last executing test programs:

2.24928074s ago: executing program 0 (id=660):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0x2, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x70, 0x0, [{@local}, {@loopback}, {@local}, {@dev}, {@multicast1}, {@dev}, {@broadcast}]}})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {0x2}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0xda74, 0x7, 0x6, {0x10, 0x2, 0x0, 0xfff9, 0x3}, {0x6, 0x0, 0x8, 0x0, 0x7, 0x8}, 0x3, 0x1, 0x101}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000080)=0x9, 0x4)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0)
ioctl(r8, 0x4574f538, &(0x7f0000001640)="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")
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r11, @ANYRES16=r8, @ANYRES32=r12], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r14=>0x0})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)

2.138217023s ago: executing program 0 (id=662):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x44)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@jmp={0x5, 0x1, 0x0, 0x4, 0x0, 0x10, 0xffffffffffffffff}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x3f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x600000}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x6, 0xd4, &(0x7f00000006c0)=""/212, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
close(r4) (async)
close(r4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
close(r7) (async)
close(r7)

1.993208744s ago: executing program 0 (id=666):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="007be35a60771e45f8cf08c4744f0f3c690b0de25a7b4fb6c9699bb4c4984ca1d8faf841708de4765999c234889d3e486a51e046e973acb25324d07e21c2652b349205915caafd42be67484f4d74a7b1410d59f1962390c8271d15e2004dfa3a755775e9dbb30e92428357550ff8d5d69c1a7c106f68903bfc6e46865a5cf30309c9fed3314e41a8b957a6c1cec0daa999d70831289d1a95", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250500000014000300fc0100000000000000000000000000011400060076657468305f746f5f6261746164760014000300fe8800000000000000000000000001011400030000000000000000000000ffffe000000114000300fe80000000000000000000000000003d"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8055)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

1.905383027s ago: executing program 0 (id=667):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0x4, 0x2, 0x200, 0x47, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x40, 0x10, 0x3, 0x5}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xd880}, 0x8080)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={<r6=>0x0, @private, @loopback}, &(0x7f00000004c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', r6, 0x0, 0x8, 0x9a, 0xfffffff8, {{0xd, 0x4, 0x3, 0x2, 0x34, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @private=0xa010102, {[@ra={0x94, 0x4}, @end, @timestamp={0x44, 0x18, 0xb4, 0x0, 0x5, [0xe3b0, 0x3, 0x2, 0x6, 0x3]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x100, r8, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffe387}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x323}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x15b5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6e4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000000)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f00000007c0), &(0x7f0000000800)=0xc)
socket$igmp(0x2, 0x3, 0x2)
r9 = socket$alg(0x26, 0x5, 0x0)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$XFS_IOC_FSGEOMETRY_V4(r9, 0x8070587c, &(0x7f0000000840))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0))
r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000940)='memory.swap.current\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r10, 0xc0109428, &(0x7f0000000980)={0x1, 0xc})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f00000009c0)=0x1, 0x4)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r13, 0x6, 0x3, &(0x7f0000000a00)=0x5, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x40000)
setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000b40)=0xf, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000020)

1.874707958s ago: executing program 0 (id=669):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000080)=0x8000000d, 0x4)
recvmmsg(r2, &(0x7f0000001040)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/118, 0x76}], 0x5, &(0x7f0000000900)=""/255, 0xff}, 0x1}, {{&(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000b40)=""/6, 0x6}], 0x2, &(0x7f0000000bc0)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c00)=""/119, 0x77}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)=""/79, 0x4f}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/94, 0x5e}, {&(0x7f0000000e80)=""/40, 0x28}, {&(0x7f0000000ec0)=""/104, 0x68}, {&(0x7f0000000f40)=""/1, 0x1}], 0x9}, 0x2}], 0x3, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4], 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000080)=0x8000000d, 0x4) (async)
recvmmsg(r2, &(0x7f0000001040)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/89, 0x59}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/118, 0x76}], 0x5, &(0x7f0000000900)=""/255, 0xff}, 0x1}, {{&(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000b40)=""/6, 0x6}], 0x2, &(0x7f0000000bc0)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000c00)=""/119, 0x77}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)=""/79, 0x4f}, {&(0x7f0000000d80)=""/110, 0x6e}, {&(0x7f0000000e00)=""/94, 0x5e}, {&(0x7f0000000e80)=""/40, 0x28}, {&(0x7f0000000ec0)=""/104, 0x68}, {&(0x7f0000000f40)=""/1, 0x1}], 0x9}, 0x2}], 0x3, 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4], 0x44}}, 0x0) (async)

1.739190236s ago: executing program 0 (id=672):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x2000000)
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ffff6d000d"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
write(r1, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r9 = accept(r8, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0)
recvmsg(r9, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syz_tun\x00', 0x800})
r10 = socket(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x4000040)
r13 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

667.820846ms ago: executing program 1 (id=691):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2503000000050002000300000018000180140002ab155bd8e0ead7740000000000000000000500030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
close(r2)
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000400)=0x6)
socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000440)=r5}, 0xfffffca9)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp, 0x2}, 0x20)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockname(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4bd7367782f1f926a9f596da6d46644fe8867c09700ed9a95c629cdfda1ba3a2b300d741bd59009222e46f9d82bdfde00278156376e14ab7cfc218f844e6a74a64fa0eaa40c911e709b5181fcfa73188816c1e15db39517abaf0230039c7d8a583d56fb82be8786a2265678713e5f2d6c5aab84450c47fd653af4bb567ebaea7c5adb32a26cac7231a0bdaa1ddce760db0ded44ff65984915eab1733dda499d9dbdd66659c3c3807c3750c32de33f1f6ff87323f14ec51443cfe9100351fcd8ed16f58", @ANYRES16=r9, @ANYBLOB="3107000000000000000038000000080001007063690057000200303030303a30303a31302e300000007464657673696d0000000f0002006e657464657673696d300000080003000100"/89], 0x60}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0xf978fb0bdd18aa78}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x189200, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

568.874938ms ago: executing program 2 (id=692):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xe27d, @mcast1, 0x1}, 0x1c) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)="eb3051a0b459b084a67a78b371c36a076ebb1d1f9438dd0fffcda2df92de14f5878d14ec4c73b36c50780d6d6db97e2d3461bfe92ddf8cc1b6b2516c03613dc92006ec7837d9ef271616fda196cc00723e6a41ab047dbaedb88e3d38d1c206227cd43734", &(0x7f0000000740), 0x20075, r2}, 0x38) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket(0x2, 0x80805, 0x0) (async)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) (async, rerun: 64)
ioctl$int_in(r6, 0x5421, &(0x7f0000000440)=0x6) (rerun: 64)
socket$pptp(0x18, 0x1, 0x2)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x9, &(0x7f0000000500)="7c71fc9bd611642189e9ec5f19b53a424a0d1211765997817355459d23e354474191cf8939af5cf0f44df5474e4f36f69ad977e896c53fc846df71d07e2cda058911321fee8bb5a3ca5153c53554be306f69589c87e7610d3dfde2e72f770af1115d4c1363731495e13754b76a8a36f993d2955de51d143c23331ced0c3dc426d85cfef5bca92a66ef7796e01a85b5a51487da7d224db07d9a113f9d014ee9e2ada3341efcb154913b6f58103f4429d7627fba94914dd17237b41c263d8f232430078476ce6f6a4dee8221eccf169df88b5938dc62", 0xd5) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async, rerun: 64)
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async, rerun: 64)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'rose0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r10, @ANYRESHEX=r6], 0x20}}, 0x4000)
connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x40}, 0xa)

568.525804ms ago: executing program 1 (id=693):
unshare(0x20040600)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x52800, 0x4400}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

457.338172ms ago: executing program 2 (id=694):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/685, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x4}, 0x10}, 0x94)
socket(0x2, 0x3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x22, 0x803, 0x2)
r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f0000000140)='\xc7\x00', 0x400100, &(0x7f0000000280)={@_ha_fsid={[0x5, 0xffffff00]}, {0x1, 0xe373, 0x4, 0x9}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x2})
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="7000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000480012800b00010067656e6576650000380002801400070000000000000000000000000000000001050004000100000005000800000000000500030003000000050004000000000008000a00", @ANYRES32=r6], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)

456.343907ms ago: executing program 1 (id=695):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={<r2=>r1})
syz_genetlink_get_family_id$devlink(&(0x7f0000004640), r2) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004d80)={0x0}}, 0x44040) (async)
sendmsg$xdp(r2, &(0x7f0000007240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4005000}, 0x50)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) (async)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001040)}, {&(0x7f0000002180)='-', 0x1}], 0x2}}], 0x2, 0x4000000)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x0, 0x4001000, 0x4a}, 0x2c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000, '\x00', r7, r5, 0x0, 0x3}, 0x50)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async)
bind$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendmmsg$inet6(r11, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

395.246338ms ago: executing program 2 (id=696):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x2506}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r0, &(0x7f00000002c0)={@void, @val={0x1, 0x0, 0x9, 0x6, 0x16, 0xc}, @ipv4=@icmp={{0x7, 0x4, 0x0, 0x7, 0x24, 0x68, 0x0, 0xfb, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, {[@end, @generic={0x82, 0x3, '0'}, @end]}}, @address_reply={0x12, 0x0, 0x0, 0xffffffff}}}, 0x2e)

394.061658ms ago: executing program 1 (id=697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r3, 0x801, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x1c}}, 0x4000800)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r3, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x800)

299.817792ms ago: executing program 2 (id=698):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r2], 0x5c}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

297.725488ms ago: executing program 1 (id=699):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="7105098b2490757ce662ad"], 0x10)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4}]}, 0x28}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4094}, 0x44080)
ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000100)={0x21, 0x5, 0x4, 0xb, 0xa})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x900)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

176.211086ms ago: executing program 2 (id=700):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async)
getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r3, @ANYBLOB="0800ff0000000000c727a2c50b22e0229b15116d68f27fd61be7cf693821aa0a3e49052c3bc51c401c5a16e1d347d8e2277e00005d"], 0x20}}, 0x40000c0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gre={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfffd}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)

