last executing test programs:

970.191253ms ago: executing program 0 (id=744):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

827.219305ms ago: executing program 0 (id=747):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1)

709.165982ms ago: executing program 0 (id=754):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)

639.35043ms ago: executing program 1 (id=755):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r0, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14)

608.760303ms ago: executing program 1 (id=756):
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"0023f800", 0x0, 0x0, {0x6, 0x1}, {0x805, 0x3}, 0x80, [0x3ff, 0x1000002004, 0xfffffffffdfffc00, 0x800000000000e, 0x9, 0x7, 0x36, 0x1, 0x10000, 0x9, 0x8, 0xfc, 0x8001, 0x9, 0x200000000c, 0x8000008]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

447.503491ms ago: executing program 0 (id=757):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="050000001446f3a6df39fe6dcbb30000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}}, 0x0)

447.285015ms ago: executing program 0 (id=758):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10)

386.226186ms ago: executing program 1 (id=759):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

363.456543ms ago: executing program 1 (id=761):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd2b1, 0x84000002, 0x10001, 0x1, 0x80000000, 0x1ff, 0x8, 0x101, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

261.449741ms ago: executing program 0 (id=764):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffff36, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4)
pipe(&(0x7f0000000200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x56}, 0x28)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000c080)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe60}, 0x1c, 0x0}}], 0x1, 0x8040)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x804)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

261.157608ms ago: executing program 2 (id=765):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20)

130.955153ms ago: executing program 2 (id=766):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20)

117.052726ms ago: executing program 2 (id=767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0)

82.290413ms ago: executing program 2 (id=768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebae55130000000000000005be6d55b57cb15e63c15c46099d0fb04ce9b861d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

78.49539ms ago: executing program 1 (id=769):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

818.125µs ago: executing program 2 (id=770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000100)={0x7, 'vlan1\x00', {0x4}})

453.425µs ago: executing program 2 (id=771):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x401, 0x6061, 0x800, 0x8c0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r0, 0x5, 0x1, 0x0, 0x9}, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000080)=0x6, 0x4)
ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue})
r4 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$inet_sctp(r4, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8dd8f69a6c2df36202e14997e2262c8ca3ff57548ddca45", 0x18}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0x9}}}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x9c, 0x0, 0x204, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6dc74b1c}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7236d1c0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x465}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x40)

