last executing test programs:

1.110164633s ago: executing program 2 (id=3591):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$rfkill(r1, &(0x7f0000000140), 0x8)
bind$unix(r1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x6, 0x6, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', <r3=>0x0, 0x2f, 0x6, 0xa, 0x8000, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8, 0x10, 0x7ff, 0x4a9c}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@deltfilter={0x8c, 0x2d, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0xffe0}, {0xe, 0x8}, {0x6, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_FLOWER_KEY_MPLS_TC={0x5}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0xe}}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtclass={0x0, 0x28, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {0x5, 0xffe6}, {0xc, 0xe}}, [@tclass_kind_options=@c_clsact, @TCA_RATE={0x0, 0x5, {0xfd, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x4, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

962.832316ms ago: executing program 2 (id=3594):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x40, 0x5, '\x00', 'syz0\x00', {0x147c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES16=r7, @ANYRES32=r4], 0x48}}, 0x440400d1)
sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

909.823488ms ago: executing program 0 (id=3596):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "d93acc0866df9c02", "594c8544a1418772389be07a301ecfc2", "982ad614", "27e926145f235bf5"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x20)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$l2tp6(0xa, 0x2, 0x73)
recvmsg$unix(r3, &(0x7f0000001540)={&(0x7f0000000200), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/48, 0x30}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}, 0x21)
connect$netlink(r14, &(0x7f0000001580)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc)
bind$l2tp6(r13, &(0x7f00000015c0)={0xa, 0x0, 0x80, @loopback, 0xa68, 0x3}, 0x20)
pipe(&(0x7f0000001600))
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000001640)={<r15=>0x0, @in={{0x2, 0x4e20, @local}}, 0x2, 0xfffc}, &(0x7f0000001700)=0x90)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000001740)={r15, 0x10f, 0x1}, 0x8)
sendto$llc(r5, &(0x7f0000001780)="f678f2f9e9c138a452890e96330d00ddf26ea57ab2031010d002a301b3713d0fdb5615c7c92f0f0e2bf81c939f3ba81a59ebc0bc126dca039eb4cff347dba8d462d13864a2d047a293", 0x49, 0x20000003, &(0x7f0000001800)={0x1a, 0xffff, 0xb, 0x8, 0x2, 0xfd, @random="c2f80b380f44"}, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5cb}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$key(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x2, 0x9, 0x1, 0x5, 0x9, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x9, @private0, 0x8}, @in={0x2, 0x4e22, @local}}]}, 0x48}}, 0x400c0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b40)={&(0x7f0000001a40)="e4edc20abff352fafc0e78a1f469ca7c1baa115f7bd48b26", &(0x7f0000001a80)=""/99, &(0x7f0000001b00)="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", &(0x7f0000002b00)="601c1dfe06ac27edda71f0b97d6909cac9", 0x10000, r4, 0x4}, 0x38)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002b80)={0x5, 0x5, 0x9, 0xd, 0x4, 0xfd, 0xdf, 0x3, 0x20, 0x9, 0x0, 0xfa, 0xa8, 0xfb}, 0xe)
ioctl$int_in(r9, 0x5452, &(0x7f0000002bc0)=0x3)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000002c40)={'macvtap0\x00', &(0x7f0000002c00)=@ethtool_ringparam={0x11, 0x1, 0x2, 0x2, 0xfffffff1, 0x939, 0x6, 0x7, 0x9}})
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000002c80)={0x0, 0x1}, 0x4)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000002cc0)=@sack_info={r15, 0x6, 0x2}, 0xc)
r16 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_PKTINFO(r16, 0x10e, 0x3, &(0x7f0000002d00)=0x5, 0x4)
r17 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FITHAW(r17, 0xc0045878)

811.589331ms ago: executing program 2 (id=3597):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xe5ffffff}, 0xb6)

741.747745ms ago: executing program 2 (id=3598):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELSET={0x94, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xc0000}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x174}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close(r4) (async)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000100540)={{0x0, 0x1000, 0xfffffffffffffffb, 0x8b, 0x9, 0x6, 0xe, 0xfff, 0x3, 0x10001, 0x15dbc, 0x401, 0xecf0, 0xc8d3, 0x7f}})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) (async)
bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept$alg(r7, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000d80)=""/189, 0xbd}], 0x2}, 0x6}], 0x1, 0x2160, 0x0)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
bind$alg(r1, 0x0, 0x0)
r9 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf}}}, 0x24}}, 0x14) (async)
sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf}}}, 0x24}}, 0x14)
recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x35}]}}}]}, 0x44}}, 0x0)

680.577287ms ago: executing program 1 (id=3599):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}, 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x601, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x16, 0x2}, {0x10, 0x7}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

680.209961ms ago: executing program 0 (id=3600):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x3, 0x0, 0x48, @mcast2, @loopback, 0x7800, 0x8000, 0x9, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x3, 0x0, 0x48, @mcast2, @loopback, 0x7800, 0x8000, 0x9, 0x1}})
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x236, 0xb7, 0x0, 0x1, [@generic="11cc275e92761fcb638e20bb205dcb7e40bebc86c6658838d570832799a65c4cdad17818a5502cdf48eca011a5a2d03d988352cedc971ea6ee390593ec04fcae4b75b57a59a97b843ef4b4cb4adc0dfe0ec7cc3c4a480bebcdba490ddfcf6bf91ce980c492b6e71a3cf615d5fea2098c9796d2f14bc2feb8cc515a0be5a0a3f233284a565ca46ce634564db25cd7df916399081f22e7964ef30f50a9f9319e32065cb177d4e4da9e02b5efb85e6492f65a85bdb714bcb9c4070fba24ed03ea487d9842405ece189bed05a66beb15e53b67370b", @generic="8877cfc32d9a6a29531a77f3efa436ad24b2382ceb73f316b455b5e6f5e8cbe24f3cbefd5ccd28ebfce013e6ef10d3c7a1d8f4c102c7b42840d3498fff5e4c6b956a4c64a3ea3a3bd391ed0fbc452aff0a08c3bb5a8239906c7ef219bffdfc61e31b741edae1386771c20b42c196e38a467a49d0c8d05e2872e4a23e0c0f220849996b4ebe629998ae5f6e2953fde53ce2b14cdcf4848d3a0d6c473040b3add35041fa4d69196af0b0396f1c17d5481faebfa8e48d563b", @typed={0x4, 0xc0}, @generic="a64e2f69bb83fa52", @generic="d6e5c0bf209d1d3052d6940409107f494be74fb7bf1f2f6d4fdb989894f8a0bc2ad6ef27114d0f4cf7133963c8021979d9b83e461f2a19d99017e5af4cecc8a6a777d6cf99b90a8bb9ffa5a88d7da5f7682ae88e8e0818b85fa29fd89db4a04c8857d9b1a87ebe42337602da422af646d9fadc9d9de22e890a9ef02b64bb0c227dbc074410025c9ac898667db4ac410dbdb3d2bda75f1acab2b06c8f"]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x58, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe38, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1dcf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x50)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x8)

499.988301ms ago: executing program 2 (id=3601):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r0 = socket$inet(0x2, 0x2, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) (async)
r3 = socket$kcm(0x2d, 0x2, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000580)={r3}) (async, rerun: 32)
close(r2) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r8) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0xc, 0x8, 0x1}}}}]}, 0x48}}, 0x4008800) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="050000b11e525a9e6e5c872104392d9d45bc0eb5d24162cf6e4f1f6e7722fbcde8cde6d944ee43b9867e110ecba9bc7b371f6be037c00e2914097ccc47a59ef1cd0024c5d5df44a488f3148ba34f7498e8d86f07e623b11ac1571b480ec119c40b727841d047b0af4012556d8949ea86b4a44f1ac7b0010c6f8f4d47a6679b13edef9c38de58a4ce28e5dbbd06de2f5591ca0ce50a50eec2259c1bcc2bf84b7d4f3eda7d23e2ee1e89e5f492dcdd65be0000000000000000"], 0x57)
writev(r9, &(0x7f0000000080)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {&(0x7f0000000780)="6e7e6b93fa690bb996bbb87c04f8abc9bff81177ad1b9781aa92048e8456143722f1b80f48e6dcd42c2e2c3f105c787bc7df4943679286794519ca2a79a8103ba0f3b5e73b2c5154a42457e1ee8050ce33998fafe7bb350596d7aeb97e0b3e642213043b8a8b0b669d937944d698cca3fb93966dec37617bcc29fab4b39ad7d32856e520ece628a03d5d3e152bff78e3066cc1aa4e143a3a7934cd801c2242e7241a64caec52f0b8d5143d467b12cf8805d0a33296c88f56c6810c48320fd7790a704ecc89ab729ad3d31d95415246421aacbc2e8f0222261fc0eb36c26a75abf1a3c03e6791b4f09260419d7f4a28d2ce2dfdf201b9d039e1820a98e4", 0xfd}, {&(0x7f00000003c0)="16e1e7dd620e931defd5c62fec1d7e6d7870a22e12afd2c53fe79afd419fe0868cb0de05ef891706d8f43056e069e15d610328ba6c63f73e2c2e2f1d832108", 0x3f}], 0x3)

421.615959ms ago: executing program 0 (id=3602):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xe}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x8)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x100, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r2, 0x50487, 0x8044}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008884)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES64=r4, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x114, r4, 0x300, 0x7f, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5fd}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb1, 0x1, "2c65003052a64df5b7fb84fbf695e4e087b61e843f705c9a220c4f90ecc0f255c8ad7650669316e764de2dde9a370025e087dac72fd579e3c35f37994697fd7143552c2177a6a5c86668eb28516b1e26edcbe319fc714b417b84f66c072eaca455eea9a87066676f9a425b730fa74a35589ab5fa6e5e7dfc7de8ef69fa20fed3d5adde33958042e737663a6579f4dd18e512a170ceb12206b9837e76867628ae016dd443d5c7fa528fa88685e3"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc}]}, 0x114}, 0x1, 0x0, 0x0, 0x8041}, 0x24000840)
sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000000308010100000000000000000a00000005000300840000001400048008000640000000090800054000000004b2f136f12d5c9b44c04f8cbc16ae6a355595c578331b5520518647e2b0c3d5b009"], 0x30}}, 0x4000050)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x24, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffff}, {0x6, 0xfff3}, {0x6, 0x8}}}, 0x24}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x50, r10, 0xb9075000)
r11 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r11, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x162, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7040fedbdf25080000000600010004000000872b1df67f2b0577ffdb0c0016000900000000000000080005000200000006000e0003000000060001000800"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000001)
sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r13 = openat$cgroup_devices(r12, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r13, 0x0, 0xa)
socket$netlink(0x10, 0x3, 0x0)

420.955096ms ago: executing program 1 (id=3603):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r7, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x6b3c0fe, '\x00', 0x0, r7, 0x1, 0x0, 0x4}, 0x50) (async)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0xb, 0x9}}}, 0x24}}, 0x20040054)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) (async, rerun: 32)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (rerun: 32)

311.513881ms ago: executing program 0 (id=3604):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

310.969934ms ago: executing program 1 (id=3605):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x40000000, 0x20000054}, 0x0)

251.373494ms ago: executing program 1 (id=3606):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x803, 0x2)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
setsockopt$inet6_opts(r9, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r4})
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r8})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

251.070338ms ago: executing program 2 (id=3607):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800c046)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syz_tun\x00', @broadcast})
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
getsockopt$MRT6(r4, 0x29, 0x0, &(0x7f0000000140), &(0x7f0000000500)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r8}, 0x18)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000050119400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r14=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x282}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0)
r15 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r15, 0x4008af60, &(0x7f0000000280)={@local})
socket$nl_route(0x10, 0x3, 0x0)

171.034798ms ago: executing program 0 (id=3608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x1d, &(0x7f0000000080), 0x4) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000780)={r3, &(0x7f0000000800), &(0x7f0000000880)=""/2, 0x2}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0x0, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff, 0xff], 'macsec0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8e, 0x0, 0x7, 0x7}, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async)
unshare(0x20000) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004200)="2000000021008108090f9becdb4cb92e02000069fe6b02015400000000000000", 0x20}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000001000080000007000eaffffddacab3a22", @ANYRESHEX=r1, @ANYBLOB="03000000431006003000128008000100736974002400028008000100", @ANYRES32, @ANYBLOB="08000300ac1414bb050004"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

120.128838ms ago: executing program 1 (id=3609):
r0 = socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x15)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
recvmsg(r6, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

60.315201ms ago: executing program 0 (id=3610):
r0 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041)
close(0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x3}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r3)
socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)

0s ago: executing program 1 (id=3611):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00'})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@dellinkprop={0xb8, 0x6d, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x200, 0x21000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x81}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'ip6gre0\x00'}]}, @IFLA_PORT_SELF={0x30, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c81124b2ee2dfbf31f1eb9f059bdb4c0"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, @IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x7}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x600}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00'}) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@dellinkprop={0xb8, 0x6d, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x200, 0x21000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x81}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_1\x00'}, {0x14, 0x35, 'ip6gre0\x00'}]}, @IFLA_PORT_SELF={0x30, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c81124b2ee2dfbf31f1eb9f059bdb4c0"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, @IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x7}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)

kernel console output (not intermixed with test programs):

