d2a6ced605928dcf2913c2a746fc69a077706bd31d4a831c43c698ced9a3754fbfeca7d3442529db88fe6a7bd773c40d5744670d2e54295b9a328a01e8936fe911d89e26bffd911585356a9de00700e3a1aa388bfa66a2248671156da85024610514973f17af1cf9ab6420a55722f4464755ad995cb0750daf63102832b2184a6afb349d5f5ab36a445fd35fec7f981dc17e506f2ace8d992ab51fcd07e091c95b4704d690ca5246c30185fe8d503152236f9a2dfbd511768b57372b91a49021b63f69e6d6ad6976618626b83d2223f3f159bfdeb4e70cf5aa939fcd7c193f20f115e04e266f552e9d7abe7bba5473f4983c1e7624ff34afe8feaca1365638e54e0254c797f44af4a651b3b789205ab272194480b5cd184de785cfc9e32b6bb6e7ea7acf78e63881e0ced02f189673b25c526e98bceb73271430ef0a6fbddfd3cec110f1d02eca33dcc15ba4353fd7e0cf289cf737316f3b098bf9f0ca9f1142e10b85c841aa4d5be2bead4dd0f09163eabd0fd3a628fc28ec4e3c73fcbb826ede8c57a6430736a84c4fe739de983f5ceddd240e8b91fa6eaf2e4905deb39c9c1b773344505ed108cdc008750df41c4cf5a952e9d3f214706272af79455306f8160dbb603c62017e0fa2f534d1ed6c942a38036cc304554145d8ca4440ad736e9dcee97179a8d8a501242fb728277e2c7f323fdad46afc09bb24aff2234585bf96c5c1116157979a446f9b1c336bf084e79e30f0613a5c098d3ca956c72f3c06ead371ef263af89bac07ef5cdbd0521209db09711d21894ff0bcabed4ce1caa099ef01a352783eacb6f6091d32e12e019062abb42d5684e50dc0a65bb272a1aa878dfe9289c4f0884ecc3330fd244f98c35cde9312d4c681227b8d76e14640514092805408dff4851746ca03f7b0c8e9a3358975fa7c52c0eac641cfdd3e8141358bf3e40c1ca77fa419cc291cdfa74e4653f32dbb02736779e33da0c5326521519ce86a98e0ebcfd4832806ac49995e5db3970820a17fa0d11fdb27e6ea37d79f6ec552b7866e99911938b6c3d8cb34ecfe3e144ff731f36a20e127a7c9f0d9738408c0a526a1cf1b41233d4254a7b92f30e3cce672ce22e17b9b2cb0c38db6c4518507adcaa0bd8fa3e4d678eb133d609aa226c63320933f4bd55b660b015337ea193fd0624026baaf286641c0e662ecb85536a2871817ab63a74f637bc67c13f52a33a8685b3b46c1882f7c0d2513c3dc1eb45f9202d81e1e96265c68db27733e2c57795b66a75ff2aa961d5508acb3af2b4d3f7bf718b5f65139c1c79487aac42759a4b4a03f92367a870fb52f4079d2733b157b57a10b9e1a86c82e128859cc2c44d8085e662627210e9166964fde61609e838509c80e110714b22ea867daa559ea0f5759bbf0b849a9c0264725a4c37d40f4a1f51db7ea2f077a6074d6ac20428e6310f00fc36295ff1bb406e672c67decb2b9a70431baba6890595cbdb6daa1202ef7e0cdc5e6a06d1a2d67b7fed7be581bf31be69659f82583ec59b10c5a1c2bdfaed831c75ef2fd72e437708567c4fdaadc6c0b5b6aa15bbbd7707d38bdc9c68e3a115c87367feaab5400be1a44f59b6df471e867f0284f5eb8140fe735bb34ef582dbeeffd6b7206be8ae4f27caf3979029b57540bdfe787e805a28bb5527dc57e28be0ecf13842aefd934ea467854b029a9ae0038922cf9b16fb6ce7864fcf01603a67d4edf07ab07b6d5e5386f3f19ae9980e1a3ae0254e1b7d6e26eb5696e880a210ed814fec57b185bad542b445662284482328816e841677ca1a8a7796d9c11992774033bd711bebb2aaf5dfd80e68879e2f1136b2180e568836b3106cdae797b9769b166b239a7aa615dd2c1d19e98c1eda11e975751f4f716b43a75ee7a8cbd0fcf00cc0e4f2146af3a6e5c2311924252b8769ac773bdbaf49e387a245cab774c7ea7f3a063809fbe1c7ab0395c5d02d8126320ae391ac50f9f5c93561eb1f19c4cd6912a71e584aa996c81681feb5cfab558d18d0801b2df1bbc8f9bc93956068c6221a87e4ae25ae0ebf504dd85c411b60e770fe16bed2a148a20cd1b54f07f88681e3a2ec52382ed2cc49f02ee11b503652b70862f3a04018fe88a8055e9738c49bb676d8e6b860dbbf4e56590b0275001e6c65a02b31fc4bdc008f691ca7b0cc997cc1791d14f24d3ccf4c53d1d3731fadb69f9aa088756f425f5ef4cae91040fa4c1c7d0c3c9f409b48bd766879c9e7e73955aa1724fcb37e2193b5a998a375adebdae87a9ba84052f17d38834972ed68b2c7325dd66f1c8c17d231165b4f8a7925ece6a3071627afb23cb60ed3206e7484d0d11477a5f4c99a82a2a22f9788f8d5e15e1099ccde778867205584b84725a8d8422f1dec6c53c204041b2bbedb2dbb5b478872aa409576c07c484c0a7d81df"}, @NL80211_ATTR_FRAME_MATCH={0x4e, 0x5b, "77a3f163a1d0a81a0b9db00af76321faff8253ef3cce097c7c6c64e2ebc694e120c1cccb1ce1f10856be9fb7b21a6b33b08fb15d7b9e55373d1936d001a20d88b71630e13af7f3ae42cd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_MATCH={0x38, 0x5b, "92bce5059b421d3e2f86baa6c0649a5d320cf8f30f6861dd49f702e423f06648689aeb3228f6d784c9608755fb19d33eeadb64ed"}]}, 0x1200}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004)
openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0x604203, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000001dc0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001880)={0x4e8, r4, 0x2, 0x800, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x4b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x460, 0xe, 0x0, 0x1, [{0x4}, {0xc6, 0x0, "9122f7db25ef2e5d5bf059eb30606e7208019c738f238bbc2c955d5cf8a1c0819ac8367f20273ebbe4a3d6332d6c2247bde3647752c4fee4f5afb1ccd805ee8c235658da1f41e328cb90183b8e6895e93142a6b1b63e20e5f513d7688b0d6c10a10bdc131ba3c025ad390b0ef109e2a78e3aa9bfa6dd214f524b0ee7442dded562fd56198539de150c613944b0884e60bfae995aa1a5ab1f66a5e263ef237e856a3e1a375d4a746d3c5a770eaf538e4a43e08667d35a0e407f0d1a56705100034d39"}, {0x46, 0x0, "376f75ddd3f3a5982da764f2ee6cd8566fcd79bc2e65ba97b47b633fdd77cf3cf8c31d3e50e900b6f2837ad12c4e738a9b3e0ef806e31f904e4c107eab0e885a2b14"}, {0xd5, 0x0, "af0cf129abf0b0064e3ff628cfd0739781c3f7c148c11b6766bada1801b01ffda6dbad59a3633b7c6ec72d8ee46baaeee96b93c861e657e453b61ef8fa2870ca69905dcb706478cf4cdb8bed8a17bde157d1b83abe231e1b200cac8af5f82a57d989f2931333d1ba5a7340196cbc9ea3665d45e472e6d8ddad22f15fd4c6fd740f19cc56ab98e6ee32cde5a6e3d0234bb29880f081358e3461912402e7ffa11ea9392b2aa2b5958f576c614cc2d8ebf84a912f67d1edb03bf4f973a704f1db39b1875949523f95590aa625d625d6b837bc"}, {0xda, 0x0, "216d2a0903f39a945a185163af060aeab7458221008e6c33eb69598538f0000fbe82b6f975f9358c8f7ef400d2bb4758422dd2d35569019fadcce0708931aaa95ea5371fbbd39c0c2fa4c971166d8650cbb75413dd9dea2f35fb26d02260822b0832b3669984bfc746ea66da7bc9521a6e6e81de501fa54835d98cfab354a69553a62ca7cce5d8bb782b5460d354ad4e46aad74da10ae6ee99ead974522912345a10753f17164d9a29c0ea2441aa5cc4abd7c1a3d2a32cadcbec0133702531cbdaca17fe5dfee17139b835e3da27a13774af1a57a5fc"}, {0x33, 0x0, "4b45073dbd5856b404a56c5ab4e1cd9fd9ccd82678cad18b4645818e481fba0e1484af62d778746e17075e1ad65e07"}, {0xc7, 0x0, "2b7bcc8d90aee55789b7d99dbca1ca3d67342bb3bf7b779d1b8779b49c66be57d469cdc235079050a5dd908242393e12b68785644148323df44446fa88d57c201681b4140498780201c7c75845d5554bfe1f07af17301beed430ebeda94bf38dd09f93cef275928aa3e7d739b3ebf97560a2c99a950edde9ed1ae5e57e235e44579ca2e623cf9bb64c53f9ef4c221b16c9b6ac64b266a2ba06eb40c686cef58c4eb0c9d7a3cefb82f788122c7deda291b3a9ff8de09bcccb9c78347c5efee18aa99a26"}, {0x19, 0x0, "9f53918aee1d994ac05294bbc7e19bf495cae69822"}, {0x7c, 0x0, "b3c9f51e1229f857482be5be3ebfff5577f47da61a478cbc2fd3db6b304849c6ab4254bdea2f3e21109f186cc5c95260dd5eb29395e5f9a86112c9e6447fd3f68c98140b3d508813d20be30437ab07105ec735dd0b812bdf8f17db8b8b7da80f922b89186d09f52c00dcf4f15e534183abbd18f8320c5c1a"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2c, 0xb, "b0a69c4fd93e8a7125994c024b52558c44ebaa1e1a22dbd70c6f3252b78e759ceffe0f7d97bafa56"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xe4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2fb3a577de50"}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x20000054}, 0x800)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'wpan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r7, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r10 = socket$inet(0x2, 0x3, 0xa)
getsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000002140), &(0x7f0000002180)=0xe)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000021c0)=0x7ff)
r11 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000002200)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x1800)
bind$vsock_stream(r11, &(0x7f0000002240)={0x28, 0x0, 0xffffd8ee, @hyper}, 0x10)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000002280)={@empty, @loopback, <r13=>0x0}, &(0x7f00000022c0)=0xc)
bind$can_raw(r12, &(0x7f0000002300)={0x1d, r13}, 0x10)
connect$inet(r10, &(0x7f0000002340)={0x2, 0x4e24, @multicast1}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0x84, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x604c841}, 0x8851)

257.180628ms ago: executing program 1 (id=2251):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0xb580, @any, 0x9, 0x2}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3, 0x9, 0x0, 0x12}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000000))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x40, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r13, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r14, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)

190.417955ms ago: executing program 0 (id=2252):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x11, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x3, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x81}, 0x86dd}}}]}, 0x38}}, 0x4008c40)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0)
bind$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
close(0x4)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

80.257818ms ago: executing program 2 (id=2253):
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0x7, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x4048844) (rerun: 64)

5.62175ms ago: executing program 2 (id=2254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010794983cf387bbe06b1e10000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001580)={{{@in6=@remote, @in6=@private2, 0x4e21, 0xfffb, 0x4e22, 0xfffd, 0xa, 0x80, 0xc0, 0x3c}, {0x34, 0x7fff, 0x7fff, 0x9, 0x6, 0xd, 0x0, 0x12000000000}, {0xf, 0xa0f, 0xe, 0x1}, 0x83b, 0x6e6bb7, 0x1, 0x1, 0x1, 0x6f23e161ad6863d5}, {{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@loopback, 0x3504, 0x4, 0x3, 0x78, 0x3, 0x7fffffff, 0x755f}}, 0xe8)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

3.198894ms ago: executing program 0 (id=2255):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010008b3246010180080003000300000032fd0c0002000000382ed56dc897bc22390dd9236ccfab9cd250f675da88e3758f58724d2d3ea7c05819a30a54d2d9072f3aa55b8e212f402cfda3d2327d5742391952575c2fc398ebd8957c1c1eed203bec634c4ddca4888301118793ba93dfe658a03ba0c40a9229bfac66c0e6aed4cef0a946b5e5c2cdaf31dbee52ee5158b70f8e807fc533657f75f6f44042dc709e59baa0ee7f6a1eff6a6bb965280f4c89d01c0c0000"], 0x28}, 0x1, 0x0, 0x0, 0xc05}, 0x40800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4000})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x82)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000fbc9c01177edb39ce83fd0c814357a0000000500000a54000000060a010100000000000000000200000028000480240001800900010068a98dfc15624ef02b92b2f6766173680000000014000280080402400000001208000740000a00010900010073797a30c1386d3d614bbfb782c96082936b8a55228df3b250047152e080baae9f19dccb3df8006b95201364daeacaf5b25177e248626c4d483fb9dd5a50e3e7ae2dbff901b7530be332f530d6b31a1d0791eac0dc73667e08612c71d320a43331cacb901ba333fbbb2e4ec3c902ecac"], 0x7c}}, 0x800)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c)
setsockopt$inet_udp_int(r8, 0x11, 0x65, &(0x7f00000002c0)=0x6, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r7, @ANYRES32=r1, @ANYRESDEC=r1], 0x30}}, 0x28000000)
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r11, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x30, r11, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x400c880)
vmsplice(r10, &(0x7f00000001c0)=[{&(0x7f0000000140)="e5f2320047c6ac2174dce34663888ea777ea52238c422cf215e62989f8f6df15008cfb", 0x23}], 0x1, 0x3)

0s ago: executing program 1 (id=2256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], <r1=>0x0, 0x5f, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x44, r4, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r7)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r10, 0x1, 0x80, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x4048800)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000700), r8)
getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x48}}, 0x88)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r13, 0x6, 0x8, &(0x7f0000000000)=0x1000, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x3c, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r6}, 0x10)
sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)

kernel console output (not intermixed with test programs):

 T9438] tipc: Resetting bearer <eth:syzkaller0>
[  141.196281][ T9438] tipc: Disabling bearer <eth:syzkaller0>
[  141.302650][ T9460] netlink: 'syz.2.889': attribute type 30 has an invalid length.
[  141.318114][ T6129] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.318197][ T9460] netlink: 'syz.2.889': attribute type 30 has an invalid length.
[  141.333805][ T6129] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.339057][ T6129] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.341832][ T6129] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.417219][ T9465] netlink: 'syz.1.891': attribute type 1 has an invalid length.
[  141.452604][ T9467] macsec0: entered promiscuous mode
[  141.454605][ T9467] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  141.564075][ T9471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.566942][ T9471] syzkaller0: entered promiscuous mode
[  141.568867][ T9471] syzkaller0: entered allmulticast mode
[  141.586823][ T9471] tipc: Resetting bearer <eth:syzkaller0>
[  141.591227][ T9470] tipc: Resetting bearer <eth:syzkaller0>
[  141.605514][ T9470] tipc: Disabling bearer <eth:syzkaller0>
[  141.658274][ T9474] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  142.084931][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  142.172339][ T9485] vlan0: entered promiscuous mode
[  142.174388][ T9485] bridge0: entered promiscuous mode
[  142.177714][ T9485] vlan0: entered allmulticast mode
[  142.179822][ T9485] bridge0: entered allmulticast mode
[  142.195832][ T9486] vlan0: entered promiscuous mode
[  142.198026][ T9486] vlan0: entered allmulticast mode
[  142.358579][ T9491] netlink: 'syz.2.900': attribute type 4 has an invalid length.