79.717841ms ago: executing program 2 (id=701):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040810}, 0x4)
r3 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x2000, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x200, 0x0, 0x3fffffc, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x28000000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6(0xa, 0x805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040810}, 0x4) (async)
socket(0x2, 0x3, 0xff) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x2000, 0x4) (async)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
socket(0x400000000010, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x200, 0x0, 0x3fffffc, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x28000000) (async)

0s ago: executing program 1 (id=702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xbfff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x102)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x67476000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10a0001}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x712, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2008040)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40233' (ED25519) to the list of known hosts.
syzkaller login: [   56.826453][ T5791] cgroup: Unknown subsys name 'net'
[   56.918582][ T5791] cgroup: Unknown subsys name 'cpuset'
[   56.923944][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.862620][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.332634][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.336551][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.339094][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.341859][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.346978][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.352885][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.365402][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.368074][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.370320][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.374369][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.377233][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.383837][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.386887][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.389702][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.392694][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.691920][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   63.706058][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   63.724724][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   63.856754][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.859411][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.862153][ T5813] bridge_slave_0: entered allmulticast mode
[   63.865839][ T5813] bridge_slave_0: entered promiscuous mode
[   63.870034][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.872230][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.875522][ T5813] bridge_slave_1: entered allmulticast mode
[   63.878242][ T5813] bridge_slave_1: entered promiscuous mode
[   63.889174][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.891404][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.895027][ T5812] bridge_slave_0: entered allmulticast mode
[   63.898025][ T5812] bridge_slave_0: entered promiscuous mode
[   63.901448][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.903635][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.906116][ T5812] bridge_slave_1: entered allmulticast mode
[   63.908972][ T5812] bridge_slave_1: entered promiscuous mode
[   63.918805][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.920968][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.923145][ T5808] bridge_slave_0: entered allmulticast mode
[   63.926363][ T5808] bridge_slave_0: entered promiscuous mode
[   63.929869][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.932069][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.934235][ T5808] bridge_slave_1: entered allmulticast mode
[   63.937519][ T5808] bridge_slave_1: entered promiscuous mode
[   63.958774][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.988605][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.992906][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.999231][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.011497][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.032148][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.036961][ T5808] team0: Port device team_slave_0 added
[   64.058511][ T5808] team0: Port device team_slave_1 added
[   64.069498][ T5813] team0: Port device team_slave_0 added
[   64.072747][ T5812] team0: Port device team_slave_0 added
[   64.088914][ T5813] team0: Port device team_slave_1 added
[   64.092305][ T5812] team0: Port device team_slave_1 added
[   64.126223][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.128208][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.135672][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.155688][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.158003][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.166509][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.170541][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.172581][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.180728][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.184921][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.186986][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.195278][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.221380][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.223875][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.233019][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.237304][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.239926][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.249610][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.262583][ T5808] hsr_slave_0: entered promiscuous mode
[   64.265541][ T5808] hsr_slave_1: entered promiscuous mode
[   64.330571][ T5813] hsr_slave_0: entered promiscuous mode
[   64.332752][ T5813] hsr_slave_1: entered promiscuous mode
[   64.335249][ T5813] debugfs: 'hsr0' already exists in 'hsr'
[   64.336989][ T5813] Cannot create hsr debugfs directory
[   64.347124][ T5812] hsr_slave_0: entered promiscuous mode
[   64.349604][ T5812] hsr_slave_1: entered promiscuous mode
[   64.351991][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   64.353827][ T5812] Cannot create hsr debugfs directory
[   64.575026][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.583077][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.588146][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.599585][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.636045][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.645454][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.650649][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.653273][ T5808] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.656277][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.658818][ T5808] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.665879][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.671918][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.727009][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.730323][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.748077][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.754018][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.760274][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.769572][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.820255][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.852989][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   64.869855][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.876870][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.879022][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.893192][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.895458][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.939324][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   64.957098][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.959898][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.966775][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.980335][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.983095][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.001327][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   65.030372][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.032633][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.046788][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.048924][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.064775][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.103691][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.110494][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.160490][ T5808] veth0_vlan: entered promiscuous mode
[   65.177763][ T5808] veth1_vlan: entered promiscuous mode
[   65.211403][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.237166][ T5808] veth0_macvtap: entered promiscuous mode
[   65.248583][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.252154][ T5808] veth1_macvtap: entered promiscuous mode
[   65.278741][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.298464][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.312506][ T5812] veth0_vlan: entered promiscuous mode
[   65.328978][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.334040][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.342645][ T5812] veth1_vlan: entered promiscuous mode
[   65.347639][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.357039][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.369254][ T5813] veth0_vlan: entered promiscuous mode
[   65.382813][ T5813] veth1_vlan: entered promiscuous mode
[   65.436923][ T5817] Bluetooth: hci1: command tx timeout
[   65.436966][ T5816] Bluetooth: hci0: command tx timeout
[   65.440591][ T5812] veth0_macvtap: entered promiscuous mode
[   65.441011][ T5811] Bluetooth: hci2: command tx timeout
[   65.448195][ T5813] veth0_macvtap: entered promiscuous mode
[   65.464703][ T5812] veth1_macvtap: entered promiscuous mode
[   65.468655][ T5813] veth1_macvtap: entered promiscuous mode
[   65.487144][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.489653][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.506925][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.524813][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.537455][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.542416][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.545878][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.549998][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.562812][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.568013][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.572539][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.589262][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.600337][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.612499][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.625658][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.632888][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.650733][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.671886][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.682328][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.720316][ T5878] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   65.731698][ T5879] 8021q: VLANs not supported on gre0
[   65.731841][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.734149][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.739843][ T5878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.741100][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.788208][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.791100][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.865849][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.868711][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.900823][ T5884] bond1: entered promiscuous mode
[   65.902844][ T5884] bond1: entered allmulticast mode
