last executing test programs:

1.157622548s ago: executing program 0 (id=3147):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async, rerun: 64)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async)
unshare(0x20000400)
r2 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$inet6_buf(r2, 0x11, 0x6, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000400)=""/42, 0x0, 0x2a, 0x0, 0x8001}, 0x28) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdc03, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) (async)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r9, 0x800, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) (async, rerun: 64)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000280))

1.06898825s ago: executing program 0 (id=3150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="9d96fe96b8c91caa8d5bd4a5683995f320dce2e0bdb466d94d02d824842d7b3b602fd42b3c4ad0e949f27e69882c1bf6e52cb8c066e571da29e95b13c84f794ad6b3e4128ee382cc610cf751"], 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x28004840)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="9d96fe96b8c91caa8d5bd4a5683995f320dce2e0bdb466d94d02d824842d7b3b602fd42b3c4ad0e949f27e69882c1bf6e52cb8c066e571da29e95b13c84f794ad6b3e4128ee382cc610cf751"], 0x6c}, 0x1, 0x0, 0x0, 0x4015}, 0x28004840) (async)

931.792614ms ago: executing program 0 (id=3155):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76153e0d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d81a0af}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x24a26e47}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x140}}, 0x0)

870.54704ms ago: executing program 0 (id=3157):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair(0x1, 0x0, 0x8, &(0x7f00000000c0))
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYBLOB="07adb2422cc7f47cb5c861954ae0e22900e3b4d2ecbe31b630f765ecc21ebe2b75a284c84570fdf26b51898923fe1c8a989337ec70880fea3f45c91539bb1c1667fc8869f17efb9130e9761721801cebc997e3dcffa2e1c8f64ed42f1e345d4ae4ea2e58385312876b4dba34ea06678889ea37f369b2f0d671b1cd3f355f427d31b416fd001a7661b44eff8b0b402efeeec752f02510cb6d6a10feec4b5e86b1731769338ef9d7e0ce09d76054f57962baa19982840b4dfbf93e63a3f39fc2"], 0x9)
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002022)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000fe000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