0s ago: executing program 1 (id=772):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan3\x00'})
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004804}, 0x20004004)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r2)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x404081d)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r4)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r6, 0x800, 0x70bd2d, 0x8, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20044084)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000010)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$kcm(0x29, 0x97c9fad14041531e, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10e, 0x3ff, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45798' (ED25519) to the list of known hosts.
syzkaller login: [   57.434657][ T5557] cgroup: Unknown subsys name 'net'
[   57.565153][ T5557] cgroup: Unknown subsys name 'cpuset'
[   57.570974][ T5557] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.147417][ T5557] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.191494][ T5646] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.171102][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.175557][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.182892][ T5667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.186300][ T5667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.190316][ T5667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.194065][ T5667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.201938][ T5669] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.204145][ T5669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.205923][ T5672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.210574][ T5672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.211022][ T5669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.214109][ T5672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.218917][ T5672] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.223811][ T5666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.231527][ T5669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.867611][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.872356][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.875387][ T5663] bridge_slave_0: entered allmulticast mode
[   70.879487][ T5663] bridge_slave_0: entered promiscuous mode
[   70.903787][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.906162][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.908545][ T5663] bridge_slave_1: entered allmulticast mode
[   70.912575][ T5663] bridge_slave_1: entered promiscuous mode
[   70.980386][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.982886][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.985329][ T5664] bridge_slave_0: entered allmulticast mode
[   70.988533][ T5664] bridge_slave_0: entered promiscuous mode
[   70.996527][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.002002][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.005201][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.007721][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.013589][ T5664] bridge_slave_1: entered allmulticast mode
[   71.016488][ T5664] bridge_slave_1: entered promiscuous mode
[   71.065824][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.070336][ T5663] team0: Port device team_slave_0 added
[   71.074025][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.083706][ T5663] team0: Port device team_slave_1 added
[   71.128018][ T5664] team0: Port device team_slave_0 added
[   71.137373][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.139877][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.148941][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.156223][ T5664] team0: Port device team_slave_1 added
[   71.158958][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.161946][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.172222][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.188392][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.191691][ T5665] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.194703][ T5665] bridge_slave_0: entered allmulticast mode
[   71.198488][ T5665] bridge_slave_0: entered promiscuous mode
[   71.222396][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.225461][ T5665] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.228510][ T5665] bridge_slave_1: entered allmulticast mode
[   71.234610][ T5665] bridge_slave_1: entered promiscuous mode
[   71.257116][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.259449][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.267278][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.272867][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.275084][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.283835][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.321291][ T5665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.327739][ T5665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.373902][ T5663] hsr_slave_0: entered promiscuous mode
[   71.377667][ T5663] hsr_slave_1: entered promiscuous mode
[   71.400941][ T5665] team0: Port device team_slave_0 added
[   71.408168][ T5664] hsr_slave_0: entered promiscuous mode
[   71.411485][ T5664] hsr_slave_1: entered promiscuous mode
[   71.414042][ T5664] debugfs: 'hsr0' already exists in 'hsr'
[   71.416408][ T5664] Cannot create hsr debugfs directory
[   71.427795][ T5665] team0: Port device team_slave_1 added
[   71.487696][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.490414][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.498905][ T5665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.520197][ T5665] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.522583][ T5665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.531222][ T5665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.656778][ T5665] hsr_slave_0: entered promiscuous mode
[   71.659912][ T5665] hsr_slave_1: entered promiscuous mode
[   71.662542][ T5665] debugfs: 'hsr0' already exists in 'hsr'
[   71.664622][ T5665] Cannot create hsr debugfs directory