[   65.910441][ T5884] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.058855][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5'.
[   66.113210][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5'.
[   66.120970][ T5895] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   66.155955][ T5895] Zero length message leads to an empty skb
[   66.290650][ T5899] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   66.420363][ T5864] IPVS: starting estimator thread 0...
[   66.423189][ T5902] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   66.423425][ T5903] IPVS: sed: FWM 3 0x00000003 - no destination available
[   66.429453][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[   66.504874][ T5905] IPVS: using max 47 ests per chain, 112800 per kthread
[   66.669324][ T5910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   66.782100][ T5918] syzkaller0: entered promiscuous mode
[   66.784068][ T5918] syzkaller0: entered allmulticast mode
[   66.791530][ T5918] netlink: 'syz.2.11': attribute type 1 has an invalid length.
[   66.793824][ T5918] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11'.
[   66.802191][ T5918] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11'.
[   66.930858][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   66.962963][ T5929] pim6reg: entered allmulticast mode
[   66.968405][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.222216][ T5944] syzkaller0: entered promiscuous mode
[   67.223995][ T5944] syzkaller0: entered allmulticast mode
[   67.350493][ T5947] netlink: 'syz.1.19': attribute type 4 has an invalid length.
[   67.353486][ T5947] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19'.
[   67.514520][ T5816] Bluetooth: hci0: command tx timeout
[   67.516414][ T5811] Bluetooth: hci2: command tx timeout
[   67.524883][ T5811] Bluetooth: hci1: command tx timeout
[   68.323607][ T5949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20'.
[   68.327573][ T5949] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[   68.428472][ T5954] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   68.457735][ T5954] tipc: Started in network mode
[   68.459527][ T5954] tipc: Node identity cea6a7945b16, cluster identity 4711
[   68.462830][ T5954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.469515][ T5954] syzkaller0: entered promiscuous mode
[   68.471660][ T5954] syzkaller0: entered allmulticast mode
[   68.486001][ T5954] tipc: Resetting bearer <eth:syzkaller0>
[   68.537495][ T5953] tipc: Resetting bearer <eth:syzkaller0>
[   68.561709][ T5953] tipc: Disabling bearer <eth:syzkaller0>
[   68.616365][ T5961] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   68.646098][ T5956] veth3: entered promiscuous mode
[   68.648289][ T5956] batman_adv: batadv0: Adding interface: veth3
[   68.650313][ T5956] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.658462][ T5956] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active
[   68.700411][ T5965] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   68.719604][ T5965] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.743032][ T5965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.761420][ T5968] netlink: 'syz.2.26': attribute type 13 has an invalid length.
[   68.771816][ T5968] netlink: 'syz.2.26': attribute type 17 has an invalid length.
[   68.903906][ T5968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.963394][ T5980] erspan0: entered promiscuous mode
[   68.967742][ T5980] macsec1: entered promiscuous mode
[   68.970932][ T5980] erspan0: left promiscuous mode
[   69.046911][ T5982] syzkaller1: entered allmulticast mode
[   69.499071][ T5995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.594488][ T5816] Bluetooth: hci2: command tx timeout
[   69.595448][ T5817] Bluetooth: hci0: command tx timeout
[   69.599730][ T5811] Bluetooth: hci1: command tx timeout
[   69.611305][ T5995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.679540][ T5995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.734130][ T5995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.851304][ T5997] bridge1: entered allmulticast mode
[   69.866513][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.874989][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.882922][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.896936][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.971245][ T5999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.005460][ T6000] tipc: Disabling bearer <eth:syzkaller0>
[   70.066393][ T6005] netlink: 'syz.0.34': attribute type 13 has an invalid length.
[   70.093596][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.096813][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.170625][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.177339][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.299398][ T5981] Set syz1 is full, maxelem 65536 reached
[   70.309127][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.312787][ T6005] 8021q: adding VLAN 0 to HW filter on device team0
[   70.319293][ T6005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.336350][ T5875] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.339421][ T5875] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.341882][ T5875] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.366025][ T5875] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.909944][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.912388][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.916159][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.918499][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.674494][ T5811] Bluetooth: hci1: command tx timeout
[   71.676766][ T5816] Bluetooth: hci2: command tx timeout
[   71.676820][ T5817] Bluetooth: hci0: command tx timeout
[   71.762657][ T6013] Set syz1 is full, maxelem 65536 reached
[   71.854539][ T6036] validate_nla: 1 callbacks suppressed
[   71.854570][ T6036] netlink: 'syz.0.41': attribute type 1 has an invalid length.
[   71.963043][ T6036] macvlan2: entered promiscuous mode
[   71.965148][ T6036] macvlan2: entered allmulticast mode
[   72.043154][ T6038] netlink: 'syz.0.42': attribute type 13 has an invalid length.
[   72.046473][ T6038] netlink: 'syz.0.42': attribute type 17 has an invalid length.
[   72.050209][ T6039] bond0: (slave bond_slave_1): Releasing backup interface
[   72.060371][ T6038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.758655][ T6021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.027100][ T6064] macvtap0: entered promiscuous mode
[   74.069740][ T6068] __nla_validate_parse: 10 callbacks suppressed
[   74.069754][ T6068] netlink: 76 bytes leftover after parsing attributes in process `syz.1.50'.
[   74.075247][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.49'.
[   74.079627][ T6068] netlink: 'syz.1.50': attribute type 10 has an invalid length.
[   74.082324][ T6068] syz_tun: entered promiscuous mode
[   74.090078][ T6068] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   74.092998][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'.
[   74.107805][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.49'.
[   74.112642][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   74.181332][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'.
[   74.185048][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'.
[   74.259425][ T6087] syzkaller1: entered promiscuous mode
[   74.261080][ T6087] syzkaller1: entered allmulticast mode
[   74.622041][ T6098] syzkaller0: entered promiscuous mode
[   74.627443][ T6098] syzkaller0: entered allmulticast mode
[   75.054615][ T6084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   75.061225][ T6106] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   75.065027][ T6106] netlink: 88 bytes leftover after parsing attributes in process `syz.1.60'.
[   75.067720][ T6106] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   75.070066][ T6106] netlink: 638 bytes leftover after parsing attributes in process `syz.1.60'.
[   75.072852][ T6106] netlink: 1 bytes leftover after parsing attributes in process `syz.1.60'.
[   75.119573][ T6110] netlink: 'syz.1.62': attribute type 11 has an invalid length.
[   75.122631][ T6110] netlink: 'syz.1.62': attribute type 4 has an invalid length.
[   75.125678][ T6110] netlink: 'syz.1.62': attribute type 15 has an invalid length.
[   75.246915][ T6118] netlink: 'syz.2.64': attribute type 1 has an invalid length.
[   75.247418][ T6117] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   75.306550][ T6120] syzkaller0: entered promiscuous mode
[   75.315795][ T6120] syzkaller0: entered allmulticast mode
[   75.325979][ T6121] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   75.376498][ T6124] bond1: entered promiscuous mode
[   75.378521][ T6124] bond1: entered allmulticast mode
[   75.380923][ T6124] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.467809][ T6130] syz_tun: entered allmulticast mode
[   75.485760][ T6130] dvmrp8: entered allmulticast mode
[   75.496965][ T6129] syz_tun: left allmulticast mode
[   75.802451][ T6153] dvmrp6: entered allmulticast mode
[   75.808031][ T6153] xt_connbytes: Forcing CT accounting to be enabled
[   75.865863][ T6155] block nbd2: not configured, cannot reconfigure
[   76.134677][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.677522][ T6189] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.736243][ T6189] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.799929][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   76.801964][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   76.820738][ T6189] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.889816][ T6189] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.969220][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.979693][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.990553][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.001006][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.527119][ T6204] validate_nla: 12 callbacks suppressed
[   77.527137][ T6204] netlink: 'syz.2.95': attribute type 4 has an invalid length.
[   77.586968][ T6208] erspan0: entered promiscuous mode
[   77.668183][ T6212] bond1 (unregistering): Released all slaves
[   78.096233][ T6219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.149232][ T6221] x_tables: duplicate underflow at hook 2
[   78.431908][ T6238] syzkaller0: entered promiscuous mode
[   78.433715][ T6238] syzkaller0: entered allmulticast mode
[   78.494421][ T6240] netlink: 'syz.0.107': attribute type 14 has an invalid length.
[   78.502930][ T6240] syzkaller1: entered promiscuous mode
[   78.504857][ T6240] syzkaller1: entered allmulticast mode
[   78.508709][ T6240] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   78.523636][ T6240] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.601748][ T6245] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   78.618903][ T6245] bond1: entered promiscuous mode
[   78.620723][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.632560][ T6245] bond1: entered allmulticast mode
[   78.670996][ T6245] bond1: (slave bridge1): making interface the new active one
[   78.674534][ T6245] bridge1: entered promiscuous mode
[   78.676743][ T6245] bridge1: entered allmulticast mode
[   78.680317][ T6245] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   78.803713][ T6252] syzkaller0: entered promiscuous mode
[   78.808942][ T6252] syzkaller0: entered allmulticast mode
[   78.968225][ T6260] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[   78.984419][ T6260] bond2: entered promiscuous mode
[   78.986330][ T6260] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.017708][ T6260] vlan2: entered allmulticast mode
[   79.019391][ T6260] bond2: entered allmulticast mode
[   79.032306][ T6260] bond2: (slave bridge2): making interface the new active one
[   79.037143][ T6260] bridge2: entered promiscuous mode
[   79.038861][ T6260] bridge2: entered allmulticast mode
[   79.041465][ T6260] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   79.107182][ T6267] batman_adv: batadv0: Adding interface: macvtap1
[   79.109106][ T6267] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.117812][ T6267] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[   79.194960][ T6277] syzkaller1: entered promiscuous mode