790.867308ms ago: executing program 0 (id=3159):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x0, 0x8, 0x2}})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r2}, 0x8)
r3 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r3, 0x29, 0x35, 0x0, &(0x7f0000000540))
socket$kcm(0x29, 0x7, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000d40)={{0x9, 0x3}, 0x100, './file0\x00'})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000580)=0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES16=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x3d, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000400)="317e18d63a8c74c274386d0d8550", 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
sendto$phonet(r0, &(0x7f0000000100)="f3f4a3aeb22f9258752da8b02199c6af2c618c90c538a0281b370a9b6344b18eda6b0302b00eb6758dc010590e8365c4171e00474e611046487f4b49b650702ebd53c29d6b514e45fddcc486ac62e158546fdd292f869a0b3dd961de9193fa44e9997bf6eb67d4b7a7456d9ff560c0918ad5e0045fa9a8cd5f32cd2e5bf60f1f6830c31322c42afc735d0c47cecc8873464ee2a5ff59a3e58b0e5ad1dde93fd3802a793a6f1b55f04398d7a82798a43121852e95f775893c15830aba9b4d81000577ac87d9afd19dbc79ada5b6d65cc34f446068705deab80bdba3421b67d5257f5ae57718490d5047f3e08271c745ae6518535841fc6e", 0xf7, 0x40, &(0x7f0000000200)={0x23, 0x5b, 0x5, 0xbb}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r8=>0x0})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x2c}}, 0x8054)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r8, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000)
mmap(&(0x7f0000370000/0x4000)=nil, 0x4000, 0xa, 0x10, r7, 0xf4cff000)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0xca, @loopback, 0x80000000}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000000680)="7072d86254eaade1e926e6be7d21fe03e97b22236755f3de585ae650794c452e0032c12d0ce041b5ee1d947f2fdd336b4b0736bbb7abd6f9c158db88861be79b158276de02e9ca553a8c4e91863a7a6e345265f90a09a318885563", 0x5b}, {&(0x7f0000000bc0)="cc2e1207a248209eb582613461c6fffa94533246ec17d615371ef273e88c55d90e5b0a9a3ff9df3d6ab968ec07a88178b84878e3e05a27d62d4ef591b738e8dc1339fdf421dfdede3d105094ec01b92583b64143987508f9fd39ad683c865504dbfab00fd33400a259cc945393780dc7105edb412e582fa757825fb1d03387b0323d11ffbbdd8c1268b21900610f891ea2e95ce644e91208845d647a5eb2783e8905c46aadf57a06adf21c808fcec709ddec2fa68d359027920dca50de8dd9880794d9bf1578ff2d26a177cbfdbb92cfa6d42f199caa17afc21d6ced5cf6dce1c3b9c8d0a41a4b847a6e300d6e", 0xed}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="484205aabe7c5501a7a0e3f6ee042ad30f25bafe9ad685bb90c413ab4a92ddbefca94414d14f675ca574320de0313c9098fa3028841a9c933d6db6c23f6221479af137272210d5a512e76baeb881ace851daff5431b3bc5ab05237b770196a1fa887fe30a46eb147ea4ba75d", 0x6c}, {&(0x7f0000002d40)="9671165397fe667d844c826e1e425179758bcf48d93b2b9720e04412fc2653ebbc0c9d680e0ba9656bf67e68d7334f409a23bc8333a0d05d046a9a66002e3147df4a289912c26947d719e351c854b2161fbb8c91ede6363c2d9e6f49ee968e40b0d266b8a4d1ab767de82f610007a1cf0a501f29e3ac660258e736ede7a28638bf596e1c2fc7bfc11f28a0e62130cda31ca9612cd54054ee47a2a6d1ca746305131de4261068a30896a2c38f0bc33bd6d365c36280fac20d66773f4c4ae8e94cad0b304841de47ee03697fe86c92c6007b46698d29db16333ea9a1f054ea19f6653163d67794447a2cafb99e0153a56aa8907c", 0xf3}, {&(0x7f0000002e40)="67c3bc70133962a7c7576dba36fcb12cd57d398887452f8450dd4ffe91c57cdbd2546b1582ffc078a8ce80793957527cf9294909a831e238f08f6c857d53d4e34e79f3d3c8cdf662b5775f22841aa791dd3aee664f8f28e840ed17271acb6803e984c2a61533520ea767b84f47faf9eef29c3beedc614b74f3fd87d8d7bea8a69108cf1282c8141562822c60fa52e5a9fab03c8c3fdac82e02a29f24ca2e0a18341839b1f42c2279085a4dbfca07ffde14559a9d946dd8f8009b9c8de70f15ea2fb8b15b045692f64a8938f03deb5f854c5aa7b6418816237b405ebd22d87072", 0xe0}], 0x6, &(0x7f0000002fc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x18}}], 0x3, 0x20000081)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r12, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)={0x144, 0x10, 0x0, 0x0, 0x0, "", [@nested={0x134, 0x21, 0x0, 0x1, [@nested={0x12f, 0x133, 0x0, 0x1, [@generic="d77166c9d2a2d365f14f7850c23ce3844d0c5ba2648f2fbeff8f9f2cb5767d16510991962e6c55aeb6c5dd0c25f063f535f8b77e7d5247fc18744441bc59852cd22dbddefc0e7c95a962821e458a7f87673bfd7f044bf7c552b9a7f07355f88db3a1ab4add5121e35cacef9f9d6f3b991225b5d690b93b9ba8ff3b3b", @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@remote}, @typed={0x59, 0xdb, 0x0, 0x0, @binary="882ca3145cf3323382988cc26bc717203dc99927d4dc41d255c7d018f08aef8df2d4361a5d2dd2a860e967b7a71b0ae695d6d59956dbc6d0ad9873a3d542555a8e001869e8eaa2e1dcb7ff3e615db2e6855d859ce4"}, @generic="159b74788db933927a68ac786615f08c190da3fe0a74c385e394360007026b5305ecf969be778c4686efe9e7e50d6d90356e361ab27cd77735716c4ce6ee946d1e25c04adcb6a33ade17a6"]}]}]}, 0x144}], 0x1, 0x0, 0x0, 0x4000081}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={0xb8, 0x17, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004000}, 0x4)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4010)