[   71.842296][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.853055][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.858130][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.870291][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.873944][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.881994][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.895041][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.903621][ T5663] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.957217][ T5664] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.963602][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.971062][ T5664] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.976031][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.978836][ T5664] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.984935][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.002951][ T5664] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.007634][ T5664] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.062583][ T5665] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.072404][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.081983][ T5665] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.088178][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.095525][ T5665] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.102918][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.112022][ T5665] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.117298][ T5665] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.221681][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.262007][   T56] Bluetooth: hci1: command tx timeout
[   72.262013][ T5669] Bluetooth: hci0: command tx timeout
[   72.263068][ T5003] Bluetooth: hci2: command tx timeout
[   72.286166][ T5663] 8021q: adding VLAN 0 to HW filter on device team0
[   72.300556][ T5665] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.312805][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.315872][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.334045][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.336358][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.342181][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.354165][ T5665] 8021q: adding VLAN 0 to HW filter on device team0
[   72.393361][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.396269][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.407157][ T5664] 8021q: adding VLAN 0 to HW filter on device team0
[   72.420737][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.423253][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.439138][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.442072][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.463850][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.466631][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.918295][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.968147][ T5665] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.011640][ T5663] veth0_vlan: entered promiscuous mode
[   73.035626][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.043514][ T5663] veth1_vlan: entered promiscuous mode
[   73.084898][ T5665] veth0_vlan: entered promiscuous mode
[   73.108908][ T5665] veth1_vlan: entered promiscuous mode
[   73.122264][ T5664] veth0_vlan: entered promiscuous mode
[   73.144107][ T5663] veth0_macvtap: entered promiscuous mode
[   73.154016][ T5664] veth1_vlan: entered promiscuous mode
[   73.158162][ T5663] veth1_macvtap: entered promiscuous mode
[   73.187104][ T5665] veth0_macvtap: entered promiscuous mode
[   73.207547][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.217777][ T5665] veth1_macvtap: entered promiscuous mode
[   73.231536][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.246841][ T5664] veth0_macvtap: entered promiscuous mode
[   73.264312][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.268224][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.278737][ T5664] veth1_macvtap: entered promiscuous mode
[   73.283190][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.295224][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.301276][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.314024][ T5665] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.349070][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.362354][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.368029][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.383018][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.387754][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.391894][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.407452][ T5651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.430233][ T5651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.434241][ T5651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.455828][ T5651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.570552][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.573537][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.631303][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.640436][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.673274][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.676205][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.727067][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.736223][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.814874][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.815335][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.821753][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.822845][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.995102][ T5776] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET)
[   74.194752][ T5793] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.28'.
[   74.214322][ T5795] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   74.341955][ T5003] Bluetooth: hci0: command tx timeout
[   74.345626][   T56] Bluetooth: hci2: command tx timeout
[   74.346782][ T5669] Bluetooth: hci1: command tx timeout
[   74.644717][ T5817] syzkaller1: entered promiscuous mode
[   74.650771][ T5817] syzkaller1: entered allmulticast mode
[   75.258349][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[   75.352021][ T5855] xt_limit: Overflow, try lower: 28676/2147483648
[   75.396097][ T5859] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[   75.401165][ T5859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.479043][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   75.502586][ T5867] netlink: 'syz.2.60': attribute type 2 has an invalid length.
[   75.851146][ T5893] netlink: 256 bytes leftover after parsing attributes in process `syz.1.76'.
[   76.152802][ T5913] warning: `syz.0.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.230134][ T5919] syzkaller1: entered promiscuous mode
[   76.231951][ T5919] syzkaller1: entered allmulticast mode
[   76.420469][ T5669] Bluetooth: hci1: command tx timeout
[   76.429574][ T5669] Bluetooth: hci2: command tx timeout
[   76.431159][   T56] Bluetooth: hci0: command tx timeout
[   76.448021][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.452951][ T5936] batadv_slave_0: entered promiscuous mode
[   76.455517][ T5936] batadv_slave_0: entered allmulticast mode