[  142.377773][ T9491] netlink: 'syz.2.900': attribute type 4 has an invalid length.
[  142.448526][ T9495] netlink: 'syz.0.901': attribute type 1 has an invalid length.
[  142.453215][ T9495] netlink: 'syz.0.901': attribute type 1 has an invalid length.
[  142.476353][ T9497] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[  142.494158][ T9497] ip6gretap2: entered promiscuous mode
[  142.512160][ T9500] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.529805][ T9500] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  142.540097][ T9500] bond1: (slave macvlan4): Enslaving as a backup interface with a down link
[  142.700138][ T9509] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  142.866881][ T9514] syzkaller0: entered promiscuous mode
[  142.868859][ T9514] syzkaller0: entered allmulticast mode
[  142.937607][ T9520] tipc: New replicast peer: 255.255.255.255
[  142.940499][ T9520] tipc: Enabled bearer <udp:syz2>, priority 10
[  142.971991][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.604978][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  144.164756][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  144.675624][ T9537] __nla_validate_parse: 17 callbacks suppressed
[  144.675646][ T9537] netlink: 76 bytes leftover after parsing attributes in process `syz.1.912'.
[  144.714865][   T55] Bluetooth: hci0: command tx timeout
[  144.854153][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'.
[  144.881466][ T9562] syzkaller0: entered promiscuous mode
[  144.883488][ T9562] syzkaller0: entered allmulticast mode
[  144.905602][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  144.952573][ T9565] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  144.952751][ T9564] IPVS: stopping backup sync thread 9565 ...
[  145.187854][ T9576] netlink: 88 bytes leftover after parsing attributes in process `syz.0.920'.
[  145.235081][ T9578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.240504][ T9578] syzkaller0: entered promiscuous mode
[  145.242646][ T9578] syzkaller0: entered allmulticast mode
[  145.255239][ T9578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'.
[  145.269690][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[  145.269714][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'.
[  145.289701][ T9577] tipc: Resetting bearer <eth:syzkaller0>
[  145.307728][ T9577] tipc: Disabling bearer <eth:syzkaller0>
[  145.410149][ T9582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.492889][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  145.571995][ T9598] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  145.896860][ T9620] vti0: entered promiscuous mode
[  145.901755][ T9620] vti0: entered allmulticast mode
[  145.987279][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'.
[  146.017048][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'.
[  146.092442][ T9640] 0{X: entered promiscuous mode
[  146.245914][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  146.738143][ T9701] validate_nla: 4 callbacks suppressed
[  146.738156][ T9701] netlink: 'syz.2.955': attribute type 1 has an invalid length.
[  146.766111][ T9701] 8021q: adding VLAN 0 to HW filter on device bond23
[  146.830899][ T9704] netlink: 'syz.2.956': attribute type 10 has an invalid length.
[  146.834394][ T9704] netlink: 'syz.2.956': attribute type 10 has an invalid length.
[  146.838258][ T9704] batadv0: entered promiscuous mode
[  146.840167][ T9704] batadv0: entered allmulticast mode
[  146.842382][ T9704] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  147.740932][ T9727] netlink: 'syz.0.962': attribute type 3 has an invalid length.
[  147.866828][ T9737] netlink: 'syz.0.965': attribute type 5 has an invalid length.
[  148.315003][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  149.051865][ T9755] macsec1: entered promiscuous mode
[  149.057338][ T9755] macsec1: entered allmulticast mode
[  149.198944][ T9767] netlink: 'syz.0.974': attribute type 5 has an invalid length.
[  149.244113][ T9770] veth0_to_bond: left allmulticast mode
[  149.247801][ T9770] veth0_to_bond: left promiscuous mode
[  149.250017][ T9770] bridge9: port 1(veth0_to_bond) entered disabled state
[  149.257905][ T9770] bond1: (slave macvlan4): Releasing backup interface
[  149.304601][ T9770] bond0: option all_slaves_active: invalid value (8)
[  149.334158][ T9773] sctp: [Deprecated]: syz.1.976 (pid 9773) Use of int in max_burst socket option deprecated.
[  149.334158][ T9773] Use struct sctp_assoc_value instead
[  149.607544][ T9787] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  149.923621][ T9798] netlink: 'syz.0.983': attribute type 1 has an invalid length.
[  149.963713][ T9798] 8021q: adding VLAN 0 to HW filter on device bond20
[  150.000543][ T9798] 8021q: adding VLAN 0 to HW filter on device bond20
[  150.003446][ T9798] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  150.008484][ T9798] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  150.045749][ T9806] veth9: entered promiscuous mode
[  150.051221][ T9806] bond20: (slave veth9): Enslaving as an active interface with a down link
[  150.056763][ T9798] erspan0: entered allmulticast mode
[  150.061087][ T9798] bond20: (slave erspan0): making interface the new active one
[  150.064084][ T9798] bond20: (slave erspan0): Enslaving as an active interface with an up link
[  150.071827][ T9798] __nla_validate_parse: 16 callbacks suppressed
[  150.071837][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'.
[  150.116252][ T9809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.203464][ T9812] netlink: 'syz.1.988': attribute type 6 has an invalid length.
[  150.215758][ T9812] netlink: 'syz.1.988': attribute type 6 has an invalid length.
[  150.267859][ T9819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.294942][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'.
[  150.394628][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  150.514423][ T9836] _Z`: entered promiscuous mode
[  151.593023][ T9855] syzkaller0: entered promiscuous mode
[  151.598374][ T9855] syzkaller0: entered allmulticast mode
[  151.783859][ T9873] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  151.841393][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'.
[  151.861160][ T9866] bridge13: entered promiscuous mode
[  151.863468][ T9866] bridge13: entered allmulticast mode
[  152.117289][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  152.120682][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1005'.
[  152.248213][ T9892] netlink: 'syz.0.1007': attribute type 1 has an invalid length.
[  152.273012][ T9892] bond21: (slave veth11): Enslaving as an active interface with a down link
[  152.277198][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'.
[  152.282657][ T9892] 8021q: adding VLAN 0 to HW filter on device bond21
[  152.485000][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  154.488116][ T9940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1015'.
[  154.554767][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  154.587144][ T9945] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.755916][ T9950] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1018'.
[  154.807683][ T9953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'.
[  154.816218][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'.
[  154.884057][ T9957] netlink: 'syz.2.1020': attribute type 9 has an invalid length.
[  154.895264][ T9957] macvlan5: entered promiscuous mode
[  154.897671][ T9957] hsr0: entered promiscuous mode
[  154.899968][ T9957] macvlan5: entered allmulticast mode
[  154.902201][ T9957] hsr0: entered allmulticast mode
[  154.906937][ T9957] hsr_slave_0: entered allmulticast mode
[  155.201730][ T9968] pim6reg9: entered allmulticast mode
[  155.973454][ T9981] __nla_validate_parse: 4 callbacks suppressed
[  155.973473][ T9981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1028'.
[  156.090866][ T9992] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.139794][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'.
[  156.146842][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'.
[  156.148136][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'.
[  156.151137][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'.
[  156.153610][ T9997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'.
[  156.627760][T10019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1041'.
[  156.631846][T10019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1041'.
[  156.642414][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  156.645383][T10019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1041'.
[  156.658767][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'.
[  156.768749][T10026] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  156.807469][T10026] 8021q: adding VLAN 0 to HW filter on device bond10
[  156.819546][T10026] bond10: (slave geneve4): making interface the new active one
[  156.823910][T10026] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  156.827796][ T6129] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.833471][ T6129] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.844824][ T6129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.848006][ T6129] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.941889][T10031] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[  156.968748][T10036] netlink: 'syz.1.1046': attribute type 3 has an invalid length.
[  156.975962][T10036] netlink: 'syz.1.1046': attribute type 3 has an invalid length.
[  157.000284][T10031] 8021q: adding VLAN 0 to HW filter on device bond23
[  157.005576][T10031] bond22: (slave bond23): making interface the new active one
[  157.009028][T10031] bond22: (slave bond23): Enslaving as an active interface with an up link
[  157.012991][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.022977][T10031] openvswitch: netlink: IP tunnel TTL not specified.
[  157.367661][   T55] Bluetooth: hci2: link tx timeout
[  157.370650][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.375461][   T55] Bluetooth: hci2: link tx timeout
[  157.377516][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.388935][T10065] netlink: 'syz.2.1051': attribute type 2 has an invalid length.
[  157.401199][T10065] k*]: entered promiscuous mode
[  157.471322][T10068] netlink: 'syz.1.1053': attribute type 30 has an invalid length.
[  157.800850][T10078] netlink: 'syz.1.1055': attribute type 21 has an invalid length.
[  157.803833][T10078] IPv6: NLM_F_CREATE should be specified when creating new route
[  157.807273][T10078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.809883][T10078] IPv6: NLM_F_CREATE should be set when creating new route
[  157.812550][T10078] IPv6: NLM_F_CREATE should be set when creating new route
[  157.815278][T10078] IPv6: NLM_F_CREATE should be set when creating new route
[  157.840102][T10078] veth1_to_bond: entered allmulticast mode
[  157.879536][T10078] veth1_to_bond (unregistering): left allmulticast mode
[  158.148083][T10083] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  158.183286][T10085] netlink: 'syz.2.1058': attribute type 13 has an invalid length.
[  158.188272][T10083] team1: entered promiscuous mode
[  158.190340][T10083] team1: entered allmulticast mode
[  158.271799][T10085] tipc: Resetting bearer <eth:syzkaller0>
[  158.395754][T10085] hsr0: left allmulticast mode
[  158.397595][T10085] hsr_slave_0: left allmulticast mode
[  158.399559][T10085] hsr0: left promiscuous mode
[  158.426733][ T8032] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.430873][ T8032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  158.434298][ T8032] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.440089][ T8032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  158.445145][ T8032] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.448561][ T8032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  158.451798][ T8032] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.458247][ T8032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  158.724928][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  158.752823][T10119] xfrm1: entered promiscuous mode
[  158.755638][T10119] xfrm1: entered allmulticast mode
[  159.318794][T10140] netlink: 'syz.1.1069': attribute type 12 has an invalid length.
[  159.325360][T10149] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  159.435915][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  159.479580][T10162] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  159.537691][T10162] 8021q: adding VLAN 0 to HW filter on device bond25
[  159.593474][T10168] : entered promiscuous mode
[  159.600015][T10171] netlink: 'syz.0.1075': attribute type 1 has an invalid length.
[  159.639672][T10171] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR
[  160.029939][T10204] netlink: 'syz.0.1081': attribute type 5 has an invalid length.
[  160.202631][T10217] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  160.229804][T10217] 8021q: adding VLAN 0 to HW filter on device bond24
[  160.259616][T10217] veth13: entered promiscuous mode
[  160.267383][T10217] bond24: (slave veth13): Enslaving as an active interface with a down link
[  160.273420][T10217] erspan0: entered allmulticast mode
[  160.279930][T10217] bond24: (slave erspan0): making interface the new active one
[  160.284205][T10217] erspan0: entered promiscuous mode
[  160.286659][T10217] bond24: (slave erspan0): Enslaving as an active interface with an up link
[  160.798134][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  161.003700][T10270] netlink: 'syz.2.1098': attribute type 4 has an invalid length.
[  161.091221][T10275] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  161.096901][T10275] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  161.138476][T10279] veth13: entered promiscuous mode
[  161.193962][T10279] __nla_validate_parse: 20 callbacks suppressed
[  161.193979][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'.
[  161.241009][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'.
[  161.247177][T10285] tipc: Resetting bearer <eth:syzkaller0>
[  161.284053][T10288] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  161.329111][T10288] batman_adv: batadv0: Removing interface: virt_wifi0
[  161.338834][T10288] bond6: (slave ip6gretap1): Releasing backup interface
[  161.344323][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'.
[  161.355543][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1103'.
[  161.360978][T10288] bond7: (slave wireguard2): Releasing backup interface
[  161.368487][T10288] bond10: (slave geneve4): Releasing active interface
[  161.409871][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.439354][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.443082][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.447484][T10288] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  161.473208][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.487049][T10288] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.490832][T10288] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.516673][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  161.598979][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'.
[  161.730180][T10310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.733605][T10310] syzkaller0: entered promiscuous mode
[  161.736408][T10310] syzkaller0: entered allmulticast mode
[  161.780545][T10309] tipc: Resetting bearer <eth:syzkaller0>
[  161.808742][T10309] tipc: Disabling bearer <eth:syzkaller0>
[  161.849204][T10321] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1109'.
[  161.858547][T10321] vlan0: entered allmulticast mode
[  161.862324][T10321] gretap0: entered allmulticast mode
[  162.022708][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'.
[  162.127796][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'.
[  162.207571][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'.
[  162.238526][T10345] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  162.248160][T10345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1115'.
[  162.264289][T10345] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  162.268970][T10345] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  162.612004][T10383] validate_nla: 2 callbacks suppressed
[  162.612018][T10383] netlink: 'syz.1.1120': attribute type 2 has an invalid length.
[  162.650174][T10383] 0{X: left promiscuous mode
[  162.671065][T10383] 8021q: adding VLAN 0 to HW filter on device team0
[  162.700317][T10383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.875148][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  163.003975][T10424] netlink: 'syz.2.1128': attribute type 1 has an invalid length.
[  163.109840][T10433] netlink: 'syz.2.1131': attribute type 13 has an invalid length.
[  163.167688][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  163.171016][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  163.187412][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  163.190814][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  163.269869][T10444] openvswitch: netlink: Flow key attr not present in new flow.
[  163.314407][T10443] bond20: (slave erspan0): Releasing active interface
[  163.318705][T10443] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  163.412574][T10456] vlan0: entered allmulticast mode
[  163.428654][T10457] vlan0: entered allmulticast mode
[  163.649286][T10471] bond24: (slave erspan0): Releasing active interface
[  163.651510][T10471] erspan0: left promiscuous mode
[  163.668378][T10471] bond21: (slave wlan0): Releasing active interface
[  163.676794][T10471] bond24: (slave veth13): Releasing active interface
[  163.688470][T10467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.701467][T10467] syzkaller0: entered promiscuous mode
[  163.703301][T10467] syzkaller0: entered allmulticast mode
[  163.742152][T10467] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  163.819093][T10467] tipc: Resetting bearer <eth:syzkaller0>
[  163.936809][T10486] bridge0: port 1(erspan0) entered blocking state
[  163.941577][T10486] bridge0: port 1(erspan0) entered disabled state
[  163.945607][T10486] erspan0: entered promiscuous mode
[  163.978563][T10486] erspan0: left promiscuous mode
[  163.980322][T10486] bridge0: port 1(erspan0) entered disabled state
[  164.138498][T10499] netlink: 'syz.2.1144': attribute type 1 has an invalid length.
[  164.223687][T10499] bond25: (slave bridge0): making interface the new active one
[  164.228354][T10499] bond25: (slave bridge0): Enslaving as an active interface with an up link
[  164.247179][T10453] tipc: Resetting bearer <eth:syzkaller0>
[  164.274245][T10453] tipc: Disabling bearer <eth:syzkaller0>
[  164.373337][T10517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.378102][T10517] syzkaller0: entered promiscuous mode
[  164.379887][T10517] syzkaller0: entered allmulticast mode
[  164.414555][T10517] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  164.440885][T10517] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  164.479372][T10517] tipc: Resetting bearer <eth:syzkaller0>
[  164.479472][ T1803] IPVS: starting estimator thread 0...
[  164.496390][T10516] tipc: Resetting bearer <eth:syzkaller0>
[  164.509493][T10516] tipc: Disabling bearer <eth:syzkaller0>
[  164.519337][T10520] pim6reg1: entered promiscuous mode
[  164.520898][T10528] netlink: 'syz.1.1150': attribute type 1 has an invalid length.
[  164.521039][T10520] pim6reg1: entered allmulticast mode
[  164.528354][T10528] NCSI netlink: No device for ifindex 813332851
[  164.591920][T10528] netlink: 'syz.1.1150': attribute type 19 has an invalid length.