728.750989ms ago: executing program 0 (id=3161):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@ip={@rand_addr=0x64010102, @multicast2, 0xff000000, 0xff, 'wg0\x00', 'ip_vti0\x00', {0xff}, {}, 0x5e, 0x0, 0x40}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@ttl={{0x28}, {0x0, 0x5}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@loopback, @remote, 0xff000000, 0x0, 'dvmrp0\x00', 'vxcan1\x00', {0xff}, {}, 0x2f, 0x2, 0x42}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x30, 0x6, 0x6453, 'snmp\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1_to_bond\x00', 0x20})
write$tun(0xffffffffffffffff, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd6000000000282c00fe8000000000090000000000000000aaff020000000000000000000000000001890290780000000000000000f5010000000000000a00000100000000000000000000ffffe0000001"], 0xb)
write$cgroup_pid(r3, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x20000013)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054)
write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
r9 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000010000305000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="f5b10200000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="37e5a9678a2ddfdf252ac6626f826ba223c42452eaa844fa365113f9c8fd67d7068c3513669cb4dacbaf0542472a93258fb03af56fbe7525871e7b5815f6ca9a270474eb3332861a636bf0875f6758253fd0007b982cd11126e9285d5d75a6a3ebb7eed0014c70f051bd999f2fcb5a67"], 0x4c}}, 0x800)

727.145321ms ago: executing program 2 (id=3162):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0)
r3 = accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x800) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', r2, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}})

648.609986ms ago: executing program 2 (id=3165):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090002000000000008000000859612fe000000af0000029500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa", 0x32}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28)
r1 = socket(0x10, 0x2, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x200, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008194}, 0x8840)

600.740462ms ago: executing program 1 (id=3166):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000240001002bbd7000fbdbdf25cc340c5a060004008b"], 0x1c}}, 0x14)
socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb5}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xd, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e0, 0xca0b, 0x8, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r11, @ANYRES16=r12, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x21)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r10, 0x111, 0xfffffffd, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

600.177014ms ago: executing program 2 (id=3167):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1000000, 0x4)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000100)={0x11d4, 0x6ca}) (async)
ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000100)={0x11d4, 0x6ca})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000000000119078000000000000000e03004e2000089078"], 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r5, 0x607, 0x0, 0x3, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x28}}, 0x20048840)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
socket$netlink(0x10, 0x3, 0x10) (async)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000000"], 0x14}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000000"], 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r6)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="48aba71d", @ANYBLOB="c35e1e12bf1e1dddc53ae89a5d2d7de213f27346feed7d7d36b7b889214b1e79d963166792f45f", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xeea11d2c6d3262e}, 0x24004804)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffea}}], 0x1, 0x20008000)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)

531.035381ms ago: executing program 2 (id=3168):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xffffffffffffff6a)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x44a140eab4d5feb, 0x16, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
r9 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
sendmmsg$inet_sctp(r9, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r12, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007000400030004000400040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

529.929367ms ago: executing program 1 (id=3169):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r2, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {0x0}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x3)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={<r5=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000680)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006b00)={0x18, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1e, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000)

338.091783ms ago: executing program 2 (id=3170):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bb, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x2, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r2, {0xa, 0xc}, {0x0, 0xfff1}, {0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x8000000}, 0x38)