[   76.729519][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[   77.143933][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[   77.146288][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[   77.179075][ T5985] tipc: Started in network mode
[   77.186291][ T5985] tipc: Node identity ac14140f, cluster identity 4711
[   77.198021][ T5985] tipc: New replicast peer: 255.255.255.255
[   77.202987][ T5985] tipc: Enabled bearer <udp:syz2>, priority 10
[   77.268202][ T5994] tap0: tun_chr_ioctl cmd 1074025677
[   77.270466][ T5994] tap0: linktype set to 6
[   77.670611][ T6033] rdma_op ffff888104f2e1f0 conn xmit_rdma 0000000000000000
[   78.201560][   T24] tipc: Node number set to 2886997007
[   78.260798][ T6063] netlink: 424 bytes leftover after parsing attributes in process `syz.2.143'.
[   78.271296][ T6063] netlink: 'syz.2.143': attribute type 1 has an invalid length.
[   78.431908][ T6071] netlink: 'syz.2.147': attribute type 4 has an invalid length.
[   78.462609][ T6071] netlink: 'syz.2.147': attribute type 4 has an invalid length.
[   78.500764][   T56] Bluetooth: hci0: command tx timeout
[   78.500848][ T5669] Bluetooth: hci2: command tx timeout
[   78.503492][ T5003] Bluetooth: hci1: command tx timeout
[   78.894061][ T6101] bond1: entered promiscuous mode
[   78.897680][ T6101] bond1: entered allmulticast mode
[   78.900920][ T6101] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.517020][ T6129] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   79.599924][ T6133] syzkaller0: entered promiscuous mode
[   79.606266][ T6133] syzkaller0: entered allmulticast mode
[   79.985290][ T6159] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   80.473654][ T6190] xt_TPROXY: Can be used only with -p tcp or -p udp
[   80.569600][ T6196] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[   81.045939][ T6220] xt_TPROXY: Can be used only with -p tcp or -p udp
[   81.666222][ T6254] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   81.792473][ T6260] netlink: 320 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.795468][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.798410][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.801925][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.877587][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.882774][ T6267] netlink: 60 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.885924][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'.
[   81.935060][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'.
[   81.966243][ T6273] nicvf0: tun_chr_ioctl cmd 1074812117
[   82.241871][ T6295] netlink: 'syz.2.250': attribute type 298 has an invalid length.
[   82.429011][ T6308] netlink: 'syz.1.257': attribute type 27 has an invalid length.
[   83.025687][ T6354] netlink: 64 bytes leftover after parsing attributes in process `syz.1.279'.
[   83.284416][ T6366] tun0: tun_chr_ioctl cmd 1074812118
[   83.287185][ T6366] tun0: tun_chr_ioctl cmd 1074033169
[   84.137267][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[   84.466162][ T6400] lo speed is unknown, defaulting to 1000
[   84.477774][ T6400] lo speed is unknown, defaulting to 1000
[   84.493585][ T6400] lo speed is unknown, defaulting to 1000
[   84.730185][ T2326] lo speed is unknown, defaulting to 1000
[   84.735363][ T6400] infiniband sqz0: set active
[   84.739748][ T6400] infiniband sqz0: added lo
[   84.783167][ T6400] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   84.790498][ T6400] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   84.798053][ T6400] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   84.902344][ T6400] RDS/IB: sqz0: added
[   84.904587][ T6400] smc: adding ib device sqz0 with port count 1
[   84.907776][ T6400] smc:    ib device sqz0 port 1 has no pnetid
[   84.921354][   T24] lo speed is unknown, defaulting to 1000
[   84.929534][ T6432] lo speed is unknown, defaulting to 1000
[   85.204598][ T6400] lo speed is unknown, defaulting to 1000
[   85.538438][ T6448] syzkaller0: entered promiscuous mode
[   85.543632][ T6448] syzkaller0: entered allmulticast mode
[   85.635988][ T6400] lo speed is unknown, defaulting to 1000
[   85.842565][ T6400] lo speed is unknown, defaulting to 1000
[   86.077986][ T6466] syzkaller0: entered promiscuous mode
[   86.080763][ T6466] syzkaller0: entered allmulticast mode
[   86.347029][ T6476] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   86.456929][ T6480] netlink: 'syz.2.337': attribute type 9 has an invalid length.
[   86.472138][ T6480] netlink: 'syz.2.337': attribute type 9 has an invalid length.
[   86.484058][ T6480] Zero length message leads to an empty skb
[   86.708564][ T6491] tc action pedit 'at' offset 8 out of bounds
[   86.864240][ T6499] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   87.293257][ T6521] xt_hashlimit: size too large, truncated to 1048576
[   87.405486][  T799] cfg80211: failed to load regulatory.db
[   87.536658][ T6536] __nla_validate_parse: 6 callbacks suppressed
[   87.536672][ T6536] netlink: 44 bytes leftover after parsing attributes in process `syz.0.363'.
[   87.695763][ T6545] block nbd0: not configured, cannot reconfigure
[   88.340045][ T6579] lo speed is unknown, defaulting to 1000
[   88.371808][ T6583] netlink: 'syz.0.382': attribute type 39 has an invalid length.
[   88.392100][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   88.397172][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'.
[   89.163347][ T6600] lo speed is unknown, defaulting to 1000
[   89.685418][ T6640] veth1_macvtap: left promiscuous mode
[   89.688583][ T6640] macsec0: entered promiscuous mode
[   89.691663][ T6640] macsec0: entered allmulticast mode
[   89.877127][ T6648] netlink: 'syz.1.412': attribute type 2 has an invalid length.
[   89.888791][ T6648] netlink: 'syz.1.412': attribute type 2 has an invalid length.
[   89.922206][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'.
[   89.948700][ T6648] veth1_macvtap: entered promiscuous mode
[   89.953053][ T6648] macsec1: entered promiscuous mode
[   89.968924][ T6648] veth1_macvtap: left promiscuous mode
[   90.449982][ T6672] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   90.494127][ T6672] bond2: (slave lo): Enslaving as an active interface with an up link
[   90.503652][ T6672] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   90.511825][ T2326] lo speed is unknown, defaulting to 1000
[   90.513847][ T6676] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   90.520336][ T6676] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   90.532712][ T5739] lo speed is unknown, defaulting to 1000
[   90.535595][ T2326] lo speed is unknown, defaulting to 1000
[   90.784209][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'.