 68 callbacks suppressed
[  218.133283][T13961] netlink: 'syz.2.2094': attribute type 1 has an invalid length.
[  218.178920][T13967] syzkaller0: entered promiscuous mode
[  218.190089][T13967] syzkaller0: entered allmulticast mode
[  218.536695][T13973] netlink: 'syz.2.2098': attribute type 11 has an invalid length.
[  218.544275][T13976] pim6reg1: entered promiscuous mode
[  218.546165][T13976] pim6reg1: entered allmulticast mode
[  218.962672][T14006] xt_connbytes: Forcing CT accounting to be enabled
[  219.064953][T14015] bond38 (unregistering): Released all slaves
[  219.165715][T14024] 8021q: VLANs not supported on ip6gre0
[  219.575561][T14034] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.681102][T14040] lo speed is unknown, defaulting to 1000
[  219.791365][T14042] lo speed is unknown, defaulting to 1000
[  220.044067][T14047] xt_ecn: cannot match TCP bits for non-tcp packets
[  220.165465][T14049] netlink: 'syz.1.2121': attribute type 1 has an invalid length.
[  220.329134][T14053] bond38: (slave geneve6): making interface the new active one
[  220.332118][T14053] bond38: (slave geneve6): Enslaving as an active interface with an up link
[  220.335111][ T5962] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  220.338028][ T5962] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  220.342973][ T5962] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  220.345834][ T5962] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  220.365504][T14051] syzkaller0: entered promiscuous mode
[  220.367309][T14051] syzkaller0: entered allmulticast mode
[  221.511049][T14074] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.512081][T14071] syzkaller0: entered promiscuous mode
[  221.515574][T14071] syzkaller0: entered allmulticast mode
[  221.517028][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.531205][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.537104][ T5844] lo speed is unknown, defaulting to 1000
[  221.542044][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.544833][T14071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.546943][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.549395][ T5844] syz0: Port: 1 Link ACTIVE
[  221.553198][T14070] tipc: Resetting bearer <eth:syzkaller0>
[  221.567112][T14070] tipc: Disabling bearer <eth:syzkaller0>
[  221.571436][ T5858] lo speed is unknown, defaulting to 1000
[  221.573616][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.575897][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.578266][ T5844] lo speed is unknown, defaulting to 1000
[  221.580993][ T5771] lo speed is unknown, defaulting to 1000
[  221.583144][ T5844] lo speed is unknown, defaulting to 1000
[  221.585381][T14075] netlink: 'syz.2.2126': attribute type 4 has an invalid length.
[  221.687302][T14086] __nla_validate_parse: 5 callbacks suppressed
[  221.687318][T14086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'.
[  221.699787][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'.
[  221.715479][T14086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'.
[  221.810584][T14099] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2134'.
[  221.831352][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2133'.
[  221.867370][T14106] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2134'.
[  221.914166][T14111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.921831][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'.
[  221.992313][T14124] bond53: invalid ARP target 0.0.0.0 specified for addition
[  221.995322][T14124] bond53: option arp_ip_target: invalid value (0)
[  221.999655][T14124] bond53 (unregistering): Released all slaves
[  222.111346][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'.
[  222.394093][T14145] macsec4: entered promiscuous mode
[  222.396224][T14145] bridge0: entered promiscuous mode
[  222.398890][T14145] bridge0: port 2(macsec4) entered blocking state
[  222.402034][T14145] bridge0: port 2(macsec4) entered disabled state
[  222.404815][T14145] macsec4: entered allmulticast mode
[  222.406950][T14145] bridge0: entered allmulticast mode
[  222.412072][T14145] macsec4: left allmulticast mode
[  222.414135][T14145] bridge0: left allmulticast mode
[  222.417436][T14145] bridge0: left promiscuous mode
[  222.510762][T14149] syzkaller0: entered promiscuous mode
[  222.512377][T14149] syzkaller0: entered allmulticast mode
[  222.531364][T14149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.549352][T14148] tipc: Resetting bearer <eth:syzkaller0>
[  222.565812][T14148] tipc: Disabling bearer <eth:syzkaller0>
[  222.681785][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'.
[  222.686114][T14155] bridge85: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  222.728810][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'.
[  222.862515][T14169] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  222.868837][T14170] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  223.021565][T14185] smc: removing ib device syz1
[  223.182709][T14193] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  223.210639][T14193] lo speed is unknown, defaulting to 1000
[  223.597485][T14200] lo speed is unknown, defaulting to 1000
[  223.865382][T14208] syzkaller0: left promiscuous mode
[  223.971782][T14218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  223.974915][T14218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.070252][T14224] validate_nla: 26 callbacks suppressed
[  224.070263][T14224] netlink: 'syz.2.2168': attribute type 1 has an invalid length.
[  224.078532][T14226] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  224.098908][T14224] 8021q: adding VLAN 0 to HW filter on device bond38
[  224.173106][T14229] vlan3: entered allmulticast mode
[  224.179804][T14229] bond53: entered allmulticast mode
[  224.297880][T14238] netlink: 'syz.2.2172': attribute type 1 has an invalid length.
[  224.302872][T14238] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR
[  224.677471][T14258] macvtap0: left promiscuous mode
[  224.683394][T14258] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  224.686443][T14258] macvtap2: left promiscuous mode
[  224.688408][T14258] mac80211_hwsim hwsim24 wlan1: left promiscuous mode
[  224.697838][T14258] ipvlan0: left promiscuous mode
[  225.156161][T14310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.159656][T14310] syzkaller0: entered promiscuous mode
[  225.162924][T14310] syzkaller0: entered allmulticast mode
[  225.167825][T14311] netlink: 'syz.1.2187': attribute type 30 has an invalid length.
[  225.185131][T14311] bond39: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  225.190640][T14311] bond39 (unregistering): Released all slaves
[  225.216842][T14310] tipc: Resetting bearer <eth:syzkaller0>
[  225.226179][T14310] bond0: entered promiscuous mode
[  225.229318][T14310] bond0: left promiscuous mode
[  225.268537][T14310] bond0: entered promiscuous mode
[  225.272513][T14310] bond0: left promiscuous mode
[  225.313700][T14309] tipc: Resetting bearer <eth:syzkaller0>
[  225.325069][T14309] tipc: Disabling bearer <eth:syzkaller0>
[  225.511073][T14316] netlink: 'syz.2.2190': attribute type 27 has an invalid length.
[  225.514342][T14316] netlink: 'syz.2.2190': attribute type 4 has an invalid length.
[  225.664042][T14332] netlink: 'syz.2.2193': attribute type 4 has an invalid length.
[  225.701056][ T5844] lo speed is unknown, defaulting to 1000
[  225.703440][ T5844] syz0: Port: 1 Link DOWN
[  225.705148][T14332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.705352][ T5844] lo speed is unknown, defaulting to 1000
[  225.968240][T14349] netlink: 'syz.0.2198': attribute type 27 has an invalid length.
[  225.981404][T14349] netdevsim0: left promiscuous mode
[  225.987044][T14349] geneve5: left allmulticast mode
[  225.991769][T14349] gre0: left allmulticast mode
[  225.994319][T14349] bond41: left allmulticast mode
[  226.001283][T14349] ipvlan2: left allmulticast mode
[  226.004084][T14349] bond42: left allmulticast mode
[  226.006682][T14349] vlan2: left allmulticast mode
[  226.008671][T14349] bond43: left allmulticast mode
[  226.014533][T14349] bond49: left promiscuous mode
[  226.027444][T14349] bond50: left promiscuous mode
[  226.030305][T14349] bridge84: left allmulticast mode
[  226.032571][T14349] bond51: left promiscuous mode
[  226.034151][T14349] bond51: left allmulticast mode
[  226.036410][T14349] bond52: left promiscuous mode
[  226.038006][T14349] ip6gretap6: left promiscuous mode
[  226.039783][T14349] bond52: left allmulticast mode
[  226.042001][T14349] ip6gretap6: left allmulticast mode
[  226.073115][T14357] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  226.154187][T14367] ip6gretap0: entered promiscuous mode
[  226.158344][T14367] macsec4: entered promiscuous mode
[  226.164544][T14367] ip6gretap0: left promiscuous mode
[  226.244053][T14378] netlink: 'syz.2.2206': attribute type 13 has an invalid length.
[  226.308261][T14378] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  226.310687][T14378] tipc: Bearer <udp:s>: trying with adjusted priority
[  226.316779][T14378] tipc: Enabled bearer <udp:s>, priority 9
[  226.421836][T14392] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  226.438835][T14393] ip6gretap8: entered promiscuous mode
[  226.720332][T14418] __nla_validate_parse: 22 callbacks suppressed
[  226.720343][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2217'.
[  226.758416][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'.
[  226.762138][T14426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'.
[  226.770976][T14427] lo speed is unknown, defaulting to 1000
[  226.816363][T14429] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2219'.
[  227.004322][T14438] netlink: 'syz.1.2222': attribute type 7 has an invalid length.
[  227.232812][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'.
[  227.237736][T14444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2224'.
[  227.371612][T14456] lo speed is unknown, defaulting to 1000
[  227.431333][T14463] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  227.471041][T14465] syzkaller0: entered promiscuous mode
[  227.486568][T14465] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.552395][T14469] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  227.623098][T14476] pim6reg: left allmulticast mode
[  227.676409][T14478] veth1_to_bond: entered allmulticast mode
[  227.686586][T14477] veth1_to_bond: left allmulticast mode
[  227.744673][T14480] bond1: option mode: unable to set because the bond device is up
[  227.749455][T14482] bond1: option mode: unable to set because the bond device is up
[  227.850850][T14482] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  227.883884][T14483] vlan3: entered allmulticast mode
[  227.887798][T14483] bond54: entered allmulticast mode
[  227.907978][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2237'.
[  227.978692][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2239'.
[  228.009453][T14500] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2240'.
[  228.172921][T14512] lo speed is unknown, defaulting to 1000
[  228.214602][T14521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2243'.
[  228.246097][T14524] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  228.454747][T14530] pim6reg1: entered promiscuous mode
[  228.456835][T14530] pim6reg1: entered allmulticast mode
[  228.622128][T14553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.630749][T14552] syzkaller0: entered promiscuous mode
[  228.632536][T14552] syzkaller0: entered allmulticast mode
[  228.664883][T14552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.675162][T14548] lo speed is unknown, defaulting to 1000
[  228.679528][T14551] tipc: Resetting bearer <eth:syzkaller0>
[  228.692139][T14551] tipc: Disabling bearer <eth:syzkaller0>
[  228.800095][T14561] tipc: Resetting bearer <eth:syzkaller0>
[  228.802419][T14561] tipc: Resetting bearer <eth:syzkaller0>
[  228.835936][T14561] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  228.858255][T14564] vlan3: entered promiscuous mode
[  228.897881][T14570] bond39: entered promiscuous mode
[  228.899790][T14570] 8021q: adding VLAN 0 to HW filter on device bond39
[  228.912919][T14570] 8021q: adding VLAN 0 to HW filter on device bond39
[  228.917754][T14570] bond39: (slave wireguard2): The slave device specified does not support setting the MAC address
[  228.921760][T14570] bond39: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  228.926920][T14570] bond39: (slave wireguard2): making interface the new active one
[  228.930478][T14570] wireguard2: entered promiscuous mode
[  228.933226][T14570] bond39: (slave wireguard2): Enslaving as an active interface with an up link
[  229.063580][T14586] syzkaller0: entered promiscuous mode
[  229.065521][T14586] syzkaller0: entered allmulticast mode
[  229.091543][T14586] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  229.250292][T14604] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  229.268018][T14604] team1: entered promiscuous mode
[  229.270597][T14604] team1: entered allmulticast mode
[  230.235507][T14656] sctp: [Deprecated]: syz.1.2272 (pid 14656) Use of int in max_burst socket option.
[  230.235507][T14656] Use struct sctp_assoc_value instead
[  230.243501][T14656] bond0: Error: Cannot enslave bond to itself.
[  230.298991][T14662] validate_nla: 10 callbacks suppressed
[  230.299002][T14662] netlink: 'syz.2.2273': attribute type 1 has an invalid length.
[  230.310823][T14663] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  230.316811][T14663] bond1: (slave vcan0): Error -95 calling set_mac_address
[  230.363239][T14667] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.415378][T14670] bond40: Removing last arp target with arp_interval on
[  230.644998][T14702] xt_cgroup: invalid path, errno=-2
[  230.750636][T14715] netlink: 'syz.1.2282': attribute type 1 has an invalid length.
[  230.962332][T14735] lo speed is unknown, defaulting to 1000
[  231.292983][T14743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.324528][T14747] erspan0: entered promiscuous mode
[  231.627375][T14759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.635090][T14759] netlink: 'syz.1.2293': attribute type 13 has an invalid length.
[  231.692670][T14759] tipc: Resetting bearer <eth:syzkaller0>
[  231.734300][T14763] tipc: Resetting bearer <eth:syzkaller0>
[  231.737868][T14761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.741408][T14761] syzkaller0: entered promiscuous mode
[  231.743512][T14761] syzkaller0: entered allmulticast mode
[  231.748167][T14759] syzkaller0: Caught tx_queue_len zero misconfig
[  231.762277][T14762] tipc: Resetting bearer <eth:syzkaller0>
[  231.766257][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  231.777773][T14760] tipc: Disabling bearer <eth:syzkaller0>
[  231.825596][T14768] __nla_validate_parse: 15 callbacks suppressed
[  231.825608][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'.
[  232.286587][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2300'.
[  232.306391][T14780] bridge23: port 1(veth23) entered blocking state
[  232.308643][T14780] bridge23: port 1(veth23) entered disabled state
[  232.311920][T14780] veth23: entered allmulticast mode
[  232.315604][T14780] veth23: entered promiscuous mode
[  232.322267][T14780] bridge23: port 2(veth0_to_bond) entered blocking state
[  232.325349][T14780] bridge23: port 2(veth0_to_bond) entered disabled state
[  232.328484][T14780] veth0_to_bond: entered allmulticast mode
[  232.332659][T14780] veth0_to_bond: entered promiscuous mode
[  232.451831][T14789] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^H'
[  232.458799][T14789] CPU: 1 UID: 0 PID: 14789 Comm: syz.2.2302 Not tainted syzkaller #0 PREEMPT(full) 
[  232.458816][T14789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.458823][T14789] Call Trace:
[  232.458829][T14789]  <TASK>
[  232.458835][T14789]  dump_stack_lvl+0x189/0x250
[  232.458858][T14789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.458874][T14789]  ? __pfx__printk+0x10/0x10
[  232.458890][T14789]  ? kernfs_path_from_node+0x2f/0x290
[  232.458905][T14789]  ? kernfs_path_from_node+0x250/0x290
[  232.458916][T14789]  ? kernfs_path_from_node+0x2f/0x290
[  232.458933][T14789]  sysfs_warn_dup+0x8e/0xa0
[  232.458946][T14789]  sysfs_do_create_link_sd+0xc0/0x110
[  232.458962][T14789]  device_add_class_symlinks+0x1cf/0x240
[  232.458980][T14789]  device_add+0x475/0xb50
[  232.458996][T14789]  wiphy_register+0x1d2e/0x2d20
[  232.459026][T14789]  ? __pfx_wiphy_register+0x10/0x10
[  232.459043][T14789]  ? __pfx_netdev_run_todo+0x10/0x10
[  232.459058][T14789]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  232.459078][T14789]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  232.459096][T14789]  ieee80211_register_hw+0x3473/0x40d0
[  232.459123][T14789]  ? ieee80211_register_hw+0x13d1/0x40d0
[  232.459145][T14789]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  232.459158][T14789]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  232.459178][T14789]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.459194][T14789]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.459218][T14789]  ? __hrtimer_setup+0x187/0x210
[  232.459230][T14789]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  232.459246][T14789]  mac80211_hwsim_new_radio+0x2f9a/0x5260
[  232.459287][T14789]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  232.459303][T14789]  ? trace_kmalloc+0x1f/0xd0
[  232.459317][T14789]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  232.459334][T14789]  ? kstrndup+0xbf/0x160
[  232.459356][T14789]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  232.459373][T14789]  ? __pfx___nla_validate_parse+0x10/0x10
[  232.459398][T14789]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.459421][T14789]  ? rcu_is_watching+0x15/0xb0
[  232.459438][T14789]  ? __nla_parse+0x40/0x60
[  232.459453][T14789]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  232.459476][T14789]  genl_family_rcv_msg_doit+0x215/0x300
[  232.459497][T14789]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  232.459524][T14789]  ? bpf_lsm_capable+0x9/0x20
[  232.459537][T14789]  ? security_capable+0x7e/0x2e0
[  232.459559][T14789]  genl_rcv_msg+0x60e/0x790
[  232.459602][T14789]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.459617][T14789]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.459641][T14789]  netlink_rcv_skb+0x208/0x470
[  232.459652][T14789]  ? __lock_acquire+0xab9/0xd20
[  232.459664][T14789]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.459706][T14789]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.459734][T14789]  ? down_read+0x1ad/0x2e0