[  164.606914][T10524] IPVS: using max 64 ests per chain, 153600 per kthread
[  164.734228][T10549] netlink: 'syz.1.1154': attribute type 9 has an invalid length.
[  164.955095][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  165.480071][T10577] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  165.484349][T10576] IPVS: stopping backup sync thread 10577 ...
[  165.909932][T10588] netlink: 'syz.1.1163': attribute type 10 has an invalid length.
[  166.185964][T10606] netlink: 'syz.0.1168': attribute type 39 has an invalid length.
[  166.372974][T10612] __nla_validate_parse: 28 callbacks suppressed
[  166.372993][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  166.381213][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  166.387997][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  166.391768][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1170'.
[  166.397771][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  166.401642][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1170'.
[  166.637872][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  166.642144][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  166.648374][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  166.652088][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  166.785498][T10638] vlan0: entered promiscuous mode
[  166.787346][T10638] vlan0: entered allmulticast mode
[  166.789086][T10638] hsr_slave_1: entered allmulticast mode
[  167.027275][T10650] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  167.043693][T10651] bond20: (slave veth9): Releasing active interface
[  167.044627][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  167.052648][T10651] bond21: (slave veth11): Releasing active interface
[  167.061609][T10651] bond22: (slave bond23): Releasing backup interface
[  167.153576][T10658] bond1: option mode: unable to set because the bond device is up
[  167.168612][T10658] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  167.179275][T10658] bond1: (slave macvlan5): Enslaving as a backup interface with a down link
[  167.187748][T10658] bond1: option mode: unable to set because the bond device has slaves
[  167.480270][T10676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.485079][T10669] syzkaller0: entered promiscuous mode
[  167.487170][T10669] syzkaller0: entered allmulticast mode
[  167.492208][T10668] tipc: Resetting bearer <eth:syzkaller0>
[  167.523344][T10668] tipc: Disabling bearer <eth:syzkaller0>
[  167.599884][T10682] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  167.678338][T10683] bond27: entered promiscuous mode
[  167.680286][T10683] 8021q: adding VLAN 0 to HW filter on device bond27
[  167.699049][T10691] 8021q: adding VLAN 0 to HW filter on device bond27
[  167.701731][T10691] bond27: (slave wireguard0): The slave device specified does not support setting the MAC address
[  167.708306][T10691] bond27: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  167.715857][T10691] bond27: (slave wireguard0): making interface the new active one
[  167.719083][T10691] wireguard0: entered promiscuous mode
[  167.721754][T10691] bond27: (slave wireguard0): Enslaving as an active interface with an up link
[  167.728795][T10682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.731227][T10682] IPv6: NLM_F_CREATE should be set when creating new route
[  167.733591][T10682] IPv6: NLM_F_CREATE should be set when creating new route
[  167.752868][T10682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.761069][T10682] bond27: (slave wireguard1): The slave device specified does not support setting the MAC address
[  167.770855][T10682] bond27: (slave wireguard1): Enslaving as a backup interface with an up link
[  167.865071][T10707] sctp: [Deprecated]: syz.0.1193 (pid 10707) Use of int in max_burst socket option.
[  167.865071][T10707] Use struct sctp_assoc_value instead
[  167.952195][T10709] bpq0: entered promiscuous mode
[  167.953760][T10709] bpq0: entered allmulticast mode
[  167.959677][T10709] bpq0: left promiscuous mode
[  167.961198][T10709] bpq0: left allmulticast mode
[  167.999007][T10712] validate_nla: 1 callbacks suppressed
[  167.999022][T10712] netlink: 'syz.0.1195': attribute type 4 has an invalid length.
[  168.068270][T10719] netlink: 'syz.1.1197': attribute type 30 has an invalid length.
[  168.099599][T10722] erspan0: left allmulticast mode
[  168.112652][T10722] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.117504][T10722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  168.159168][T10726] IPv6: sit2: Disabled Multicast RS
[  168.213724][T10728] bond1: (slave macvlan5): Releasing backup interface
[  168.222103][T10728] bond27: (slave wireguard0): Releasing backup interface
[  168.224521][T10728] wireguard0: left promiscuous mode
[  168.226420][T10728] bond27: (slave wireguard1): making interface the new active one
[  168.228991][T10728] wireguard1: entered promiscuous mode
[  168.237448][T10728] bond27: (slave wireguard1): Releasing backup interface
[  168.239764][T10728] wireguard1: left promiscuous mode
[  168.252845][T10728] netlink: 'syz.0.1201': attribute type 10 has an invalid length.
[  168.255834][T10728] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  168.258176][T10728] bond0: (slave wlan1): refused to change device type
[  168.507896][T10739] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  168.509824][T10740] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  168.526739][T10739] 8021q: adding VLAN 0 to HW filter on device bond26
[  168.567124][T10743] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  168.579023][T10744] bond25: (slave bridge0): Releasing active interface
[  168.589832][T10743] netlink: 'syz.2.1206': attribute type 10 has an invalid length.
[  168.596298][T10743] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.601528][T10743] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.113143][T10753] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.115622][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  169.127543][T10753] bond0: (slave rose0): Enslaving as an active interface with an up link
[  169.308037][T10778] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  169.513795][T10802] netlink: 'syz.2.1217': attribute type 1 has an invalid length.
[  169.518053][T10802] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.605487][T10813] netlink: 'syz.0.1220': attribute type 5 has an invalid length.
[  169.613114][T10813] geneve8: entered promiscuous mode
[  169.615561][T10813] geneve8: entered allmulticast mode
[  169.619729][ T5851] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  169.622311][ T5851] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  169.626136][ T5851] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  169.634587][ T5851] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  169.663528][T10820] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.693603][T10822] sctp: [Deprecated]: syz.0.1223 (pid 10822) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.693603][T10822] Use struct sctp_sack_info instead
[  170.112951][T10829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.131338][T10828] tipc: Disabling bearer <eth:syzkaller0>
[  170.248656][T10834] macsec1: entered promiscuous mode
[  170.250936][T10834] macsec1: entered allmulticast mode
[  170.623820][T10856] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  170.673895][T10864] syzkaller1: entered promiscuous mode
[  170.679495][T10864] syzkaller1: entered allmulticast mode
[  170.705479][T10867] netlink: 'syz.1.1237': attribute type 1 has an invalid length.
[  170.802140][T10876] pim6reg1: entered promiscuous mode
[  170.804848][T10876] pim6reg1: entered allmulticast mode
[  171.169479][T10888] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  171.194555][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  171.646324][T10899] 8021q: adding VLAN 0 to HW filter on device bond27
[  171.676930][T10899] 8021q: adding VLAN 0 to HW filter on device bond27
[  171.679494][T10899] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  171.686272][T10899] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  171.830216][T10910] __nla_validate_parse: 25 callbacks suppressed
[  171.830230][T10910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'.
[  171.832425][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1248'.
[  172.167210][T10936] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1255'.
[  172.172009][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'.
[  172.477618][T10948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.480441][T10948] syzkaller0: entered promiscuous mode
[  172.482196][T10948] syzkaller0: entered allmulticast mode
[  172.488484][T10948] tipc: New replicast peer: 255.127.0.0
[  172.490507][T10948] tipc: Enabled bearer <udp:s>, priority 10
[  172.506351][T10948] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1259'.
[  172.513731][T10948] tipc: Resetting bearer <eth:syzkaller0>
[  172.521553][T10947] tipc: Resetting bearer <eth:syzkaller0>
[  172.536007][T10947] tipc: Disabling bearer <eth:syzkaller0>
[  172.607979][T10950] 8021q: adding VLAN 0 to HW filter on device bond29
[  172.624209][T10950] veth15: entered promiscuous mode
[  172.637664][T10950] bond29: (slave veth15): Enslaving as a backup interface with a down link
[  172.647256][T10950] bond29: (slave veth15): Releasing backup interface
[  172.683443][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'.
[  172.688793][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'.
[  172.690951][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'.
[  172.720288][T10965] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1265'.
[  172.749989][T10972] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1267'.
[  172.758100][T10972] batadv2: entered promiscuous mode
[  172.759803][T10972] batadv2: entered allmulticast mode
[  172.819251][T10968] vti0: left promiscuous mode
[  172.820855][T10968] vti0: left allmulticast mode
[  172.830009][T10968] team1: left promiscuous mode
[  172.831607][T10968] team1: left allmulticast mode
[  172.836637][T10968] mac80211_hwsim hwsim20 wlan0: left allmulticast mode
[  172.839037][T10968] mac80211_hwsim hwsim20 wlan0: left promiscuous mode
[  172.841279][T10968] macsec1: left promiscuous mode
[  172.843418][T10968] macsec1: left allmulticast mode
[  172.929578][T10982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.274811][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  173.330919][T11002] validate_nla: 9 callbacks suppressed
[  173.330933][T11002] netlink: 'syz.0.1274': attribute type 1 has an invalid length.
[  173.379602][T11002] veth17: entered promiscuous mode
[  173.385295][T11002] bond30: (slave veth17): Enslaving as a backup interface with a down link
[  173.398019][T11002] 8021q: adding VLAN 0 to HW filter on device bond30
[  173.462923][T11009] pim6reg1: entered promiscuous mode
[  173.467163][T11009] pim6reg1: entered allmulticast mode
[  173.513327][T11008] netlink: 'syz.1.1276': attribute type 11 has an invalid length.
[  173.711831][T11022] netlink: 'syz.0.1281': attribute type 10 has an invalid length.
[  173.715739][T11022] netlink: 'syz.0.1281': attribute type 10 has an invalid length.
[  173.721344][T11022] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  173.778825][T11024] openvswitch: netlink: Flow actions attr not present in new flow.
[  173.937775][T11033] netlink: 'syz.2.1285': attribute type 3 has an invalid length.
[  173.940682][T11033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.468278][T11038] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  174.523289][T11041] sctp: [Deprecated]: syz.0.1288 (pid 11041) Use of int in maxseg socket option.
[  174.523289][T11041] Use struct sctp_assoc_value instead
[  174.659997][T11056] gtp1: entered promiscuous mode
[  174.663795][T11056] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  174.701538][T11058] netlink: 'syz.1.1292': attribute type 29 has an invalid length.
[  174.966756][T11092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.969432][T11092] syzkaller0: entered promiscuous mode
[  174.971259][T11092] syzkaller0: entered allmulticast mode
[  175.013648][T11092] tipc: Resetting bearer <eth:syzkaller0>
[  175.038412][T11096] tipc: Resetting bearer <eth:syzkaller0>
[  175.048981][T11096] tipc: Disabling bearer <eth:syzkaller0>
[  175.115053][T11100] netlink: 'syz.1.1303': attribute type 18 has an invalid length.
[  175.119271][T11100] netlink: 'syz.1.1303': attribute type 18 has an invalid length.
[  175.143778][T11102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.152000][T11098] syzkaller0: entered promiscuous mode
[  175.153806][T11098] syzkaller0: entered allmulticast mode
[  175.170224][T11098] tipc: Resetting bearer <eth:syzkaller0>
[  175.173991][T11097] tipc: Resetting bearer <eth:syzkaller0>
[  175.187107][T11097] tipc: Disabling bearer <eth:syzkaller0>
[  175.260038][T11111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.262787][T11111] syzkaller0: entered promiscuous mode
[  175.264979][T11111] syzkaller0: entered allmulticast mode
[  175.283912][T11111] tipc: Resetting bearer <eth:syzkaller0>
[  175.289005][T11107] tipc: Resetting bearer <eth:syzkaller0>
[  175.301701][T11107] tipc: Disabling bearer <eth:syzkaller0>
[  175.364954][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  175.467066][T11120] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  175.712847][T11130] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.723841][T11130] netlink: 'syz.2.1312': attribute type 2 has an invalid length.
[  175.940599][T11147] netlink: 'syz.2.1317': attribute type 20 has an invalid length.
[  176.107989][T11151] bridge14: port 1(veth0_to_bond) entered blocking state
[  176.111415][T11151] bridge14: port 1(veth0_to_bond) entered disabled state
[  176.114365][T11151] veth0_to_bond: entered allmulticast mode
[  176.121572][T11151] veth0_to_bond: entered promiscuous mode
[  176.135931][T11151] vlan0: entered allmulticast mode
[  176.138390][T11151] bridge14: port 2(vlan0) entered blocking state
[  176.141195][T11151] bridge14: port 2(vlan0) entered disabled state
[  176.146157][T11151] vlan0: entered promiscuous mode
[  176.147991][T11151] veth1: entered promiscuous mode
[  176.190295][T11153] Unsupported ieee802154 address type: 0
[  176.332933][T11162] macsec5: entered promiscuous mode
[  176.335860][T11162] macsec5: entered allmulticast mode
[  176.344035][T11162] macsec6: entered promiscuous mode
[  176.348540][T11162] macsec6: entered allmulticast mode
[  176.356641][T11162] macsec7: entered promiscuous mode
[  176.358800][T11162] macsec7: entered allmulticast mode
[  176.372765][T11162] macsec8: entered promiscuous mode
[  176.377590][T11162] macsec8: entered allmulticast mode
[  176.387758][T11162] macsec9: entered promiscuous mode
[  176.391940][T11163] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR
[  176.392349][T11162] macsec9: entered allmulticast mode
[  176.859773][T11205] __nla_validate_parse: 26 callbacks suppressed
[  176.859790][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  176.914182][T11209] syzkaller0: entered promiscuous mode
[  176.916707][T11209] syzkaller0: entered allmulticast mode
[  177.073450][T11211] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.421790][T11231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1335'.
[  177.434769][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  178.096711][T11246] 8021q: adding VLAN 0 to HW filter on device bond17
[  178.102167][T11246] bond0: (slave bond17): Enslaving as an active interface with an up link
[  178.151757][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1339'.
[  178.208888][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'.
[  178.211988][T11250] openvswitch: netlink: Flow key attr not present in new flow.
[  178.387080][T11259] validate_nla: 3 callbacks suppressed
[  178.387095][T11259] netlink: 'syz.1.1342': attribute type 1 has an invalid length.
[  178.432823][T11259] 8021q: adding VLAN 0 to HW filter on device bond18
[  178.443815][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1342'.
[  178.512999][T11269] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1345'.
[  178.582559][T11277] netlink: 'syz.2.1346': attribute type 5 has an invalid length.
[  178.593978][T11279] sctp: [Deprecated]: syz.1.1347 (pid 11279) Use of int in max_burst socket option.
[  178.593978][T11279] Use struct sctp_assoc_value instead
[  178.600971][T11280] sctp: [Deprecated]: syz.1.1347 (pid 11280) Use of int in max_burst socket option.
[  178.600971][T11280] Use struct sctp_assoc_value instead
[  178.641454][T11282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.840741][T11310] sit0: entered promiscuous mode
[  178.842412][T11310] netlink: 'syz.1.1355': attribute type 1 has an invalid length.
[  178.844956][T11310] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1355'.
[  178.854860][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'.
[  178.862793][ T8032] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.870812][ T8032] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.873916][ T8032] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.877881][ T8032] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.939225][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1357'.
[  178.943644][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1357'.
[  178.976765][T11317] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  179.009508][T11317] 8021q: adding VLAN 0 to HW filter on device bond28
[  179.030434][T11317] veth15: entered promiscuous mode
[  179.035045][T11317] veth0_to_bond: left allmulticast mode
[  179.037213][T11317] veth0_to_bond: left promiscuous mode
[  179.039647][T11317] bridge14: port 1(veth0_to_bond) entered disabled state
[  179.047414][T11317] vlan0: left promiscuous mode
[  179.049319][T11317] veth1: left promiscuous mode
[  179.051691][T11317] bridge14: port 2(vlan0) entered disabled state
[  179.099436][T11322] netlink: 'syz.1.1358': attribute type 3 has an invalid length.