335.386844ms ago: executing program 1 (id=3171):
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0xde, {{0x2, 0x4e20, @loopback}}}, 0x88) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x804, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x48) (async)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000002c0)) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = accept4$inet(r0, &(0x7f0000000340)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000003c0)={0x401, {{0x2, 0x4e20, @multicast1}}}, 0x88)
bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) (async)
ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f00000004c0)) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8987}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xed3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044851}, 0x15) (async)
r6 = accept4(r2, 0x0, &(0x7f0000000640), 0x800) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000a40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x31020080}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x2b0, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5ce2, 0x62}}}}, [@NL80211_ATTR_CSA_IES={0x288, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x7, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x401, 0x5d]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x7, 0xe, 0x6, 0x3]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2b, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x10, 0x4, @broadcast, 0x7f, @value=@broadcast, 0x7, 0x9, @broadcast, 0x5}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf5, 0x80, [@peer_mgmt={0x75, 0x6, {0x0, 0x5, @void, @val=0x22, @void}}, @random_vendor={0xdd, 0xdc, "41203d6cb4abbd20e9e3eeba91d2ed2387e79f0156400fa93199e8e48331352655be4cfd2a806ee91ca63a17faaa66c3365e2e2d866a9d9faf40811370ae872e8f9e57d0aaa82f17c884da174221009c64cfa61e23e283bc2c7a72f3c74443766f5c413b6e69af043223d5229e974e1170baa50ccca6bf6bd15b5a43cf923576024be80b8eb1ad79fb1a71a48b1973ca6a30c415e94b6f3ae5f0afcb12f972e6dc6b998ffb5f2821c973c17291d7698bc5ab1dddcae4ced0452e27b9b1601290d7f872e4cda1e3ee21b6d2b3b9d5815321aa3419c037fae2987eb703"}, @cf={0x4, 0x6, {0x7, 0x6, 0x7fff, 0xd}}, @challenge={0x10, 0x1, 0xa2}]}, @NL80211_ATTR_BEACON_TAIL={0xf9, 0xf, [@peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x2, @void, @void}}, @random={0xf8, 0xeb, "ccca0f1cca5199bdb366e540f56ecc3584235a136f07c2ede09c5673d60c414897873ee67f5bc96f30cd98c92f15c0d3de63a4f0180b0912f66b54f5e851c5c5c332e362721bcf8ff05187744dd3cbef8d930e13f870cda706e3617e6d2fe67771038ad4a008138f3826620f52b3978ed3a5038e6a95f5fb7c3a807adb6a4ce91db066dc156351982eec20ae71a31c6540e5a52c000bb99ee1b31bc971678aa082720bad80c584793eca208c54c633f73fa2854b6e5f1219fe6f981daecf147eb934fc9dc8d857e77bacaf6b08f934167c77150717499d4d3fda41b02cb7b5c0d4b1679c698d6f689032c0"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x47, 0x7f, [@mesh_chsw={0x76, 0x6, {0x2, 0xf9, 0x9, 0x9}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @mesh_chsw={0x76, 0x6, {0xf7, 0x7, 0x2e, 0x7fff}}, @dsss={0x3, 0x1, 0xad}, @gcr_ga={0xbd, 0x6, @device_b}]}]]}]}, 0x2b0}}, 0xc8d5) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000a80)={0x0, @aes128, 0x0, @desc1}) (async)
getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000ac0)={<r9=>0x0, 0x659b, 0x9081, 0x1, 0x400, 0x1, 0x3, 0xf0000000, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x283456d9, 0x100, 0xc, 0x3, 0x8001}}, &(0x7f0000000b80)=0xb0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000bc0)={r9, 0x72, "e9bac975bf5e5cceac89f7d5fb5b4c4a06097e6c84cb1ac034e58a8bc6fae697fce6c549fd793599a9a19e091be074743fe934d1a34cc3461446aecf9faa7f3173c92a428b43607c59f032abf470f7680a30197be0f8be10d50e719e3b74774f8f76cf4117bc7eff8b3b3f78670d192c7871"}, &(0x7f0000000c40)=0x7a) (async)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000c80)=0x2, 0x4) (async)
ioctl$XFS_IOC_FSINUMBERS(r6, 0xc0205867, &(0x7f0000001040)={&(0x7f0000000cc0)=0x2, 0xb20, &(0x7f0000000d00)=[{}, {}, {}, {}], &(0x7f0000001000)})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x151d00, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x0) (async)
r12 = accept4$tipc(r6, &(0x7f00000010c0)=@id, &(0x7f0000001100)=0x10, 0x80000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r12, 0x80049370, &(0x7f0000001140)) (async)
ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f0000001180)={0x3}) (async)
r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000011c0), 0x8000, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r13, 0x2, &(0x7f0000001200))