[   90.837289][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.843776][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.015134][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.036972][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.474552][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.487344][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.500250][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.518027][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.923700][ T6744] netlink: 148 bytes leftover after parsing attributes in process `syz.1.447'.
[   92.002457][ T6752] openvswitch: netlink: EtherType 50a is less than min 600
[   93.177896][ T6778] lo speed is unknown, defaulting to 1000
[   93.424998][ T6784] lo speed is unknown, defaulting to 1000
[   94.867558][ T6835] lo speed is unknown, defaulting to 1000
[   94.953306][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.0.486'.
[   95.070607][ T6851] syzkaller0: entered promiscuous mode
[   95.073166][ T6851] syzkaller0: entered allmulticast mode
[   95.088512][ T6851] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   95.451207][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'.
[   95.492951][ T6871] Bluetooth: MGMT ver 1.23
[   95.906929][ T6889] netlink: 52 bytes leftover after parsing attributes in process `syz.1.510'.
[   95.922183][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.930752][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.106895][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'.
[   96.217109][ T6912] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   96.250907][ T6912] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.300620][ T6912] bond3: (slave ip6gretap1): making interface the new active one
[   96.307298][ T6912] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   96.471444][ T6917] netlink: 'syz.0.520': attribute type 21 has an invalid length.
[   98.281895][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[   98.965625][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.975704][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.037970][ T6899] macsec0: left promiscuous mode
[   99.041492][ T6899] macsec0: left allmulticast mode
[   99.064129][ T6899] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   99.171930][ T6914] syzkaller0: entered promiscuous mode
[   99.174387][ T6914] syzkaller0: entered allmulticast mode
[   99.213274][ T6917] netlink: 156 bytes leftover after parsing attributes in process `syz.0.520'.
[   99.487211][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.493166][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.496115][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.503764][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.644675][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'.
[   99.954356][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'.
[   99.970280][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'.
[  100.137645][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'.
[  100.515684][ T6988] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.543'.
[  100.536478][ T6988] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.543'.
[  100.576094][ T6990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.545'.
[  100.658641][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'.
[  100.943473][ T7004] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.548'.
[  101.065479][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'.
[  101.218369][ T7019] netlink: 'syz.0.555': attribute type 3 has an invalid length.
[  102.158017][ T7051] hm3): entered promiscuous mode
[  102.273129][ T7055] netlink: 'syz.2.569': attribute type 1 has an invalid length.
[  102.366984][ T7062] netlink: 'syz.0.574': attribute type 11 has an invalid length.
[  102.470146][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'.
[  102.518201][ T7074] netlink: 'syz.0.579': attribute type 1 has an invalid length.
[  102.820991][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[  102.831217][ T7101] ip6tnl1: entered allmulticast mode
[  102.946471][ T7110] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[  104.201526][ T7189] lo speed is unknown, defaulting to 1000
[  104.528551][ T7209] netlink: 'syz.0.638': attribute type 8 has an invalid length.
[  104.535124][ T7209] bond0: entered promiscuous mode
[  104.537015][ T7209] bond_slave_0: entered promiscuous mode
[  104.543136][ T7209] bond_slave_1: entered promiscuous mode
[  104.545892][ T7209] gretap0: entered promiscuous mode
[  104.548199][ T7209] team0: entered promiscuous mode
[  104.551453][ T7209] team_slave_0: entered promiscuous mode
[  104.554046][ T7209] team_slave_1: entered promiscuous mode
[  104.557317][ T7209] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  104.563393][ T7209] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  104.567291][ T7209] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  104.572948][ T7209] hsr1: entered promiscuous mode
[  104.904808][ T7213] infiniband syz2: set down
[  104.906976][ T7213] infiniband syz2: added syzkaller0
[  104.918782][ T7213] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  104.924869][ T7213] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  104.930895][ T7213] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  104.946199][ T7213] RDS/IB: syz2: added
[  104.949734][ T7213] smc: adding ib device syz2 with port count 1
[  104.951934][ T7213] smc:    ib device syz2 port 1 has no pnetid
[  105.286102][ T7220] __nla_validate_parse: 5 callbacks suppressed
[  105.286114][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'.
[  105.312774][ T7220] bond2: entered promiscuous mode
[  105.314730][ T7220] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.325730][  T575] smc: removing ib device syz2
[  105.349095][ T7220] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.351617][ T7220] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  105.355498][ T7220] bond2: (slave ip6gre1): Error -95 calling set_mac_address
[  105.366898][  T575] smbdirect: ib_dev[syz2] removed
[  105.732626][ T7233] syzkaller1: tun_chr_ioctl cmd 1074025677
[  105.736795][ T7233] syzkaller1: linktype set to 270
[  105.991210][ T7245] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  106.008726][ T7245] bond3 (unregistering): Released all slaves
[  106.202802][ T7252] openvswitch: netlink: Duplicate or invalid key (type 0).
[  106.205715][ T7252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.456534][ T7293] netlink: 'syz.2.674': attribute type 12 has an invalid length.
[  107.569995][ T7297] block nbd0: server does not support multiple connections per device.
[  107.574572][ T7304] netlink: 'syz.0.677': attribute type 58 has an invalid length.
[  107.574623][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'.
[  107.597729][ T7297] block nbd0: shutting down sockets