[   79.196653][ T6277] syzkaller1: entered allmulticast mode
[   79.209065][ T6277] netlink: 'syz.0.120': attribute type 13 has an invalid length.
[   79.211390][ T6277] netlink: 'syz.0.120': attribute type 17 has an invalid length.
[   79.231580][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.234471][ T6277] 8021q: adding VLAN 0 to HW filter on device team0
[   79.239109][ T6277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.040565][ T6285] __nla_validate_parse: 33 callbacks suppressed
[   80.040576][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'.
[   80.317578][ T6301] netlink: 'syz.2.127': attribute type 1 has an invalid length.
[   80.353830][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'.
[   80.354551][ T6301] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.389361][ T6301] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[   80.401840][ T6304] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.405637][ T6304] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   80.441407][ T6308] netlink: 'syz.2.129': attribute type 1 has an invalid length.
[   80.485270][ T6308] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.489909][ T6308] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   80.506064][ T6304] macvlan2: entered promiscuous mode
[   80.508014][ T6304] macvlan2: entered allmulticast mode
[   80.510064][ T6304] bond3: (slave macvlan2): Error -98 calling set_mac_address
[   80.533943][ T6310] bond4: (slave gretap1): making interface the new active one
[   80.539302][ T6310] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   80.549298][ T6308] macvlan2: entered promiscuous mode
[   80.551206][ T6308] macvlan2: entered allmulticast mode
[   80.553264][ T6308] bond4: entered promiscuous mode
[   80.555038][ T6308] gretap1: entered promiscuous mode
[   80.557377][ T6308] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.561630][ T6308] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   80.566672][ T6308] bond4: left promiscuous mode
[   80.569808][ T6308] gretap1: left promiscuous mode
[   80.620890][ T6308] syz.2.129 (6308) used greatest stack depth: 17800 bytes left
[   80.698083][ T6313] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.701018][ T6313] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.752621][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.762693][ T6313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.888923][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.892543][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.903363][ T6322] bridge2: entered promiscuous mode
[   80.911748][ T6322] bridge2: entered allmulticast mode
[   80.919030][ T6322] team0: Port device bridge2 added
[   80.927477][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.144499][ T6334] netlink: 'syz.0.136': attribute type 11 has an invalid length.
[   81.206666][ T6343] dvmrp6: entered allmulticast mode
[   81.211575][ T6343] xt_connbytes: Forcing CT accounting to be enabled
[   81.292781][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   81.297491][ T6351] netlink: 'syz.0.138': attribute type 22 has an invalid length.
[   81.299965][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   81.311762][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   81.311902][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.315486][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   81.318910][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.325783][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.332224][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.401487][ T6354] ip6gretap1: entered promiscuous mode
[   81.602153][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'.
[   81.612621][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'.
[   81.660043][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'.
[   81.665338][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'.
[   82.112831][ T6377] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   82.118264][ T6377] pim6reg1: entered promiscuous mode
[   82.119906][ T6377] pim6reg1: entered allmulticast mode
[   82.483438][ T6403] 8021q: adding VLAN 0 to HW filter on device bond5
[   82.577365][ T6403] validate_nla: 1 callbacks suppressed
[   82.577385][ T6403] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   82.583510][ T6403] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   82.586675][ T6403] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   82.589496][ T6403] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   82.592243][ T6403] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   82.596927][ T6403] netlink: 'syz.2.153': attribute type 2 has an invalid length.
[   82.624921][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv1
[   82.638014][ T6403] bond5: (slave batadv1): Enslaving as an active interface with an up link
[   82.677130][ T6413] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   82.686547][ T6416] pim6reg: entered allmulticast mode
[   82.692255][ T6415] pim6reg: left allmulticast mode
[   82.808148][ T6422] lo speed is unknown, defaulting to 1000
[   82.812615][ T6422] lo speed is unknown, defaulting to 1000
[   82.812680][ T6424] xt_hashlimit: size too large, truncated to 1048576
[   82.816545][ T6422] lo speed is unknown, defaulting to 1000
[   82.979703][ T6432] geneve3: entered promiscuous mode
[   82.979893][ T6422] infiniband sqz0: set down
[   82.985824][ T5274] lo speed is unknown, defaulting to 1000
[   82.989421][ T6422] infiniband sqz0: added lo
[   83.021310][ T6436] warning: `syz.1.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.039151][ T6436] pimreg: entered allmulticast mode
[   83.042914][ T6436] pimreg: left allmulticast mode
[   83.046281][ T6422] RDS/IB: sqz0: added
[   83.048306][ T6422] smc: adding ib device sqz0 with port count 1
[   83.050505][ T6422] smc:    ib device sqz0 port 1 has no pnetid
[   83.056849][  T781] lo speed is unknown, defaulting to 1000
[   83.059630][ T6422] lo speed is unknown, defaulting to 1000
[   83.123039][ T6438] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   83.125712][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880246eb400: rx timeout, send abort
[   83.129489][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880246eb400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[   83.135181][ T6438] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   83.137921][ T6438] netlink: 'syz.1.163': attribute type 8 has an invalid length.
[   83.142185][  T976] cfg80211: failed to load regulatory.db
[   83.217290][ T6422] lo speed is unknown, defaulting to 1000
[   83.413691][ T6452] syzkaller1: entered promiscuous mode
[   83.422843][ T6452] syzkaller1: entered allmulticast mode
[   83.474396][ T6422] lo speed is unknown, defaulting to 1000
[   83.573658][ T6463] netlink: 'syz.1.171': attribute type 10 has an invalid length.
[   83.696910][ T6467] bond4: entered promiscuous mode
[   83.698865][ T6467] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.717199][ T6467] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   83.728251][ T6467] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   83.743336][ T6467] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   83.786459][ T6473] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   83.816611][ T6475] ipvlan1: entered promiscuous mode
[   84.012102][ T6494] bond6: entered promiscuous mode
[   84.015620][ T6494] 8021q: adding VLAN 0 to HW filter on device bond6
[   84.095359][ T6499] bond7 (unregistering): Released all slaves
[   84.355617][ T6520] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[   84.563586][ T6537] syzkaller0: entered promiscuous mode
[   84.565495][ T6537] syzkaller0: entered allmulticast mode
[   85.597344][ T6553] __nla_validate_parse: 12 callbacks suppressed
[   85.597367][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'.
[   85.607525][ T6553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.672817][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'.
[   85.694166][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'.
[   85.778452][ T6560] lo speed is unknown, defaulting to 1000
[   86.012740][ T6577] netlink: 14 bytes leftover after parsing attributes in process `syz.0.192'.
[   86.056907][ T6577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.079822][ T6577] bond0 (unregistering): Released all slaves
[   86.371747][ T6592] bond2: (slave dummy0): making interface the new active one
[   86.378534][ T6592] bond2: (slave dummy0): Enslaving as an active interface with an up link
[   86.386055][ T6592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.194'.
[   86.388909][ T6592] dummy0: entered promiscuous mode
[   86.391419][ T6592] bond2: (slave dummy0): Releasing active interface
[   86.402130][ T6596] netlink: 76 bytes leftover after parsing attributes in process `syz.0.195'.
[   86.471839][ T6596] tc action pedit 'at' offset 6 out of bounds
[   86.568975][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   86.675732][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   86.685554][ T6610] ip6tnl2: entered allmulticast mode
[   86.687871][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   86.722966][ T6613] 8021q: adding VLAN 0 to HW filter on device bond7
[   86.736017][ T6617] pim6reg: entered allmulticast mode
[   86.801094][ T6622] netlink: 52 bytes leftover after parsing attributes in process `syz.2.203'.
[   86.855569][ T6622] hsr_slave_1 (unregistering): left promiscuous mode
[   86.871145][ T6626] syzkaller0: entered promiscuous mode
[   86.873253][ T6626] syzkaller0: entered allmulticast mode
[   87.043460][ T6650] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   87.222359][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.232660][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.240943][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.264133][ T6668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.273979][ T6668] syzkaller0: entered promiscuous mode
[   87.280362][ T6668] syzkaller0: entered allmulticast mode
[   87.292624][ T6670] lo speed is unknown, defaulting to 1000
[   87.318940][ T6668] tipc: Resetting bearer <eth:syzkaller0>
[   87.328586][ T6666] tipc: Resetting bearer <eth:syzkaller0>
[   87.366359][ T6666] tipc: Disabling bearer <eth:syzkaller0>
[   87.413105][ T6679] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003
[   87.448751][ T6679] raw_sendmsg: syz.2.214 forgot to set AF_INET. Fix it!
[   87.500788][ T6684] lo speed is unknown, defaulting to 1000
[   87.771727][ T6689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.980855][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.093798][ T6712] validate_nla: 6 callbacks suppressed
[   88.093814][ T6712] netlink: 'syz.1.220': attribute type 1 has an invalid length.
[   88.303610][ T6727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.308873][ T6727] syzkaller0: entered promiscuous mode
[   88.311583][ T6727] syzkaller0: entered allmulticast mode
[   88.320037][ T6726] tipc: Resetting bearer <eth:syzkaller0>
[   88.330180][ T6726] tipc: Disabling bearer <eth:syzkaller0>
[   88.494557][ T6731] veth0: entered promiscuous mode
[   88.613871][ T6729] veth0: left promiscuous mode
[   88.667172][ T6733] vlan2: entered allmulticast mode
[   88.668977][ T6733] macvtap0: entered allmulticast mode
[   88.670663][ T6733] veth0_macvtap: entered allmulticast mode
[   88.740665][ T6738] netlink: 'syz.1.227': attribute type 61 has an invalid length.
[   88.789896][ T6738] bond3: option arp_all_targets: invalid value (129)
[   88.795028][ T6738] bond3 (unregistering): Released all slaves
[   88.893138][ T6746] bond0: entered promiscuous mode
[   88.902034][ T6746] batadv0: entered promiscuous mode
[   88.909583][ T6746] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   88.922726][ T6746] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   88.929498][ T6746] 8021q: adding VLAN 0 to HW filter on device hsr1
[   88.935463][ T6746] bond0: left promiscuous mode
[   88.938471][ T6746] batadv0: left promiscuous mode
[   89.002076][ T6716] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   89.032715][ T6751] netlink: 'syz.2.230': attribute type 1 has an invalid length.
[   89.053893][ T6751] 8021q: adding VLAN 0 to HW filter on device bond8
[   89.069388][ T6751] veth7: entered promiscuous mode