[  179.300853][T11341] bridge17: port 1(veth19) entered blocking state
[  179.306027][T11341] bridge17: port 1(veth19) entered disabled state
[  179.315133][T11341] veth19: entered allmulticast mode
[  179.325026][T11341] veth19: entered promiscuous mode
[  179.335101][T11341] bridge17: port 2(veth0_to_bond) entered blocking state
[  179.337624][T11341] bridge17: port 2(veth0_to_bond) entered disabled state
[  179.341628][T11341] veth0_to_bond: entered allmulticast mode
[  179.344365][T11341] veth0_to_bond: entered promiscuous mode
[  179.385163][T11341] vlan0: entered allmulticast mode
[  179.386939][T11341] veth1: entered allmulticast mode
[  179.388914][T11341] bridge17: port 3(vlan0) entered blocking state
[  179.398742][T11341] bridge17: port 3(vlan0) entered disabled state
[  179.402084][T11341] vlan0: entered promiscuous mode
[  179.403672][T11341] veth1: entered promiscuous mode
[  179.455957][T11345] netlink: 'syz.0.1365': attribute type 30 has an invalid length.
[  179.514859][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  179.606682][T11350] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  179.615338][T11350] bond0: (slave dummy0): Releasing backup interface
[  179.637179][T11350] veth0_to_bond: left allmulticast mode
[  179.639711][T11350] veth0_to_bond: left promiscuous mode
[  179.650218][T11350] bridge17: port 2(veth0_to_bond) entered disabled state
[  179.671480][T11350] bond30: (slave veth17): Releasing backup interface
[  179.678886][T11350] veth19: left allmulticast mode
[  179.680941][T11350] veth19: left promiscuous mode
[  179.683164][T11350] bridge17: port 1(veth19) entered disabled state
[  179.688214][T11350] vlan0: left promiscuous mode
[  179.689797][T11350] veth1: left promiscuous mode
[  179.691511][T11350] bridge17: port 3(vlan0) entered disabled state
[  179.762301][T11350] netlink: 'syz.0.1367': attribute type 10 has an invalid length.
[  179.783391][T11350] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  179.788604][T11350] bond0: (slave wlan1): refused to change device type
[  179.800763][T11350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  179.804351][T11350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  179.871385][T11357] bond19: entered promiscuous mode
[  179.873445][T11357] 8021q: adding VLAN 0 to HW filter on device bond19
[  179.933525][T11357] bond20: entered promiscuous mode
[  179.935835][T11357] 8021q: adding VLAN 0 to HW filter on device bond20
[  180.587158][T11375] bridge0: failed insert local address into bridge forwarding table
[  180.991223][T11408] vlan0: entered promiscuous mode
[  180.993114][T11408] bridge0: entered promiscuous mode
[  181.004328][T11410] vlan2: entered promiscuous mode
[  181.008104][T11410] gretap0: entered promiscuous mode
[  181.035769][T11411] netlink: 'syz.1.1380': attribute type 3 has an invalid length.
[  181.168617][T11423] netlink: 'syz.1.1383': attribute type 1 has an invalid length.
[  181.202617][T11422] netlink: 'syz.2.1384': attribute type 5 has an invalid length.
[  181.594898][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  181.839243][T11437] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  181.843583][T11436] IPVS: stopping backup sync thread 11437 ...
[  182.601730][T11462] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  182.604191][T11462] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  182.615621][T11462] ip6gretap2: left promiscuous mode
[  182.617801][T11462] macvlan5: left promiscuous mode
[  182.619403][T11462] macvlan5: left allmulticast mode
[  182.621374][T11462] xfrm1: left promiscuous mode
[  182.622879][T11462] xfrm1: left allmulticast mode
[  182.626532][T11462] veth13: left promiscuous mode
[  182.649292][T11462] vlan0: left allmulticast mode
[  182.663591][T11462] veth15: left promiscuous mode
[  182.667101][T11462] vlan2: left promiscuous mode
[  182.668659][T11462] gretap0: left promiscuous mode
[  182.677176][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.680774][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.705701][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.706406][T11471] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  182.708496][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  182.712317][T11471] __nla_validate_parse: 12 callbacks suppressed
[  182.712328][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'.
[  182.721552][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'.
[  182.728344][T11468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.775789][T11468] syzkaller0: entered promiscuous mode
[  182.777573][T11468] syzkaller0: entered allmulticast mode
[  182.782225][T11467] tipc: Resetting bearer <eth:syzkaller0>
[  182.803741][T11467] tipc: Disabling bearer <eth:syzkaller0>
[  182.849311][T11475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1398'.
[  182.849340][T11476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1398'.
[  183.089429][T11502] syzkaller1: entered promiscuous mode
[  183.091223][T11502] syzkaller1: entered allmulticast mode
[  183.220311][T11508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1406'.
[  183.224112][T11508] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  183.248149][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'.
[  183.280939][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1408'.
[  183.370176][T11518] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  183.396242][T11524] vlan0: entered promiscuous mode
[  183.401051][T11524] veth1: entered promiscuous mode
[  183.404339][T11524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.415284][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'.
[  183.438972][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  183.458436][T11526] rdma_rxe: rxe_newlink: failed to add lo
[  183.465777][T11528] validate_nla: 4 callbacks suppressed
[  183.465792][T11528] netlink: 'syz.2.1412': attribute type 1 has an invalid length.
[  183.480541][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.500765][T11528] 8021q: adding VLAN 0 to HW filter on device bond29
[  183.523366][T11528] 8021q: adding VLAN 0 to HW filter on device bond29
[  183.528463][T11528] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address
[  183.533836][T11528] bond29: (slave vxcan1): Error -95 calling set_mac_address
[  183.558333][T11531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.578370][T11535] tipc: Disabling bearer <eth:syzkaller0>
[  183.632474][T11528] veth17: entered promiscuous mode
[  183.639383][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1414'.
[  183.646967][T11528] bond29: (slave erspan0): making interface the new active one
[  183.651239][T11528] bond29: (slave erspan0): Enslaving as an active interface with an up link
[  183.674861][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  183.712970][T11547] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  183.735588][T11546] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  183.772680][T11549] netlink: 'syz.0.1417': attribute type 1 has an invalid length.
[  183.831933][T11553] vlan2: entered promiscuous mode
[  183.833599][T11553] macvtap0: entered promiscuous mode
[  184.132497][T11578] syzkaller1: entered promiscuous mode
[  184.135157][T11578] syzkaller1: entered allmulticast mode
[  184.139587][T11578] nbd: must specify a size in bytes for the device
[  184.729692][T11613] netlink: 'syz.1.1432': attribute type 1 has an invalid length.
[  184.779633][T11613] 8021q: adding VLAN 0 to HW filter on device bond21
[  184.825414][T11616] 8021q: adding VLAN 0 to HW filter on device bond21
[  184.828578][T11616] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  184.833385][T11616] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  184.865897][T11613] bond21: (slave bridge8): Enslaving as an active interface with a down link
[  185.032836][T11620] Unsupported ieee802154 address type: 0
[  185.446623][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  185.692127][T11644] netlink: 'syz.0.1444': attribute type 1 has an invalid length.
[  185.708594][T11644] veth21: entered promiscuous mode
[  185.754078][T11644] erspan0: entered allmulticast mode
[  185.765485][ T5837] Bluetooth: hci0: command tx timeout
[  185.767339][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  185.799036][T11646] netlink: 'syz.2.1436': attribute type 13 has an invalid length.
[  185.802158][T11646] netlink: 'syz.2.1436': attribute type 17 has an invalid length.
[  185.869839][T11646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.892453][T11654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.906635][T11649] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  185.909228][T11649] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  185.947341][T11652] syzkaller1: tun_chr_ioctl cmd 1074025677
[  185.949822][T11652] syzkaller1: linktype set to 6
[  186.100181][T11666] sit0: left promiscuous mode
[  186.169342][T11669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.172050][T11669] syzkaller0: entered promiscuous mode
[  186.173820][T11669] syzkaller0: entered allmulticast mode
[  186.200539][T11669] tipc: Resetting bearer <eth:syzkaller0>
[  186.204343][T11668] tipc: Resetting bearer <eth:syzkaller0>
[  186.230024][T11668] tipc: Disabling bearer <eth:syzkaller0>
[  186.417076][T11679] netlink: 'syz.0.1447': attribute type 1 has an invalid length.
[  186.433948][T11679] bond34: entered promiscuous mode
[  186.436320][T11679] 8021q: adding VLAN 0 to HW filter on device bond34
[  186.457509][T11679] 8021q: adding VLAN 0 to HW filter on device bond34
[  186.460350][T11679] bond34: (slave vxcan3): The slave device specified does not support setting the MAC address
[  186.464195][T11679] bond34: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  186.479069][T11679] bond34: (slave vxcan3): making interface the new active one
[  186.481917][T11679] vxcan3: entered promiscuous mode
[  186.484405][T11679] bond34: (slave vxcan3): Enslaving as an active interface with an up link
[  186.588091][T11686] sock: sock_timestamping_bind_phc: sock not bind to device
[  186.812006][T11702] netlink: 'syz.2.1454': attribute type 19 has an invalid length.
[  187.057438][T11720] netlink: 'syz.1.1458': attribute type 1 has an invalid length.
[  187.097275][T11735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.366752][T11755] netlink: 'syz.2.1463': attribute type 16 has an invalid length.
[  187.377198][T11755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.385729][T11757] 8021q: adding VLAN 0 to HW filter on device team0
[  187.388564][T11757] team0: Cannot enslave team device to itself
[  187.515416][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  187.562982][ T8032] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.580802][ T8032] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.584165][ T8032] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.590663][ T8032] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.834679][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  188.071847][T11783] __nla_validate_parse: 19 callbacks suppressed
[  188.071863][T11783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1471'.
[  188.151329][T11787] IPVS: set_ctl: invalid protocol: 183 172.20.20.187:20004
[  188.241107][T11791] syzkaller0: entered promiscuous mode
[  188.243354][T11791] syzkaller0: entered allmulticast mode
[  188.253963][T11793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1476'.
[  188.348293][T11797] Bluetooth: MGMT ver 1.23
[  188.480799][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'.
[  188.549311][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1482'.
[  188.612788][T11820] validate_nla: 5 callbacks suppressed
[  188.612808][T11820] netlink: 'syz.1.1484': attribute type 6 has an invalid length.
[  188.620652][T11820] netlink: 'syz.1.1484': attribute type 6 has an invalid length.
[  188.628760][T11820] netlink: 'syz.1.1484': attribute type 6 has an invalid length.
[  188.631750][T11820] netlink: 'syz.1.1484': attribute type 6 has an invalid length.
[  188.689398][T11815] can: request_module (can-proto-5) failed.
[  188.727098][T11824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'.
[  188.751687][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'.
[  188.763042][T11826] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1485'.
[  188.782911][T11830] bond0: (slave bond17): Releasing backup interface
[  188.801332][T11830] bond21: (slave bridge8): Releasing active interface
[  188.831195][T11831] raw_sendmsg: syz.1.1486 forgot to set AF_INET. Fix it!
[  189.282111][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1491'.
[  189.365088][T11860] block nbd3: server does not support multiple connections per device.
[  189.371199][T11860] block nbd3: shutting down sockets
[  189.408085][T11864] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1492'.
[  189.674800][ T5837] Bluetooth: hci2: command 0x0405 tx timeout
[  189.752588][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'.
[  189.865232][T11893] bond29: (slave erspan0): Releasing active interface
[  189.924719][T11886] Bluetooth: hci1: command 0x080f tx timeout
[  189.991694][T11897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  190.000155][T11897] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  190.004001][T11897] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  190.093576][T11903] unsupported nlmsg_type 40
[  190.288203][T11912] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.368073][T11947] syzkaller1: entered promiscuous mode
[  191.371848][T11947] syzkaller1: entered allmulticast mode
[  191.381961][T11949] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.481317][T11951] 8021q: adding VLAN 0 to HW filter on device bond31
[  191.607691][T11960] netlink: 'syz.2.1517': attribute type 12 has an invalid length.
[  191.757150][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  191.819407][T11975] bond0 (unregistering): Released all slaves
[  192.005145][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  192.880593][T12032] netlink: 'syz.1.1529': attribute type 10 has an invalid length.
[  192.902568][T12032] team0: Cannot enslave team device to itself
[  193.246192][T12050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.268415][T12052] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  193.301887][T12056] __nla_validate_parse: 19 callbacks suppressed
[  193.301901][T12056] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1535'.
[  193.310005][T12056] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1535'.
[  193.311502][T12052] veth13: entered promiscuous mode
[  193.326591][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  193.336842][T12055] netlink: 'syz.0.1534': attribute type 8 has an invalid length.
[  193.339251][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'.
[  193.342803][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  193.358237][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1533'.
[  193.443077][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  193.535084][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'.
[  193.610001][T12073] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1540'.
[  193.611138][T12075] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1540'.
[  193.613925][T12073] 0{X: renamed from gretap0 (while UP)
[  193.623732][T12073] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  193.642239][T12075] 1{X: renamed from 30{X (while UP)
[  193.651152][T12075] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  193.669988][T12073] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  193.907588][T12085] netlink: 'syz.2.1542': attribute type 2 has an invalid length.
[  193.918460][ T1359] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  193.919229][T12085] : entered promiscuous mode
[  194.084772][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  194.441763][T12096] netlink: 'syz.1.1544': attribute type 4 has an invalid length.
[  194.462922][T12098] netlink: 'syz.0.1545': attribute type 30 has an invalid length.
[  194.507859][T12098] netlink: 'syz.0.1545': attribute type 30 has an invalid length.
[  194.533200][T12103] netlink: 'syz.1.1547': attribute type 1 has an invalid length.
[  194.533275][T12106] netlink: 'syz.1.1547': attribute type 1 has an invalid length.
[  194.551665][T12103] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.559677][T12103] vlan0: entered promiscuous mode
[  194.561426][T12103] bond0: entered promiscuous mode
[  194.563234][T12103] vlan0: entered allmulticast mode
[  194.568173][T12103] bond0: entered allmulticast mode
[  194.816037][T12127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.907604][T12127] netlink: 'syz.2.1552': attribute type 2 has an invalid length.
[  195.040861][T12141] netlink: 'syz.1.1551': attribute type 16 has an invalid length.
[  195.043796][T12141] netlink: 'syz.1.1551': attribute type 17 has an invalid length.
[  195.085512][T12141] 8021q: adding VLAN 0 to HW filter on device team0
[  195.093631][T12141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.452004][T12159] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  195.488687][T12159] 8021q: adding VLAN 0 to HW filter on device bond32
[  195.519324][T12159] 8021q: adding VLAN 0 to HW filter on device bond32
[  195.522267][T12159] bond32: (slave vxcan7): The slave device specified does not support setting the MAC address
[  195.528626][T12159] bond32: (slave vxcan7): Error -95 calling set_mac_address
[  195.631992][T12166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.686326][T12168] veth13: entered promiscuous mode
[  196.165872][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  196.258468][T12199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.262424][T12199] syzkaller0: entered promiscuous mode
[  196.266328][T12199] syzkaller0: entered allmulticast mode
[  196.285433][T12199] tipc: Resetting bearer <eth:syzkaller0>
[  196.291716][T12198] tipc: Resetting bearer <eth:syzkaller0>
[  196.309722][T12198] tipc: Disabling bearer <eth:syzkaller0>
[  197.466914][T12246] bridge19: port 1(veth0_to_bond) entered blocking state
[  197.469963][T12246] bridge19: port 1(veth0_to_bond) entered disabled state
[  197.473250][T12246] veth0_to_bond: entered allmulticast mode
[  197.481655][T12246] veth0_to_bond: entered promiscuous mode
[  197.880494][T12266] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  197.883362][T12266] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  197.890010][T12266] veth1_to_team: entered allmulticast mode
[  197.961279][T12269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.965878][T12269] syzkaller0: entered promiscuous mode
[  197.968120][T12269] syzkaller0: entered allmulticast mode
[  198.056090][T12264] tipc: Resetting bearer <eth:syzkaller0>
[  198.093914][T12264] tipc: Disabling bearer <eth:syzkaller0>
[  198.236969][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  198.321908][T12300] __nla_validate_parse: 28 callbacks suppressed
[  198.321927][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1597'.