[  232.459769][T14789]  genl_rcv+0x28/0x40
[  232.459784][T14789]  netlink_unicast+0x82f/0x9e0
[  232.459808][T14789]  ? __pfx_netlink_unicast+0x10/0x10
[  232.459828][T14789]  ? netlink_sendmsg+0x642/0xb30
[  232.459839][T14789]  ? skb_put+0x11b/0x210
[  232.459855][T14789]  netlink_sendmsg+0x805/0xb30
[  232.459875][T14789]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.459891][T14789]  ? aa_sock_msg_perm+0xf1/0x1d0
[  232.459910][T14789]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.459921][T14789]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.459935][T14789]  __sock_sendmsg+0x21c/0x270
[  232.459954][T14789]  ____sys_sendmsg+0x505/0x830
[  232.459973][T14789]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.459994][T14789]  ? import_iovec+0x74/0xa0
[  232.460012][T14789]  ___sys_sendmsg+0x21f/0x2a0
[  232.460028][T14789]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.460070][T14789]  ? __fget_files+0x2a/0x420
[  232.460081][T14789]  ? __fget_files+0x3a0/0x420
[  232.460101][T14789]  __x64_sys_sendmsg+0x19b/0x260
[  232.460117][T14789]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.460138][T14789]  ? do_user_addr_fault+0xc85/0x1380
[  232.460154][T14789]  ? do_syscall_64+0xbe/0xfa0
[  232.460169][T14789]  do_syscall_64+0xfa/0xfa0
[  232.460179][T14789]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.460189][T14789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.460200][T14789]  ? exc_page_fault+0xab/0x100
[  232.460214][T14789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.460224][T14789] RIP: 0033:0x7f8a8d58f6c9
[  232.460235][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.460244][T14789] RSP: 002b:00007f8a8e3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.460258][T14789] RAX: ffffffffffffffda RBX: 00007f8a8d7e6090 RCX: 00007f8a8d58f6c9
[  232.460266][T14789] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  232.460273][T14789] RBP: 00007f8a8d611f91 R08: 0000000000000000 R09: 0000000000000000
[  232.460280][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.460288][T14789] R13: 00007f8a8d7e6128 R14: 00007f8a8d7e6090 R15: 00007ffc26154e98
[  232.460311][T14789]  </TASK>
[  232.782398][T14803] veth0_to_bond: left allmulticast mode
[  232.784158][T14803] veth0_to_bond: left promiscuous mode
[  232.785935][T14803] bridge23: port 2(veth0_to_bond) entered disabled state
[  232.802052][T14803] veth23: left allmulticast mode
[  232.804005][T14803] veth23: left promiscuous mode
[  232.805637][T14803] bridge23: port 1(veth23) entered disabled state
[  232.832429][T14803] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  232.898943][T14818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.917353][T14822] bridge87: entered promiscuous mode
[  232.923448][T14822] bridge87: entered allmulticast mode
[  232.948059][T14822] team0: Port device bridge87 added
[  232.964975][T14823] netlink: 'syz.2.2308': attribute type 2 has an invalid length.
[  232.971102][T14823] @;: entered promiscuous mode
[  233.152064][T14854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2316'.
[  233.233945][T14866] netlink: 'syz.1.2315': attribute type 12 has an invalid length.
[  233.263524][T14866] netlink: 'syz.1.2315': attribute type 4 has an invalid length.
[  233.289821][T14869] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  233.312560][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2319'.
[  233.435592][T14871] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2320'.
[  233.441449][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2320'.
[  233.445027][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2320'.
[  233.459161][T14871] 0: reclassify loop, rule prio 0, protocol 800
[  233.561695][T14873] lo speed is unknown, defaulting to 1000
[  233.572598][T14876] netlink: 'syz.2.2322': attribute type 1 has an invalid length.
[  233.576100][T14876] netlink: 'syz.2.2322': attribute type 2 has an invalid length.
[  233.647529][T14880] bond40 (unregistering): Released all slaves
[  233.797484][T14893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2326'.
[  233.816018][T14893] bond55: entered promiscuous mode
[  233.818198][T14893] 8021q: adding VLAN 0 to HW filter on device bond55
[  233.830241][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2325'.
[  233.836302][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2325'.
[  233.908283][T14893] bond55 (unregistering): Released all slaves
[  233.944790][T14891] vlan1: entered promiscuous mode
[  233.946879][T14891] bond0: entered promiscuous mode
[  233.964010][T14895] vlan1: entered promiscuous mode
[  234.341361][T14919] lo speed is unknown, defaulting to 1000
[  234.402976][T14937] netlink: 'syz.0.2336': attribute type 1 has an invalid length.
[  234.419495][T14937] 8021q: adding VLAN 0 to HW filter on device bond55
[  234.426763][T14937] vlan1: entered promiscuous mode
[  234.428359][T14937] bond55: entered promiscuous mode
[  234.430576][T14937] vlan1: entered allmulticast mode
[  234.432249][T14937] bond55: entered allmulticast mode
[  234.501455][T14940] syzkaller0: entered promiscuous mode
[  234.503698][T14940] syzkaller0: entered allmulticast mode
[  234.633692][T14953] netlink: 'syz.0.2341': attribute type 5 has an invalid length.
[  235.189320][T15010] 8021q: adding VLAN 0 to HW filter on device bond40
[  235.203588][T15010] bond40: (slave ip6gretap5): making interface the new active one
[  235.206888][T15010] bond40: (slave ip6gretap5): Enslaving as an active interface with an up link
[  235.218421][T15010] veth25: entered promiscuous mode
[  235.223199][T15010] bond40: (slave veth25): Enslaving as an active interface with a down link
[  235.238276][T15013] bond41: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  235.243325][T15013] bond41 (unregistering): Released all slaves
[  235.255790][T15010] erspan0: entered allmulticast mode
[  235.261443][T15010] bond40: (slave erspan0): Enslaving as an active interface with an up link
[  235.270275][T15010] bond40: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  235.500861][T15022] syzkaller0: entered promiscuous mode
[  235.502689][T15022] syzkaller0: entered allmulticast mode
[  235.514760][T15022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.518415][T15022] syzkaller0: refused to change device tx_queue_len
[  235.525813][T15021] tipc: Resetting bearer <eth:syzkaller0>
[  235.543944][T15021] tipc: Disabling bearer <eth:syzkaller0>
[  235.648766][T15030] lo speed is unknown, defaulting to 1000
[  235.699429][T15034] validate_nla: 1 callbacks suppressed
[  235.699438][T15034] netlink: 'syz.2.2361': attribute type 5 has an invalid length.
[  235.704060][T15033] syzkaller0: entered promiscuous mode
[  235.706286][T15033] syzkaller0: entered allmulticast mode
[  235.710235][T15033] netlink: 'syz.0.2362': attribute type 4 has an invalid length.
[  235.721456][T15034] geneve7: entered promiscuous mode
[  235.723193][T15034] geneve7: entered allmulticast mode
[  235.731874][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  235.732424][T15033] netlink: 'syz.0.2362': attribute type 4 has an invalid length.
[  235.740813][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  235.743357][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  235.745691][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  235.874307][T15039] netlink: 'syz.2.2364': attribute type 4 has an invalid length.
[  235.883631][T15039] netlink: 'syz.2.2364': attribute type 4 has an invalid length.
[  235.889248][   T24] lo speed is unknown, defaulting to 1000
[  235.895572][   T24] syz0: Port: 1 Link ACTIVE
[  235.898651][   T24] lo speed is unknown, defaulting to 1000
[  235.994802][T15041] netlink: 'syz.2.2365': attribute type 13 has an invalid length.
[  235.999588][T15042] netlink: 'syz.2.2365': attribute type 13 has an invalid length.
[  236.167058][ T5844] lo speed is unknown, defaulting to 1000
[  236.170846][ T5844] syz0: Port: 1 Link DOWN
[  236.173516][ T5962] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  236.176336][ T5962] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  236.180962][ T5844] lo speed is unknown, defaulting to 1000
[  236.181323][ T5962] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  236.185880][ T5962] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  236.189536][T15047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.193939][T15047] netlink: 'syz.1.2366': attribute type 13 has an invalid length.
[  236.198406][T15047] tipc: Resetting bearer <eth:syzkaller0>
[  236.209174][T15047] syzkaller0: Caught tx_queue_len zero misconfig
[  236.468347][T15072] netlink: 'syz.1.2369': attribute type 13 has an invalid length.
[  236.474983][T15072] tipc: Resetting bearer <eth:syzkaller0>
[  236.521423][T15075] netlink: 'syz.2.2371': attribute type 21 has an invalid length.
[  236.587650][T15079] bond41: option downdelay: invalid value (18446744073709547007)
[  236.591080][T15079] bond41: option downdelay: allowed values 0 - 2147483647
[  236.603480][T15079] bond41 (unregistering): Released all slaves
[  236.784040][T15097] pim6reg1: entered promiscuous mode
[  236.786183][T15097] pim6reg1: entered allmulticast mode
[  236.793317][T15099] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.853478][T15097] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.856506][T15097] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.926871][T15105] __nla_validate_parse: 23 callbacks suppressed
[  236.926886][T15105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2381'.
[  236.937226][T15105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2381'.
[  236.976750][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2377'.
[  237.158167][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2385'.
[  237.252939][T15125] bond0: Caught tx_queue_len zero misconfig
[  237.259150][T15125] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2387'.
[  237.422731][T15130] x_tables: duplicate underflow at hook 3
[  237.459818][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2390'.
[  237.464968][T15135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2390'.
[  237.493813][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'.
[  237.496888][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'.
[  237.505484][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'.
[  237.657275][T15152] erspan0: left promiscuous mode
[  237.665062][T15152] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  237.678236][T15156] bond1: option mode: unable to set because the bond device is up
[  237.695554][T15152] lo speed is unknown, defaulting to 1000
[  237.734961][T15154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.932907][T15177] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  237.937772][T15177] bond41: (slave vxcan1): Error -95 calling set_mac_address
[  238.026149][T15189] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  238.053044][T15197] syzkaller0: Caught tx_queue_len zero misconfig
[  238.075430][T15199] bridge25: entered allmulticast mode
[  238.121640][T15203] workqueue: Failed to create a rescuer kthread for wq "bond42": -EINTR
[  238.159803][T15210] veth1_to_bond: entered allmulticast mode
[  238.165304][T15210] veth1_to_bond: entered promiscuous mode
[  238.168314][T15209] veth1_to_bond: left promiscuous mode
[  238.171498][T15209] veth1_to_bond: left allmulticast mode
[  238.255107][T15214] bridge52: port 1(veth15) entered blocking state
[  238.257306][T15214] bridge52: port 1(veth15) entered disabled state
[  238.259778][T15214] veth15: entered allmulticast mode
[  238.263160][T15214] veth15: entered promiscuous mode
[  238.269966][T15214] veth0_to_bond: left allmulticast mode
[  238.271700][T15214] veth0_to_bond: left promiscuous mode
[  238.273425][T15214] bridge38: port 3(veth0_to_bond) entered disabled state
[  238.277702][T15214] bridge52: port 2(veth0_to_bond) entered blocking state
[  238.280835][T15214] bridge52: port 2(veth0_to_bond) entered disabled state
[  238.283039][T15214] veth0_to_bond: entered allmulticast mode
[  238.286383][T15214] veth0_to_bond: entered promiscuous mode
[  238.317329][T15216] veth1: Caught tx_queue_len zero misconfig
[  238.547759][T15222] syzkaller1: entered promiscuous mode
[  238.549584][T15222] syzkaller1: entered allmulticast mode
[  238.698218][T15226] sctp: [Deprecated]: syz.0.2419 (pid 15226) Use of int in max_burst socket option deprecated.
[  238.698218][T15226] Use struct sctp_assoc_value instead
[  238.817024][T15232] lo speed is unknown, defaulting to 1000
[  239.051694][T15244] gretap4: entered allmulticast mode
[  239.119593][T15247] vlan0: entered promiscuous mode
[  239.121357][T15247] bridge0: entered promiscuous mode
[  239.123024][T15247] vlan0: entered allmulticast mode
[  239.124567][T15247] bridge0: entered allmulticast mode
[  239.453577][T15267] 8021q: adding VLAN 0 to HW filter on device bond42
[  239.488017][T15270] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.579221][T15272] bond0: left allmulticast mode
[  239.582543][T15272] : left allmulticast mode
[  239.587667][T15272] tipc: Resetting bearer <eth:syzkaller0>
[  239.591688][T15272] syzkaller0: left promiscuous mode
[  239.593978][T15272] syzkaller0: left allmulticast mode
[  239.604136][T15272] bond39: left promiscuous mode
[  239.608809][T15272] wireguard2: left promiscuous mode
[  239.655066][T15273] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  239.660444][ T9015] syz2: Port: 1 Link DOWN
[  239.660478][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  239.665752][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  239.677113][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  239.681528][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  239.834946][T15286] IPVS: Scheduler module ip_vs_sip not found
[  240.494915][T15313] syzkaller1: tun_chr_ioctl cmd 1074025677
[  240.497384][T15313] syzkaller1: linktype set to 768
[  241.728120][T15329] lo speed is unknown, defaulting to 1000
[  241.822282][T15336] lo speed is unknown, defaulting to 1000
[  242.314218][T15365] syzkaller0: entered promiscuous mode
[  242.316352][T15365] syzkaller0: entered allmulticast mode
[  242.375952][T15372] macsec2: entered promiscuous mode
[  242.377689][T15372] veth1_to_hsr: entered promiscuous mode
[  242.379404][T15372] macsec2: entered allmulticast mode
[  242.383000][T15372] veth1_to_hsr: entered allmulticast mode
[  242.385943][T15372] veth1_to_hsr: left allmulticast mode
[  242.387574][T15372] veth1_to_hsr: left promiscuous mode
[  242.548362][T15383] sit5: entered promiscuous mode
[  242.602598][T15390] __nla_validate_parse: 21 callbacks suppressed
[  242.602609][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2465'.
[  242.674903][T15393] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  242.679707][T15393] xfrm0: mtu less than device minimum
[  242.740799][T15396] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.749985][T15396] syzkaller0: entered promiscuous mode
[  242.752018][T15396] syzkaller0: entered allmulticast mode
[  242.759682][T15396] tipc: Resetting bearer <eth:syzkaller0>
[  242.770036][ T8272] syz2: Port: 1 Link ACTIVE
[  243.106180][T15411] syzkaller0: entered promiscuous mode
[  243.114605][T15411] syzkaller0: entered allmulticast mode
[  243.152684][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'.
[  243.184797][T15413] validate_nla: 11 callbacks suppressed
[  243.184814][T15413] netlink: 'syz.1.2472': attribute type 10 has an invalid length.
[  243.192793][T15413] netlink: 'syz.1.2472': attribute type 10 has an invalid length.
[  243.261708][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2474'.
[  243.311018][T15419] syzkaller0: entered promiscuous mode
[  243.315566][T15419] syzkaller0: entered allmulticast mode
[  243.464259][T15427] 8021q: adding VLAN 0 to HW filter on device bond1
[  243.473388][T15427] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  243.508972][T15429] tipc: Resetting bearer <eth:syzkaller0>
[  243.602851][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'.
[  243.757963][T15445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2484'.
[  243.983344][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  244.075692][T15467] netlink: 'syz.1.2489': attribute type 1 has an invalid length.
[  244.101154][T15467] 8021q: adding VLAN 0 to HW filter on device bond43
[  244.106350][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'.
[  244.110923][T15470] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  244.135192][T15470] 8021q: adding VLAN 0 to HW filter on device bond42
[  244.137676][T15470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2490'.
[  244.149758][T15467] bond43: (slave veth17): Enslaving as an active interface with a down link
[  244.159808][T15467] vlan0: entered allmulticast mode
[  244.169344][T15467] bond43: (slave vlan0): Opening slave failed
[  244.242305][T15476] netlink: 'syz.1.2492': attribute type 1 has an invalid length.
[  244.292608][T15476] 8021q: adding VLAN 0 to HW filter on device bond44
[  244.308814][T15476] ipvlan0: entered allmulticast mode
[  244.314498][T15476] bond44: entered allmulticast mode
[  244.363048][T15483] syzkaller0: left promiscuous mode
[  244.364765][T15483] syzkaller0: left allmulticast mode
[  244.366708][T15483] tipc: Resetting bearer <eth:syzkaller0>
[  244.633022][T15496] netlink: 'syz.1.2498': attribute type 39 has an invalid length.
[  244.721385][T15500] netlink: 'syz.2.2499': attribute type 9 has an invalid length.
[  244.827180][T15504] netlink: 'syz.1.2501': attribute type 10 has an invalid length.
[  244.903455][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'.
[  244.911240][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2503'.
[  245.054898][T15514] netlink: 'syz.1.2505': attribute type 10 has an invalid length.
[  245.230572][T15527] sctp: [Deprecated]: syz.1.2508 (pid 15527) Use of int in max_burst socket option.
[  245.230572][T15527] Use struct sctp_assoc_value instead
[  245.829078][T15554] netlink: 'syz.2.2516': attribute type 8 has an invalid length.
[  247.099747][T15606] bond43 (unregistering): Released all slaves
[  247.520371][T15625] dvmrp6: entered allmulticast mode
[  247.785294][T15639] syzkaller0: entered promiscuous mode
[  247.787291][T15639] syzkaller0: entered allmulticast mode
[  247.938350][T15646] Cannot find set identified by id 3 to match
[  247.941676][T15646] __nla_validate_parse: 11 callbacks suppressed
[  247.941688][T15646] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2538'.
[  248.064445][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'.
[  248.198378][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'.