[  107.931803][ T7324] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.944724][ T7324] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.062456][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.067253][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.083688][ T7329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.159926][ T7341] Cannot find set identified by id 0 to match
[  108.173690][ T7343] netlink: 'syz.2.694': attribute type 1 has an invalid length.
[  108.319759][ T7354] netlink: 'syz.0.699': attribute type 12 has an invalid length.
[  108.632075][ T7381] netlink: 204 bytes leftover after parsing attributes in process `syz.0.712'.
[  108.635076][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'.
[  108.712981][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'.
[  108.716029][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'.
[  108.770164][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[  108.776888][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.717'.
[  108.780871][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'.
[  108.888024][ T7401] syzkaller0: entered promiscuous mode
[  108.890773][ T7401] syzkaller0: entered allmulticast mode
[  109.131996][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'.
[  109.732426][ T7452] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  109.742250][ T7452] bond1 (unregistering): Released all slaves
[  110.027983][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.045303][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.063503][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.072233][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.103125][ T7478] bridge2: entered promiscuous mode
[  110.106325][ T7478] bridge2: entered allmulticast mode
[  110.146853][ T7480] syzkaller0: entered promiscuous mode
[  110.151601][ T7480] syzkaller0: entered allmulticast mode
[  110.300702][ T7472] nbd0: detected capacity change from 0 to 63
[  110.316293][ T7483] block nbd0: Receive control failed (result -32)
[  110.319654][   T58] block nbd0: Receive control failed (result -32)
[  110.358596][ T5621] block nbd0: Send control failed (result -32)
[  110.369978][ T5621] block nbd0: Request send failed, requeueing
[  110.397383][   T54] block nbd0: Dead connection, failed to find a fallback
[  110.400298][   T54] block nbd0: shutting down sockets
[  110.402334][   T54] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.405887][   T54] Buffer I/O error on dev nbd0, logical block 0, async page read
[  110.422715][ T5621] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.435805][ T5621] Buffer I/O error on dev nbd0, logical block 1, async page read
[  110.445931][ T5621] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.454350][ T5621] Buffer I/O error on dev nbd0, logical block 2, async page read
[  110.459657][ T5621] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.463732][ T5621] Buffer I/O error on dev nbd0, logical block 3, async page read
[  110.463890][ T7494] syzkaller0: entered promiscuous mode
[  110.466599][ T5621] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.471988][ T5621] Buffer I/O error on dev nbd0, logical block 0, async page read
[  110.475242][ T5621] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.478476][ T5621] Buffer I/O error on dev nbd0, logical block 1, async page read
[  110.478994][ T7494] syzkaller0: entered allmulticast mode
[  110.483858][ T5621] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.483900][ T5621] Buffer I/O error on dev nbd0, logical block 2, async page read
[  110.496769][ T5621] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.500278][ T5621] Buffer I/O error on dev nbd0, logical block 3, async page read
[  110.502966][ T5621] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.506477][ T5621] Buffer I/O error on dev nbd0, logical block 0, async page read
[  110.512311][ T5621] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.527946][ T5621] Buffer I/O error on dev nbd0, logical block 1, async page read
[  110.532860][ T5621] ldm_validate_partition_table(): Disk read failed.
[  110.536372][ T5621] Dev nbd0: unable to read RDB block 0
[  110.539055][ T5621]  nbd0: unable to read partition table
[  110.550008][ T7494] tipc: Started in network mode
[  110.550340][ T5621] ldm_validate_partition_table(): Disk read failed.
[  110.553342][ T7494] tipc: Node identity 9efbd6ff692b, cluster identity 4711
[  110.558217][ T5621] Dev nbd0: unable to read RDB block 0
[  110.561446][ T5621]  nbd0: unable to read partition table
[  110.570785][ T7494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.580441][ T7491] tipc: Resetting bearer <eth:syzkaller0>
[  110.607020][ T7491] tipc: Disabling bearer <eth:syzkaller0>
[  110.688970][ T7512] xt_limit: Overflow, try lower: 324382443/0
[  110.765839][ T7521] netlink: 'syz.1.772': attribute type 3 has an invalid length.
[  110.771544][ T7521] __nla_validate_parse: 4 callbacks suppressed
[  110.771552][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'.
[  110.840887][ T7527] 
[  110.841953][ T7527] ======================================================
[  110.844390][ T7527] WARNING: possible circular locking dependency detected
[  110.847013][ T7527] syzkaller #0 Not tainted
[  110.848872][ T7527] ------------------------------------------------------
[  110.851498][ T7527] syz.2.771/7527 is trying to acquire lock:
[  110.853736][ T7527] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  110.856916][ T7527] 
[  110.856916][ T7527] but task is already holding lock:
[  110.859468][ T7527] ffff8881723f0530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_dec+0x39/0x330
[  110.862777][ T7527] 
[  110.862777][ T7527] which lock already depends on the new lock.
[  110.862777][ T7527] 
[  110.865945][ T7527] 
[  110.865945][ T7527] the existing dependency chain (in reverse order) is:
[  110.869066][ T7527] 
[  110.869066][ T7527] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  110.871626][ T7527]        __mutex_lock+0x1a3/0x1550
[  110.873625][ T7527]        __ipv6_dev_mc_inc+0x4e/0xa50
[  110.875667][ T7527]        __ipv6_sock_mc_join+0x503/0x750
[  110.877889][ T7527]        do_ipv6_mcast_group_source+0x3df/0x4c0
[  110.880229][ T7527]        do_ipv6_setsockopt+0x16e9/0x3150
[  110.882203][ T7527]        ipv6_setsockopt+0x59/0x170
[  110.884023][ T7527]        do_sock_setsockopt+0x17c/0x1b0
[  110.885772][ T7527]        __x64_sys_setsockopt+0x13d/0x1b0
[  110.887603][ T7527]        do_syscall_64+0x15f/0xf80
[  110.889324][ T7527]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.891509][ T7527] 
[  110.891509][ T7527] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  110.894283][ T7527]        lock_sock_nested+0x41/0x100