[   89.073379][ T6751] bond8: (slave veth7): Enslaving as an active interface with an up link
[   89.126792][ T6754] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   89.133021][ T6756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.258960][ T6758] bond0: (slave bond_slave_1): Releasing backup interface
[   89.337725][ T6773] hsr0: entered promiscuous mode
[   89.363704][ T6773] hsr0: left promiscuous mode
[   89.922562][ T6820] tipc: Started in network mode
[   89.924214][ T6820] tipc: Node identity fa987b528972, cluster identity 4711
[   89.928939][ T6820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.931078][ T6819] pimreg1: renamed from bridge_slave_1 (while UP)
[   89.940975][ T6819] bridge0: port 2(pimreg1) entered disabled state
[   89.943683][ T6820] syzkaller0: entered promiscuous mode
[   89.946167][ T6820] syzkaller0: entered allmulticast mode
[   89.960447][ T6820] tipc: Resetting bearer <eth:syzkaller0>
[   89.979147][ T6818] tipc: Resetting bearer <eth:syzkaller0>
[   89.991540][ T6818] tipc: Disabling bearer <eth:syzkaller0>
[   90.004980][ T6822] bridge5: entered promiscuous mode
[   90.007108][ T6822] bridge5: entered allmulticast mode
[   90.011833][ T6822] team0: Port device bridge5 added
[   90.016373][ T6822] bridge0: port 3(team0) entered blocking state
[   90.019360][ T6822] bridge0: port 3(team0) entered disabled state
[   90.022615][ T6822] team0: entered allmulticast mode
[   90.024971][ T6822] team_slave_0: entered allmulticast mode
[   90.026975][ T6822] team_slave_1: entered allmulticast mode
[   90.030405][ T6822] team0: entered promiscuous mode
[   90.032207][ T6822] team_slave_0: entered promiscuous mode
[   90.045855][ T6822] team_slave_1: entered promiscuous mode
[   90.055204][ T6822] bridge0: port 3(team0) entered blocking state
[   90.057353][ T6822] bridge0: port 3(team0) entered forwarding state
[   90.171293][ T6830] xt_hashlimit: size too large, truncated to 1048576
[   90.234746][ T5817] Bluetooth: hci0: command 0x0401 tx timeout
[   90.718326][ T6861] __nla_validate_parse: 84 callbacks suppressed
[   90.718337][ T6861] netlink: 56 bytes leftover after parsing attributes in process `syz.2.262'.
[   90.802321][ T6867] bond9: entered allmulticast mode
[   90.817427][ T6867] macvlan2: entered promiscuous mode
[   90.819003][ T6867] macvlan2: entered allmulticast mode
[   90.821073][ T6867] bond9: entered promiscuous mode
[   90.823050][ T6867] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   90.827329][ T6867] bond9: left promiscuous mode
[   90.848558][ T6863] lo speed is unknown, defaulting to 1000
[   90.983860][ T6875] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[   91.227699][ T6899] syzkaller0: entered promiscuous mode
[   91.232683][ T6899] syzkaller0: entered allmulticast mode
[   91.360639][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'.
[   92.189594][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.270'.
[   92.192341][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.270'.
[   92.236828][ T6911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.271'.
[   92.255691][ T6911] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   92.259719][ T6911] bond10 (unregistering): Released all slaves
[   92.285179][ T6913] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   92.287660][ T6914] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   92.330051][ T6917] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[   92.337420][ T6917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.273'.
[   92.343910][ T6917] netlink: 'syz.1.273': attribute type 10 has an invalid length.
[   92.367858][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'.
[   92.447002][ T6920] netlink: 'syz.2.274': attribute type 1 has an invalid length.
[   92.499752][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'.
[   92.510978][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'.
[   92.521973][ T6920] bond10: (slave bridge4): making interface the new active one
[   92.525322][ T6920] bond10: (slave bridge4): Enslaving as an active interface with an up link
[   92.619944][ T6930] netlink: 'syz.0.278': attribute type 1 has an invalid length.
[   92.653444][ T6930] 8021q: adding VLAN 0 to HW filter on device bond6
[   92.671730][ T6930] vlan2: entered promiscuous mode
[   92.674735][ T6930] bond6: entered promiscuous mode
[   92.676395][ T6930] vlan2: entered allmulticast mode
[   92.677834][ T6930] bond6: entered allmulticast mode
[   92.862397][ T6939] bond3: option lacp_active: invalid value (8)
[   92.887006][ T6939] bond3 (unregistering): Released all slaves
[   92.963121][ T6951] xfrm0: entered promiscuous mode
[   92.964943][ T6951] xfrm0: entered allmulticast mode
[   93.011006][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.285'.
[   93.035402][ T6959] netlink: 'syz.1.285': attribute type 17 has an invalid length.
[   93.134687][ T6974] bridge0: port 3(team0) entered disabled state
[   93.137339][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.165642][ T6970] bond11: entered promiscuous mode
[   93.167210][ T6970] bond11: entered allmulticast mode
[   93.169118][ T6970] 8021q: adding VLAN 0 to HW filter on device bond11
[   93.172031][ T6974] bridge0: port 3(team0) entered blocking state
[   93.173953][ T6974] bridge0: port 3(team0) entered forwarding state
[   93.176347][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.178429][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.193837][ T6974] bridge0: port 3(team0) entered disabled state
[   93.196599][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.299791][ T6983] lo speed is unknown, defaulting to 1000
[   93.305846][ T6995] netlink: 'syz.2.293': attribute type 4 has an invalid length.
[   93.323412][ T6995] netlink: 'syz.2.293': attribute type 4 has an invalid length.
[   93.338024][ T5847] lo speed is unknown, defaulting to 1000
[   93.340443][ T5847] sqz0: Port: 1 Link ACTIVE
[   93.355662][ T5847] lo speed is unknown, defaulting to 1000
[   93.370322][ T6995] tipc: Started in network mode
[   93.374440][ T6995] tipc: Node identity 8a4fa2e3b9ca, cluster identity 4711
[   93.377450][ T6995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.382440][ T6995] syzkaller0: entered promiscuous mode
[   93.395369][ T6995] syzkaller0: entered allmulticast mode
[   93.413275][ T6993] tipc: Resetting bearer <eth:syzkaller0>
[   93.423719][ T6993] tipc: Disabling bearer <eth:syzkaller0>
[   93.428760][ T6987] lo speed is unknown, defaulting to 1000
[   93.502510][ T7000] block nbd1: not configured, cannot reconfigure
[   93.510616][ T7000] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   94.068182][ T7021] netlink: 'syz.0.299': attribute type 8 has an invalid length.
[   96.603828][ T7008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.607028][ T7018] __nla_validate_parse: 10 callbacks suppressed
[   96.607038][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   96.679167][ T7018] ieee80211 phy18: Failed to add default virtual iface
[   96.735752][ T7032] netlink: 'syz.1.300': attribute type 4 has an invalid length.
[   96.743422][ T7035] netlink: 'syz.2.301': attribute type 9 has an invalid length.
[   96.792049][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'.
[   96.798348][ T7043] netlink: 15 bytes leftover after parsing attributes in process `syz.2.301'.
[   96.836679][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.304'.
[   96.897476][ T7050] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.911360][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'.
[   96.983188][ T7055] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[   97.018739][ T7055] macvtap1: entered promiscuous mode
[   97.021132][ T7055] macvtap1: entered allmulticast mode
[   97.022885][ T7060] netlink: 176 bytes leftover after parsing attributes in process `syz.0.308'.
[   97.026001][ T7055] veth1_vlan: entered allmulticast mode
[   97.029370][ T7060] netlink: 'syz.0.308': attribute type 1 has an invalid length.
[   97.037564][ T7055] macvtap2: entered promiscuous mode
[   97.039244][ T7055] macvtap2: entered allmulticast mode
[   97.083973][ T7062] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[   97.105458][ T7062] 8021q: adding VLAN 0 to HW filter on device bond7
[   97.187124][ T7068] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   97.246178][ T7068] 8021q: adding VLAN 0 to HW filter on device bond9
[   97.250268][ T7068] bond8: (slave bond9): making interface the new active one
[   97.252887][ T7068] bond8: (slave bond9): Enslaving as an active interface with an up link
[   97.289667][ T7068] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[   97.313338][ T7075] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.359718][ T7078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.314'.
[   97.455816][ T7088] bond10: entered promiscuous mode
[   97.458220][ T7088] 8021q: adding VLAN 0 to HW filter on device bond10
[   97.461928][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   97.477977][ T7087] 8021q: adding VLAN 0 to HW filter on device bond10
[   97.481004][ T7087] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   97.485334][ T7087] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   97.492289][ T7087] bond10: (slave ip6gre1): making interface the new active one
[   97.495777][ T7087] ip6gre1: entered promiscuous mode
[   97.499035][ T7087] bond10: (slave ip6gre1): Enslaving as an active interface with an up link
[   97.620319][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'.
[   97.692241][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'.
[   97.712514][ T7096] bond7: Removing last ns target with arp_interval on
[   97.898039][ T7120] 8021q: adding VLAN 0 to HW filter on device bond11
[   98.009205][ T7133] bond12: entered promiscuous mode
[   98.011917][ T7133] 8021q: adding VLAN 0 to HW filter on device bond12
[   98.035653][ T7132] 8021q: adding VLAN 0 to HW filter on device bond12
[   98.037870][ T7132] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[   98.040821][ T7132] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   98.048008][ T7132] bond12: (slave wireguard0): making interface the new active one
[   98.050249][ T7132] wireguard0: entered promiscuous mode
[   98.052427][ T7132] bond12: (slave wireguard0): Enslaving as an active interface with an up link
[   98.160583][ T7147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.167915][ T7143] pim6reg: left allmulticast mode
[   98.388962][ T7155] ip6gretap0: entered promiscuous mode
[   98.391170][ T7155] ip6gretap0: entered allmulticast mode
[   98.429145][ T7156] bond13: option broadcast_neighbor: invalid value (30)
[   98.433479][ T7156] bond13 (unregistering): Released all slaves
[   98.606163][ T7170] lo speed is unknown, defaulting to 1000
[   98.841102][ T7187] dvmrp6: left allmulticast mode
[   99.039301][ T7198] validate_nla: 5 callbacks suppressed
[   99.039316][ T7198] netlink: 'syz.0.341': attribute type 4 has an invalid length.
[   99.050506][ T7198] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   99.181243][ T7203] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[   99.289546][ T7209] veth59: entered allmulticast mode
[   99.553097][ T7228] lo speed is unknown, defaulting to 1000
[   99.655268][ T7240] netlink: 'syz.0.354': attribute type 1 has an invalid length.
[   99.672159][ T7240] 8021q: adding VLAN 0 to HW filter on device bond12
[   99.682596][ T7241] 8021q: adding VLAN 0 to HW filter on device bond12
[   99.685280][ T7241] bond12: (slave vcan1): The slave device specified does not support setting the MAC address
[   99.688744][ T7241] bond12: (slave vcan1): Error -95 calling set_mac_address
[   99.825401][ T7248] netlink: 'syz.0.356': attribute type 1 has an invalid length.
[   99.845810][ T7250] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[   99.865075][ T7248] bond13: entered promiscuous mode
[   99.866813][ T7248] 8021q: adding VLAN 0 to HW filter on device bond13
[   99.933124][ T7248] netlink: 'syz.0.356': attribute type 11 has an invalid length.
[  100.368245][ T7270] ip6gretap0: entered promiscuous mode
[  100.370498][ T7270] vlan3: entered promiscuous mode
[  100.613871][ T7287] vlan3: entered allmulticast mode
[  100.615735][ T7287] veth0_to_bond: entered allmulticast mode