[  248.328517][T15658] vxcan0: entered allmulticast mode
[  248.396083][T15660] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  248.444152][T15660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2543'.
[  248.512446][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'.
[  248.576447][T15668] validate_nla: 8 callbacks suppressed
[  248.576462][T15668] netlink: 'syz.0.2545': attribute type 19 has an invalid length.
[  248.582183][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'.
[  248.585771][T15668] netlink: 'syz.0.2545': attribute type 19 has an invalid length.
[  248.588722][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'.
[  248.670947][T15670] netlink: 'syz.0.2546': attribute type 10 has an invalid length.
[  248.712238][T15674] netlink: 'syz.0.2548': attribute type 3 has an invalid length.
[  248.720238][T15674] bond1: option mode: unable to set because the bond device has slaves
[  249.032417][T15691] syzkaller0: entered promiscuous mode
[  249.037561][T15691] syzkaller0: entered allmulticast mode
[  249.065760][T15691] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  249.070730][T15691] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  249.073163][T15691] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  249.118403][T15693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.203013][T15701] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2554'.
[  249.240497][T15701] lo speed is unknown, defaulting to 1000
[  249.367749][T15710] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2556'.
[  249.548515][T15713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2557'.
[  250.246145][T15731] netlink: 'syz.2.2563': attribute type 13 has an invalid length.
[  250.630940][T15740] lo speed is unknown, defaulting to 1000
[  250.769491][T15751] lo speed is unknown, defaulting to 1000
[  250.838486][T15759] bridge28: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  251.375620][T15775] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  251.379670][T15775] block nbd0: Unsupported socket: should be TCP or UNIX.
[  251.397766][T15777] syzkaller0: entered promiscuous mode
[  251.399427][T15777] syzkaller0: entered allmulticast mode
[  251.403709][T15777] tipc: Resetting bearer <eth:syzkaller0>
[  251.430712][T15782] bond40: (slave erspan0): Releasing active interface
[  251.432831][T15782] ip6gretap5: entered promiscuous mode
[  251.436331][T15782] bond40: (slave ip6gretap5): Releasing active interface
[  251.438423][T15782] bond40: (slave ip6gretap5): the permanent HWaddr of slave - ea:e4:60:e8:93:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  251.444137][T15782] ip6gretap5: left promiscuous mode
[  251.451148][T15782] bond40: (slave veth25): Releasing active interface
[  251.456798][T15782] bond1: (slave macvlan2): Releasing backup interface
[  251.567400][T15796] tipc: Resetting bearer <eth:ip6gre0>
[  251.594686][T15798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.874385][T15814] netlink: 'syz.1.2583': attribute type 12 has an invalid length.
[  251.877987][T15814] netlink: 'syz.1.2583': attribute type 4 has an invalid length.
[  251.906092][T15816] netlink: 'syz.0.2585': attribute type 19 has an invalid length.
[  251.909034][T15816] netlink: 'syz.0.2585': attribute type 19 has an invalid length.
[  251.945926][T15821] netlink: 'syz.0.2586': attribute type 1 has an invalid length.
[  252.043142][ T5962] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.046278][ T5962] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.051179][ T5962] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.054321][ T5962] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.212059][T15830] lo speed is unknown, defaulting to 1000
[  252.345903][T15831] lo speed is unknown, defaulting to 1000
[  252.689437][T15848] syzkaller0: left promiscuous mode
[  252.695860][T15848] tipc: Resetting bearer <eth:syzkaller0>
[  252.768093][T15852] syz.1.2595 uses old SIOCAX25GETINFO
[  253.207552][T15879] set match dimension is over the limit!
[  253.210974][T15879] x_tables: unsorted underflow at hook 1
[  253.213305][T15879] __nla_validate_parse: 90 callbacks suppressed
[  253.213317][T15879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2602'.
[  253.249639][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'.
[  253.252426][T15882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2603'.
[  253.257139][T15881] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2603'.
[  253.422643][T15889] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.425609][T15889] syzkaller0: entered promiscuous mode
[  253.427706][T15889] tipc: Resetting bearer <eth:syzkaller0>
[  253.455256][T15893] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2607'.
[  253.458204][T15893] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2607'.
[  253.461619][T15893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'.
[  253.464305][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'.
[  253.467790][T15893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'.
[  253.540693][T15902] ip6tnl8: entered allmulticast mode
[  253.558463][T15899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.584664][T15899] syzkaller0: entered promiscuous mode
[  253.586573][T15899] syzkaller0: entered allmulticast mode
[  253.595766][T15899] tipc: Resetting bearer <eth:syzkaller0>
[  253.599672][T15897] tipc: Resetting bearer <eth:syzkaller0>
[  253.937553][T15911] validate_nla: 6 callbacks suppressed
[  253.937570][T15911] netlink: 'syz.2.2612': attribute type 2 has an invalid length.
[  254.011972][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'.
[  254.751052][T15897] tipc: Disabling bearer <eth:syzkaller0>
[  254.790624][T15916] netlink: 'syz.1.2613': attribute type 1 has an invalid length.
[  254.796006][T15916] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.819112][T15921] netlink: 'syz.1.2615': attribute type 1 has an invalid length.
[  254.850302][T15921] bond46: (slave vxcan1): The slave device specified does not support setting the MAC address
[  254.859021][T15921] bond46: (slave vxcan1): Error -95 calling set_mac_address
[  254.913757][T15927] macvlan0: entered promiscuous mode
[  254.915374][T15927] macvlan0: entered allmulticast mode
[  254.917502][T15927] bond46: entered promiscuous mode
[  254.919951][T15927] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  254.935270][T15927] bond46: left promiscuous mode
[  255.111518][T15918] Cannot find add_set index 2 as target
[  255.347021][T15948] syzkaller0: entered promiscuous mode
[  255.349130][T15948] syzkaller0: entered allmulticast mode
[  255.399103][T15952] netlink: 'syz.2.2621': attribute type 1 has an invalid length.
[  255.442773][T15952] bond43: (slave bridge29): making interface the new active one
[  255.445660][T15952] bond43: (slave bridge29): Enslaving as an active interface with an up link
[  255.877402][T15965] vxcan0: entered allmulticast mode
[  255.915111][T15969] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  255.950955][T15971] : renamed from bond_slave_0
[  255.987422][T15981] lo: Caught tx_queue_len zero misconfig
[  256.109591][T15996] netlink: 'syz.2.2634': attribute type 6 has an invalid length.
[  256.755378][T16012] pimreg1: tun_chr_ioctl cmd 1074025677
[  256.757332][T16012] pimreg1: linktype set to 776
[  256.759273][T16013] pimreg1: tun_chr_ioctl cmd 1074025677
[  256.761950][T16013] pimreg1: linktype set to 776
[  257.412399][T16048] netlink: 'syz.1.2650': attribute type 1 has an invalid length.
[  257.433333][T16048] bond47: entered promiscuous mode
[  257.435722][T16048] 8021q: adding VLAN 0 to HW filter on device bond47
[  257.449741][T16048] bond47: (slave veth19): making interface the new active one
[  257.452686][T16048] veth19: entered promiscuous mode
[  257.454906][T16048] bond47: (slave veth19): Enslaving as an active interface with an up link
[  257.458433][T16048] netlink: 'syz.1.2650': attribute type 1 has an invalid length.
[  257.572161][T16068] lo speed is unknown, defaulting to 1000
[  257.630312][T16074] syzkaller0: Caught tx_queue_len zero misconfig
[  257.676918][T16078] tipc: Can't bind to reserved service type 0
[  257.748878][T16081] netlink: 'syz.1.2657': attribute type 4 has an invalid length.
[  258.183541][T16106] syzkaller0: entered promiscuous mode
[  258.185798][T16106] syzkaller0: entered allmulticast mode
[  258.201535][T16106] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  258.205161][T16106] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  258.207996][T16106] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  258.548189][T16117] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  258.983024][T16135] bond49: Removing last arp target with arp_interval on
[  258.987311][T16135] bond49: entered promiscuous mode
[  258.988980][T16135] bond49: entered allmulticast mode
[  258.991079][T16135] 8021q: adding VLAN 0 to HW filter on device bond49
[  259.037396][T16139] __nla_validate_parse: 17 callbacks suppressed
[  259.037406][T16139] netlink: 1428 bytes leftover after parsing attributes in process `syz.0.2675'.
[  259.357288][T16156] netlink: 'syz.1.2682': attribute type 5 has an invalid length.
[  259.361690][T16156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2682'.
[  259.389641][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'.
[  259.409083][T16150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2679'.
[  259.421656][T16158] netlink: 'syz.1.2683': attribute type 3 has an invalid length.
[  259.485797][T16162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2684'.
[  259.492017][T16163] syzkaller0: entered promiscuous mode
[  259.494194][T16163] syzkaller0: entered allmulticast mode
[  259.521280][T16163] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  259.524476][T16163] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  259.527396][T16163] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  259.564383][T16167] lo speed is unknown, defaulting to 1000
[  259.567522][T16169] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  259.569817][T16169] netlink: 'syz.0.2687': attribute type 2 has an invalid length.
[  259.583621][T16169] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  259.590066][T16169] netlink: 'syz.0.2687': attribute type 2 has an invalid length.
[  259.593667][T16169] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2687'.
[  259.746457][T16176] pim6reg1: entered promiscuous mode
[  259.748211][T16176] pim6reg1: entered allmulticast mode
[  260.132313][T16194] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  260.457939][T16208] lo speed is unknown, defaulting to 1000
[  260.582658][T16219] netlink: 'syz.2.2698': attribute type 1 has an invalid length.
[  260.622899][T16219] bond44: (slave vxcan1): The slave device specified does not support setting the MAC address
[  260.627253][T16219] bond44: (slave vxcan1): Error -95 calling set_mac_address
[  260.690289][T16221] can: request_module (can-proto-0) failed.
[  260.731219][T16219] gretap5: entered promiscuous mode
[  260.733033][T16219] gretap5: entered allmulticast mode
[  260.737075][T16219] bond44: (slave gretap5): making interface the new active one
[  260.742762][T16219] bond44: (slave gretap5): Enslaving as an active interface with an up link
[  260.747391][T16219] veth0: entered promiscuous mode
[  260.785052][T16218] veth0: left promiscuous mode
[  260.846964][T16233] netlink: 'syz.0.2701': attribute type 1 has an invalid length.
[  260.849405][T16233] netlink: 'syz.0.2701': attribute type 2 has an invalid length.
[  260.853592][T16233] netlink: 'syz.0.2701': attribute type 1 has an invalid length.
[  260.859995][T16233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2701'.
[  261.024264][T16245] syzkaller0: left promiscuous mode
[  261.025986][T16245] syzkaller0: left allmulticast mode
[  261.027873][T16245] tipc: Resetting bearer <eth:syzkaller0>
[  261.042764][T16245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2705'.
[  261.076753][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'.
[  261.197001][T16255] vlan0: left promiscuous mode
[  261.198607][T16255] bridge0: left promiscuous mode
[  261.201906][T16255] veth25: left promiscuous mode
[  261.203675][T16255] geneve7: left promiscuous mode
[  261.206053][T16255] gretap5: left promiscuous mode
[  261.351220][T16262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.373923][T16262] bond50: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  261.377534][T16262] bond50: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  261.383407][T16262] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2712'.
[  261.531536][   T24] lo speed is unknown, defaulting to 1000
[  261.533858][   T24] syz0: Port: 1 Link ACTIVE
[  261.537500][   T24] lo speed is unknown, defaulting to 1000
[  261.569713][T16283] lo speed is unknown, defaulting to 1000
[  261.753411][T16299] bond45: (slave veth31): Enslaving as an active interface with a down link
[  261.776460][T16299] bond45: (slave veth33): Enslaving as an active interface with a down link
[  261.804238][T16299] 8021q: adding VLAN 0 to HW filter on device bond45
[  262.175477][T16332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.182428][T16332] syzkaller0: entered promiscuous mode
[  262.184970][T16332] syzkaller0: entered allmulticast mode
[  262.205289][T16332] tipc: Resetting bearer <eth:syzkaller0>
[  262.208848][T16331] tipc: Resetting bearer <eth:syzkaller0>
[  262.219374][T16331] tipc: Disabling bearer <eth:syzkaller0>
[  262.348758][T16356] bond0: (slave ): making interface the new active one
[  262.355789][T16356] bond0: (slave ): Enslaving as an active interface with an up link
[  262.484149][T16368] bond56: (slave vxcan1): The slave device specified does not support setting the MAC address
[  262.487609][T16368] bond56: (slave vxcan1): Error -95 calling set_mac_address
[  262.594463][T16368] bond56: entered promiscuous mode
[  262.599416][T16368] bond56: entered allmulticast mode
[  262.605487][T16368] 8021q: adding VLAN 0 to HW filter on device bond56
[  262.739390][T16373] tun0: tun_chr_ioctl cmd 1074025675
[  262.741783][T16373] tun0: persist enabled
[  262.744174][T16373] tun0: tun_chr_ioctl cmd 1074025675
[  262.746214][T16373] tun0: persist disabled
[  263.388919][T16403] bond46: (slave vxcan7): The slave device specified does not support setting the MAC address
[  263.395075][T16403] bond46: (slave vxcan7): Error -95 calling set_mac_address
[  263.412257][T16406] bridge0: entered promiscuous mode
[  263.530978][T16415] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  263.538944][T16415] syzkaller0: entered promiscuous mode
[  263.541648][T16415] syzkaller0: entered allmulticast mode
[  263.545077][T16415] tipc: Resetting bearer <eth:syzkaller0>
[  263.646075][T16422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.650985][T16422] syzkaller0: entered promiscuous mode
[  263.653122][T16422] syzkaller0: entered allmulticast mode
[  263.712113][T16426] bond51 (unregistering): Released all slaves
[  263.733196][T16430] veth35: entered promiscuous mode
[  263.754862][T16431] tipc: Resetting bearer <eth:syzkaller0>
[  263.824512][T16435] bond51: entered promiscuous mode
[  263.826560][T16435] 8021q: adding VLAN 0 to HW filter on device bond51
[  263.853247][T16435] bond51: (slave veth21): making interface the new active one
[  263.855834][T16435] veth21: entered promiscuous mode
[  263.861210][T16435] bond51: (slave veth21): Enslaving as an active interface with an up link
[  264.023268][T16450] batadv_slave_0: entered promiscuous mode
[  264.025606][T16450] batadv_slave_0: left promiscuous mode
[  264.088357][T16451] bond0: (slave rose0): Enslaving as an active interface with an up link
[  264.463901][T16421] tipc: Resetting bearer <eth:syzkaller0>
[  264.473906][T16421] tipc: Disabling bearer <eth:syzkaller0>
[  264.642258][T16459] __nla_validate_parse: 23 callbacks suppressed
[  264.642268][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  264.647305][T16459] validate_nla: 20 callbacks suppressed
[  264.647315][T16459] netlink: 'syz.0.2769': attribute type 29 has an invalid length.
[  264.652049][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'.
[  264.655366][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  264.708612][T16461] lo speed is unknown, defaulting to 1000
[  264.796225][T16466] netlink: 'syz.1.2772': attribute type 1 has an invalid length.
[  264.799417][T16466] netlink: 'syz.1.2772': attribute type 2 has an invalid length.
[  264.803631][T16466] netlink: 'syz.1.2772': attribute type 1 has an invalid length.
[  264.806701][T16466] netlink: 'syz.1.2772': attribute type 2 has an invalid length.
[  264.810926][T16466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2772'.
[  264.876930][T16468] geneve7: entered promiscuous mode
[  264.884434][ T5845] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.889171][ T5845] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.906821][ T5845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.918435][T16470] netlink: 'syz.2.2774': attribute type 4 has an invalid length.
[  264.935807][ T5844] lo speed is unknown, defaulting to 1000
[  264.936942][T16470] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2774'.
[  264.939741][ T5844] syz0: Port: 1 Link DOWN
[  264.942355][T16470] block nbd0: not configured, cannot reconfigure
[  264.943780][ T5844] lo speed is unknown, defaulting to 1000
[  265.011179][T16479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2774'.
[  265.202290][T16491] batadv1: entered promiscuous mode
[  265.272086][T16495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2780'.
[  265.304365][T16492] lo speed is unknown, defaulting to 1000
[  265.426828][T16503] syzkaller1: entered promiscuous mode
[  265.428712][T16503] syzkaller1: entered allmulticast mode
[  265.547354][T16506] bridge0: entered promiscuous mode
[  265.548972][T16506] bridge0: entered allmulticast mode
[  265.553453][T16508] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  265.657709][T16519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2787'.
[  265.666568][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'.
[  265.688051][T16519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2787'.
[  265.782157][T16524] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  265.786804][T16524] syzkaller0: entered promiscuous mode
[  265.788666][T16524] syzkaller0: entered allmulticast mode
[  265.926814][T16528] bond47: entered allmulticast mode
[  265.929266][T16528] 8021q: adding VLAN 0 to HW filter on device bond47
[  265.932727][T16526] team0: left allmulticast mode