333.222031ms ago: executing program 1 (id=3172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x40000010)

246.791962ms ago: executing program 1 (id=3173):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000007f00)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x8000) (async)
socket$inet6(0xa, 0x5, 0x9)

246.082527ms ago: executing program 1 (id=3174):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r5, 0x0, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xffffffff000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRESDEC=r2], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x44004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448dc, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x7, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x20002, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000)

0s ago: executing program 2 (id=3175):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001"], 0x138}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="010000001a00010025bd7000fddbdf251c102080050008010d77d8d0b1987b7ce900370025a5683763abc3609705e7dfca25f7ed741b57deb82628925986c6a8b8294700ecba18a6e9ff99a17fce5cb6a9dd7efbbac5"], 0x24}, 0x1, 0x0, 0x0, 0x985db568320e11c}, 0x48000044)
accept4$phonet_pipe(r2, &(0x7f0000000280), &(0x7f0000000380)=0x10, 0x1800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x20)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001"], 0x138}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x0) (async)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="010000001a00010025bd7000fddbdf251c102080050008010d77d8d0b1987b7ce900370025a5683763abc3609705e7dfca25f7ed741b57deb82628925986c6a8b8294700ecba18a6e9ff99a17fce5cb6a9dd7efbbac5"], 0x24}, 0x1, 0x0, 0x0, 0x985db568320e11c}, 0x48000044) (async)
accept4$phonet_pipe(r2, &(0x7f0000000280), &(0x7f0000000380)=0x10, 0x1800) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x20) (async)

kernel console output (not intermixed with test programs):