[  100.688326][ T7295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.691848][ T7295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.695295][ T7295] bond0 (unregistering): Released all slaves
[  100.739893][ T7299] erspan0: entered promiscuous mode
[  100.741820][ T7299] macsec1: entered promiscuous mode
[  100.754832][ T7299] erspan0: left promiscuous mode
[  100.789683][ T7302] netlink: 'syz.2.372': attribute type 8 has an invalid length.
[  100.888858][ T7309] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[  100.909769][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.975377][ T7309] vlan4: entered allmulticast mode
[  100.977389][ T7309] bond0: entered allmulticast mode
[  100.988024][ T7309] bond0: (slave geneve2): making interface the new active one
[  100.990304][ T7309] geneve2: entered allmulticast mode
[  100.993291][ T7309] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  100.996679][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.999436][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.006697][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.258207][ T7341] pimreg9: entered allmulticast mode
[  101.282519][ T7341] bond13: entered promiscuous mode
[  101.286224][ T7341] bond13: entered allmulticast mode
[  101.336860][ T7350] netlink: 'syz.2.381': attribute type 13 has an invalid length.
[  101.339842][ T7350] netlink: 'syz.2.381': attribute type 17 has an invalid length.
[  101.347038][ T7350] erspan0: left promiscuous mode
[  101.358868][ T7350] 8021q: adding VLAN 0 to HW filter on device team0
[  101.361869][ T7350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.629396][ T7375] __nla_validate_parse: 34 callbacks suppressed
[  101.629407][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'.
[  101.640023][ T7375] vlan5: entered allmulticast mode
[  101.642085][ T7375] bridge0: port 3(vlan5) entered blocking state
[  101.651533][ T7375] bridge0: port 3(vlan5) entered disabled state
[  101.655616][ T7375] vlan5: entered promiscuous mode
[  101.786649][ T7385] syzkaller0: entered promiscuous mode
[  101.788197][ T7385] syzkaller0: entered allmulticast mode
[  101.833385][ T7385] hmac(sha2: entered promiscuous mode
[  103.253628][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  103.259446][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'.
[  103.283708][ T7426] bridge0: port 3(team0) entered blocking state
[  103.285770][ T7426] bridge0: port 3(team0) entered listening state
[  103.287768][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.289883][ T7426] bridge0: port 1(bridge_slave_0) entered listening state
[  103.296618][ T7426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.301217][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.395'.
[  103.312772][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'.
[  103.319278][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.326272][ T7435] vlan5 (unregistering): left promiscuous mode
[  103.328270][ T7435] bridge_slave_0 (unregistering): left promiscuous mode
[  103.330953][ T7435] bridge0: port 3(vlan5) entered disabled state
[  103.392096][ T7441] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[  103.452406][ T7441] bond15: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  103.503891][ T7441] veth7: entered promiscuous mode
[  103.508183][ T7441] bond15: (slave veth7): Enslaving as a backup interface with a down link
[  103.518310][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.398'.
[  103.525410][ T7441] 8021q: adding VLAN 0 to HW filter on device bond15
[  103.525468][   T12] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  103.600121][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[  103.641134][ T7454] netlink: 168 bytes leftover after parsing attributes in process `syz.0.401'.
[  103.646766][ T5875] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  103.701658][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'.
[  103.755925][ T7456] netlink: 41 bytes leftover after parsing attributes in process `syz.1.402'.
[  103.880583][ T7469] Driver unsupported XDP return value 0 on prog  (id 64) dev N/A, expect packet loss!
[  104.403051][ T7496] ip6gre1: entered promiscuous mode
[  104.405181][ T7496] ip6gre1: entered allmulticast mode
[  104.432512][ T7501] validate_nla: 1 callbacks suppressed
[  104.432525][ T7501] netlink: 'syz.0.414': attribute type 4 has an invalid length.
[  104.456513][ T7501] netlink: 'syz.0.414': attribute type 4 has an invalid length.
[  104.510693][ T7503] lo speed is unknown, defaulting to 1000
[  104.751730][ T7520] syzkaller0: entered allmulticast mode
[  104.754018][ T7520] syzkaller0: entered promiscuous mode
[  104.756931][ T7520] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[  104.771428][ T7520] 8021q: adding VLAN 0 to HW filter on device bond14
[  104.797103][ T7520] bond14: (slave gretap3): making interface the new active one
[  104.803267][ T7520] bond14: (slave gretap3): Enslaving as an active interface with an up link
[  104.858855][ T7523] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[  104.875750][ T7520] syzkaller0 (unregistering): left promiscuous mode
[  104.878110][ T7520] syzkaller0 (unregistering): left allmulticast mode
[  104.922696][ T7523] bond16: entered promiscuous mode
[  104.924933][ T7523] bond16: entered allmulticast mode
[  104.927318][ T7523] 8021q: adding VLAN 0 to HW filter on device bond16
[  104.936525][ T7527] erspan2: entered allmulticast mode
[  104.941491][ T7527] bond16: (slave erspan2): making interface the new active one
[  104.944035][ T7527] erspan2: entered promiscuous mode
[  104.947374][ T7527] bond16: (slave erspan2): Enslaving as an active interface with an up link
[  104.972071][ T7523] syz.0.421 (7523) used obsolete PPPIOCDETACH ioctl
[  105.079440][ T7530] bond15: entered promiscuous mode
[  105.081287][ T7530] 8021q: adding VLAN 0 to HW filter on device bond15
[  105.432997][ T7558] bridge0: port 3(team0) entered disabled state
[  105.435179][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.537607][ T7558] veth0_macvtap: left allmulticast mode
[  105.624165][ T7558] veth1_vlan: left allmulticast mode
[  105.632545][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.641321][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.648936][ T7565] lo speed is unknown, defaulting to 1000
[  105.651524][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.661763][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.743756][ T7576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  109.182281][ T7628] __nla_validate_parse: 22 callbacks suppressed
[  109.182292][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[  109.204532][ T7646] netlink: 'syz.2.449': attribute type 1 has an invalid length.
[  109.275085][ T7646] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.278538][ T7646] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  109.297245][ T7650] dvmrp0: entered allmulticast mode
[  109.337797][ T7653] macvlan2: entered promiscuous mode
[  109.339476][ T7653] macvlan2: entered allmulticast mode
[  109.341625][ T7653] bond16: entered promiscuous mode
[  109.343547][ T7653] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  109.355333][ T7653] bond16: left promiscuous mode
[  109.378023][ T7658] macvtap2: entered allmulticast mode
[  109.380321][ T7658] veth0_to_bridge: entered allmulticast mode
[  109.386329][ T7658] veth0_to_bridge: left allmulticast mode
[  109.519378][ T7664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.951080][ T7704] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.957705][ T7704] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.259591][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'.
[  110.273528][ T7729] netlink: 6975 bytes leftover after parsing attributes in process `syz.1.464'.
[  110.324700][ T7733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.327847][ T7733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.392760][ T7733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.396315][ T7733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.416273][ T7738] bond9: option arp_all_targets: invalid value (129)
[  110.419235][ T7738] bond9 (unregistering): Released all slaves
[  110.438502][ T7733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.441605][ T7733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.562037][ T5822] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.564748][ T5822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.576858][ T5822] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.579341][ T5822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.592391][ T5822] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.594998][ T5822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.602983][ T5822] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.605611][ T5822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.670792][ T7741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.468'.
[  110.706872][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  110.711893][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'.
[  110.741501][ T7746] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  110.745908][ T7746] netlink: 'syz.2.471': attribute type 1 has an invalid length.
[  110.778860][ T7746] 8021q: adding VLAN 0 to HW filter on device bond18
[  110.791381][ T7746] bond18: (slave geneve3): making interface the new active one
[  110.797281][ T7746] bond18: (slave geneve3): Enslaving as an active interface with an up link
[  110.921946][ T7759] syzkaller0: entered promiscuous mode
[  110.923562][ T7759] syzkaller0: entered allmulticast mode
[  111.221008][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'.
[  111.246562][ T7763] team1: entered promiscuous mode
[  111.248312][ T7763] team1: entered allmulticast mode
[  111.250229][ T7763] 8021q: adding VLAN 0 to HW filter on device team1
[  111.255345][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'.
[  111.276125][ T7763] team2: entered promiscuous mode
[  111.278096][ T7763] team2: entered allmulticast mode
[  111.280428][ T7763] 8021q: adding VLAN 0 to HW filter on device team2
[  113.763713][ T7749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.028252][ T7803] syzkaller0: entered promiscuous mode
[  114.029965][ T7803] syzkaller0: entered allmulticast mode
[  114.072303][ T7806] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[  114.097783][ T7806] 8021q: adding VLAN 0 to HW filter on device bond17
[  114.106122][ T7807] bond17: (slave geneve3): making interface the new active one
[  114.110095][ T7807] bond17: (slave geneve3): Enslaving as an active interface with an up link
[  114.112852][ T7524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.125153][ T7524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.141490][ T7524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.144013][ T7524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.204220][ T7815] netlink: 'syz.0.487': attribute type 10 has an invalid length.
[  114.456742][ T7844] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  114.460557][ T7845] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  114.466912][ T7843] netlink: 'syz.2.495': attribute type 21 has an invalid length.
[  114.603438][ T7865] lo speed is unknown, defaulting to 1000
[  114.733890][ T7867] lo speed is unknown, defaulting to 1000
[  115.069659][ T7883] tap0: tun_chr_ioctl cmd 1074025677
[  115.071409][ T7883] tap0: linktype set to 773
[  115.094698][ T7883] : entered promiscuous mode
[  115.172754][ T7885] geneve4: entered promiscuous mode
[  115.174620][ T7885] geneve4: entered allmulticast mode
[  115.363291][ T7890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.419692][ T7890] syzkaller0: entered promiscuous mode
[  115.421706][ T7890] syzkaller0: entered allmulticast mode
[  115.442336][ T7893] netlink: 'syz.1.505': attribute type 10 has an invalid length.
[  115.463670][ T7890] tipc: Resetting bearer <eth:syzkaller0>
[  115.471604][ T7893] dummy0: left promiscuous mode
[  115.478453][ T7893] dummy0: entered promiscuous mode
[  115.480466][ T7893] dummy0: entered allmulticast mode
[  115.483093][ T7893] team0: Port device dummy0 added
[  115.497487][ T7893] veth0: entered promiscuous mode
[  115.500265][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.505'.
[  115.542185][ T7892] veth0: left promiscuous mode