[  265.934715][T16526] bridge82: left allmulticast mode
[  265.939185][T16526] team0: left promiscuous mode
[  265.941255][T16526] bridge82: left promiscuous mode
[  265.943128][T16526] bridge0: port 1(team0) entered disabled state
[  266.186794][T16542] lo speed is unknown, defaulting to 1000
[  266.265496][T16546] netlink: 'syz.2.2795': attribute type 6 has an invalid length.
[  266.460316][T16542] nbd0: detected capacity change from 0 to 63
[  266.466208][T16559] vxcan1: entered allmulticast mode
[  266.475282][T16468] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.531028][T16468] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.605681][T16468] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.673723][ T5845] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.686767][ T5845] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.698498][ T5845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.715689][ T5845] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.856923][T16573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.916384][   T58] block nbd0: Receive control failed (result -104)
[  266.997411][T16582] ip6gretap0: entered promiscuous mode
[  267.152068][T16598] netlink: 'syz.0.2810': attribute type 5 has an invalid length.
[  267.203119][T16615] netlink: 'syz.2.2815': attribute type 11 has an invalid length.
[  267.206173][T16615] netlink: 'syz.2.2815': attribute type 11 has an invalid length.
[  267.214095][T16611] lo speed is unknown, defaulting to 1000
[  267.504399][T16637] tipc: Resetting bearer <eth:syzkaller0>
[  267.544874][   T24] syz2: Port: 1 Link DOWN
[  267.549195][T16637] IPv6: NLM_F_REPLACE set, but no existing node found!
[  267.573323][ T8406] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.578209][ T8406] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.603246][ T8406] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.606765][ T8406] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.767395][T16662] workqueue: Failed to create a rescuer kthread for wq "bond48": -EINTR
[  267.846363][T16674] gretap0: refused to change device tx_queue_len
[  267.851255][T16674] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  268.038374][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.045868][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.049106][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.061539][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.191380][T16693] lo speed is unknown, defaulting to 1000
[  268.364490][T16700] lo speed is unknown, defaulting to 1000
[  268.520744][T16718] syzkaller1: entered promiscuous mode
[  268.522835][T16718] syzkaller1: entered allmulticast mode
[  268.646806][T16723] gretap0: refused to change device tx_queue_len
[  268.650017][T16723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  268.803501][T16730] lo speed is unknown, defaulting to 1000
[  269.468882][T16753] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.479273][ T5844] syz2: Port: 1 Link ACTIVE
[  269.479723][T16754] lo speed is unknown, defaulting to 1000
[  269.693255][T16755] lo speed is unknown, defaulting to 1000
[  270.152710][T16777] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  270.373498][T16782] ip6gretap8: left promiscuous mode
[  270.375928][T16782] team1: left promiscuous mode
[  270.377890][T16782] team1: left allmulticast mode
[  270.379604][T16782] bridge87: left promiscuous mode
[  270.381640][T16782] bridge87: left allmulticast mode
[  270.384350][T16782] vlan1: left promiscuous mode
[  270.386040][T16782] bond55: left promiscuous mode
[  270.388140][T16782] vlan1: left allmulticast mode
[  270.390663][T16782] bond55: left allmulticast mode
[  270.393148][T16782] sit5: left promiscuous mode
[  270.395429][T16782] bond56: left promiscuous mode
[  270.397363][T16782] bond56: left allmulticast mode
[  270.411692][T16782] __nla_validate_parse: 23 callbacks suppressed
[  270.411708][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'.
[  270.447605][T16787] validate_nla: 11 callbacks suppressed
[  270.447615][T16787] netlink: 'syz.0.2860': attribute type 83 has an invalid length.
[  270.453640][T16788] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2860'.
[  270.537820][T16793] netlink: 'syz.1.2861': attribute type 1 has an invalid length.
[  270.552570][T16794] veth23: entered promiscuous mode
[  270.563167][T16793] workqueue: Failed to create a rescuer kthread for wq "bond52": -EINTR
[  270.566340][T16801] erspan0: entered allmulticast mode
[  270.579818][T16805] netlink: 'syz.0.2863': attribute type 1 has an invalid length.
[  270.612919][T16805] bond57: (slave vxcan1): The slave device specified does not support setting the MAC address
[  270.616737][T16805] bond57: (slave vxcan1): Error -95 calling set_mac_address
[  270.667110][T16805] netlink: 'syz.0.2863': attribute type 1 has an invalid length.
[  270.698958][T16811] netlink: 'syz.0.2866': attribute type 1 has an invalid length.
[  270.723102][T16815] netlink: 'syz.0.2867': attribute type 11 has an invalid length.
[  270.726353][T16815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2867'.
[  270.729079][T16815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2867'.
[  270.734778][T16815] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2867'.
[  270.805792][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'.
[  270.841146][T16822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2869'.
[  270.844118][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'.
[  270.948833][T16828] lo speed is unknown, defaulting to 1000
[  270.985882][T16833] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  270.991414][T16834] netlink: 'syz.0.2871': attribute type 7 has an invalid length.
[  271.009055][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'.
[  271.015058][T16833] bond48: (slave vxcan7): The slave device specified does not support setting the MAC address
[  271.019903][T16833] bond48: (slave vxcan7): Error -95 calling set_mac_address
[  271.067161][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'.
[  271.119748][T16843] syzkaller0: entered promiscuous mode
[  271.126204][T16843] syzkaller0: entered allmulticast mode
[  271.139230][T16843] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  271.292068][T16850] bond58: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  271.302007][T16850] bond58 (unregistering): Released all slaves
[  271.576023][T16861] syzkaller0: entered promiscuous mode
[  271.578290][T16861] syzkaller0: entered allmulticast mode
[  271.586543][T16863] x_tables: unsorted underflow at hook 3
[  271.777880][T16874] netlink: 'syz.1.2882': attribute type 9 has an invalid length.
[  272.854823][T16900] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  272.884094][T16900] bond58: (slave vxcan1): The slave device specified does not support setting the MAC address
[  272.888100][T16900] bond58: (slave vxcan1): Error -95 calling set_mac_address
[  272.901391][T16902] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  272.929834][T16907] 8021q: adding VLAN 0 to HW filter on device bond58
[  272.953367][T16907] bond58: (slave bridge88): Enslaving as an active interface with a down link
[  272.966941][T16900] macvlan4: entered promiscuous mode
[  272.969098][T16900] macvlan4: entered allmulticast mode
[  272.974542][T16900] bond58: entered promiscuous mode
[  272.977088][T16900] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  272.982755][T16900] bond58: left promiscuous mode
[  273.017626][T16909] netlink: 'syz.2.2891': attribute type 1 has an invalid length.
[  273.050028][T16909] bond49: (slave vxcan7): The slave device specified does not support setting the MAC address
[  273.054686][T16909] bond49: (slave vxcan7): Error -95 calling set_mac_address
[  273.342135][T16949] syzkaller1: entered promiscuous mode
[  273.343894][T16949] syzkaller1: entered allmulticast mode
[  274.186569][T16978] xt_socket: unknown flags 0x50
[  274.369093][T16987] gretap0: refused to change device tx_queue_len
[  274.371367][T16987] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  274.541707][T17011] veth0_to_hsr: entered promiscuous mode
[  274.543875][T17011] veth0_to_hsr: entered allmulticast mode
[  274.546054][T17011] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check.
[  274.605111][T17016] 8021q: adding VLAN 0 to HW filter on device bond51
[  274.625121][T17016] bond51: (slave veth35): Enslaving as an active interface with a down link
[  274.686270][T17016] vlan0: entered allmulticast mode
[  274.688528][T17016] bond51: (slave vlan0): Opening slave failed
[  275.259534][T17052] bond52: Unable to set up delay as MII monitoring is disabled
[  275.263229][T17052] bond52 (unregistering): Released all slaves
[  275.413247][T17056] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.591943][T17064] bond52 (unregistering): Released all slaves
[  275.814822][T17080] syzkaller0: entered promiscuous mode
[  275.817010][T17080] syzkaller0: entered allmulticast mode
[  275.828445][T17080] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  275.988328][T17084] syzkaller1: entered promiscuous mode
[  275.990706][T17084] syzkaller1: entered allmulticast mode
[  276.285116][T17088] __nla_validate_parse: 11 callbacks suppressed
[  276.285127][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'.
[  276.476934][T17094] lo speed is unknown, defaulting to 1000
[  276.903349][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'.
[  276.957584][T17102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2933'.
[  277.051335][T17105] bond52: option arp_validate: invalid value (18446744073491447809)
[  277.055918][T17105] bond52 (unregistering): Released all slaves
[  277.089458][T17108] validate_nla: 7 callbacks suppressed
[  277.089467][T17108] netlink: 'syz.2.2934': attribute type 13 has an invalid length.
[  277.334848][T17122] netlink: 'syz.2.2939': attribute type 3 has an invalid length.
[  277.440737][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'.
[  277.469291][T17125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2938'.
[  277.473007][T17125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2938'.
[  277.546821][T17138] bond59: option resend_igmp: invalid value (2878)
[  277.548874][T17138] bond59: option resend_igmp: allowed values 0 - 255
[  277.553454][T17138] bond59 (unregistering): Released all slaves
[  277.572295][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'.
[  277.576352][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2942'.
[  277.617221][T17141] netlink: 'syz.2.2945': attribute type 2 has an invalid length.
[  277.723039][T17148] netlink: 'syz.0.2946': attribute type 7 has an invalid length.
[  277.725874][T17147] only policy match revision 0 supported
[  277.725890][T17147] unable to load match
[  277.737878][T17148] syzkaller1: entered promiscuous mode
[  277.739962][T17148] syzkaller1: entered allmulticast mode
[  277.765233][T17148] tipc: Resetting bearer <eth:syzkaller0>
[  277.767620][T17148] tipc: Resetting bearer <eth:syzkaller0>
[  278.493910][T17160] erspan0: left allmulticast mode
[  278.509386][T17160] tipc: Resetting bearer <eth:syzkaller0>
[  278.512661][T17160] syzkaller0: left promiscuous mode
[  278.514920][T17160] syzkaller0: left allmulticast mode
[  278.530271][T17160] ipvlan0: left allmulticast mode
[  278.531954][T17160] bond44: left allmulticast mode
[  278.533882][T17160] ip6tnl8: left allmulticast mode
[  278.535787][T17160] bond47: left promiscuous mode
[  278.537378][T17160] veth19: left promiscuous mode
[  278.539493][T17160] bond49: left promiscuous mode
[  278.541713][T17160] bond49: left allmulticast mode
[  278.543872][T17160] bond51: left promiscuous mode
[  278.545789][T17160] veth21: left promiscuous mode
[  278.548183][T17160] geneve7: left promiscuous mode
[  278.550459][T17160] ip6gretap0: left promiscuous mode
[  278.553922][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'.
[  278.574547][ T9015] syz2: Port: 1 Link DOWN
[  279.161104][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  279.435551][T17209] netlink: 'syz.0.2965': attribute type 14 has an invalid length.
[  279.438110][T17209] netlink: 'syz.0.2965': attribute type 13 has an invalid length.
[  280.655220][T17230] bond0: Device is already in use.
[  281.034179][T17247] lo speed is unknown, defaulting to 1000
[  281.115441][T17251] lo speed is unknown, defaulting to 1000
[  281.343073][T17269] netlink: 'syz.0.2979': attribute type 5 has an invalid length.
[  281.370845][T17273] __nla_validate_parse: 5 callbacks suppressed
[  281.370854][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'.
[  281.382672][T17273] netlink: 'syz.2.2980': attribute type 1 has an invalid length.
[  281.462488][T17278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2982'.
[  281.468245][T17278] vlan0: entered promiscuous mode
[  281.486536][T17275] lo speed is unknown, defaulting to 1000
[  281.504781][T17279] netlink: 'syz.2.2982': attribute type 14 has an invalid length.
[  281.517961][T17278] netlink: 'syz.2.2982': attribute type 14 has an invalid length.
[  281.684636][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'.
[  281.700284][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2985'.
[  281.727774][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'.
[  281.969097][T17316] 8021q: adding VLAN 0 to HW filter on device bond60
[  281.976493][T17316] bond59: (slave bond60): making interface the new active one
[  281.983275][T17316] bond59: (slave bond60): Enslaving as an active interface with an up link
[  281.987281][T17325] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  282.098559][T17336] validate_nla: 4 callbacks suppressed
[  282.098570][T17336] netlink: 'syz.0.2991': attribute type 10 has an invalid length.
[  282.108402][T17331] netlink: 'syz.0.2991': attribute type 10 has an invalid length.
[  282.202592][T17351] bond0: Error: Cannot enslave bond to itself.
[  282.236796][T17353] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.241404][T17353] syzkaller0: entered promiscuous mode
[  282.243660][T17353] syzkaller0: entered allmulticast mode
[  282.246448][ T9015] syz2: Port: 1 Link ACTIVE
[  282.278844][T17355] netlink: 'syz.0.2998': attribute type 13 has an invalid length.
[  282.292266][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'.
[  282.295804][T17353] netlink: 'syz.1.2997': attribute type 30 has an invalid length.
[  282.296811][T17355] tipc: Resetting bearer <eth:syzkaller0>
[  282.353277][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'.
[  282.357119][T17353] netlink: 'syz.1.2997': attribute type 30 has an invalid length.
[  282.371372][T17361] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  282.373617][T17361] tipc: Bearer <udp:s>: trying with adjusted priority
[  282.375820][T17361] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  282.378279][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  282.382962][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.385534][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.393268][T17363] netlink: 'syz.2.3000': attribute type 4 has an invalid length.
[  282.395736][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.400189][T17363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3000'.
[  282.471637][T17372] netlink: 'syz.1.3003': attribute type 1 has an invalid length.
[  282.504831][T17372] 8021q: adding VLAN 0 to HW filter on device bond52
[  282.545429][T17372] 8021q: adding VLAN 0 to HW filter on device batadv3
[  282.549170][T17372] bond52: (slave batadv3): making interface the new active one
[  282.553796][T17372] bond52: (slave batadv3): Enslaving as an active interface with an up link
[  282.559169][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'.
[  282.646028][T17372] bond52 (unregistering): (slave batadv3): Releasing active interface
[  282.650964][T17372] bond52 (unregistering): Released all slaves
[  282.817873][T17390] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  282.864383][T17392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3009'.
[  282.872882][T17392] gretap0: entered promiscuous mode
[  282.875321][T17392] gretap0: left promiscuous mode
[  282.959056][T17397] netlink: 'syz.1.3011': attribute type 4 has an invalid length.
[  282.964851][T17397] netlink: 'syz.1.3011': attribute type 4 has an invalid length.
[  282.973104][T17397] tipc: Resetting bearer <eth:syzkaller0>
[  282.979150][ T5844] syz2: Port: 1 Link DOWN
[  282.979191][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.984556][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.987521][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  282.990785][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.048390][T17399] lo speed is unknown, defaulting to 1000
[  283.256087][T17406] ip6tnl0: Caught tx_queue_len zero misconfig
[  283.306004][T17410] netlink: 'syz.1.3015': attribute type 1 has an invalid length.
[  283.342644][T17410] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap6
[  283.498571][T17427] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  283.501783][T17427] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  283.504940][T17427] veth1_virt_wifi: entered allmulticast mode
[  283.508138][T17427] veth1_virt_wifi: entered promiscuous mode
[  283.534335][T17430] bridge0: entered allmulticast mode
[  283.583761][T17432] bridge0: left promiscuous mode
[  283.585264][T17432] bridge0: left allmulticast mode
[  284.368022][T17459] Cannot find add_set index 2 as target
[  284.433566][ T9015] syz2: Port: 1 Link ACTIVE
[  284.436624][T17479] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.514593][T17483] bond52: entered promiscuous mode
[  284.516464][T17483] 8021q: adding VLAN 0 to HW filter on device bond52
[  284.684331][T17504] bond0: (slave sit0): Error: Device type is different from other slaves
[  284.756638][T17514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.941660][T17533] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  285.279197][T17559] syzkaller0: entered promiscuous mode
[  285.281211][T17559] syzkaller0: entered allmulticast mode
[  285.294103][T17559] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  285.296636][T17559] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  285.298945][T17559] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  285.424941][T17561] bond52: option arp_missed_max: invalid value (0)
[  285.427703][T17561] bond52: option arp_missed_max: allowed values 1 - 255
[  285.432853][T17561] bond52 (unregistering): Released all slaves
[  285.599480][T17572] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  285.733083][T17584] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  285.738519][T17584] syzkaller0: entered promiscuous mode