[  110.896224][ T7527]        inet_shutdown+0x6a/0x390
[  110.898160][ T7527]        nbd_mark_nsock_dead+0x2e9/0x560
[  110.900209][ T7527]        sock_shutdown+0x15e/0x260
[  110.901929][ T7527]        nbd_clear_sock+0x24/0x170
[  110.903800][ T7527]        nbd_config_put+0x2dd/0x580
[  110.905652][ T7527]        nbd_genl_connect+0x19d5/0x1cf0
[  110.907578][ T7527]        genl_family_rcv_msg_doit+0x22a/0x330
[  110.909701][ T7527]        genl_rcv_msg+0x61c/0x7a0
[  110.911365][ T7527]        netlink_rcv_skb+0x232/0x4b0
[  110.913188][ T7527]        genl_rcv+0x28/0x40
[  110.914868][ T7527]        netlink_unicast+0x75c/0x8e0
[  110.916901][ T7527]        netlink_sendmsg+0x813/0xb40
[  110.918746][ T7527]        ____sys_sendmsg+0x972/0x9f0
[  110.920598][ T7527]        ___sys_sendmsg+0x2a5/0x360
[  110.922529][ T7527]        __x64_sys_sendmsg+0x1bd/0x2a0
[  110.924502][ T7527]        do_syscall_64+0x15f/0xf80
[  110.926284][ T7527]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.928553][ T7527] 
[  110.928553][ T7527] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  110.931328][ T7527]        __mutex_lock+0x1a3/0x1550
[  110.933228][ T7527]        nbd_queue_rq+0x37b/0x1100
[  110.935252][ T7527]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  110.937784][ T7527]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  110.940487][ T7527]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  110.943154][ T7527]        blk_mq_run_hw_queue+0x348/0x4f0
[  110.945457][ T7527]        blk_mq_dispatch_list+0xd16/0xe10
[  110.947628][ T7527]        blk_mq_flush_plug_list+0x48d/0x570
[  110.949963][ T7527]        __blk_flush_plug+0x3ed/0x4d0
[  110.952018][ T7527]        __submit_bio+0x28d/0x580
[  110.954082][ T7527]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  110.956556][ T7527]        block_read_full_folio+0x599/0x830
[  110.958849][ T7527]        filemap_read_folio+0x137/0x3b0
[  110.961045][ T7527]        do_read_cache_folio+0x358/0x590
[  110.963367][ T7527]        read_part_sector+0xb6/0x2b0
[  110.965543][ T7527]        adfspart_check_ICS+0xb1/0x960
[  110.967674][ T7527]        bdev_disk_changed+0x817/0x1770
[  110.969931][ T7527]        blkdev_get_whole+0x380/0x510
[  110.972085][ T7527]        bdev_open+0x31e/0xd30
[  110.973707][ T7527]        blkdev_open+0x470/0x610
[  110.975285][ T7527]        do_dentry_open+0x785/0x14e0
[  110.977189][ T7527]        vfs_open+0x3b/0x340
[  110.978972][ T7527]        path_openat+0x2e08/0x3860
[  110.980964][ T7527]        do_file_open+0x23e/0x4a0
[  110.982851][ T7527]        do_sys_openat2+0x113/0x200
[  110.984921][ T7527]        __x64_sys_openat+0x138/0x170
[  110.986841][ T7527]        do_syscall_64+0x15f/0xf80
[  110.988679][ T7527]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.991045][ T7527] 
[  110.991045][ T7527] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  110.993916][ T7527]        __mutex_lock+0x1a3/0x1550
[  110.995751][ T7527]        nbd_queue_rq+0xc6/0x1100
[  110.997550][ T7527]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  110.999801][ T7527]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  111.002409][ T7527]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  111.004768][ T7527]        blk_mq_run_hw_queue+0x348/0x4f0
[  111.006908][ T7527]        blk_mq_dispatch_list+0xd16/0xe10
[  111.009191][ T7527]        blk_mq_flush_plug_list+0x48d/0x570
[  111.011592][ T7527]        __blk_flush_plug+0x3ed/0x4d0
[  111.013712][ T7527]        __submit_bio+0x28d/0x580
[  111.015631][ T7527]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  111.018013][ T7527]        block_read_full_folio+0x599/0x830
[  111.019926][ T7527]        filemap_read_folio+0x137/0x3b0
[  111.021935][ T7527]        do_read_cache_folio+0x358/0x590
[  111.023864][ T7527]        read_part_sector+0xb6/0x2b0
[  111.025613][ T7527]        adfspart_check_ICS+0xb1/0x960
[  111.027630][ T7527]        bdev_disk_changed+0x817/0x1770
[  111.029643][ T7527]        blkdev_get_whole+0x380/0x510
[  111.031742][ T7527]        bdev_open+0x31e/0xd30
[  111.033583][ T7527]        blkdev_open+0x470/0x610
[  111.035576][ T7527]        do_dentry_open+0x785/0x14e0
[  111.037662][ T7527]        vfs_open+0x3b/0x340
[  111.039436][ T7527]        path_openat+0x2e08/0x3860
[  111.041429][ T7527]        do_file_open+0x23e/0x4a0
[  111.043386][ T7527]        do_sys_openat2+0x113/0x200
[  111.045399][ T7527]        __x64_sys_openat+0x138/0x170
[  111.047529][ T7527]        do_syscall_64+0x15f/0xf80
[  111.049429][ T7527]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.051933][ T7527] 
[  111.051933][ T7527] -> #3 (set->srcu){.+.+}-{0:0}:
[  111.054778][ T7527]        __synchronize_srcu+0xca/0x300
[  111.056952][ T7527]        elevator_switch+0x1e8/0x7a0
[  111.059000][ T7527]        elevator_change+0x2cc/0x450
[  111.060998][ T7527]        elevator_set_default+0x36c/0x430
[  111.062795][ T7527]        blk_register_queue+0x3e9/0x4e0
[  111.064863][ T7527]        __add_disk+0x677/0xd50
[  111.066618][ T7527]        add_disk_fwnode+0xfb/0x480
[  111.068540][ T7527]        nbd_dev_add+0x72c/0xb50
[  111.070279][ T7527]        nbd_init+0x168/0x1f0
[  111.072003][ T7527]        do_one_initcall+0x250/0x870
[  111.074119][ T7527]        do_initcall_level+0x104/0x190
[  111.076286][ T7527]        do_initcalls+0x59/0xa0
[  111.078233][ T7527]        kernel_init_freeable+0x2a6/0x3e0
[  111.080508][ T7527]        kernel_init+0x1d/0x1d0
[  111.082360][ T7527]        ret_from_fork+0x514/0xb70
[  111.084337][ T7527]        ret_from_fork_asm+0x1a/0x30
[  111.086385][ T7527] 
[  111.086385][ T7527] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  111.089371][ T7527]        __mutex_lock+0x1a3/0x1550
[  111.091390][ T7527]        elevator_change+0x1b3/0x450
[  111.093410][ T7527]        elevator_set_none+0xb5/0x140
[  111.095546][ T7527]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  111.097934][ T7527]        nbd_start_device+0x17f/0xb10
[  111.100083][ T7527]        nbd_genl_connect+0x165b/0x1cf0
[  111.102281][ T7527]        genl_family_rcv_msg_doit+0x22a/0x330
[  111.104622][ T7527]        genl_rcv_msg+0x61c/0x7a0
[  111.106579][ T7527]        netlink_rcv_skb+0x232/0x4b0
[  111.108260][ T7527]        genl_rcv+0x28/0x40
[  111.109729][ T7527]        netlink_unicast+0x75c/0x8e0
[  111.111496][ T7527]        netlink_sendmsg+0x813/0xb40
[  111.113217][ T7527]        ____sys_sendmsg+0x972/0x9f0
[  111.114868][ T7527]        ___sys_sendmsg+0x2a5/0x360
[  111.116897][ T7527]        __x64_sys_sendmsg+0x1bd/0x2a0
[  111.118776][ T7527]        do_syscall_64+0x15f/0xf80
[  111.120534][ T7527]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.122693][ T7527] 
[  111.122693][ T7527] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  111.125519][ T7527]        blk_alloc_queue+0x546/0x680