[  198.393971][T12307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.505434][T12320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.508523][T12320] IPv6: NLM_F_CREATE should be set when creating new route
[  198.511528][T12320] IPv6: NLM_F_CREATE should be set when creating new route
[  198.518337][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1601'.
[  198.525569][T12320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.656912][T12326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.756938][T12333] syzkaller0: entered promiscuous mode
[  198.760767][T12333] syzkaller0: entered allmulticast mode
[  198.923956][T12340] 8021q: adding VLAN 0 to HW filter on device bond33
[  198.927092][T12343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.969266][T12340] veth19: entered promiscuous mode
[  198.973995][T12340] bond33: (slave veth19): Enslaving as an active interface with a down link
[  198.979648][T12340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'.
[  198.993734][T12351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1610'.
[  199.010244][T12351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1610'.
[  199.074413][T12353] 8021q: adding VLAN 0 to HW filter on device bond34
[  199.081427][T12353] bridge0: port 1(bond34) entered blocking state
[  199.084313][T12353] bridge0: port 1(bond34) entered disabled state
[  199.090253][T12353] bond34: entered allmulticast mode
[  199.161783][T12362] validate_nla: 9 callbacks suppressed
[  199.161798][T12362] netlink: 'syz.0.1613': attribute type 1 has an invalid length.
[  199.170746][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  199.223684][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1613'.
[  199.301656][T12376] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1615'.
[  199.307829][T12375] netlink: 'syz.2.1616': attribute type 1 has an invalid length.
[  199.353793][T12379] netlink: 'syz.0.1617': attribute type 13 has an invalid length.
[  199.357581][T12379] netlink: 'syz.0.1617': attribute type 17 has an invalid length.
[  199.365669][T12375] bond35: (slave geneve6): making interface the new active one
[  199.368891][T12375] bond35: (slave geneve6): Enslaving as an active interface with an up link
[  199.378553][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'.
[  199.381666][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'.
[  199.392157][T12379] erspan0: left allmulticast mode
[  199.413181][T12379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.418960][ T8032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  199.421933][ T8032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  199.425584][ T8032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  199.428299][ T8032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  199.437293][T12379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.449901][T12379] syzkaller0: entered promiscuous mode
[  199.462358][T12379] syzkaller0: entered allmulticast mode
[  199.488795][T12379] tipc: Resetting bearer <eth:syzkaller0>
[  199.500292][T12378] tipc: Resetting bearer <eth:syzkaller0>
[  199.506813][T12385] netlink: 'syz.2.1619': attribute type 1 has an invalid length.
[  199.517387][T12378] tipc: Disabling bearer <eth:syzkaller0>
[  199.650864][T12396] netlink: 'syz.1.1623': attribute type 1 has an invalid length.
[  199.702048][T12396] 8021q: adding VLAN 0 to HW filter on device bond22
[  199.760917][T12396] veth17: entered promiscuous mode
[  199.767234][T12396] bond22: (slave veth17): Enslaving as an active interface with a down link
[  199.783215][T12396] erspan0: entered allmulticast mode
[  199.967931][T12408] netlink: 'syz.1.1626': attribute type 17 has an invalid length.
[  199.983484][T12408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.120385][T12422] netlink: 'syz.2.1631': attribute type 10 has an invalid length.
[  200.166204][T12422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  200.182994][T12422] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  200.199045][T12424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.213334][T12424] tipc: Resetting bearer <eth:syzkaller0>
[  200.271839][T12430] netlink: 'syz.1.1633': attribute type 1 has an invalid length.
[  200.285937][T12432] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  200.314982][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  200.360147][T12432] 8021q: adding VLAN 0 to HW filter on device bond36
[  200.450705][T12432] veth21: entered promiscuous mode
[  200.489203][T12441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  200.548665][T12448] 8021q: adding VLAN 0 to HW filter on device bond37
[  200.833613][T12473] IPv6: Can't replace route, no match found
[  200.947225][T12482] 8021q: adding VLAN 0 to HW filter on device bond38
[  200.971783][T12482] bond38: entered promiscuous mode
[  201.114642][T12495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.121519][T12495] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  201.134591][T12495] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  201.353241][T12502] bond38: entered promiscuous mode
[  201.355615][T12502] 8021q: adding VLAN 0 to HW filter on device bond38
[  201.549646][T12520] ip6tnl5: entered promiscuous mode
[  201.760464][T12530] veth0_to_bond: left allmulticast mode
[  201.764073][T12530] veth0_to_bond: left promiscuous mode
[  201.769560][T12530] bridge19: port 1(veth0_to_bond) entered disabled state
[  201.779026][T12530] bond33: (slave veth19): Releasing active interface
[  201.785895][T12530] bond34: left allmulticast mode
[  201.788009][T12530] bridge0: port 1(bond34) entered disabled state
[  201.793740][T12530] bond35: (slave geneve6): Releasing active interface
[  201.820753][ T5869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.841169][ T5869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.848382][ T5869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.851049][ T5869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.947186][T12532] bond0: up delay (65536) is not a multiple of miimon (100), value rounded to 65500 ms
[  202.230499][T12550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.334133][T12559] vlan1: entered promiscuous mode
[  202.336639][T12559] hsr_slave_1: entered promiscuous mode
[  202.338961][T12559] vlan1: entered allmulticast mode
[  202.340983][T12559] hsr_slave_1: entered allmulticast mode
[  202.370377][T12559] 8021q: VLANs not supported on lo
[  202.395693][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  202.633513][T12577] ip6tnl4: entered promiscuous mode
[  202.637398][T12577] ip6tnl4: entered allmulticast mode
[  202.640173][T12577] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  202.752519][T12592] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  202.991071][T12613] macsec0: left promiscuous mode
[  202.993304][T12613] macsec0: entered allmulticast mode
[  203.118887][T12626] syzkaller1: entered promiscuous mode
[  203.120972][T12626] syzkaller1: entered allmulticast mode
[  204.000465][T12651] __nla_validate_parse: 23 callbacks suppressed
[  204.000482][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'.
[  204.010366][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'.
[  204.029407][T12660] sctp: [Deprecated]: syz.2.1696 (pid 12660) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.029407][T12660] Use struct sctp_sack_info instead
[  204.038417][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1696'.
[  204.089602][T12662] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1697'.
[  204.177959][T12668] validate_nla: 6 callbacks suppressed
[  204.177981][T12668] netlink: 'syz.0.1697': attribute type 10 has an invalid length.
[  204.183295][T12668] batadv0: left promiscuous mode
[  204.228976][T12668] batadv0: left allmulticast mode
[  204.475373][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  204.932390][T12678] pim6reg1: entered promiscuous mode
[  204.936947][T12678] pim6reg1: entered allmulticast mode
[  204.939515][T12681] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  204.982395][T12681] bond39: entered promiscuous mode
[  204.985794][T12681] 8021q: adding VLAN 0 to HW filter on device bond39
[  205.006460][T12681] 8021q: adding VLAN 0 to HW filter on device bond39
[  205.009570][T12681] bond39: (slave wireguard2): The slave device specified does not support setting the MAC address
[  205.014939][T12681] bond39: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  205.023991][T12681] bond39: (slave wireguard2): making interface the new active one
[  205.027311][T12681] wireguard2: entered promiscuous mode
[  205.030882][T12681] bond39: (slave wireguard2): Enslaving as an active interface with an up link
[  205.120976][T12690] bridge0: port 1(ipvlan0) entered blocking state
[  205.129387][T12690] bridge0: port 1(ipvlan0) entered disabled state
[  205.134787][T12690] ipvlan0: entered allmulticast mode
[  205.136856][T12690] bridge0: entered allmulticast mode
[  205.140941][T12690] ipvlan0: left allmulticast mode
[  205.142609][T12690] bridge0: left allmulticast mode
[  205.156826][T12691] bridge0: port 1(ipvlan0) entered blocking state
[  205.159541][T12691] bridge0: port 1(ipvlan0) entered disabled state
[  205.162475][T12691] ipvlan0: entered allmulticast mode
[  205.165371][T12691] bridge0: entered allmulticast mode
[  205.169764][T12691] ipvlan0: left allmulticast mode
[  205.172067][T12691] bridge0: left allmulticast mode
[  205.368844][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'.
[  205.470451][T12711] netlink: 'syz.2.1712': attribute type 1 has an invalid length.
[  205.498318][T12711] vlan3: entered promiscuous mode
[  205.504839][T12711] bond0: entered promiscuous mode
[  205.511590][T12711] vlan3: entered allmulticast mode
[  205.514510][T12711] bond0: entered allmulticast mode
[  206.056391][T12719] netlink: 'syz.1.1715': attribute type 12 has an invalid length.
[  206.069329][T12719] openvswitch: netlink: Multiple metadata blocks provided
[  206.072774][T12720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.073349][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1715'.
[  206.076683][T12720] syzkaller0: entered promiscuous mode
[  206.083174][T12720] syzkaller0: entered allmulticast mode
[  206.113533][T12720] tipc: Resetting bearer <eth:syzkaller0>
[  206.119490][T12717] tipc: Resetting bearer <eth:syzkaller0>
[  206.138642][T12717] tipc: Disabling bearer <eth:syzkaller0>
[  206.197319][T12725] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1717'.
[  206.202948][T12725] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1717'.
[  206.210266][T12725] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1717'.
[  206.214686][T12725] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1717'.
[  206.351640][T12734] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.360510][T12734] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[  206.443750][T12738] macsec0: left allmulticast mode
[  206.469396][T12738] geneve7: left promiscuous mode
[  206.471658][T12738] geneve7: left allmulticast mode
[  206.486629][T12738] macsec3: left promiscuous mode
[  206.488262][T12738] macsec3: left allmulticast mode
[  206.499592][T12738] veth9: left promiscuous mode
[  206.501541][T12738] bridge13: left promiscuous mode
[  206.503159][T12738] bridge13: left allmulticast mode
[  206.511082][T12747] netlink: 'syz.1.1722': attribute type 21 has an invalid length.
[  206.513844][T12747] netlink: 'syz.1.1722': attribute type 22 has an invalid length.
[  206.518993][T12747] netlink: 'syz.1.1722': attribute type 23 has an invalid length.
[  206.522049][T12738] bond27: left promiscuous mode
[  206.529604][T12747] netlink: 'syz.1.1722': attribute type 25 has an invalid length.
[  206.532826][T12747] netlink: 'syz.1.1722': attribute type 26 has an invalid length.
[  206.536684][T12738] geneve8: left promiscuous mode
[  206.538496][T12738] geneve8: left allmulticast mode
[  206.550337][T12738] veth15: left promiscuous mode
[  206.554299][T12738] veth17: left promiscuous mode
[  206.556389][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  206.560102][T12738] macsec5: left promiscuous mode
[  206.562119][T12738] macsec5: left allmulticast mode
[  206.567277][T12738] macsec6: left promiscuous mode
[  206.569612][T12738] macsec6: left allmulticast mode
[  206.572732][T12738] macsec7: left promiscuous mode
[  206.574688][T12738] macsec7: left allmulticast mode
[  206.577462][T12738] macsec8: left promiscuous mode
[  206.579540][T12738] macsec8: left allmulticast mode
[  206.582446][T12738] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  206.587248][T12738] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  206.589485][T12738] macsec9: left promiscuous mode
[  206.591054][T12738] macsec9: left allmulticast mode
[  206.596017][T12738] vlan0: left allmulticast mode
[  206.597615][T12738] veth1: left allmulticast mode
[  206.599830][T12738] bond34: left promiscuous mode
[  206.601750][T12738] vxcan3: left promiscuous mode
[  206.622473][T12738] bond38: left promiscuous mode
[  206.625615][T12738] bond39: left promiscuous mode
[  206.627349][T12738] wireguard2: left promiscuous mode
[  206.640897][ T5869] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.644253][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  206.650683][ T5869] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 55920 - 0
[  206.653995][ T5869] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 45928 - 0
[  206.658530][ T5869] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.661878][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  206.668075][ T5869] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 55920 - 0
[  206.671287][ T5869] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 45928 - 0
[  206.686339][T12753] 0{X: entered promiscuous mode
[  206.698690][ T5869] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.702236][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  206.705624][ T5869] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 55920 - 0
[  206.708930][ T5869] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 45928 - 0
[  206.717245][ T5869] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  206.720624][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  206.724022][ T5869] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 55920 - 0
[  206.729205][ T5869] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 45928 - 0
[  206.734300][T12752] 1{X: renamed from 30{X
[  206.743124][T12752] 1{X: left promiscuous mode
[  206.747164][T12752] 1{X: entered allmulticast mode
[  206.751236][T12752] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  206.788622][T12763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.791114][T12763] syzkaller0: entered promiscuous mode
[  206.793055][T12763] syzkaller0: entered allmulticast mode
[  206.808289][T12763] tipc: Resetting bearer <eth:syzkaller0>
[  206.822030][T12766] tipc: Resetting bearer <eth:syzkaller0>
[  206.825270][T12769] netlink: 'syz.2.1726': attribute type 4 has an invalid length.
[  206.831354][T12766] tipc: Disabling bearer <eth:syzkaller0>
[  206.941627][T12773] (unnamed net_device) (uninitialized): option coupled_control: invalid value (109)
[  207.479886][T12790] bond24: (slave bridge13): making interface the new active one
[  207.483274][T12790] bond24: (slave bridge13): Enslaving as an active interface with an up link
[  207.537963][T12794] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.602548][T12794] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.651145][T12794] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.704975][T12794] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.820074][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.822995][T12802] !: renamed from dummy0 (while UP)
[  207.844900][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.848035][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.857584][ T5851] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.863151][T12793] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.920034][T12793] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.985961][T12793] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.019317][T12793] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  208.634790][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  208.940144][ T5851] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.976931][ T5869] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.997115][ T5851] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.040034][ T5869] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.049757][T12879] __nla_validate_parse: 20 callbacks suppressed
[  209.049769][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'.
[  209.111228][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1745'.
[  209.113013][T12884] macvtap1: entered promiscuous mode
[  209.115937][T12884] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  209.121096][T12886] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1745'.
[  209.127967][T12884] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  209.236834][T12898] sctp: [Deprecated]: syz.2.1748 (pid 12898) Use of int in max_burst socket option.
[  209.236834][T12898] Use struct sctp_assoc_value instead
[  209.242363][T12898] sctp: [Deprecated]: syz.2.1748 (pid 12898) Use of int in max_burst socket option.
[  209.242363][T12898] Use struct sctp_assoc_value instead
[  209.470597][T12921] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1755'.
[  209.547130][T12931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.041241][T12950] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  210.096673][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'.
[  210.383858][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'.
[  210.586800][T12993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1772'.
[  210.604140][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'.
[  210.649198][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1771'.
[  210.652157][T12999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1771'.
[  210.659466][T13001] openvswitch: netlink: Flow key attr not present in new flow.
[  210.716874][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  210.779291][T13009] validate_nla: 2 callbacks suppressed
[  210.779307][T13009] netlink: 'syz.1.1775': attribute type 1 has an invalid length.
[  211.057078][T13025] netlink: 'syz.0.1778': attribute type 2 has an invalid length.
[  211.180335][T13035] netlink: zone id is out of range
[  211.182929][T13035] netlink: zone id is out of range
[  211.186283][T13035] netlink: zone id is out of range
[  211.188646][T13035] netlink: zone id is out of range
[  211.190939][T13035] netlink: zone id is out of range
[  211.193326][T13035] netlink: zone id is out of range
[  211.196418][T13035] netlink: zone id is out of range
[  211.199967][T13035] netlink: zone id is out of range
[  211.202626][T13035] netlink: zone id is out of range
[  211.204297][T13035] netlink: zone id is out of range
[  211.364336][T13048] netlink: 'syz.1.1785': attribute type 1 has an invalid length.