[  285.740769][T17584] syzkaller0: entered allmulticast mode
[  285.804610][T17589] lo speed is unknown, defaulting to 1000
[  285.809041][T17591] syzkaller1: entered promiscuous mode
[  285.812470][T17591] syzkaller1: entered allmulticast mode
[  285.839679][T17591] 8021q: adding VLAN 0 to HW filter on device bond53
[  285.974149][T17595] pimreg3: entered allmulticast mode
[  286.588352][T17630] __nla_validate_parse: 153 callbacks suppressed
[  286.588362][T17630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'.
[  286.607584][T17630] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  286.610760][T17630] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  286.758077][T17643] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  286.788462][T17643] lo speed is unknown, defaulting to 1000
[  286.799823][T17649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3078'.
[  286.833588][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3079'.
[  287.062867][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'.
[  287.234175][T17662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.270556][T17662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.314207][T17668] validate_nla: 12 callbacks suppressed
[  287.314221][T17668] netlink: 'syz.1.3082': attribute type 1 has an invalid length.
[  287.319711][T17669] netlink: 'syz.1.3082': attribute type 1 has an invalid length.
[  287.351727][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'.
[  287.367927][T17671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.466756][T17677] netlink: 'syz.1.3085': attribute type 1 has an invalid length.
[  287.488078][T17677] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  287.496287][T17677] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  287.583737][T17684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3087'.
[  287.644798][T17692] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  287.649309][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  287.675274][T17695] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3088'.
[  287.836871][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  287.840657][T17706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3092'.
[  287.880117][T17711] netlink: 'syz.1.3094': attribute type 1 has an invalid length.
[  287.905338][T17711] 8021q: adding VLAN 0 to HW filter on device bond1
[  288.006638][T17723] netlink: 'syz.1.3099': attribute type 1 has an invalid length.
[  288.031358][T17723] 8021q: adding VLAN 0 to HW filter on device bond56
[  288.035873][T17723] bond55: (slave bond56): making interface the new active one
[  288.038521][T17723] bond55: (slave bond56): Enslaving as an active interface with an up link
[  288.064797][T17727] macsec4: entered promiscuous mode
[  288.066452][T17727] ip6gretap0: entered promiscuous mode
[  288.069827][T17727] ip6gretap0: left promiscuous mode
[  288.275592][T17736] xt_l2tp: v2 doesn't support IP mode
[  288.288643][T17736] lo speed is unknown, defaulting to 1000
[  288.523267][T17751] netlink: 'syz.0.3104': attribute type 1 has an invalid length.
[  288.615508][T17752] ip6gretap11: entered allmulticast mode
[  288.680312][T17754] pim6reg1: entered promiscuous mode
[  288.681993][T17754] pim6reg1: entered allmulticast mode
[  288.733753][T17756] bond57: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  288.737768][T17756] bond57 (unregistering): Released all slaves
[  288.864245][T17766] 8021q: adding VLAN 0 to HW filter on device bond62
[  288.872602][T17766] macsec1: entered promiscuous mode
[  288.874236][T17766] bond62: entered promiscuous mode
[  288.876017][T17766] macsec1: entered allmulticast mode
[  288.877668][T17766] bond62: entered allmulticast mode
[  288.880771][T17766] bond62: left allmulticast mode
[  288.882331][T17766] bond62: left promiscuous mode
[  289.004585][T17777] vlan5: entered promiscuous mode
[  289.032656][T17777] netlink: 'syz.0.3113': attribute type 14 has an invalid length.
[  289.921637][T17793] syzkaller1: entered promiscuous mode
[  289.924015][T17793] syzkaller1: entered allmulticast mode
[  289.928568][T17793] netlink: 'syz.1.3117': attribute type 1 has an invalid length.
[  289.948164][T17793] 8021q: adding VLAN 0 to HW filter on device bond58
[  289.956271][T17793] bond58: (slave ip6erspan0): making interface the new active one
[  289.961695][T17793] bond58: (slave ip6erspan0): Enslaving as an active interface with an up link
[  290.012916][T17796] netlink: 'syz.0.3118': attribute type 27 has an invalid length.
[  290.015648][T17796] netlink: 'syz.0.3118': attribute type 4 has an invalid length.
[  290.060735][T17798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.063768][T17799] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.227744][  T626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.234411][  T626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.789930][T17847] lo speed is unknown, defaulting to 1000
[  291.273342][T17873] Cannot find set identified by id 3 to match
[  291.340994][T17878] 8021q: adding VLAN 0 to HW filter on device bond52
[  291.618285][T17900] __nla_validate_parse: 28 callbacks suppressed
[  291.618295][T17900] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3152'.
[  291.624966][T17901] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3152'.
[  291.635355][T17900] ip6_vti0: entered allmulticast mode
[  291.739340][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3153'.
[  291.873895][T17922] dvmrp6: left allmulticast mode
[  291.904861][T17924] bond53: (slave vxcan7): The slave device specified does not support setting the MAC address
[  291.909315][T17924] bond53: (slave vxcan7): Error -95 calling set_mac_address
[  292.015870][T17932] syzkaller0: entered promiscuous mode
[  292.017772][T17932] syzkaller0: entered allmulticast mode
[  292.032924][T17934] gtp1: entered promiscuous mode
[  292.035870][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'.
[  292.038251][T17932] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  292.042159][T17932] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  292.044693][T17932] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  292.182430][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3163'.
[  292.357070][T17953] validate_nla: 8 callbacks suppressed
[  292.357085][T17953] netlink: 'syz.2.3166': attribute type 1 has an invalid length.
[  292.387754][T17953] 8021q: adding VLAN 0 to HW filter on device bond54
[  292.435172][T17960] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.477370][T17962] netlink: 'syz.2.3170': attribute type 58 has an invalid length.
[  292.480838][T17962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3170'.
[  292.784547][T17979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3174'.
[  292.819819][T17986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3175'.
[  292.873315][T17990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3177'.
[  292.881874][T17993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3178'.
[  292.934681][T17998] syzkaller0: entered promiscuous mode
[  292.936619][T17998] syzkaller0: entered allmulticast mode
[  292.951130][T17998] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  292.953694][T17998] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  292.956028][T17998] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  292.965967][T17995] netlink: 'syz.1.3179': attribute type 10 has an invalid length.
[  292.992169][T17995] netlink: 'syz.1.3179': attribute type 1 has an invalid length.
[  293.166588][T18020] lo speed is unknown, defaulting to 1000
[  294.010172][T18030] tipc: Resetting bearer <eth:syzkaller0>
[  294.013529][T18030] syzkaller0: left promiscuous mode
[  294.015634][T18030] syzkaller0: left allmulticast mode
[  294.021842][T18030] bond52: left promiscuous mode
[  294.046023][ T5844] syz2: Port: 1 Link DOWN
[  294.097543][T18035] lo speed is unknown, defaulting to 1000
[  294.195599][T18049] netlink: 'syz.1.3193': attribute type 178 has an invalid length.
[  294.200855][T18049] netlink: 'syz.1.3193': attribute type 39 has an invalid length.
[  294.273773][T18053] bond59: entered promiscuous mode
[  294.275756][T18053] 8021q: adding VLAN 0 to HW filter on device bond59
[  294.385324][T18053] bond59 (unregistering): Released all slaves
[  294.482566][T18059] lo speed is unknown, defaulting to 1000
[  294.653600][T18077] delete_channel: no stack
[  294.664004][T18076] gretap0: entered promiscuous mode
[  294.666422][T18076] gretap0: left promiscuous mode
[  294.755914][T18077] delete_channel: no stack
[  294.838953][T18083] Cannot find set identified by id 65535 to match
[  294.919217][T18088] lo speed is unknown, defaulting to 1000
[  295.128451][T18098] lo speed is unknown, defaulting to 1000
[  295.719335][T18123] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  295.867479][T18127] netlink: 'syz.2.3217': attribute type 1 has an invalid length.
[  295.894985][T18130] netlink: 'syz.1.3218': attribute type 7 has an invalid length.
[  295.935378][T18135] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  296.075277][T18146] netlink: 'syz.2.3222': attribute type 1 has an invalid length.
[  296.106540][T18146] bond55: (slave geneve0): making interface the new active one
[  296.109985][T18146] bond55: (slave geneve0): Enslaving as an active interface with an up link
[  296.115455][ T8406] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  296.119342][ T8406] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  296.123761][ T8406] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  296.127005][ T8406] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  296.405312][T18156] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  296.763312][   T62] block nbd0: Possible stuck request ffff888109148000: control (read@0,1024B). Runtime 30 seconds
[  296.768209][   T62] block nbd0: Possible stuck request ffff888109148200: control (read@1024,1024B). Runtime 30 seconds
[  296.773427][   T62] block nbd0: Possible stuck request ffff888109148400: control (read@2048,1024B). Runtime 30 seconds
[  296.777342][   T62] block nbd0: Possible stuck request ffff888109148600: control (read@3072,1024B). Runtime 30 seconds
[  296.935685][ T5812] Bluetooth: hci2: command 0x040f tx timeout
[  296.963176][T18164] netlink: 'syz.2.3227': attribute type 1 has an invalid length.
[  296.990036][T18164] bond56: entered promiscuous mode
[  296.992613][T18164] 8021q: adding VLAN 0 to HW filter on device bond56
[  297.025011][T18164] 8021q: adding VLAN 0 to HW filter on device bond56
[  297.028298][T18164] bond56: (slave wireguard0): The slave device specified does not support setting the MAC address
[  297.032806][T18164] bond56: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  297.042471][T18164] bond56: (slave wireguard0): making interface the new active one
[  297.044852][T18164] wireguard0: entered promiscuous mode
[  297.047451][T18164] bond56: (slave wireguard0): Enslaving as an active interface with an up link
[  297.090865][T18172] sctp: [Deprecated]: syz.1.3229 (pid 18172) Use of int in max_burst socket option.
[  297.090865][T18172] Use struct sctp_assoc_value instead
[  297.114477][T18174] __nla_validate_parse: 83 callbacks suppressed
[  297.114492][T18174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3230'.
[  297.153816][T18174] 8021q: adding VLAN 0 to HW filter on device bond57
[  297.183500][T18174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3230'.
[  297.273633][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'.
[  297.350449][T18196] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  297.444325][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.446910][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.568616][T18238] vlan0: entered promiscuous mode
[  297.571332][T18238] hsr_slave_1: entered promiscuous mode
[  297.573248][T18238] vlan0: entered allmulticast mode
[  297.574816][T18238] hsr_slave_1: entered allmulticast mode
[  297.579238][T18240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  297.628526][T18248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3249'.
[  297.749666][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'.
[  297.749701][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3251'.
[  297.834245][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3253'.
[  297.926210][T18279] netlink: 'syz.0.3256': attribute type 13 has an invalid length.
[  298.020811][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3259'.
[  298.027087][T18295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3259'.
[  298.078140][T18295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.084281][T18294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3259'.
[  298.087551][T18294] nbd: must specify at least one socket
[  299.438112][T18339] 8021q: VLANs not supported on syzkaller1
[  299.538012][T18344] macvtap1: entered promiscuous mode
[  299.544476][T18344] veth1_to_bond: entered promiscuous mode
[  299.577348][T18343] macvtap2: entered promiscuous mode
[  299.680619][T18355] bond0: (slave ): Releasing active interface
[  299.686050][T18355] bond43: (slave bridge29): Releasing active interface
[  299.691150][T18355] bond44: (slave gretap5): Releasing active interface
[  299.696285][T18355] bond45: (slave veth31): Releasing active interface
[  299.699580][T18355] bond45: (slave veth31): the permanent HWaddr of slave - aa:fd:f7:fe:67:ba - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  299.708550][T18355] bond45: (slave veth33): Releasing active interface
[  299.713399][T18355] bond51: (slave veth35): Releasing active interface
[  299.718995][T18355] bond55: (slave geneve0): Releasing active interface
[  299.726802][T18355] bond56: (slave wireguard0): Releasing backup interface
[  299.729408][T18355] wireguard0: left promiscuous mode
[  299.751845][ T5845] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  299.754518][ T5845] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  299.765793][T18361] netlink: 'syz.1.3278': attribute type 27 has an invalid length.
[  299.768201][T18361] netlink: 'syz.1.3278': attribute type 4 has an invalid length.
[  299.768433][ T5845] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  299.774555][ T5845] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  299.946838][T18390] netlink: 'syz.1.3287': attribute type 4 has an invalid length.
[  299.950647][T18390] netlink: 'syz.1.3287': attribute type 4 has an invalid length.
[  299.965723][T18394] IPVS: set_ctl: invalid protocol: 50 172.20.20.23:20003
[  300.022410][T18400] syzkaller0: entered promiscuous mode
[  300.024144][T18400] syzkaller0: entered allmulticast mode
[  300.038333][T18400] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  300.068482][T18398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.070900][T18398] IPv6: NLM_F_CREATE should be set when creating new route
[  300.073551][T18398] IPv6: NLM_F_CREATE should be set when creating new route
[  300.076198][T18398] IPv6: NLM_F_CREATE should be set when creating new route
[  300.081998][T18398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.084735][T18398] macvlan0: entered promiscuous mode
[  300.086745][T18398] netlink: 'syz.0.3291': attribute type 1 has an invalid length.
[  300.089212][T18398] netlink: 'syz.0.3291': attribute type 2 has an invalid length.
[  300.137803][T18410] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.142810][T18410] tipc: Resetting bearer <eth:syzkaller0>
[  300.191465][T18416] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  300.334698][T18432] netlink: 'syz.2.3302': attribute type 4 has an invalid length.
[  300.336155][T18434] netlink: 'syz.0.3301': attribute type 1 has an invalid length.
[  300.340916][T18432] netlink: 'syz.2.3302': attribute type 4 has an invalid length.
[  300.353470][T18434] bond63: entered promiscuous mode
[  300.355430][T18434] 8021q: adding VLAN 0 to HW filter on device bond63
[  300.361929][ T5771] lo speed is unknown, defaulting to 1000
[  300.364274][ T5771] syz0: Port: 1 Link ACTIVE
[  300.366170][ T5771] lo speed is unknown, defaulting to 1000
[  300.440676][T18434] bond63: (slave bridge90): making interface the new active one
[  300.443235][T18434] bridge90: entered promiscuous mode
[  300.445712][T18434] bond63: (slave bridge90): Enslaving as an active interface with an up link
[  300.448919][ T5771] lo speed is unknown, defaulting to 1000
[  300.454652][ T5771] syz0: Port: 1 Link DOWN
[  300.456522][   T24] lo speed is unknown, defaulting to 1000
[  300.859005][T18468] syzkaller0: entered promiscuous mode
[  300.862815][T18468] syzkaller0: entered allmulticast mode
[  300.865490][ T9016] syz2: Port: 1 Link ACTIVE
[  300.896877][T18468] bond60: (slave veth23): Enslaving as an active interface with a down link
[  300.912326][T18468] bond60: (slave veth25): Enslaving as an active interface with a down link
[  300.918901][T18468] 8021q: adding VLAN 0 to HW filter on device bond60
[  300.956045][T18475] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.012524][T18477] macvtap2: entered promiscuous mode
[  301.014184][T18477] mac80211_hwsim hwsim67 wlan1: entered promiscuous mode
[  301.152423][T18491] bond61: (slave vxcan1): The slave device specified does not support setting the MAC address
[  301.157565][T18491] bond61: (slave vxcan1): Error -95 calling set_mac_address
[  301.175429][T18496] bridge37: entered allmulticast mode
[  301.178149][T18496] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  301.201982][T18498] macvlan0: entered promiscuous mode
[  301.204440][T18498] macvlan0: entered allmulticast mode
[  301.206537][T18498] bond61: entered promiscuous mode
[  301.208464][T18498] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  301.213035][T18498] bond61: left promiscuous mode
[  301.340579][T18505] syzkaller0: entered promiscuous mode
[  301.342828][T18505] syzkaller0: entered allmulticast mode
[  301.359443][T18505] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  301.395305][T18510] 8021q: adding VLAN 0 to HW filter on device bond62
[  301.411211][T18510] bond62: (slave veth27): Enslaving as an active interface with a down link
[  301.430140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.513898][T18525] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003
[  301.676723][T18540] syzkaller0: entered promiscuous mode
[  301.678954][T18540] syzkaller0: entered allmulticast mode
[  301.696142][T18540] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  301.839591][T18552] bridge38: entered promiscuous mode
[  301.846693][T18552] bridge38: entered allmulticast mode