[  111.127228][ T7527]        __blk_mq_alloc_disk+0x197/0x390
[  111.129218][ T7527]        nbd_dev_add+0x499/0xb50
[  111.131144][ T7527]        nbd_init+0x168/0x1f0
[  111.132706][ T7527]        do_one_initcall+0x250/0x870
[  111.134475][ T7527]        do_initcall_level+0x104/0x190
[  111.136176][ T7527]        do_initcalls+0x59/0xa0
[  111.137813][ T7527]        kernel_init_freeable+0x2a6/0x3e0
[  111.139698][ T7527]        kernel_init+0x1d/0x1d0
[  111.141313][ T7527]        ret_from_fork+0x514/0xb70
[  111.143056][ T7527]        ret_from_fork_asm+0x1a/0x30
[  111.145157][ T7527] 
[  111.145157][ T7527] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  111.147927][ T7527]        __lock_acquire+0x15a5/0x2cf0
[  111.150128][ T7527]        lock_acquire+0x106/0x350
[  111.152212][ T7527]        fs_reclaim_acquire+0x71/0x100
[  111.154498][ T7527]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  111.157116][ T7527]        __alloc_skb+0x1d0/0x7d0
[  111.159146][ T7527]        inet6_ifmcaddr_notify+0xfa/0x1e0
[  111.161406][ T7527]        __ipv6_dev_mc_dec+0x2dc/0x330
[  111.163568][ T7527]        ipv6_mc_destroy_dev+0x33c/0x5a0
[  111.165642][ T7527]        addrconf_ifdown+0x1561/0x1a40
[  111.167781][ T7527]        addrconf_notify+0x1bc/0x1050
[  111.170003][ T7527]        notifier_call_chain+0x1ad/0x3d0
[  111.172362][ T7527]        netif_set_mtu_ext+0x5aa/0x800
[  111.174535][ T7527]        netif_set_mtu+0xd7/0x1b0
[  111.176547][ T7527]        dev_set_mtu+0x126/0x260
[  111.178537][ T7527]        dev_ioctl+0x7b4/0x1150
[  111.180408][ T7527]        sock_do_ioctl+0x23e/0x320
[  111.182439][ T7527]        sock_ioctl+0x5c6/0x7f0
[  111.184457][ T7527]        __se_sys_ioctl+0xfc/0x170
[  111.186499][ T7527]        do_syscall_64+0x15f/0xf80
[  111.188562][ T7527]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.191114][ T7527] 
[  111.191114][ T7527] other info that might help us debug this:
[  111.191114][ T7527] 
[  111.195170][ T7527] Chain exists of:
[  111.195170][ T7527]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  111.195170][ T7527] 
[  111.200175][ T7527]  Possible unsafe locking scenario:
[  111.200175][ T7527] 
[  111.203030][ T7527]        CPU0                    CPU1
[  111.205146][ T7527]        ----                    ----
[  111.207240][ T7527]   lock(&idev->mc_lock);
[  111.208980][ T7527]                                lock(sk_lock-AF_INET6);
[  111.211730][ T7527]                                lock(&idev->mc_lock);
[  111.214338][ T7527]   lock(fs_reclaim);
[  111.215928][ T7527] 
[  111.215928][ T7527]  *** DEADLOCK ***
[  111.215928][ T7527] 
[  111.218981][ T7527] 3 locks held by syz.2.771/7527:
[  111.221020][ T7527]  #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  111.224557][ T7527]  #1: ffff88816a9c4dc8 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_mtu+0x10e/0x260
[  111.228492][ T7527]  #2: ffff8881723f0530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_dec+0x39/0x330
[  111.232347][ T7527] 
[  111.232347][ T7527] stack backtrace:
[  111.234700][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.2.771 Not tainted syzkaller #0 PREEMPT(full) 
[  111.234719][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.234727][ T7527] Call Trace:
[  111.234736][ T7527]  <TASK>
[  111.234742][ T7527]  dump_stack_lvl+0xe8/0x150
[  111.234762][ T7527]  print_circular_bug+0x2e1/0x300
[  111.234781][ T7527]  check_noncircular+0x12e/0x150
[  111.234803][ T7527]  __lock_acquire+0x15a5/0x2cf0
[  111.234820][ T7527]  ? lockdep_unlock+0x5d/0xd0
[  111.234832][ T7527]  ? __lock_acquire+0x146e/0x2cf0
[  111.234847][ T7527]  ? arch_stack_walk+0xfb/0x150
[  111.234868][ T7527]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  111.234884][ T7527]  lock_acquire+0x106/0x350
[  111.234897][ T7527]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  111.234914][ T7527]  ? lock_acquire+0x106/0x350
[  111.234929][ T7527]  fs_reclaim_acquire+0x71/0x100
[  111.234946][ T7527]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  111.234962][ T7527]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  111.234979][ T7527]  ? __alloc_skb+0x1d0/0x7d0
[  111.235000][ T7527]  ? __local_bh_enable_ip+0xd0/0x130
[  111.235015][ T7527]  __alloc_skb+0x1d0/0x7d0
[  111.235031][ T7527]  inet6_ifmcaddr_notify+0xfa/0x1e0
[  111.235046][ T7527]  ? __pfx_inet6_ifmcaddr_notify+0x10/0x10
[  111.235066][ T7527]  __ipv6_dev_mc_dec+0x2dc/0x330
[  111.235084][ T7527]  ipv6_mc_destroy_dev+0x33c/0x5a0
[  111.235131][ T7527]  addrconf_ifdown+0x1561/0x1a40
[  111.235151][ T7527]  ? tls_dev_event+0x745/0xf00
[  111.235172][ T7527]  ? __pfx_addrconf_ifdown+0x10/0x10
[  111.235193][ T7527]  addrconf_notify+0x1bc/0x1050
[  111.235213][ T7527]  notifier_call_chain+0x1ad/0x3d0
[  111.235232][ T7527]  netif_set_mtu_ext+0x5aa/0x800
[  111.235252][ T7527]  ? __pfx_netif_set_mtu_ext+0x10/0x10
[  111.235269][ T7527]  ? rcu_is_watching+0x15/0xb0
[  111.235285][ T7527]  ? __mutex_lock+0x319/0x1550
[  111.235305][ T7527]  netif_set_mtu+0xd7/0x1b0
[  111.235322][ T7527]  ? __pfx_netif_set_mtu+0x10/0x10
[  111.235342][ T7527]  ? __dev_get_by_name+0xe5/0x140
[  111.235356][ T7527]  dev_set_mtu+0x126/0x260
[  111.235373][ T7527]  dev_ioctl+0x7b4/0x1150
[  111.235389][ T7527]  sock_do_ioctl+0x23e/0x320
[  111.235403][ T7527]  ? __pfx_sock_do_ioctl+0x10/0x10
[  111.235416][ T7527]  ? do_futex+0x333/0x420
[  111.235435][ T7527]  sock_ioctl+0x5c6/0x7f0
[  111.235447][ T7527]  ? __pfx_sock_ioctl+0x10/0x10
[  111.235459][ T7527]  ? __fget_files+0x2a/0x420
[  111.235473][ T7527]  ? __fget_files+0x3a0/0x420
[  111.235487][ T7527]  ? __fget_files+0x2a/0x420
[  111.235503][ T7527]  ? bpf_lsm_file_ioctl+0x9/0x20
[  111.235521][ T7527]  ? __pfx_sock_ioctl+0x10/0x10
[  111.235532][ T7527]  __se_sys_ioctl+0xfc/0x170
[  111.235551][ T7527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.235564][ T7527]  do_syscall_64+0x15f/0xf80
[  111.235582][ T7527]  ? trace_irq_disable+0x3b/0x140
[  111.235602][ T7527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.235614][ T7527] RIP: 0033:0x7f64e339cdd9
[  111.235627][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.235638][ T7527] RSP: 002b:00007f64e4221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.235653][ T7527] RAX: ffffffffffffffda RBX: 00007f64e3616090 RCX: 00007f64e339cdd9
[  111.235662][ T7527] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000006
[  111.235671][ T7527] RBP: 00007f64e3432d69 R08: 0000000000000000 R09: 0000000000000000
[  111.235680][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.235688][ T7527] R13: 00007f64e3616128 R14: 00007f64e3616090 R15: 00007ffdfca19a18
[  111.235703][ T7527]  </TASK>
[  111.385389][ T7521] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