[  115.683972][ T7899] netlink: 48 bytes leftover after parsing attributes in process `syz.1.507'.
[  115.726829][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'.
[  115.769917][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'.
[  115.779718][    C0] vcan0: j1939_tp_rxtimer: 0xffff88816ee6b800: rx timeout, send abort
[  115.783228][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88816ee6b800: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  115.886664][ T7905] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.889754][ T7905] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.941448][ T7905] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.948847][ T7905] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.019894][ T7909] syzkaller0: entered promiscuous mode
[  116.021694][ T7909] syzkaller0: entered allmulticast mode
[  116.028904][ T7905] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.033181][ T7905] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.082244][ T7887] tipc: Resetting bearer <eth:syzkaller0>
[  116.096819][ T7887] tipc: Disabling bearer <eth:syzkaller0>
[  116.114568][ T7905] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  116.118439][ T7905] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.179799][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  116.221898][ T5875] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.226315][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.244915][ T5875] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.247982][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.285998][ T7919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.300447][ T5875] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.303603][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.321073][ T5875] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.326474][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.515705][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'.
[  116.763677][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.518'.
[  116.768767][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  117.052898][ T7962] syzkaller0: entered promiscuous mode
[  117.055074][ T7962] syzkaller0: entered allmulticast mode
[  118.133693][ T7969] lo speed is unknown, defaulting to 1000
[  118.395133][ T7986] netlink: 'syz.2.527': attribute type 16 has an invalid length.
[  118.397980][ T7986] netlink: 'syz.2.527': attribute type 17 has an invalid length.
[  118.575378][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'.
[  118.578008][ T7996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.528'.
[  118.607634][ T7998] xt_l2tp: v2 doesn't support IP mode
[  118.630151][ T7998] geneve4: entered promiscuous mode
[  118.856312][ T8010] xfrm1: entered allmulticast mode
[  118.971624][ T8013] nbd: must specify an index to disconnect
[  118.992426][ T8013] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[  119.087485][ T8018] netlink: 'syz.0.539': attribute type 1 has an invalid length.
[  119.104618][ T8019] bond18: entered promiscuous mode
[  119.111788][ T8019] bond18: entered allmulticast mode
[  119.118954][ T8019] 8021q: adding VLAN 0 to HW filter on device bond18
[  119.129574][ T8018] bridge6: entered promiscuous mode
[  119.131255][ T8018] bridge6: entered allmulticast mode
[  119.133177][ T8018] bond18: (slave bridge6): Enslaving as a backup interface with an up link
[  119.142456][ T8018] bridge7: entered promiscuous mode
[  119.144240][ T8018] bridge7: entered allmulticast mode
[  119.146863][ T8018] bond18: (slave bridge7): Enslaving as a backup interface with a down link
[  119.214663][   T13] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  119.253640][ T8022] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  119.256553][ T8022] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[  119.325483][ T5822] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  119.566948][ T8029] veth9: entered promiscuous mode
[  119.616018][ T8028] veth9: left promiscuous mode
[  119.858617][ T8012] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  119.860646][ T8012] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  119.879293][ T8012] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  119.881561][ T8012] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  119.890677][ T8012] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  119.892467][ T8012] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  119.899515][ T5822] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.902955][ T5822] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.927114][ T8046] bond9: entered promiscuous mode
[  119.929370][ T8046] 8021q: adding VLAN 0 to HW filter on device bond9
[  119.932185][ T5822] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.935826][ T5822] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.008744][ T8048] batman_adv: batadv0: Removing interface: macvtap1
[  120.235279][ T8062] block nbd0: server does not support multiple connections per device.
[  120.244187][ T8062] block nbd0: shutting down sockets
[  120.764360][ T8111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.767099][ T8111] syzkaller0: entered promiscuous mode
[  120.768868][ T8111] syzkaller0: entered allmulticast mode
[  120.818817][ T8111] tipc: Resetting bearer <eth:syzkaller0>
[  120.825189][ T8111] __nla_validate_parse: 12 callbacks suppressed
[  120.825199][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  120.829941][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.558'.
[  120.835471][ T8110] tipc: Resetting bearer <eth:syzkaller0>
[  120.856341][ T8110] tipc: Disabling bearer <eth:syzkaller0>
[  120.870327][ T8113] lo speed is unknown, defaulting to 1000
[  120.970617][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[  120.980081][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[  120.996951][ T8119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.560'.
[  121.098484][ T8136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.564'.
[  121.102696][ T8136] netlink: 43 bytes leftover after parsing attributes in process `syz.0.564'.
[  121.105833][ T8136] netlink: 'syz.0.564': attribute type 5 has an invalid length.
[  121.108265][ T8136] netlink: 43 bytes leftover after parsing attributes in process `syz.0.564'.
[  121.178881][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.564'.
[  121.373379][ T8153] team0: entered promiscuous mode
[  121.375593][ T8153] team_slave_0: entered promiscuous mode
[  121.378415][ T8153] team_slave_1: entered promiscuous mode
[  121.383126][ T8153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  121.442650][ T8155] netlink: 'syz.0.569': attribute type 10 has an invalid length.
[  121.458517][ T8155] dummy0: entered promiscuous mode
[  121.462777][ T8155] team0: Port device dummy0 added
[  121.486722][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.570'.
[  121.525950][ T8159] veth0: entered promiscuous mode
[  121.528891][ T8159] bond0: entered promiscuous mode
[  121.642300][ T8154] bond0: left promiscuous mode
[  121.643992][ T8154] veth0: left promiscuous mode
[  121.825424][ T8178] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[  121.830124][ T8178] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[  121.863922][ T8178] bond20: entered promiscuous mode
[  121.869088][ T8178] 8021q: adding VLAN 0 to HW filter on device bond20
[  121.927032][ T8178] bond20: (slave bridge8): making interface the new active one
[  121.929975][ T8178] bridge8: entered promiscuous mode
[  121.932860][ T8178] bond20: (slave bridge8): Enslaving as an active interface with an up link
[  122.078736][ T8200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.081331][ T8200] syzkaller0: entered promiscuous mode
[  122.083204][ T8200] syzkaller0: entered allmulticast mode
[  122.097058][ T8200] tipc: Resetting bearer <eth:syzkaller0>
[  122.099773][ T8199] tipc: Resetting bearer <eth:syzkaller0>
[  122.111171][ T8199] tipc: Disabling bearer <eth:syzkaller0>
[  122.182972][ T8205] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.186268][ T8205] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.198740][ T8202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.527215][ T8236] lo speed is unknown, defaulting to 1000
[  122.844098][ T5847] IPVS: starting estimator thread 0...
[  122.947785][ T8254] IPVS: using max 67 ests per chain, 160800 per kthread
[  123.104097][ T8256] lo speed is unknown, defaulting to 1000
[  123.651517][ T8286] geneve4: entered promiscuous mode
[  123.725757][ T8294] validate_nla: 6 callbacks suppressed
[  123.725772][ T8294] netlink: 'syz.0.607': attribute type 1 has an invalid length.
[  123.756398][ T8294] bond21: entered promiscuous mode
[  123.758720][ T8294] bond21: entered allmulticast mode
[  123.761251][ T8294] 8021q: adding VLAN 0 to HW filter on device bond21
[  123.773481][ T8294] pim6reg: left allmulticast mode
[  123.869698][ T8303] veth59: entered allmulticast mode
[  124.006234][ T8311] netlink: 'syz.0.611': attribute type 1 has an invalid length.
[  124.035766][ T8311] 8021q: adding VLAN 0 to HW filter on device bond22
[  124.051552][ T8313] bond22: (slave geneve5): making interface the new active one
[  124.055236][ T8313] bond22: (slave geneve5): Enslaving as an active interface with an up link
[  124.058449][ T7524] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  124.066384][ T7524] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  124.071599][ T7524] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  124.076459][ T7524] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  124.202531][ T8323] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[  124.317814][ T8337] netlink: 'syz.0.618': attribute type 1 has an invalid length.
[  124.346976][ T8337] gretap2: entered allmulticast mode
[  124.350437][ T8337] bond23: (slave gretap2): making interface the new active one
[  124.355457][ T8337] bond23: (slave gretap2): Enslaving as an active interface with an up link
[  124.413311][ T8345] xfrm1: entered promiscuous mode
[  124.417987][ T8345] xfrm1: entered allmulticast mode
[  124.432936][ T8332] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[  124.563168][ T8359] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[  124.597972][ T5847] IPVS: starting estimator thread 0...
[  124.685095][ T8361] IPVS: using max 34 ests per chain, 81600 per kthread
[  124.751304][ T8381] netlink: 'syz.1.629': attribute type 10 has an invalid length.
[  124.754247][ T8381] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.787469][ T8387] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  124.790241][ T8390] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  124.802869][ T8393] bond0: entered promiscuous mode
[  124.811658][ T8393] bond_slave_0: entered promiscuous mode
[  124.884027][ T8402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.886935][ T8402] syzkaller0: entered promiscuous mode
[  124.888850][ T8402] syzkaller0: entered allmulticast mode
[  124.910416][ T8402] tipc: Resetting bearer <eth:syzkaller0>
[  124.924871][ T8402] tipc: Disabling bearer <eth:syzkaller0>
[  124.934163][ T8404] netlink: 'syz.2.637': attribute type 4 has an invalid length.
[  124.939063][ T5847] lo speed is unknown, defaulting to 1000
[  124.940783][ T5847] sqz0: Port: 1 Link DOWN
[  124.942068][ T5847] lo speed is unknown, defaulting to 1000
[  124.949217][ T5847] lo speed is unknown, defaulting to 1000
[  124.950934][ T5847] sqz0: Port: 1 Link ACTIVE
[  124.952302][ T5847] lo speed is unknown, defaulting to 1000
[  125.011433][ T8408] 8021q: adding VLAN 0 to HW filter on device bond24
[  125.031965][ T8408] vlan4: entered allmulticast mode
[  125.033592][ T8408] bond24: entered allmulticast mode
[  125.045766][ T5847] lo speed is unknown, defaulting to 1000
[  125.048304][ T5847] sqz0: Port: 1 Link DOWN
[  125.049823][ T5847] lo speed is unknown, defaulting to 1000
[  125.133724][ T8417] ip6gretap0: entered promiscuous mode
[  125.141469][ T8415] bond25: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  125.148388][ T8415] bond25: (slave lo): Enslaving as an active interface with an up link
[  125.155682][ T8415] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  125.214112][ T8420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.217662][ T8420] d: renamed from syzkaller0