[  302.113079][ T9175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.115537][ T9175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.166993][T18584] syzkaller1: entered promiscuous mode
[  302.171393][T18584] syzkaller1: entered allmulticast mode
[  302.333291][T18598] __nla_validate_parse: 22 callbacks suppressed
[  302.333300][T18598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3350'.
[  302.338263][T18598] bridge0: entered allmulticast mode
[  302.394968][T18602] bond64: entered promiscuous mode
[  302.397130][T18602] 8021q: adding VLAN 0 to HW filter on device bond64
[  302.420592][T18602] bond64: (slave veth25): making interface the new active one
[  302.423412][T18602] veth25: entered promiscuous mode
[  302.426019][T18602] bond64: (slave veth25): Enslaving as an active interface with an up link
[  302.550863][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'.
[  302.701806][T18618] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.717464][T18618] tipc: Resetting bearer <eth:syzkaller0>
[  302.759613][T18622] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3357'.
[  302.764517][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3357'.
[  302.801268][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'.
[  302.815935][T18626] 8021q: adding VLAN 0 to HW filter on device bond65
[  302.820581][T18626] bond65: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  302.828617][T18626] 8021q: adding VLAN 0 to HW filter on device bond65
[  302.834847][T18626] bond65: (slave lo): Enslaving as an active interface with an up link
[  302.909756][T18626] bond65 (unregistering): (slave lo): Releasing backup interface
[  302.913354][T18626] bond65 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  302.919444][T18626] bond65 (unregistering): Released all slaves
[  302.934526][T18628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3358'.
[  303.069031][T18632] sctp: [Deprecated]: syz.0.3360 (pid 18632) Use of int in maxseg socket option.
[  303.069031][T18632] Use struct sctp_assoc_value instead
[  303.078281][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'.
[  303.092564][T18634] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  303.097464][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'.
[  303.166990][T18641] validate_nla: 15 callbacks suppressed
[  303.167004][T18641] netlink: 'syz.1.3363': attribute type 14 has an invalid length.
[  303.207274][T18643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3362'.
[  303.212610][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'.
[  303.270570][T18647] lo speed is unknown, defaulting to 1000
[  303.492740][T18657] netlink: 'syz.2.3367': attribute type 24 has an invalid length.
[  303.496044][T18657] netlink: 'syz.2.3367': attribute type 24 has an invalid length.
[  303.545078][T18664] xt_policy: too many policy elements
[  303.858102][T18672] lo speed is unknown, defaulting to 1000
[  304.128056][T18701] lo speed is unknown, defaulting to 1000
[  304.311310][T18701] netlink: 'syz.1.3378': attribute type 2 has an invalid length.
[  304.513423][T18709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.835802][T18727] netlink: 'syz.1.3384': attribute type 83 has an invalid length.
[  304.877518][T18731] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  304.902597][T18731] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  304.912938][T18731] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  304.915929][T18731] veth1_virt_wifi: entered allmulticast mode
[  304.923741][T18731] veth1_virt_wifi: entered promiscuous mode
[  304.952333][T18727] bridge61: entered promiscuous mode
[  304.955788][T18727] bridge61: entered allmulticast mode
[  305.052998][T18735] erspan0: left allmulticast mode
[  305.057722][T18735] veth0_to_hsr: left promiscuous mode
[  305.060307][T18735] veth0_to_hsr: left allmulticast mode
[  305.063502][T18735] macvtap0: left allmulticast mode
[  305.069093][T18735] ipvlan0: left allmulticast mode
[  305.073852][T18735] geneve1: left allmulticast mode
[  305.078025][T18735] geneve7: left allmulticast mode
[  305.081829][T18735] bridge25: left allmulticast mode
[  305.086305][T18735] gretap5: left allmulticast mode
[  305.088674][T18735] vxcan1: left allmulticast mode
[  305.092837][T18735] bond47: left allmulticast mode
[  305.097301][T18735] bridge0: left allmulticast mode
[  305.100215][T18735] bond56: left promiscuous mode
[  305.102747][T18735] vlan0: left promiscuous mode
[  305.104829][T18735] hsr_slave_1: left promiscuous mode
[  305.107253][T18735] vlan0: left allmulticast mode
[  305.109344][T18735] hsr_slave_1: left allmulticast mode
[  305.114504][T18735] mac80211_hwsim hwsim67 wlan1: left promiscuous mode
[  305.115498][T18742] netlink: 'syz.0.3387': attribute type 1 has an invalid length.
[  305.120943][T18735] macvtap2: left promiscuous mode
[  305.130589][T18735] bridge37: left allmulticast mode
[  305.136657][T18735] bridge38: left promiscuous mode
[  305.138761][T18735] bridge38: left allmulticast mode
[  305.166604][T18742] bond65: entered promiscuous mode
[  305.169245][T18742] 8021q: adding VLAN 0 to HW filter on device bond65
[  305.222385][T18749] netlink: 'syz.2.3389': attribute type 1 has an invalid length.
[  305.255299][T18749] bond60: (slave gretap6): making interface the new active one
[  305.258421][T18749] bond60: (slave gretap6): Enslaving as an active interface with an up link
[  305.265715][T18749] vlan1: entered allmulticast mode
[  305.267586][T18749] bond60: entered allmulticast mode
[  305.269955][T18749] gretap6: entered allmulticast mode
[  305.270850][T18755] netlink: 'syz.0.3391': attribute type 2 has an invalid length.
[  305.274796][T18755] netlink: 'syz.0.3391': attribute type 2 has an invalid length.
[  305.278544][T18755] netlink: 'syz.0.3391': attribute type 2 has an invalid length.
[  305.285160][T18749] can: request_module (can-proto-5) failed.
[  305.352967][T18765] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.612285][T18784] syzkaller0: left promiscuous mode
[  305.614144][T18784] syzkaller0: left allmulticast mode
[  305.616188][T18782] syzkaller0: entered promiscuous mode
[  305.618043][T18782] syzkaller0: entered allmulticast mode
[  305.782105][T18797] syzkaller0: entered promiscuous mode
[  305.784480][T18797] syzkaller0: entered allmulticast mode
[  305.805663][T18797] vlan0: entered promiscuous mode
[  306.280654][T18803] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  306.379722][T18815] bond66: entered allmulticast mode
[  306.381784][T18815] 8021q: adding VLAN 0 to HW filter on device bond66
[  306.446494][T18818] 8021q: adding VLAN 0 to HW filter on device bond64
[  306.695522][T18848] mac80211_hwsim hwsim28 wlan1: Device is already in use.
[  306.754996][   T33] audit: type=1800 audit(1763471125.075:8): pid=18860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3422" name="memory.events" dev="tmpfs" ino=5984 res=0 errno=0
[  306.794751][   T33] audit: type=1800 audit(1763471125.115:9): pid=18860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3422" name="memory.events" dev="tmpfs" ino=5984 res=0 errno=0
[  307.001566][T18884] gretap0: entered promiscuous mode
[  307.025276][T18884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  307.031777][ T9015] lo speed is unknown, defaulting to 1000
[  307.033803][ T9015] syz0: Port: 1 Link ACTIVE
[  307.053124][ T9015] lo speed is unknown, defaulting to 1000
[  307.343022][T18902] __nla_validate_parse: 24 callbacks suppressed
[  307.343036][T18902] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3433'.
[  307.464868][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'.
[  307.595246][T18907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3435'.
[  307.751124][T18932] !: left promiscuous mode
[  307.826042][T18942] veth1_to_bond: entered allmulticast mode
[  307.829453][T18942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'.
[  307.858794][T18948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3445'.
[  307.871197][T18942] veth1_to_bond (unregistering): left allmulticast mode
[  308.047252][T18963] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  308.078694][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'.
[  308.098518][T18970] 8021q: adding VLAN 0 to HW filter on device bond67
[  308.108663][T18970] bond67: (slave geneve6): making interface the new active one
[  308.112529][T18970] bond67: (slave geneve6): Enslaving as an active interface with an up link
[  308.115634][ T8406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.120256][ T8406] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.122797][ T8406] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.125293][ T8406] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.187584][T18979] lo speed is unknown, defaulting to 1000
[  308.230955][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'.
[  308.337175][T18983] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3455'.
[  308.468749][T18992] lo speed is unknown, defaulting to 1000
[  308.717525][T19006] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3461'.
[  309.016399][T19024] validate_nla: 10 callbacks suppressed
[  309.016409][T19024] netlink: 'syz.2.3465': attribute type 1 has an invalid length.
[  309.037127][T19026] geneve7: entered promiscuous mode
[  309.049589][T19024] bond62: (slave vxcan7): The slave device specified does not support setting the MAC address
[  309.064478][T19024] bond62: (slave vxcan7): Error -95 calling set_mac_address
[  309.078232][T19026] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.090657][T19029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3467'.
[  309.154237][T19026] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.193707][T19026] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.235379][T19026] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.283851][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.292846][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.301716][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.309462][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.338060][T19039] netlink: 'syz.1.3470': attribute type 10 has an invalid length.
[  309.368453][T19039] lo speed is unknown, defaulting to 1000
[  309.654026][T19054] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.806317][T19058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  309.964203][T19063] syzkaller0: entered promiscuous mode
[  309.966025][T19063] syzkaller0: entered allmulticast mode
[  310.091199][T19066] bridge63: the hash_elasticity option has been deprecated and is always 16
[  310.095140][T19066] bridge63: entered allmulticast mode
[  310.435891][T19075] netlink: 'syz.0.3482': attribute type 1 has an invalid length.
[  310.438667][T19076] netlink: 'syz.0.3482': attribute type 1 has an invalid length.
[  310.485003][T19076] bond68: (slave vxcan5): The slave device specified does not support setting the MAC address
[  310.490462][T19076] bond68: (slave vxcan5): Error -95 calling set_mac_address
[  310.545490][T19075] bond68: (slave bridge92): Enslaving as an active interface with a down link
[  310.899523][T19092] netlink: 'syz.0.3488': attribute type 1 has an invalid length.
[  310.931833][T19092] gretap6: entered allmulticast mode
[  310.939019][T19092] bond69: (slave gretap6): making interface the new active one
[  310.943504][T19092] bond69: (slave gretap6): Enslaving as an active interface with an up link
[  310.967660][T19092] syzkaller0: left promiscuous mode
[  310.969785][T19092] syzkaller0: left allmulticast mode
[  310.975792][T19092] tipc: Resetting bearer <eth:syzkaller0>
[  311.003309][T19096] veth36: entered allmulticast mode
[  311.233229][T19117] syzkaller0: entered promiscuous mode
[  311.235583][T19117] syzkaller0: entered allmulticast mode
[  311.237964][T19121] netlink: 'syz.1.3496': attribute type 1 has an invalid length.
[  311.263445][T19121] bond65: entered promiscuous mode
[  311.265458][T19121] bond65: entered allmulticast mode
[  311.267550][T19121] 8021q: adding VLAN 0 to HW filter on device bond65
[  311.275403][T19118] lo speed is unknown, defaulting to 1000
[  311.314263][T19121] macvlan0: entered promiscuous mode
[  311.316439][T19121] macvlan0: entered allmulticast mode
[  311.320230][T19121] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  311.474101][T19133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.489548][T19124] lo speed is unknown, defaulting to 1000
[  311.951838][T19152] macvlan0: left promiscuous mode
[  311.958957][T19152] tipc: Resetting bearer <eth:syzkaller0>
[  311.970437][T19152] macvtap1: left promiscuous mode
[  311.975379][T19152] veth1_to_bond: left promiscuous mode
[  311.980634][T19152] macvtap2: left promiscuous mode
[  311.992983][T19152] bond63: left promiscuous mode
[  311.995120][T19152] bridge90: left promiscuous mode
[  312.021812][T19152] bond64: left promiscuous mode
[  312.023792][T19152] veth25: left promiscuous mode
[  312.050465][T19152] bond65: left promiscuous mode
[  312.055954][T19152] bond66: left allmulticast mode
[  312.078289][T19152] geneve7: left promiscuous mode
[  312.096678][T19152] gretap6: left allmulticast mode
[  312.118684][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.122498][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.126730][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.130775][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.148995][T19158] netlink: 'syz.2.3507': attribute type 1 has an invalid length.
[  312.185933][T19158] bond63: entered promiscuous mode
[  312.188421][T19158] 8021q: adding VLAN 0 to HW filter on device bond63
[  312.192006][T19155] lo speed is unknown, defaulting to 1000
[  312.225641][T19158] 8021q: adding VLAN 0 to HW filter on device bond63
[  312.228878][T19158] bond63: (slave wireguard1): The slave device specified does not support setting the MAC address
[  312.233163][T19158] bond63: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  312.241305][T19158] bond63: (slave wireguard1): making interface the new active one
[  312.244456][T19158] wireguard1: entered promiscuous mode
[  312.249129][T19158] bond63: (slave wireguard1): Enslaving as an active interface with an up link
[  312.266445][T19161] bond63: (slave wireguard2): The slave device specified does not support setting the MAC address
[  312.271783][T19161] bond63: (slave wireguard2): Enslaving as a backup interface with an up link
[  312.442830][T19166] syzkaller0: entered promiscuous mode
[  312.444945][T19166] syzkaller0: entered allmulticast mode
[  312.598602][T19182] lo speed is unknown, defaulting to 1000
[  312.606182][T19180] tipc: Resetting bearer <eth:syzkaller0>
[  312.610397][T19180] syzkaller0: left promiscuous mode
[  312.613916][T19180] syzkaller0: left allmulticast mode
[  312.656684][T19180] bridge61: left promiscuous mode
[  312.658710][T19180] bridge61: left allmulticast mode
[  312.667724][T19180] bridge63: left allmulticast mode
[  312.685011][T19180] bond65: left promiscuous mode
[  312.686582][T19180] bond65: left allmulticast mode
[  312.688862][ T5844] syz2: Port: 1 Link DOWN
[  312.696875][T19190] netlink: 'syz.2.3515': attribute type 12 has an invalid length.
[  312.706180][T19188] __nla_validate_parse: 12 callbacks suppressed
[  312.706190][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3515'.
[  312.714118][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3513'.
[  313.451072][T19207] syzkaller0: entered promiscuous mode
[  313.453347][T19207] syzkaller0: entered allmulticast mode
[  313.456109][T19207] tipc: Resetting bearer <eth:syzkaller0>
[  313.543410][T19205] lo speed is unknown, defaulting to 1000
[  313.914226][T19234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3525'.
[  313.981924][T19237] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  313.992394][T19236] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  314.193736][T19251] veth0: entered promiscuous mode
[  314.211509][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3529'.
[  314.230794][T19251] veth0 (unregistering): left promiscuous mode
[  314.235110][T19251] veth1 (unregistering): left promiscuous mode
[  314.236994][T19251] bridge38: port 1(veth1) entered disabled state
[  314.428987][T19263] syzkaller0: entered promiscuous mode
[  314.440744][T19263] syzkaller0: entered allmulticast mode
[  314.453559][ T9016] syz2: Port: 1 Link ACTIVE
[  314.475032][T19258] pim6reg1: entered promiscuous mode
[  314.476682][T19258] pim6reg1: entered allmulticast mode
[  314.480417][T19263] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.483450][T19266] netlink: 'syz.0.3533': attribute type 8 has an invalid length.
[  314.647397][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3536'.
[  314.650124][T19282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3536'.
[  314.687105][T19282] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  314.691082][T19282] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  314.739144][T19288] netlink: 'syz.2.3538': attribute type 1 has an invalid length.
[  314.744739][T19287] netlink: 'syz.2.3538': attribute type 1 has an invalid length.
[  314.786047][T19288] bond64: (slave bridge40): making interface the new active one
[  314.789278][T19288] bond64: (slave bridge40): Enslaving as an active interface with an up link
[  314.802551][T19294] bond64: (slave bridge41): Enslaving as an active interface with a down link
[  314.825271][T19295] bond66 (unregistering): Released all slaves
[  314.834936][T19298] xt_recent: Unsupported userspace flags (000000b1)
[  314.898872][T19300] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.987494][T19307] lo speed is unknown, defaulting to 1000
[  315.430167][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3544'.
[  315.591599][T19331] lo speed is unknown, defaulting to 1000
[  315.605579][T19333] erspan1: entered promiscuous mode
[  315.607891][T19333] erspan1: entered allmulticast mode
[  315.840113][T19335] syzkaller1: entered promiscuous mode
[  315.843215][T19335] syzkaller1: entered allmulticast mode
[  315.847040][T19344] geneve1: entered promiscuous mode
[  315.908280][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3554'.
[  316.211220][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3560'.
[  316.291401][T19363] 8021q: adding VLAN 0 to HW filter on device bond65
[  316.303760][T19366] 8021q: adding VLAN 0 to HW filter on device bond65
[  316.309137][T19366] bond65: (slave sit8): The slave device specified does not support setting the MAC address
[  316.313712][T19366] bond65: (slave sit8): Error -95 calling set_mac_address
[  316.323376][T19361] pim6reg1: entered promiscuous mode
[  316.325507][T19361] pim6reg1: entered allmulticast mode