[  211.905158][T13084] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  211.908799][T13083] IPVS: stopping backup sync thread 13084 ...
[  212.796269][T13129] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.804804][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  212.840277][T13129] sch_tbf: burst 151 is lower than device syzkaller0 mtu (313) !
[  212.844378][T13134] netlink: 'syz.2.1809': attribute type 8 has an invalid length.
[  212.892463][T13132] netlink: 'syz.2.1809': attribute type 8 has an invalid length.
[  212.902895][T13136] netlink: 'syz.0.1810': attribute type 1 has an invalid length.
[  212.966991][T13132] netlink: 'syz.2.1809': attribute type 8 has an invalid length.
[  213.008454][T13136] 8021q: adding VLAN 0 to HW filter on device bond40
[  213.031320][T13132] netlink: 'syz.2.1809': attribute type 8 has an invalid length.
[  213.066692][T13132] netlink: 'syz.2.1809': attribute type 8 has an invalid length.
[  213.083936][T13136] macvlan0: entered promiscuous mode
[  213.085887][T13136] macvlan0: entered allmulticast mode
[  213.088368][T13136] bond40: entered promiscuous mode
[  213.090422][T13136] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  213.107327][T13136] bond40: left promiscuous mode
[  213.146839][T13132] netlink: 'syz.2.1809': attribute type 8 has an invalid length.
[  213.152207][T13146] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.270741][T13148] syzkaller0: entered promiscuous mode
[  213.272905][T13148] syzkaller0: entered allmulticast mode
[  213.289287][T13148] macsec10: entered promiscuous mode
[  213.291437][T13148] ip6gretap0: entered promiscuous mode
[  213.293570][T13148] macsec10: entered allmulticast mode
[  213.296115][T13148] ip6gretap0: entered allmulticast mode
[  213.534941][T13159] ip6tnl4: entered promiscuous mode
[  213.605994][T13165] vlan4: entered promiscuous mode
[  213.853070][T13185] bond22: (slave veth17): Releasing active interface
[  213.863046][T13185] bond24: (slave bridge13): Releasing active interface
[  213.960397][T13185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.964130][T13185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  214.458065][T13214] __nla_validate_parse: 18 callbacks suppressed
[  214.458082][T13214] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1831'.
[  214.467328][T13214] batadv0: entered promiscuous mode
[  214.469125][T13214] batadv0: entered allmulticast mode
[  214.559445][T13215] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1831'.
[  214.660631][T13223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1833'.
[  214.772010][T13234] sctp: [Deprecated]: syz.2.1834 (pid 13234) Use of int in max_burst socket option.
[  214.772010][T13234] Use struct sctp_assoc_value instead
[  214.886930][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  214.982974][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  215.017899][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'.
[  215.038908][T13259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.042673][T13259] syzkaller0: entered promiscuous mode
[  215.044995][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'.
[  215.046403][T13259] syzkaller0: entered allmulticast mode
[  215.101770][T13259] tipc: Resetting bearer <eth:syzkaller0>
[  215.105648][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'.
[  215.110469][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'.
[  215.114133][T13257] tipc: Resetting bearer <eth:syzkaller0>
[  215.131946][T13257] tipc: Disabling bearer <eth:syzkaller0>
[  215.467354][T13301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1853'.
[  215.591699][    T9] IPVS: starting estimator thread 0...
[  215.651697][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'.
[  215.674801][T13318] IPVS: using max 64 ests per chain, 153600 per kthread
[  215.969460][T13341] syzkaller0: entered promiscuous mode
[  215.974977][T13341] syzkaller0: entered allmulticast mode
[  215.979731][T13339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.026488][T13339] tipc: Resetting bearer <eth:syzkaller0>
[  216.062757][T13339] tipc: Disabling bearer <eth:syzkaller0>
[  216.068149][T13346] validate_nla: 34 callbacks suppressed
[  216.068167][T13346] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  216.160883][T13346] 8021q: adding VLAN 0 to HW filter on device bond40
[  216.250300][T13346] veth25: entered promiscuous mode
[  216.279933][T13350] bond40: (slave erspan0): making interface the new active one
[  216.285563][T13350] bond40: (slave erspan0): Enslaving as an active interface with an up link
[  216.358822][T13360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.430490][T13369] netlink: 'syz.2.1871': attribute type 1 has an invalid length.
[  216.463312][T13369] 8021q: adding VLAN 0 to HW filter on device bond41
[  216.534142][T13369] 8021q: adding VLAN 0 to HW filter on device bond41
[  216.537924][T13369] bond41: (slave vxcan7): The slave device specified does not support setting the MAC address
[  216.542274][T13369] bond41: (slave vxcan7): Error -95 calling set_mac_address
[  216.579439][T13379] veth27: entered promiscuous mode
[  216.582942][T13379] bond41: (slave veth27): Enslaving as an active interface with a down link
[  216.605996][T13384] bond40: (slave erspan0): Releasing active interface
[  216.621798][T13384] bond41: (slave erspan0): making interface the new active one
[  216.626159][T13384] bond41: (slave erspan0): Enslaving as an active interface with an up link
[  216.743176][T13393] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.755435][T13398] hsr_slave_0: left promiscuous mode
[  216.827224][T13393] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.896588][T13393] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.942095][T13393] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.951130][T13417] netlink: 'syz.0.1883': attribute type 1 has an invalid length.
[  216.954768][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  216.972445][T13417] 8021q: adding VLAN 0 to HW filter on device bond41
[  217.032008][T13420] pim6reg: entered allmulticast mode
[  217.060551][T13420] pim6reg: left allmulticast mode
[  217.081875][ T5851] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.094795][ T5851] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.097594][ T5851] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.116086][ T5851] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.216964][T13430] macvlan0: entered promiscuous mode
[  217.219270][T13430] macvlan0: entered allmulticast mode
[  217.222715][T13430] bond28: (slave macvlan0): Opening slave failed
[  217.299057][T13438] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  218.032798][T13478] netlink: 'syz.1.1898': attribute type 2 has an invalid length.
[  218.256788][T13482] batadv0: entered promiscuous mode
[  218.259858][T13482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.419372][ T6129] syzkaller0: tun_net_xmit 76
[  218.421352][ T6129] syzkaller0: tun_net_xmit 48
[  218.445125][    T9] syzkaller0: tun_net_xmit 76
[  218.520033][T13506] bond42 (unregistering): Released all slaves
[  218.526586][    T9] syzkaller0: tun_net_xmit 76
[  218.653555][T13519] pim6reg: entered allmulticast mode
[  218.827887][T13523] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  218.827893][T13522] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  218.827914][T13522] netlink: 'syz.2.1907': attribute type 4 has an invalid length.
[  218.830341][T13523] netlink: 'syz.2.1907': attribute type 4 has an invalid length.
[  219.034887][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  219.039214][T13529] bond41: (slave erspan0): Releasing active interface
[  219.052207][T13529] bond41: (slave veth27): Releasing active interface
[  220.733468][T13540] _Z`Ԁ@: entered promiscuous mode
[  220.845637][T13546] __nla_validate_parse: 24 callbacks suppressed
[  220.845660][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'.
[  220.851839][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1913'.
[  220.870543][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'.
[  221.015736][T13555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.019045][T13555] syzkaller0: entered promiscuous mode
[  221.021969][T13555] syzkaller0: entered allmulticast mode
[  221.028794][T13555] netlink: 'syz.0.1918': attribute type 3 has an invalid length.
[  221.032424][T13555] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1918'.
[  221.061512][T13555] tipc: Resetting bearer <eth:syzkaller0>
[  221.068657][T13554] tipc: Resetting bearer <eth:syzkaller0>
[  221.095308][T13554] tipc: Disabling bearer <eth:syzkaller0>
[  221.114858][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  221.451098][T13587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1925'.
[  221.638079][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'.
[  221.717960][T13595] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  221.721837][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.0.1928 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  221.721862][T13595] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.721871][T13595] Call Trace:
[  221.721879][T13595]  <TASK>
[  221.721889][T13595]  dump_stack_lvl+0x189/0x250
[  221.721918][T13595]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.721935][T13595]  ? __pfx__printk+0x10/0x10
[  221.721959][T13595]  ? kernfs_path_from_node+0x2f/0x290
[  221.721974][T13595]  ? kernfs_path_from_node+0x250/0x290
[  221.721992][T13595]  ? kernfs_path_from_node+0x2f/0x290
[  221.722009][T13595]  sysfs_warn_dup+0x8e/0xa0
[  221.722022][T13595]  sysfs_do_create_link_sd+0xc0/0x110
[  221.722039][T13595]  device_add_class_symlinks+0x1cf/0x240
[  221.722061][T13595]  device_add+0x475/0xb50
[  221.722083][T13595]  wiphy_register+0x1ba6/0x28d0
[  221.722107][T13595]  ? __pfx_wiphy_register+0x10/0x10
[  221.722119][T13595]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.722134][T13595]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.722151][T13595]  ieee80211_register_hw+0x3425/0x4080
[  221.722176][T13595]  ? ieee80211_register_hw+0x1421/0x4080
[  221.722190][T13595]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.722202][T13595]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.722219][T13595]  ? __hrtimer_setup+0x187/0x210
[  221.722228][T13595]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.722242][T13595]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  221.722267][T13595]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.722277][T13595]  ? trace_kmalloc+0x1f/0xd0
[  221.722288][T13595]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.722299][T13595]  ? kstrndup+0xbf/0x160
[  221.722313][T13595]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.722324][T13595]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.722348][T13595]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.722366][T13595]  ? __nla_parse+0x40/0x60
[  221.722380][T13595]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.722394][T13595]  genl_family_rcv_msg_doit+0x215/0x300
[  221.722406][T13595]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.722423][T13595]  ? bpf_lsm_capable+0x9/0x20
[  221.722434][T13595]  ? security_capable+0x7e/0x2e0
[  221.722449][T13595]  genl_rcv_msg+0x60e/0x790
[  221.722462][T13595]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.722470][T13595]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.722487][T13595]  netlink_rcv_skb+0x208/0x470
[  221.722498][T13595]  ? __lock_acquire+0xab9/0xd20
[  221.722539][T13595]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.722551][T13595]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.722574][T13595]  ? down_read+0x1ad/0x2e0
[  221.722584][T13595]  genl_rcv+0x28/0x40
[  221.722593][T13595]  netlink_unicast+0x82f/0x9e0
[  221.722609][T13595]  ? __pfx_netlink_unicast+0x10/0x10
[  221.722620][T13595]  ? netlink_sendmsg+0x642/0xb30
[  221.722630][T13595]  ? skb_put+0x11b/0x210
[  221.722640][T13595]  netlink_sendmsg+0x805/0xb30
[  221.722657][T13595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.722669][T13595]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.722684][T13595]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.722692][T13595]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.722704][T13595]  __sock_sendmsg+0x21c/0x270
[  221.722716][T13595]  ____sys_sendmsg+0x505/0x830
[  221.722728][T13595]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.722741][T13595]  ? import_iovec+0x74/0xa0
[  221.722752][T13595]  ___sys_sendmsg+0x21f/0x2a0
[  221.722761][T13595]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.722788][T13595]  ? __fget_files+0x2a/0x420
[  221.722795][T13595]  ? __fget_files+0x3a0/0x420
[  221.722808][T13595]  __x64_sys_sendmsg+0x19b/0x260
[  221.722817][T13595]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.722830][T13595]  ? rcu_is_watching+0x15/0xb0
[  221.722842][T13595]  ? do_syscall_64+0xbe/0x3b0
[  221.722856][T13595]  do_syscall_64+0xfa/0x3b0
[  221.722866][T13595]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.722876][T13595]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.722885][T13595]  ? exc_page_fault+0x9f/0xf0
[  221.722896][T13595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.722904][T13595] RIP: 0033:0x7fb303b8ebe9
[  221.722914][T13595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.722922][T13595] RSP: 002b:00007fb304a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.722933][T13595] RAX: ffffffffffffffda RBX: 00007fb303db5fa0 RCX: 00007fb303b8ebe9
[  221.722940][T13595] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  221.722945][T13595] RBP: 00007fb303c11e19 R08: 0000000000000000 R09: 0000000000000000
[  221.722951][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.722956][T13595] R13: 00007fb303db6038 R14: 00007fb303db5fa0 R15: 00007fff20b2ff58
[  221.722972][T13595]  </TASK>
[  222.088224][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'.
[  222.139690][T13627] syzkaller1: entered promiscuous mode
[  222.141528][T13627] syzkaller1: entered allmulticast mode
[  222.213723][T13635] syzkaller0: entered promiscuous mode
[  222.217418][T13635] syzkaller0: entered allmulticast mode
[  222.225666][T13634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.261270][T13641] bridge0: port 1(erspan0) entered blocking state
[  222.263803][T13641] bridge0: port 1(erspan0) entered disabled state
[  222.268370][T13641] erspan0: entered promiscuous mode
[  222.317359][T13642] erspan0: left promiscuous mode
[  222.319417][T13642] bridge0: port 1(erspan0) entered disabled state
[  222.321669][T13640] netlink: 'syz.2.1936': attribute type 10 has an invalid length.
[  222.365590][T13637] tipc: Resetting bearer <eth:syzkaller0>
[  222.388739][T13637] tipc: Disabling bearer <eth:syzkaller0>
[  222.403932][T13629] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  222.409721][T13629] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.463472][T13648] trusted_key: syz.0.1940 sent an empty control message without MSG_MORE.
[  222.483146][T13648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1940'.
[  222.714842][T13663] batadv0: left promiscuous mode
[  222.741787][T13663] ip6gretap0: left allmulticast mode
[  222.744013][T13663] ip6gretap0: left promiscuous mode
[  222.747191][T13663] macsec10: left promiscuous mode
[  222.749830][T13663] macsec10: left allmulticast mode
[  223.195236][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  223.199966][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'.
[  223.237571][T13688] vlan0: left allmulticast mode
[  223.250628][T13688] bond0: left allmulticast mode
[  223.259045][T13688] team0: Port device vlan0 added
[  223.284942][T13688] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  223.491096][T13700] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.540751][T13706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.543298][T13706] syzkaller0: entered promiscuous mode
[  223.547087][T13706] syzkaller0: entered allmulticast mode
[  223.559456][T13706] tipc: Resetting bearer <eth:syzkaller0>
[  223.562095][T13706] syzkaller0: left promiscuous mode
[  223.563745][T13706] syzkaller0: left allmulticast mode
[  223.600459][T13705] tipc: Disabling bearer <eth:syzkaller0>
[  223.754936][T13724] netlink: 'syz.0.1958': attribute type 2 has an invalid length.
[  223.761569][T13724] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1958'.
[  223.941260][T13759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.966699][ T5930] tipc: Resetting bearer <eth:syzkaller0>
[  224.145673][T13784] netlink: 'syz.1.1972': attribute type 12 has an invalid length.
[  224.191613][T13786] syzkaller0: entered promiscuous mode
[  224.193317][T13786] syzkaller0: entered allmulticast mode
[  225.279613][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  225.812470][T13808] pim6reg: left allmulticast mode
[  225.883534][T13813] __nla_validate_parse: 14 callbacks suppressed
[  225.883548][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1979'.
[  225.941680][T13816] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1979'.
[  225.993681][T13818] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1980'.
[  226.138653][T13830] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.149631][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'.
[  226.187020][T13833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1984'.
[  226.189797][T13833] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1984'.
[  226.230483][T13827] veth1_to_team: left allmulticast mode
[  226.242008][T13827] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  226.245425][T13827] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  226.248508][T13827] vlan0: left promiscuous mode
[  226.250420][T13827] veth1: left promiscuous mode
[  226.252764][T13827] veth17: left promiscuous mode
[  226.279920][T13827] veth19: left promiscuous mode
[  226.292209][T13827] veth21: left promiscuous mode
[  226.296129][T13827] bond38: left promiscuous mode
[  226.297972][T13827] ip6tnl5: left promiscuous mode
[  226.303914][T13827] vlan3: left promiscuous mode
[  226.307076][T13827] bond0: left promiscuous mode
[  226.308980][T13827] vlan3: left allmulticast mode
[  226.310660][T13827] bond0: left allmulticast mode
[  226.324725][T13827] veth25: left promiscuous mode
[  226.326508][T13827] veth27: left promiscuous mode
[  226.328877][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1984'.