[  125.238180][ T8420] tipc: Disabling bearer <eth:syzkaller0>
[  125.470901][ T8426] team0: left promiscuous mode
[  125.475286][ T8426] team_slave_0: left promiscuous mode
[  125.478714][ T8426] team_slave_1: left promiscuous mode
[  125.481000][ T8426] dummy0: left promiscuous mode
[  125.490043][ T8426] xfrm0: left promiscuous mode
[  125.493243][ T8426] xfrm0: left allmulticast mode
[  125.498514][ T8426] bond1: left promiscuous mode
[  125.500073][ T8426] bond1: left allmulticast mode
[  125.501564][ T8426] veth3: left promiscuous mode
[  125.523958][ T8426] ip6gretap1: left promiscuous mode
[  125.527363][ T8426] bond4: left promiscuous mode
[  125.557512][ T8426] vlan2: left promiscuous mode
[  125.561178][ T8426] bond6: left promiscuous mode
[  125.568896][ T8426] vlan2: left allmulticast mode
[  125.571626][ T8426] bond6: left allmulticast mode
[  125.595169][ T8426] bond10: left promiscuous mode
[  125.597315][ T8426] ip6gre1: left promiscuous mode
[  125.608579][ T8426] bond13: left promiscuous mode
[  125.615773][ T8426] veth7: left promiscuous mode
[  125.624818][ T8426] bond16: left promiscuous mode
[  125.628640][ T8426] erspan2: left promiscuous mode
[  125.632536][ T8426] bond16: left allmulticast mode
[  125.637760][ T8426] erspan2: left allmulticast mode
[  125.645444][ T8426] bond18: left promiscuous mode
[  125.647342][ T8426] bridge6: left promiscuous mode
[  125.649166][ T8426] bridge7: left promiscuous mode
[  125.650752][ T8426] bond18: left allmulticast mode
[  125.652312][ T8426] bridge6: left allmulticast mode
[  125.653976][ T8426] bridge7: left allmulticast mode
[  125.660859][ T8426] bond20: left promiscuous mode
[  125.662553][ T8426] bridge8: left promiscuous mode
[  125.670075][ T8426] geneve4: left promiscuous mode
[  125.680924][ T8426] bond21: left promiscuous mode
[  125.682482][ T8426] bond21: left allmulticast mode
[  125.701863][ T8426] gretap2: left allmulticast mode
[  125.715098][ T8426] xfrm1: left promiscuous mode
[  125.716859][ T8426] xfrm1: left allmulticast mode
[  125.720341][ T8426] vlan4: left allmulticast mode
[  125.722075][ T8426] bond24: left allmulticast mode
[  125.742593][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.752715][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.755498][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  125.762220][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.777528][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.780082][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  125.783362][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.786186][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.788870][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  125.791527][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.794138][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.797199][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  126.136759][ T8473] 8021q: adding VLAN 0 to HW filter on device team0
[  126.142893][ T8473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.438849][ T8483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.443773][    T9] lo speed is unknown, defaulting to 1000
[  126.445866][    T9] sqz0: Port: 1 Link ACTIVE
[  126.447812][    T9] lo speed is unknown, defaulting to 1000
[  126.879964][ T8491] __nla_validate_parse: 37 callbacks suppressed
[  126.879975][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[  126.891539][ T8502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  126.941430][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'.
[  127.123531][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'.
[  127.178462][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'.
[  127.261727][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'.
[  127.386902][ T8548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.474098][ T8549] macvlan1: entered allmulticast mode
[  127.476694][ T8549] veth1_vlan: entered allmulticast mode
[  127.480215][ T8549] team0: Port device macvlan1 added
[  127.594851][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.673'.
[  127.601686][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.673'.
[  127.619106][ T8552] netlink: 168 bytes leftover after parsing attributes in process `syz.1.673'.
[  127.630646][ T8551] netlink: 168 bytes leftover after parsing attributes in process `syz.1.673'.
[  127.657796][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'.
[  127.786957][ T8567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.790653][ T8567] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.821735][ T8567] tipc: Disabling bearer <eth:syzkaller0>
[  127.893783][ T8572] syzkaller0: entered promiscuous mode
[  127.897895][ T8572] syzkaller0: entered allmulticast mode
[  127.917193][ T8572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.931239][ T8572] tipc: Resetting bearer <eth:syzkaller0>
[  127.935449][ T8571] tipc: Resetting bearer <eth:syzkaller0>
[  127.962800][ T8571] tipc: Disabling bearer <eth:syzkaller0>
[  128.073938][ T8588] syz_tun: entered allmulticast mode
[  128.081156][ T8587] syz_tun: left allmulticast mode
[  128.212865][ T8593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.217394][ T8593] syzkaller0: MTU too low for tipc bearer
[  128.219115][ T8593] tipc: Disabling bearer <eth:syzkaller0>
[  128.420608][ T8602] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  128.423587][ T8602] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  128.704233][ T8628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.818682][ T8635] bond19 (unregistering): Released all slaves
[  128.897582][ T8645] validate_nla: 6 callbacks suppressed
[  128.897593][ T8645] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  128.918783][ T8645] bond19: entered promiscuous mode
[  128.920680][ T8645] 8021q: adding VLAN 0 to HW filter on device bond19
[  128.931702][ T8646] 8021q: adding VLAN 0 to HW filter on device bond19
[  128.934135][ T8646] bond19: (slave gre3): The slave device specified does not support setting the MAC address
[  128.944509][ T8646] bond19: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  128.949370][ T8646] bond19: (slave gre3): making interface the new active one
[  128.951834][ T8646] gre3: entered promiscuous mode
[  128.956011][ T8646] bond19: (slave gre3): Enslaving as an active interface with an up link
[  129.614478][    C1] hrtimer: interrupt took 397459 ns
[  130.409447][ T5822] ------------[ cut here ]------------
[  130.411618][ T5822] kernel BUG at net/core/skbuff.c:2306!
[  130.418475][ T5822] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  130.421006][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  130.424512][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.428247][ T5822] Workqueue: ipv6_addrconf addrconf_dad_work
[  130.430484][ T5822] RIP: 0010:pskb_expand_head+0x12da/0x1320
[  130.432670][ T5822] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 c1 bb ba f8 e9 d3 f3 ff ff e8 97 96 50 f8 90 <0f> 0b e8 8f 96 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  130.439736][ T5822] RSP: 0018:ffffc9000611f4f0 EFLAGS: 00010293
[  130.441938][ T5822] RAX: ffffffff8974f6b9 RBX: ffff88802439de00 RCX: ffff88816fe58000
[  130.444881][ T5822] RDX: 0000000000000000 RSI: 0000000093ca5ac0 RDI: 0000000000000000
[  130.447806][ T5822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000048
[  130.450696][ T5822] R10: dffffc0000000000 R11: ffffffff8a32d240 R12: dffffc0000000000
[  130.453695][ T5822] R13: 0000000000000820 R14: 0000000093ca5ac0 R15: 0000000000000180
[  130.456709][ T5822] FS:  0000000000000000(0000) GS:ffff88818de67000(0000) knlGS:0000000000000000
[  130.460045][ T5822] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.462456][ T5822] CR2: 0000560980832000 CR3: 0000000117202000 CR4: 00000000000006f0
[  130.465419][ T5822] Call Trace:
[  130.466731][ T5822]  <TASK>
[  130.467856][ T5822]  ? neigh_connected_output+0x1ea/0x460
[  130.469918][ T5822]  ipgre_header+0xd5/0x350
[  130.471654][ T5822]  ? __pfx_ipgre_header+0x10/0x10
[  130.473537][ T5822]  neigh_connected_output+0x286/0x460
[  130.475506][ T5822]  ? ip6_output+0x126/0x550
[  130.477177][ T5822]  ip6_output+0x340/0x550
[  130.478823][ T5822]  ndisc_send_skb+0xbaa/0x14e0
[  130.480559][ T5822]  ? ndisc_send_skb+0x1fd/0x14e0
[  130.482490][ T5822]  ? ndisc_alloc_skb+0x1a6/0x480
[  130.484432][ T5822]  ? __pfx_ndisc_send_skb+0x10/0x10
[  130.486441][ T5822]  ? __pfx_dst_output+0x10/0x10
[  130.488328][ T5822]  ? __asan_memcpy+0x40/0x70
[  130.490099][ T5822]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  130.492354][ T5822]  ? __mod_timer+0xb37/0xf30
[  130.494113][ T5822]  ndisc_send_ns+0xd7/0x160
[  130.495879][ T5822]  ? __pfx_ndisc_send_ns+0x10/0x10
[  130.498011][ T5822]  ? addrconf_dad_work+0xa15/0x14c0
[  130.499982][ T5822]  ? __local_bh_enable_ip+0xd0/0x130
[  130.501923][ T5822]  addrconf_dad_work+0xac4/0x14c0
[  130.503783][ T5822]  ? __pfx_addrconf_dad_work+0x10/0x10
[  130.505845][ T5822]  ? process_scheduled_works+0xa25/0x1830
[  130.508120][ T5822]  ? process_scheduled_works+0xa25/0x1830
[  130.510209][ T5822]  process_scheduled_works+0xb02/0x1830
[  130.512340][ T5822]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.514654][ T5822]  ? assign_work+0x3d5/0x5e0
[  130.516432][ T5822]  worker_thread+0xa50/0xfc0
[  130.518165][ T5822]  kthread+0x388/0x470
[  130.519705][ T5822]  ? __pfx_worker_thread+0x10/0x10
[  130.521648][ T5822]  ? __pfx_kthread+0x10/0x10
[  130.523446][ T5822]  ret_from_fork+0x51e/0xb90
[  130.525218][ T5822]  ? __pfx_ret_from_fork+0x10/0x10
[  130.527141][ T5822]  ? __switch_to+0xc7d/0x1450
[  130.528976][ T5822]  ? __pfx_kthread+0x10/0x10
[  130.530749][ T5822]  ret_from_fork_asm+0x1a/0x30
[  130.532624][ T5822]  </TASK>
[  130.533876][ T5822] Modules linked in:
[  130.536194][ T5822] ---[ end trace 0000000000000000 ]---
[  130.605977][ T5822] RIP: 0010:pskb_expand_head+0x12da/0x1320
[  130.610704][ T5822] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 c1 bb ba f8 e9 d3 f3 ff ff e8 97 96 50 f8 90 <0f> 0b e8 8f 96 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f
[  130.626153][ T5822] RSP: 0018:ffffc9000611f4f0 EFLAGS: 00010293
[  130.632083][ T5822] RAX: ffffffff8974f6b9 RBX: ffff88802439de00 RCX: ffff88816fe58000
[  130.639172][ T5822] RDX: 0000000000000000 RSI: 0000000093ca5ac0 RDI: 0000000000000000
[  130.645788][ T5822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000048
[  130.654435][ T5822] R10: dffffc0000000000 R11: ffffffff8a32d240 R12: dffffc0000000000
[  130.661003][ T5822] R13: 0000000000000820 R14: 0000000093ca5ac0 R15: 0000000000000180
[  130.667547][ T5822] FS:  0000000000000000(0000) GS:ffff88818de67000(0000) knlGS:0000000000000000
[  130.680230][ T5822] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.683837][ T5822] CR2: 0000555570ea9a28 CR3: 00000000121ca000 CR4: 00000000000006f0
[  130.687775][ T5822] Kernel panic - not syncing: Fatal exception
[  130.690217][ T5822] Kernel Offset: disabled
[  130.691475][ T5822] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:59:25  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82005e52 RBX=ffffea00006ea840 RCX=ffff888105399d00 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900047e7810 RSP=ffffc900047e7440
R8 =ffffea00006ea847 R9 =1ffffd40000dd508 R10=dffffc0000000000 R11=fffff940000dd509
R12=1ffffd40000dd509 R13=0089c00000020919 R14=dead000000000100 R15=dffffc0000000000
RIP=ffffffff81c59266 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc69416e800 ffffffff 00c00000
GS =0000 ffff88818de67000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560980824000 CR3=000000016a968000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1c354f3 RBX=0000000000000001 RCX=0000000080010001 RDX=0000000000000000
RSI=ffffffff8c27a860 RDI=ffffffff8c27a820 RBP=0000000000000000 RSP=ffffc90000a08fb0
R8 =ffffffff90117fb7 R9 =1ffffffff2022ff6 R10=dffffc0000000000 R11=fffffbfff2022ff7
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff8e1aa798 R15=dffffc0000000000
RIP=ffffffff81aaa74a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f64f5009380 ffffffff 00c00000
GS =0000 ffff8882a9467000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3993dc7ff8 CR3=0000000114ad2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00ff00000000ffff
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