[  316.376550][T19369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'.
[  316.386327][T19369] vlan2: entered promiscuous mode
[  316.400592][T19364] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  316.404689][T19364] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  316.428853][T19370] netlink: 'syz.2.3561': attribute type 14 has an invalid length.
[  316.772033][T19388] netlink: 'syz.2.3565': attribute type 1 has an invalid length.
[  316.775152][T19388] netlink: 'syz.2.3565': attribute type 2 has an invalid length.
[  316.932818][T19396] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  316.936961][T19396] syzkaller0: entered promiscuous mode
[  316.939199][T19396] syzkaller0: entered allmulticast mode
[  317.199390][T19409] can: request_module (can-proto-0) failed.
[  317.427075][T19421] netlink: 'syz.0.3572': attribute type 10 has an invalid length.
[  317.552489][T19423] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  317.613922][T19423] pimreg3: entered allmulticast mode
[  317.732251][T19425] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.956234][T19432] macvlan4: entered promiscuous mode
[  318.052571][T19435] netlink: 'syz.1.3576': attribute type 1 has an invalid length.
[  318.064430][T19435] __nla_validate_parse: 1 callbacks suppressed
[  318.064445][T19435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3576'.
[  318.146186][T19444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3576'.
[  318.223392][T19453] macsec0: entered allmulticast mode
[  318.225930][T19453] veth1_macvtap: entered allmulticast mode
[  318.228135][T19453] macsec0: left allmulticast mode
[  318.233267][T19453] veth1_macvtap: left allmulticast mode
[  318.294923][T19458] netlink: 'syz.1.3581': attribute type 1 has an invalid length.
[  318.334811][T19458] bond66: entered promiscuous mode
[  318.336773][T19458] 8021q: adding VLAN 0 to HW filter on device bond66
[  318.346879][T19464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3581'.
[  318.349669][T19464] bond66: entered allmulticast mode
[  318.356145][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'.
[  318.362098][T19465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3582'.
[  318.371413][T19458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3581'.
[  318.578404][T19474] lo speed is unknown, defaulting to 1000
[  319.020097][T19495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.041020][T19494] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3589'.
[  319.053980][T19494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  319.070241][T19497] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  319.095088][T19497] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  319.098952][T19497] syzkaller0: entered promiscuous mode
[  319.101017][T19497] syzkaller0: entered allmulticast mode
[  319.226201][T19501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3593'.
[  319.273370][T19504] xt_TCPMSS: Only works on TCP SYN packets
[  319.509396][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3599'.
[  319.691926][T19527] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  319.719330][T19540] pim6reg1: entered promiscuous mode
[  319.728538][T19540] pim6reg1: entered allmulticast mode
[  319.785446][T19540] syzkaller0: entered promiscuous mode
[  319.787852][T19540] syzkaller0: entered allmulticast mode
[  319.790745][T19539] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  319.854487][T19551] netlink: 'syz.0.3604': attribute type 1 has an invalid length.
[  319.885562][T19551] 8021q: adding VLAN 0 to HW filter on device bond70
[  319.904530][T19551] bond70: (slave veth31): Enslaving as an active interface with a down link
[  319.913172][T19551] vlan5: entered allmulticast mode
[  319.915170][T19551] veth1: entered allmulticast mode
[  319.918017][T19551] bond70: (slave vlan5): Opening slave failed
[  319.921449][T19556] xt_hashlimit: size too large, truncated to 1048576
[  319.923445][T19556] xt_hashlimit: max too large, truncated to 1048576
[  319.926052][T19556] netlink: 'syz.1.3606': attribute type 1 has an invalid length.
[  319.945993][T19556] bond67: entered promiscuous mode
[  319.951471][T19556] 8021q: adding VLAN 0 to HW filter on device bond67
[  319.956228][T19556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3606'.
[  319.971426][T19556] bond67: entered allmulticast mode
[  319.974583][T19559] syz_tun: entered promiscuous mode
[  319.976628][T19559] syz_tun: entered allmulticast mode
[  319.994054][T19556] bond67: (slave bridge64): making interface the new active one
[  319.997064][T19556] bridge64: entered promiscuous mode
[  319.999441][T19556] bridge64: entered allmulticast mode
[  320.003332][T19556] bond67: (slave bridge64): Enslaving as an active interface with an up link
[  320.036592][T19559] bridge42: entered allmulticast mode
[  320.115893][T19565] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  320.190765][T19569] netlink: 'syz.1.3611': attribute type 1 has an invalid length.
[  320.234839][T19569] 8021q: adding VLAN 0 to HW filter on device bond68
[  320.240743][T19571] xt_ecn: cannot match TCP bits for non-tcp packets
Connection to localhost closed by remote host.
[  320.287336][T19572] bond68: (slave veth1): Enslaving as an active interface with a down link
[  320.302123][T19572] netlink: 'syz.1.3611': attribute type 1 has an invalid length.
[  320.321834][T19575] bond68: (slave veth29): Enslaving as an active interface with a down link
[  320.529977][T10613] ==================================================================
[  320.532349][T10613] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  320.534823][T10613] Read of size 8 at addr ffff8881b9ebc0a0 by task khidpd_00070008/10613
[  320.537900][T10613] 
[  320.539304][T10613] CPU: 1 UID: 0 PID: 10613 Comm: khidpd_00070008 Not tainted syzkaller #0 PREEMPT(full) 
[  320.539321][T10613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.539328][T10613] Call Trace:
[  320.539335][T10613]  <TASK>
[  320.539340][T10613]  dump_stack_lvl+0x189/0x250
[  320.539359][T10613]  ? __kasan_check_byte+0x12/0x40
[  320.539371][T10613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.539384][T10613]  ? lock_release+0x4b/0x3e0
[  320.539398][T10613]  ? __virt_addr_valid+0x4a5/0x5c0
[  320.539414][T10613]  print_report+0xca/0x240
[  320.539427][T10613]  ? __mutex_lock+0x801/0x1350
[  320.539438][T10613]  kasan_report+0x118/0x150
[  320.539449][T10613]  ? __mutex_lock+0x801/0x1350
[  320.539462][T10613]  __mutex_lock+0x801/0x1350
[  320.539474][T10613]  ? __mutex_lock+0x5bb/0x1350
[  320.539486][T10613]  ? l2cap_unregister_user+0x6a/0x1b0
[  320.539502][T10613]  ? __pfx___mutex_lock+0x10/0x10
[  320.539514][T10613]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.539533][T10613]  l2cap_unregister_user+0x6a/0x1b0
[  320.539547][T10613]  hidp_session_thread+0x3c9/0x410
[  320.539564][T10613]  ? __pfx_hidp_session_thread+0x10/0x10
[  320.539577][T10613]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.539591][T10613]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  320.539606][T10613]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  320.539620][T10613]  ? __kthread_parkme+0x7b/0x200
[  320.539632][T10613]  ? __kthread_parkme+0x1a1/0x200
[  320.539644][T10613]  kthread+0x711/0x8a0
[  320.539659][T10613]  ? __pfx_hidp_session_thread+0x10/0x10
[  320.539671][T10613]  ? __pfx_kthread+0x10/0x10
[  320.539684][T10613]  ? _raw_spin_unlock_irq+0x23/0x50
[  320.539698][T10613]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.539709][T10613]  ? __pfx_kthread+0x10/0x10
[  320.539722][T10613]  ret_from_fork+0x4bc/0x870
[  320.539734][T10613]  ? __pfx_ret_from_fork+0x10/0x10
[  320.539747][T10613]  ? __switch_to_asm+0x39/0x70
[  320.539756][T10613]  ? __switch_to_asm+0x33/0x70
[  320.539763][T10613]  ? __pfx_kthread+0x10/0x10
[  320.539778][T10613]  ret_from_fork_asm+0x1a/0x30
[  320.539793][T10613]  </TASK>
[  320.539798][T10613] 
[  320.619252][T10613] Allocated by task 5817:
[  320.621010][T10613]  kasan_save_track+0x3e/0x80
[  320.622862][T10613]  __kasan_kmalloc+0x93/0xb0
[  320.624689][T10613]  __kmalloc_noprof+0x411/0x7f0
[  320.626633][T10613]  hci_alloc_dev_priv+0x28/0x2060
[  320.628643][T10613]  vhci_create_device+0x120/0x650
[  320.630626][T10613]  vhci_write+0x3ce/0x4a0
[  320.632351][T10613]  vfs_write+0x5c9/0xb30
[  320.634022][T10613]  ksys_write+0x145/0x250
[  320.635683][T10613]  do_syscall_64+0xfa/0xfa0
[  320.637468][T10613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.639775][T10613] 
[  320.640744][T10613] Freed by task 5817:
[  320.642369][T10613]  kasan_save_track+0x3e/0x80
[  320.644182][T10613]  __kasan_save_free_info+0x46/0x50
[  320.646231][T10613]  __kasan_slab_free+0x5c/0x80
[  320.648070][T10613]  kfree+0x19a/0x6d0
[  320.649600][T10613]  bt_host_release+0x82/0x90
[  320.651467][T10613]  device_release+0x9c/0x1c0
[  320.653332][T10613]  kobject_put+0x22b/0x480
[  320.655115][T10613]  vhci_release+0x15a/0x1a0
[  320.656929][T10613]  __fput+0x44c/0xa70
[  320.658572][T10613]  task_work_run+0x1d4/0x260
[  320.660449][T10613]  do_exit+0x6b5/0x2300
[  320.662085][T10613]  do_group_exit+0x21c/0x2d0
[  320.663943][T10613]  __x64_sys_exit_group+0x3f/0x40
[  320.665989][T10613]  x64_sys_call+0x21f7/0x2200
[  320.667891][T10613]  do_syscall_64+0xfa/0xfa0
[  320.669684][T10613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.671861][T10613] 
[  320.672844][T10613] Last potentially related work creation:
[  320.675127][T10613]  kasan_save_stack+0x3e/0x60
[  320.677016][T10613]  kasan_record_aux_stack+0xbd/0xd0
[  320.679129][T10613]  insert_work+0x3d/0x330
[  320.680867][T10613]  __queue_work+0xbaf/0xfb0
[  320.682638][T10613]  queue_work_on+0x181/0x270
[  320.684435][T10613]  hci_cmd_sync_submit+0x285/0x2b0
[  320.686378][T10613]  process_scheduled_works+0xae1/0x17b0
[  320.688530][T10613]  worker_thread+0x8a0/0xda0
[  320.690421][T10613]  kthread+0x711/0x8a0
[  320.692057][T10613]  ret_from_fork+0x4bc/0x870
[  320.693868][T10613]  ret_from_fork_asm+0x1a/0x30
[  320.695785][T10613] 
[  320.696791][T10613] Second to last potentially related work creation:
[  320.699445][T10613]  kasan_save_stack+0x3e/0x60
[  320.701355][T10613]  kasan_record_aux_stack+0xbd/0xd0
[  320.703427][T10613]  insert_work+0x3d/0x330
[  320.705146][T10613]  __queue_work+0xbaf/0xfb0
[  320.706964][T10613]  queue_work_on+0x181/0x270
[  320.708803][T10613]  hci_abort_conn+0x1e4/0x330
[  320.710677][T10613]  process_scheduled_works+0xae1/0x17b0
[  320.712872][T10613]  worker_thread+0x8a0/0xda0
[  320.714707][T10613]  kthread+0x711/0x8a0
[  320.716302][T10613]  ret_from_fork+0x4bc/0x870
[  320.718044][T10613]  ret_from_fork_asm+0x1a/0x30
[  320.719903][T10613] 
[  320.720852][T10613] The buggy address belongs to the object at ffff8881b9ebc000
[  320.720852][T10613]  which belongs to the cache kmalloc-8k of size 8192
[  320.725659][T10613] The buggy address is located 160 bytes inside of
[  320.725659][T10613]  freed 8192-byte region [ffff8881b9ebc000, ffff8881b9ebe000)
[  320.730404][T10613] 
[  320.731139][T10613] The buggy address belongs to the physical page:
[  320.733168][T10613] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b9eb8
[  320.736178][T10613] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  320.738780][T10613] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  320.741254][T10613] page_type: f5(slab)
[  320.742473][T10613] raw: 057ff00000000040 ffff888100042280 ffffea0005d97800 0000000000000003
[  320.745063][T10613] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  320.747727][T10613] head: 057ff00000000040 ffff888100042280 ffffea0005d97800 0000000000000003
[  320.750519][T10613] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  320.753248][T10613] head: 057ff00000000003 ffffea0006e7ae01 00000000ffffffff 00000000ffffffff
[  320.755960][T10613] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  320.758777][T10613] page dumped because: kasan: bad access detected
[  320.760918][T10613] page_owner tracks the page as allocated
[  320.762906][T10613] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5555, tgid 5555 (dhcpcd), ts 39359630303, free_ts 39350332697
[  320.769971][T10613]  post_alloc_hook+0x240/0x2a0
[  320.771475][T10613]  get_page_from_freelist+0x2365/0x2440
[  320.773120][T10613]  __alloc_frozen_pages_noprof+0x181/0x370
[  320.775136][T10613]  alloc_pages_mpol+0x232/0x4a0
[  320.776664][T10613]  allocate_slab+0x96/0x350
[  320.778209][T10613]  ___slab_alloc+0xf56/0x1990
[  320.779956][T10613]  __slab_alloc+0x65/0x100
[  320.781488][T10613]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  320.783601][T10613]  kmalloc_reserve+0x136/0x290
[  320.785014][T10613]  __alloc_skb+0x142/0x2d0
[  320.786382][T10613]  netlink_dump+0x167/0xe90
[  320.787731][T10613]  netlink_recvmsg+0x676/0xa30
[  320.789134][T10613]  sock_recvmsg+0x22c/0x270
[  320.790554][T10613]  ____sys_recvmsg+0x1c9/0x460
[  320.792095][T10613]  ___sys_recvmsg+0x1b5/0x510
[  320.793524][T10613]  __x64_sys_recvmsg+0x198/0x260
[  320.795005][T10613] page last free pid 5555 tgid 5555 stack trace:
[  320.796839][T10613]  __free_frozen_pages+0xbc4/0xd30
[  320.798633][T10613]  __put_partials+0x146/0x170
[  320.800179][T10613]  put_cpu_partial+0x1f2/0x2e0
[  320.801766][T10613]  __slab_free+0x2b9/0x390
[  320.803217][T10613]  qlist_free_all+0x97/0x140
[  320.804874][T10613]  kasan_quarantine_reduce+0x148/0x160
[  320.806760][T10613]  __kasan_slab_alloc+0x22/0x80
[  320.808395][T10613]  __kmalloc_cache_noprof+0x36f/0x6f0
[  320.810110][T10613]  __sk_attach_prog+0x52/0x430
[  320.811625][T10613]  sk_attach_filter+0x49/0x140
[  320.813236][T10613]  sk_setsockopt+0x1f83/0x2dc0
[  320.815050][T10613]  do_sock_setsockopt+0x11b/0x1b0
[  320.816938][T10613]  __x64_sys_setsockopt+0x13f/0x1b0
[  320.818844][T10613]  do_syscall_64+0xfa/0xfa0
[  320.820653][T10613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.822840][T10613] 
[  320.823645][T10613] Memory state around the buggy address:
[  320.825563][T10613]  ffff8881b9ebbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  320.828558][T10613]  ffff8881b9ebc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.831372][T10613] >ffff8881b9ebc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.833999][T10613]                                ^
[  320.835827][T10613]  ffff8881b9ebc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.838718][T10613]  ffff8881b9ebc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  320.841655][T10613] ==================================================================
[  320.845022][T10613] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  320.847725][T10613] CPU: 1 UID: 0 PID: 10613 Comm: khidpd_00070008 Not tainted syzkaller #0 PREEMPT(full) 
[  320.851413][T10613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.855146][T10613] Call Trace:
[  320.856417][T10613]  <TASK>
[  320.857488][T10613]  dump_stack_lvl+0x99/0x250
[  320.859182][T10613]  ? __asan_memcpy+0x40/0x70
[  320.860575][T10613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.862335][T10613]  ? __pfx__printk+0x10/0x10
[  320.863929][T10613]  vpanic+0x237/0x6d0
[  320.865333][T10613]  ? __pfx_vpanic+0x10/0x10
[  320.866966][T10613]  panic+0xb9/0xc0
[  320.868375][T10613]  ? __pfx_panic+0x10/0x10
[  320.869858][T10613]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  320.871692][T10613]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.873498][T10613]  ? __mutex_lock+0x801/0x1350
[  320.875110][T10613]  check_panic_on_warn+0x89/0xb0
[  320.876776][T10613]  ? __mutex_lock+0x801/0x1350
[  320.878367][T10613]  end_report+0x78/0x160
[  320.879685][T10613]  kasan_report+0x129/0x150
[  320.881140][T10613]  ? __mutex_lock+0x801/0x1350
[  320.882875][T10613]  __mutex_lock+0x801/0x1350
[  320.884383][T10613]  ? __mutex_lock+0x5bb/0x1350
[  320.885902][T10613]  ? l2cap_unregister_user+0x6a/0x1b0
[  320.887781][T10613]  ? __pfx___mutex_lock+0x10/0x10
[  320.889325][T10613]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.891059][T10613]  l2cap_unregister_user+0x6a/0x1b0
[  320.892791][T10613]  hidp_session_thread+0x3c9/0x410
[  320.894344][T10613]  ? __pfx_hidp_session_thread+0x10/0x10
[  320.896161][T10613]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.897965][T10613]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  320.899825][T10613]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  320.901746][T10613]  ? __kthread_parkme+0x7b/0x200
[  320.903309][T10613]  ? __kthread_parkme+0x1a1/0x200
[  320.904904][T10613]  kthread+0x711/0x8a0
[  320.906256][T10613]  ? __pfx_hidp_session_thread+0x10/0x10
[  320.907997][T10613]  ? __pfx_kthread+0x10/0x10
[  320.909469][T10613]  ? _raw_spin_unlock_irq+0x23/0x50
[  320.911201][T10613]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.912827][T10613]  ? __pfx_kthread+0x10/0x10
[  320.914274][T10613]  ret_from_fork+0x4bc/0x870
[  320.915961][T10613]  ? __pfx_ret_from_fork+0x10/0x10
[  320.917612][T10613]  ? __switch_to_asm+0x39/0x70
[  320.919183][T10613]  ? __switch_to_asm+0x33/0x70
[  320.920745][T10613]  ? __pfx_kthread+0x10/0x10
[  320.922466][T10613]  ret_from_fork_asm+0x1a/0x30
[  320.924274][T10613]  </TASK>
[  320.926128][T10613] Kernel Offset: disabled
[  320.927750][T10613] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:05:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00007ffc261553fc RCX=dffffc0000000000 RDX=ffffffff9001fc32
RSI=0000000000000000 RDI=ffffc90003e87f68 RBP=dffffc0000000000 RSP=ffffc90003e87538
R8 =0000000000000022 R9 =ffffffff81738c45 R10=ffffc90003e87658 R11=ffffffff81ac2ea0
R12=ffffc90003e87f48 R13=ffffc90003e87658 R14=ffffc90003e87608 R15=ffffc90003e87648
RIP=ffffffff8173a37f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557fecc500 ffffffff 00c00000
GS =0000 ffff88818eb38000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd3969a3a8 CR3=0000000169fe2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffff00ff00000000 XMM05=0000000000000130 0030003030300000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ff00ff000000ffff XMM09=313030302e383030 303a373030303a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000910f350
R8 =ffff88816bdd8237 R9 =1ffff1102d7bb046 R10=dffffc0000000000 R11=ffffffff8514d3e0
R12=dffffc0000000000 R13=ffffffff997dc90a R14=ffffffff99aeff20 R15=0000000000000000
RIP=ffffffff8514d45c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f38000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c3cb17d60 CR3=0000000021fc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f7c3bfb76c3 00007f7c3bfb76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f7c3be131cf
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