[  226.331851][T13836] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1984'.
[  226.360195][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1986'.
[  226.382684][T13845] bond42: (slave vxcan1): The slave device specified does not support setting the MAC address
[  226.387711][T13845] bond42: (slave vxcan1): Error -95 calling set_mac_address
[  226.404368][T13843] bond42: (slave vxcan1): The slave device specified does not support setting the MAC address
[  226.409039][T13843] bond42: (slave vxcan1): Error -95 calling set_mac_address
[  226.567116][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'.
[  226.571349][T13859] veth0_to_bond: entered allmulticast mode
[  226.731798][T13878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.736199][T13878] syzkaller0: entered promiscuous mode
[  226.738503][T13878] syzkaller0: entered allmulticast mode
[  226.747692][T13878] tipc: Resetting bearer <eth:syzkaller0>
[  226.750774][T13877] tipc: Resetting bearer <eth:syzkaller0>
[  226.767966][T13877] tipc: Disabling bearer <eth:syzkaller0>
[  226.899790][T13888] netlink: 'syz.2.1997': attribute type 1 has an invalid length.
[  227.022129][T13904] macsec1: entered promiscuous mode
[  227.023956][T13904] ip6gretap0: entered promiscuous mode
[  227.027017][T13904] macsec1: entered allmulticast mode
[  227.028742][T13904] ip6gretap0: entered allmulticast mode
[  227.122072][T13912] bridge0: port 1(batadv0) entered blocking state
[  227.124822][T13912] bridge0: port 1(batadv0) entered disabled state
[  227.127281][T13912] batadv0: entered allmulticast mode
[  227.129929][T13912] batadv0: entered promiscuous mode
[  227.192688][T13915] net_ratelimit: 4 callbacks suppressed
[  227.192710][T13915] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  227.353931][T13924] openvswitch: netlink: Flow key attr not present in new flow.
[  227.361113][T13924] openvswitch: netlink: Flow key attr not present in new flow.
[  227.367555][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  227.371842][T13924] openvswitch: netlink: Flow key attr not present in new flow.
[  227.500475][T13942] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  227.507799][T13945] netlink: 'syz.1.2011': attribute type 13 has an invalid length.
[  227.539499][T13942] bond43: entered promiscuous mode
[  227.541398][T13942] 8021q: adding VLAN 0 to HW filter on device bond43
[  227.638527][ T5851] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  227.642260][ T5851] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  227.665899][T13945] tipc: Resetting bearer <eth:syzkaller0>
[  227.725251][ T5869] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.734562][ T5869] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.737589][ T5869] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.740433][ T5869] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.848656][T13960] syzkaller1: entered promiscuous mode
[  227.850496][T13960] syzkaller1: entered allmulticast mode
[  227.904309][T13965] netlink: 'syz.0.2012': attribute type 9 has an invalid length.
[  228.277914][T13972] team0: Port device vlan0 removed
[  228.280320][T13972] batadv0: left allmulticast mode
[  228.283120][T13972] batadv0: left promiscuous mode
[  228.287408][T13972] bridge0: port 1(batadv0) entered disabled state
[  228.347133][T13972] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  228.483010][T13983] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.490361][T13984] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  228.494984][T13984] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  228.498843][T13984] tipc: Resetting bearer <eth:syzkaller0>
[  228.668454][T13993] netlink: 'syz.2.2023': attribute type 5 has an invalid length.
[  228.965030][T14012] netlink: 'syz.2.2028': attribute type 11 has an invalid length.
[  229.123616][T14024] netlink: 'syz.2.2032': attribute type 10 has an invalid length.
[  229.132018][T14024] netlink: 'syz.2.2032': attribute type 10 has an invalid length.
[  229.434904][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  229.970340][T14040] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  229.972934][T14040] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  230.100924][T14051] netlink: 'syz.1.2040': attribute type 5 has an invalid length.
[  230.107984][T14051] netlink: 'syz.1.2040': attribute type 1 has an invalid length.
[  230.110476][T14051] netlink: 'syz.1.2040': attribute type 2 has an invalid length.
[  230.112894][T14051] netlink: 'syz.1.2040': attribute type 1 has an invalid length.
[  230.414321][T14070] bridge54: port 1(veth33) entered blocking state
[  230.416942][T14070] bridge54: port 1(veth33) entered disabled state
[  230.419280][T14070] veth33: entered allmulticast mode
[  230.422136][T14070] veth33: entered promiscuous mode
[  230.480675][T14070] veth0_to_bond: left allmulticast mode
[  230.483232][T14070] bridge54: port 2(veth0_to_bond) entered blocking state
[  230.489314][T14070] bridge54: port 2(veth0_to_bond) entered disabled state
[  230.491921][T14070] veth0_to_bond: entered allmulticast mode
[  230.494978][T14070] veth0_to_bond: entered promiscuous mode
[  230.510458][T14080] netlink: 'syz.1.2048': attribute type 32 has an invalid length.
[  230.530020][T14080] (unnamed net_device) (uninitialized): option coupled_control: invalid value (84)
[  230.647579][T12863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.650198][T12863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.786246][T14087] syzkaller1: entered promiscuous mode
[  230.788463][T14087] syzkaller1: entered allmulticast mode
[  230.922187][T14096] geneve7: entered promiscuous mode
[  230.924349][T14096] geneve7: entered allmulticast mode
[  230.949282][ T6129] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 47682 - 0
[  230.952733][ T6129] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 52208 - 0
[  230.958928][ T6129] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 47682 - 0
[  230.962165][ T6129] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 52208 - 0
[  230.982075][ T6129] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 47682 - 0
[  230.999544][ T6129] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 52208 - 0
[  231.003921][ T6129] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 47682 - 0
[  231.008566][ T6129] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 52208 - 0
[  231.043231][T14099] vlan1: entered promiscuous mode
[  231.048249][T14099] vlan1: entered allmulticast mode
[  231.050105][T14099] bond0: entered allmulticast mode
[  231.133033][T14108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.210421][T14119] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  231.217041][T14120] __nla_validate_parse: 92 callbacks suppressed
[  231.217055][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'.
[  231.221989][T14119] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.222477][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2059'.
[  231.226880][T14119] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.266114][T14122] syzkaller0: entered promiscuous mode
[  231.268746][T14122] syzkaller0: entered allmulticast mode
[  231.283577][T14122] netlink: 'syz.0.2061': attribute type 11 has an invalid length.
[  231.382870][T14129] can: request_module (can-proto-0) failed.
[  231.420923][T14129] vxcan1: entered promiscuous mode
[  231.526514][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  231.581848][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  231.596194][T14149] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2068'.
[  231.643066][T14150] sctp: [Deprecated]: syz.0.2067 (pid 14150) Use of struct sctp_assoc_value in delayed_ack socket option.
[  231.643066][T14150] Use struct sctp_sack_info instead
[  231.693747][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'.
[  231.904950][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.908825][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.912244][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.916567][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.920068][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.925162][T14161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.040263][T14117] delete_channel: no stack
[  232.119645][T14174] 8021q: adding VLAN 0 to HW filter on device bond46
[  232.142259][T14174] 8021q: adding VLAN 0 to HW filter on device bond46
[  232.145794][T14174] bond46: (slave vxcan7): The slave device specified does not support setting the MAC address
[  232.150768][T14174] bond46: (slave vxcan7): Error -95 calling set_mac_address
[  232.185609][T14176] bond46: (slave bridge55): Enslaving as an active interface with a down link
[  232.617234][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'.
[  232.621219][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'.
[  232.628053][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'.
[  232.632484][T14188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2078'.
[  232.890127][T14198] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  232.894006][T14198] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  233.255356][T14207] validate_nla: 6 callbacks suppressed
[  233.255372][T14207] netlink: 'syz.2.2083': attribute type 1 has an invalid length.
[  233.369444][T14212] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  233.388956][T14212] 8021q: adding VLAN 0 to HW filter on device bond48
[  233.410378][T14212] 8021q: adding VLAN 0 to HW filter on device bond48
[  233.420053][T14212] bond48: (slave vxcan7): The slave device specified does not support setting the MAC address
[  233.426042][T14212] bond48: (slave vxcan7): Error -95 calling set_mac_address
[  233.447992][T14214] tc_dump_action: action bad kind
[  233.504322][T14212] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  233.514216][T14215] bond48: (slave vxcan7): The slave device specified does not support setting the MAC address
[  233.519985][T14215] bond48: (slave vxcan7): Error -95 calling set_mac_address
[  233.594761][ T5837] Bluetooth: hci2: command 0x0405 tx timeout
[  233.604892][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  233.621238][T14218] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2087'.
[  233.710970][T14225] netlink: 'syz.0.2089': attribute type 8 has an invalid length.
[  233.887845][ T5851] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.891116][ T5869] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.912969][ T5869] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.918688][ T5869] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.966699][T14246] netlink: 'syz.0.2096': attribute type 2 has an invalid length.
[  234.180187][T14256] syzkaller1: entered promiscuous mode
[  234.182380][T14256] syzkaller1: entered allmulticast mode
[  234.262379][T14266] vxcan0: entered promiscuous mode
[  234.382634][T14274] tipc: Resetting bearer <eth:syzkaller0>
[  234.402443][T14276] netlink: 'syz.0.2102': attribute type 13 has an invalid length.
[  234.409854][T14276] netlink: 'syz.0.2102': attribute type 27 has an invalid length.
[  234.849897][T14302] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.855014][T14302] syzkaller0: mtu less than device minimum
[  235.357127][T14320] bridge0: port 1(vlan4) entered blocking state
[  235.360019][T14320] bridge0: port 1(vlan4) entered disabled state
[  235.363326][T14320] vlan4: entered allmulticast mode
[  235.368053][T14320] bridge0: entered allmulticast mode
[  235.372038][T14320] vlan4: left allmulticast mode
[  235.373858][T14320] bridge0: left allmulticast mode
[  235.512614][T14332] netlink: 'syz.0.2115': attribute type 2 has an invalid length.
[  235.550005][T14336] tipc: Resetting bearer <eth:syzkaller0>
[  235.589842][T14336] team0: Mode changed to "activebackup"
[  235.607159][T14338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.611309][T14338] tipc: Resetting bearer <eth:syzkaller0>
[  235.675380][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  235.698112][T14347] netlink: 'syz.1.2122': attribute type 1 has an invalid length.
[  236.013831][T14377] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  236.053552][T14377] bond49 (unregistering): Released all slaves
[  236.075153][T14381] pim6reg1: entered promiscuous mode
[  236.077218][T14381] pim6reg1: entered allmulticast mode
[  236.283653][T14390] syzkaller1: entered promiscuous mode
[  236.288407][T14390] syzkaller1: entered allmulticast mode
[  236.293383][T14388] pim6reg1: entered promiscuous mode
[  236.295901][T14388] pim6reg1: entered allmulticast mode
[  236.303578][T14388] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  236.714924][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  236.894254][T14398] __nla_validate_parse: 15 callbacks suppressed
[  236.894269][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2138'.
[  237.023545][T14405] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2140'.
[  237.027646][T14405] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2140'.
[  237.113649][T14407] IPVS: Unknown mcast interface: bridge_slave_0
[  237.349573][T14426] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2146'.
[  237.362770][T14426] batadv3: entered promiscuous mode
[  237.366776][T14426] batadv3: entered allmulticast mode
[  237.383294][T14429] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  237.385215][T14424] IPVS: stopping backup sync thread 14429 ...
[  237.440602][T14434] netlink: 600 bytes leftover after parsing attributes in process `syz.1.2147'.
[  237.456531][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2147'.
[  237.521839][T14426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2146'.
[  237.754750][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  237.806521][T14448] gretap6: entered promiscuous mode
[  237.811758][T14448] gretap6: entered allmulticast mode
[  238.003854][T14455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2153'.
[  238.083472][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  238.137814][T14466] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2156'.
[  238.198146][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  238.234351][T14474] pim6reg: entered allmulticast mode
[  238.307976][T14477] sock: sock_set_timeout: `syz.2.2160' (pid 14477) tries to set negative timeout
[  238.377528][T14491] validate_nla: 2 callbacks suppressed
[  238.377541][T14491] netlink: 'syz.2.2162': attribute type 1 has an invalid length.
[  238.404902][T14490] netlink: 'syz.0.2163': attribute type 19 has an invalid length.
[  238.471490][T14496] netlink: 'syz.0.2164': attribute type 1 has an invalid length.
[  238.742967][T14516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.889386][T14519] pim6reg1: entered promiscuous mode
[  238.891638][T14519] pim6reg1: entered allmulticast mode
[  239.032915][ T5851] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.040161][ T5851] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.043512][ T5851] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.047775][ T5851] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.139409][T14526] netlink: 'syz.0.2173': attribute type 1 has an invalid length.
[  239.157186][T14526] 8021q: adding VLAN 0 to HW filter on device bond44
[  239.173164][T14526] veth23: entered promiscuous mode
[  239.179318][T14526] bond44: (slave veth23): Enslaving as a backup interface with a down link
[  239.217609][T14529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.221030][T14529] syzkaller0: entered promiscuous mode
[  239.223296][T14529] syzkaller0: entered allmulticast mode
[  239.246059][T14529] tipc: Resetting bearer <eth:syzkaller0>
[  239.250889][T14528] tipc: Resetting bearer <eth:syzkaller0>
[  239.267105][T14528] tipc: Disabling bearer <eth:syzkaller0>
[  239.476547][T14540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.479465][T14540] syzkaller0: entered promiscuous mode
[  239.481481][T14540] syzkaller0: entered allmulticast mode
[  239.499178][T14540] tipc: Resetting bearer <eth:syzkaller0>
[  239.552138][T14539] tipc: Resetting bearer <eth:syzkaller0>
[  239.566523][T14539] tipc: Disabling bearer <eth:syzkaller0>
[  239.674095][T14553] sctp: [Deprecated]: syz.0.2181 (pid 14553) Use of int in maxseg socket option.
[  239.674095][T14553] Use struct sctp_assoc_value instead
[  239.845000][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  239.945178][T14579] netlink: 'syz.2.2188': attribute type 1 has an invalid length.
[  240.124066][T14593] netlink: 'syz.0.2192': attribute type 5 has an invalid length.
[  240.945666][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.949954][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.082610][T14619] netlink: 'syz.1.2200': attribute type 10 has an invalid length.
[  241.088806][T14619] team0: Cannot enslave team device to itself
[  241.119200][T14621] netlink: 'syz.1.2201': attribute type 2 has an invalid length.
[  241.208570][T14628] netlink: 'syz.0.2204': attribute type 1 has an invalid length.
[  241.211754][T14628] netlink: 'syz.0.2204': attribute type 10 has an invalid length.
[  241.378921][T14634] macsec0: entered promiscuous mode
[  241.384575][T14634] macvlan1: entered promiscuous mode
[  241.416714][T14634] macvlan1: left promiscuous mode
[  241.459056][T14633] macsec0: entered promiscuous mode
[  241.461275][T14633] macvlan1: entered promiscuous mode
[  241.472526][T14633] macvlan1: left promiscuous mode
[  241.617988][T14651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.919511][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  242.340925][T14682] bridge0: port 1(batadv0) entered blocking state
[  242.397130][T14682] bridge0: port 1(batadv0) entered disabled state
[  242.400146][T14682] batadv0: entered allmulticast mode
[  242.406053][T14682] batadv0: entered promiscuous mode
[  242.793458][T14698] __nla_validate_parse: 25 callbacks suppressed
[  242.793474][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2221'.
[  242.836814][ T5869] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  242.840362][ T5869] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  242.880130][T14698] bond30 (unregistering): Released all slaves
[  242.921684][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2221'.
[  243.168899][T14717] block nbd0: NBD_DISCONNECT
[  243.174092][T14717] block nbd0: Send disconnect failed -107
[  243.196199][T14717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2225'.
[  243.199870][T14717] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  243.262821][T14722] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2227'.
[  243.269970][T14722] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2227'.
[  243.273128][T14722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2227'.
[  243.278941][T14722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2227'.
[  243.409248][T14736] validate_nla: 3 callbacks suppressed
[  243.409266][T14736] netlink: 'syz.0.2230': attribute type 30 has an invalid length.
[  243.683579][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2234'.
[  243.810976][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'.
[  243.815762][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'.
[  243.845451][T14764] netlink: 'syz.2.2238': attribute type 1 has an invalid length.
[  243.995599][ T5837] Bluetooth: hci1: command 0x080f tx timeout
[  244.036385][T14770] veth34: entered allmulticast mode
[  244.115810][T14773] netlink: 'syz.2.2241': attribute type 1 has an invalid length.
[  244.151966][T14773] 8021q: adding VLAN 0 to HW filter on device bond50
[  244.198479][T14780] netlink: 'syz.2.2243': attribute type 3 has an invalid length.
[  244.561777][T14793] netlink: 'syz.0.2246': attribute type 4 has an invalid length.
[  244.587987][T14793] netlink: 'syz.0.2246': attribute type 4 has an invalid length.
[  244.786227][T14821] syzkaller0: entered promiscuous mode
[  244.791681][T14821] syzkaller0: entered allmulticast mode
[  245.028713][T14837] netlink: 'syz.1.2251': attribute type 1 has an invalid length.
[  245.108902][T14843] bond30: (slave vxcan1): The slave device specified does not support setting the MAC address
[  245.113496][T14843] bond30: (slave vxcan1): Error -95 calling set_mac_address
[  245.199043][T14850] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  245.232398][T14850] 8021q: adding VLAN 0 to HW filter on device bond51
[  245.261548][T14850] 8021q: adding VLAN 0 to HW filter on device bond51
[  245.264047][T14850] bond51: (slave vxcan7): The slave device specified does not support setting the MAC address
[  245.270291][T14850] bond51: (slave vxcan7): Error -95 calling set_mac_address
[  245.287977][T14856] ------------[ cut here ]------------
[  245.290644][T14856] WARNING: CPU: 0 PID: 14856 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[  245.295388][T14856] Modules linked in:
[  245.297313][T14856] CPU: 0 UID: 0 PID: 14856 Comm: syz.1.2256 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  245.302936][T14856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.306952][T14856] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  245.309423][T14856] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 99 8c 00 cc e8 82 09 d0 f6 90 0f 0b 90 eb e1 e8 77 09 d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  245.316512][T14856] RSP: 0018:ffffc900026cef70 EFLAGS: 00010287
[  245.318472][T14856] RAX: ffffffff8aefa219 RBX: ffff888113c44000 RCX: 0000000000080000
[  245.321443][T14856] RDX: ffffc90004021000 RSI: 000000000000038f RDI: 0000000000000390
[  245.324132][T14856] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aef9d33
[  245.327571][T14856] R10: dffffc0000000000 R11: ffffed1022788831 R12: 1ffff1102278880a
[  245.330371][T14856] R13: ffff88811a178e40 R14: 0000000000000001 R15: ffffffff8aef9d33
[  245.333271][T14856] FS:  00007fc9a165b6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  245.337103][T14856] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  245.339237][T14856] CR2: 000000110c2560de CR3: 00000001212a2000 CR4: 00000000000006f0
[  245.342018][T14856] Call Trace:
[  245.343257][T14856]  <TASK>
[  245.344812][T14856]  rate_control_rate_init_all_links+0x109/0x1a0
[  245.346954][T14856]  sta_apply_auth_flags+0x1c2/0x400
[  245.348609][T14856]  sta_apply_parameters+0xe4b/0x15b0
[  245.350549][T14856]  ieee80211_add_station+0x424/0x6a0
[  245.352571][T14856]  rdev_add_station+0x108/0x290
[  245.354765][T14856]  nl80211_new_station+0x1755/0x1b70
[  245.356858][T14856]  ? __pfx_nl80211_new_station+0x10/0x10
[  245.358928][T14856]  ? netdev_run_todo+0xe1d/0xea0
[  245.360644][T14856]  ? nl80211_pre_doit+0x4f1/0x930
[  245.362567][T14856]  genl_family_rcv_msg_doit+0x215/0x300
[  245.364850][T14856]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  245.366973][T14856]  ? bpf_lsm_capable+0x9/0x20
[  245.368560][T14856]  ? security_capable+0x7e/0x2e0
[  245.370266][T14856]  genl_rcv_msg+0x60e/0x790
[  245.372040][T14856]  ? __pfx_genl_rcv_msg+0x10/0x10
[  245.373869][T14856]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  245.376076][T14856]  ? __pfx_nl80211_new_station+0x10/0x10
[  245.378253][T14856]  ? __pfx_nl80211_post_doit+0x10/0x10
[  245.380433][T14856]  netlink_rcv_skb+0x208/0x470
[  245.382302][T14856]  ? __lock_acquire+0xab9/0xd20
[  245.384307][T14856]  ? __pfx_genl_rcv_msg+0x10/0x10
[  245.386854][T14856]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  245.388964][T14856]  ? down_read+0x1ad/0x2e0
[  245.390771][T14856]  genl_rcv+0x28/0x40
[  245.392384][T14856]  netlink_unicast+0x82f/0x9e0
[  245.394322][T14856]  ? __pfx_netlink_unicast+0x10/0x10
[  245.396801][T14856]  ? netlink_sendmsg+0x642/0xb30
[  245.398802][T14856]  ? skb_put+0x11b/0x210
[  245.400561][T14856]  netlink_sendmsg+0x805/0xb30
[  245.402587][T14856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.404840][T14856]  ? aa_sock_msg_perm+0xf1/0x1d0
[  245.406418][T14856]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  245.408417][T14856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.410656][T14856]  __sock_sendmsg+0x21c/0x270
[  245.412532][T14856]  ____sys_sendmsg+0x505/0x830
[  245.414381][T14856]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.416725][T14856]  ? import_iovec+0x74/0xa0
[  245.418486][T14856]  ___sys_sendmsg+0x21f/0x2a0
[  245.420102][T14856]  ? __pfx____sys_sendmsg+0x10/0x10
[  245.421952][T14856]  ? __fget_files+0x2a/0x420
[  245.424017][T14856]  ? __fget_files+0x3a0/0x420
[  245.426294][T14856]  __x64_sys_sendmsg+0x19b/0x260
[  245.428416][T14856]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  245.430416][T14856]  ? rcu_is_watching+0x15/0xb0
[  245.432411][T14856]  ? do_syscall_64+0xbe/0x3b0
[  245.434357][T14856]  do_syscall_64+0xfa/0x3b0
[  245.436730][T14856]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.438824][T14856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.441185][T14856]  ? exc_page_fault+0x9f/0xf0
[  245.442789][T14856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.445211][T14856] RIP: 0033:0x7fc9a078ebe9
[  245.446874][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.453171][T14856] RSP: 002b:00007fc9a165b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.453425][T14859] bond51: (slave erspan0): making interface the new active one
[  245.456371][T14856] RAX: ffffffffffffffda RBX: 00007fc9a09b5fa0 RCX: 00007fc9a078ebe9
[  245.461699][T14856] RDX: 0000000000008050 RSI: 0000200000000340 RDI: 0000000000000004
[  245.462753][T14859] bond51: (slave erspan0): Enslaving as an active interface with an up link
[  245.465162][T14856] RBP: 00007fc9a0811e19 R08: 0000000000000000 R09: 0000000000000000
[  245.471487][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.474278][T14856] R13: 00007fc9a09b6038 R14: 00007fc9a09b5fa0 R15: 00007fff11e63668
[  245.477274][T14856]  </TASK>
[  245.478499][T14856] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  245.481619][T14856] CPU: 0 UID: 0 PID: 14856 Comm: syz.1.2256 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  245.486585][T14856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.489975][T14856] Call Trace:
[  245.491331][T14856]  <TASK>
[  245.492529][T14856]  dump_stack_lvl+0x99/0x250
[  245.494159][T14856]  ? __asan_memcpy+0x40/0x70
[  245.495745][T14856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.497472][T14856]  ? __pfx__printk+0x10/0x10
[  245.499076][T14856]  vpanic+0x281/0x750
[  245.500819][T14856]  ? __pfx__printk+0x10/0x10
[  245.502665][T14856]  ? __pfx_vpanic+0x10/0x10
[  245.504467][T14856]  ? is_bpf_text_address+0x292/0x2b0
[  245.506562][T14856]  panic+0xb9/0xc0
[  245.508074][T14856]  ? __pfx_panic+0x10/0x10
[  245.509968][T14856]  __warn+0x31b/0x4b0
[  245.511604][T14856]  ? rate_control_rate_init+0x64a/0x6e0
[  245.513857][T14856]  ? rate_control_rate_init+0x64a/0x6e0
[  245.516000][T14856]  report_bug+0x2be/0x4f0
[  245.517748][T14856]  ? rate_control_rate_init+0x64a/0x6e0
[  245.519885][T14856]  ? rate_control_rate_init+0x64a/0x6e0
[  245.521933][T14856]  ? rate_control_rate_init+0x64c/0x6e0
[  245.523937][T14856]  handle_bug+0x84/0x160
[  245.525622][T14856]  exc_invalid_op+0x1a/0x50
[  245.527360][T14856]  asm_exc_invalid_op+0x1a/0x20
[  245.529368][T14856] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  245.531855][T14856] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 99 8c 00 cc e8 82 09 d0 f6 90 0f 0b 90 eb e1 e8 77 09 d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  245.539199][T14856] RSP: 0018:ffffc900026cef70 EFLAGS: 00010287
[  245.541439][T14856] RAX: ffffffff8aefa219 RBX: ffff888113c44000 RCX: 0000000000080000
[  245.544267][T14856] RDX: ffffc90004021000 RSI: 000000000000038f RDI: 0000000000000390
[  245.547229][T14856] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aef9d33
[  245.550295][T14856] R10: dffffc0000000000 R11: ffffed1022788831 R12: 1ffff1102278880a
[  245.553257][T14856] R13: ffff88811a178e40 R14: 0000000000000001 R15: ffffffff8aef9d33
[  245.556215][T14856]  ? rate_control_rate_init+0x163/0x6e0
[  245.558393][T14856]  ? rate_control_rate_init+0x163/0x6e0
[  245.560704][T14856]  ? rate_control_rate_init+0x649/0x6e0
[  245.562889][T14856]  rate_control_rate_init_all_links+0x109/0x1a0
[  245.565308][T14856]  sta_apply_auth_flags+0x1c2/0x400
[  245.567334][T14856]  sta_apply_parameters+0xe4b/0x15b0
[  245.569425][T14856]  ieee80211_add_station+0x424/0x6a0
[  245.571519][T14856]  rdev_add_station+0x108/0x290
[  245.573416][T14856]  nl80211_new_station+0x1755/0x1b70
[  245.575488][T14856]  ? __pfx_nl80211_new_station+0x10/0x10
[  245.577686][T14856]  ? netdev_run_todo+0xe1d/0xea0
[  245.579643][T14856]  ? nl80211_pre_doit+0x4f1/0x930
[  245.581538][T14856]  genl_family_rcv_msg_doit+0x215/0x300
[  245.583702][T14856]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  245.586184][T14856]  ? bpf_lsm_capable+0x9/0x20
[  245.588106][T14856]  ? security_capable+0x7e/0x2e0
[  245.590089][T14856]  genl_rcv_msg+0x60e/0x790
[  245.591924][T14856]  ? __pfx_genl_rcv_msg+0x10/0x10
[  245.594015][T14856]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  245.596172][T14856]  ? __pfx_nl80211_new_station+0x10/0x10
[  245.598450][T14856]  ? __pfx_nl80211_post_doit+0x10/0x10
[  245.600588][T14856]  netlink_rcv_skb+0x208/0x470
[  245.602505][T14856]  ? __lock_acquire+0xab9/0xd20
[  245.604511][T14856]  ? __pfx_genl_rcv_msg+0x10/0x10
[  245.606599][T14856]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  245.608696][T14856]  ? down_read+0x1ad/0x2e0
[  245.610235][T14856]  genl_rcv+0x28/0x40
[  245.611816][T14856]  netlink_unicast+0x82f/0x9e0
[  245.613393][T14856]  ? __pfx_netlink_unicast+0x10/0x10
[  245.615031][T14856]  ? netlink_sendmsg+0x642/0xb30
[  245.616776][T14856]  ? skb_put+0x11b/0x210
[  245.618509][T14856]  netlink_sendmsg+0x805/0xb30
[  245.620432][T14856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.622475][T14856]  ? aa_sock_msg_perm+0xf1/0x1d0
[  245.624362][T14856]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  245.626562][T14856]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.628720][T14856]  __sock_sendmsg+0x21c/0x270
[  245.630641][T14856]  ____sys_sendmsg+0x505/0x830
[  245.632613][T14856]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.634779][T14856]  ? import_iovec+0x74/0xa0
[  245.636669][T14856]  ___sys_sendmsg+0x21f/0x2a0
[  245.638576][T14856]  ? __pfx____sys_sendmsg+0x10/0x10
[  245.640461][T14856]  ? __fget_files+0x2a/0x420
[  245.642144][T14856]  ? __fget_files+0x3a0/0x420
[  245.643827][T14856]  __x64_sys_sendmsg+0x19b/0x260
[  245.645679][T14856]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  245.647657][T14856]  ? rcu_is_watching+0x15/0xb0
[  245.649158][T14856]  ? do_syscall_64+0xbe/0x3b0
[  245.650534][T14856]  do_syscall_64+0xfa/0x3b0
[  245.652252][T14856]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.653927][T14856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.655923][T14856]  ? exc_page_fault+0x9f/0xf0
[  245.657875][T14856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.660142][T14856] RIP: 0033:0x7fc9a078ebe9
[  245.661882][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.668014][T14856] RSP: 002b:00007fc9a165b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.670693][T14856] RAX: ffffffffffffffda RBX: 00007fc9a09b5fa0 RCX: 00007fc9a078ebe9
[  245.673234][T14856] RDX: 0000000000008050 RSI: 0000200000000340 RDI: 0000000000000004
[  245.675514][T14856] RBP: 00007fc9a0811e19 R08: 0000000000000000 R09: 0000000000000000
[  245.678289][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.681292][T14856] R13: 00007fc9a09b6038 R14: 00007fc9a09b5fa0 R15: 00007fff11e63668
[  245.684271][T14856]  </TASK>
[  245.685947][T14856] Kernel Offset: disabled
[  245.687517][T14856] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:23:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000107a6 RDI=00000000000107a7 RBP=00000000000003f8 RSP=ffffc900026ce710
R8 =ffff888020840237 R9 =1ffff11004108046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d3 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc9a165b6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2560de CR3=00000001212a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=aee7e3505addb93f 484d6c6248e27751 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=acec02c9c34e2ebb fb33a31b90cbca31
XMM06=33a420d3712c6108 7e6673dcc0ea9107 XMM07=1d1ab3d630f532e3 0b53b701f9bf2dae
XMM08=e7e3505addb93f48 4d6c6248e27751b2 XMM09=0000000000000000 00007fb303c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b4075c8547a36000 RBX=ffffffff81968308 RCX=b4075c8547a36000 RDX=0000000000000001
RSI=ffffffff8d9b6ebd RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020006000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1d5c940440 CR3=0000000029f4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc9a0812e53
XMM06=0000000000000000 00007fc9a0812e4d XMM07=0000000000000000 00007fc9a0812e61
XMM08=0000000000000000 00007fc9a0812ee7 XMM09=0000000000000000 00007fc9a0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