ve interface
[  180.230524][T12021] batadv1: left promiscuous mode
[  180.236621][T12021] batadv1: left allmulticast mode
[  180.249476][T12021] bond18: (slave bridge16): Releasing active interface
[  180.271118][T11989] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.279965][T11989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.283006][ T2272] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  180.290522][T12021] vlan0: entered promiscuous mode
[  180.309500][T12021] vlan0: entered allmulticast mode
[  180.311647][T12021] veth0_vlan: entered allmulticast mode
[  180.319687][T12021] team0: Port device vlan0 added
[  180.464283][ T2272] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  180.594953][T12047] netem: incorrect ge model size
[  180.596862][T12047] netem: change failed
[  180.691987][T12057] vlan7: entered promiscuous mode
[  180.731201][T12063] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  180.740007][T12063] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  180.745793][T12063] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  180.757328][T12063] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  180.769644][T12065] netlink: 'syz.1.1669': attribute type 5 has an invalid length.
[  180.868143][ T7106] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  181.115830][T12091] vlan8: entered promiscuous mode
[  181.192983][T12093] __nla_validate_parse: 15 callbacks suppressed
[  181.192995][T12093] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1676'.
[  181.277557][T12100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1678'.
[  181.425482][T12125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1685'.
[  181.456773][T12125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1685'.
[  181.477339][T12125] sctp: [Deprecated]: syz.0.1685 (pid 12125) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.477339][T12125] Use struct sctp_sack_info instead
[  181.519405][T12132] bridge9: entered promiscuous mode
[  181.529846][T12134] bridge10: entered promiscuous mode
[  181.546099][T12136] syzkaller0: entered promiscuous mode
[  181.547952][T12136] syzkaller0: entered allmulticast mode
[  181.635780][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'.
[  181.687122][T12158] netlink: 'syz.0.1695': attribute type 10 has an invalid length.
[  181.709370][T12158] tap0: tun_chr_ioctl cmd 1074025677
[  181.712619][T12158] tap0: linktype set to 773
[  181.778614][ T5762] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.782079][ T5762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.809752][ T5762] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.816287][ T5762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.833780][ T5762] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.839529][ T5762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.844042][ T5762] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.848372][ T5762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.893633][T12165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.908947][T12165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.924516][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'.
[  181.927361][T12165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  181.946727][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1700'.
[  181.973969][T12167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.048635][T12165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.052648][T12165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.055923][T12165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  182.067088][T12186] vlan1: entered promiscuous mode
[  182.155050][T12165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.159049][T12165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.163187][T12165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  182.220531][T12188] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1703'.
[  182.229584][T12165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  182.234375][T12165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.238724][T12165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  182.317835][ T5516] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.320986][ T5516] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  182.324803][ T5516] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  182.343679][ T5516] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.346997][ T5516] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  182.350377][ T5516] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  182.364631][ T5516] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.367912][ T5516] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  182.371211][ T5516] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  182.391502][ T5516] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.395835][ T5516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  182.399441][ T5516] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  182.574784][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1707'.
[  182.605657][T12202] netlink: 'syz.1.1706': attribute type 1 has an invalid length.
[  182.608259][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1706'.
[  182.926508][T12224] nbd: must specify a device to reconfigure
[  183.014816][T12237] netlink: 'syz.1.1716': attribute type 1 has an invalid length.
[  183.125917][T12243] netlink: 'syz.2.1718': attribute type 14 has an invalid length.
[  183.154768][T12246] dvmrp8: entered allmulticast mode
[  183.266034][T12265] IPVS: stopping backup sync thread 5792 ...
[  184.222254][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  184.328005][T12291] bridge0: port 3(syz_tun) entered disabled state
[  184.606477][T12315] 8021q: adding VLAN 0 to HW filter on device bond18
[  184.694625][T12315] 8021q: adding VLAN 0 to HW filter on device bond19
[  184.701844][T12315] bond18: (slave bond19): Enslaving as an active interface with an up link
[  184.716422][T12315] bond18 (unregistering): (slave bond19): Releasing backup interface
[  184.720390][T12315] bond18 (unregistering): Released all slaves
[  184.954172][T12330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.268573][T12352] vlan8: entered promiscuous mode
[  185.485666][T12368] geneve1: Caught tx_queue_len zero misconfig
[  185.498145][T12368] netlink: 'syz.1.1752': attribute type 4 has an invalid length.
[  185.513323][T12368] netlink: 'syz.1.1752': attribute type 4 has an invalid length.
[  185.530411][T12371] netlink: 'syz.0.1753': attribute type 5 has an invalid length.
[  185.538127][T12371] geneve7: entered promiscuous mode
[  185.540332][T12371] geneve7: entered allmulticast mode
[  185.544716][ T6756] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  185.547328][ T6756] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  185.549787][ T6756] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  185.554667][ T6756] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  185.587560][T12376] netlink: 'syz.2.1755': attribute type 1 has an invalid length.
[  185.607516][T12376] 8021q: adding VLAN 0 to HW filter on device bond18
[  185.684730][T12382] vlan1: entered promiscuous mode
[  185.689005][T12382] bond18: entered promiscuous mode
[  185.718058][T12382] bond18: (slave geneve3): making interface the new active one
[  185.720469][T12382] geneve3: entered promiscuous mode
[  185.723612][T12382] bond18: (slave geneve3): Enslaving as an active interface with an up link
[  185.961528][T12407] syzkaller0: entered promiscuous mode
[  185.963982][T12407] syzkaller0: entered allmulticast mode
[  186.228801][T12426] __nla_validate_parse: 124 callbacks suppressed
[  186.228811][T12426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1768'.
[  186.296358][T12439] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  186.376495][T12446] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  186.379072][T12445] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  186.403120][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'.
[  186.407796][T12449] vlan8: entered promiscuous mode
[  186.532127][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  186.585540][T12471] netlink: 'syz.1.1781': attribute type 10 has an invalid length.
[  186.601111][T12471] team0: Port device dummy0 added
[  186.609056][T12471] netlink: 'syz.1.1781': attribute type 10 has an invalid length.
[  186.611614][T12478] netlink: 'syz.0.1782': attribute type 13 has an invalid length.
[  186.628230][T12471] team0: Port device dummy0 removed
[  186.633506][T12471] dummy0: entered promiscuous mode
[  186.635904][T12471] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  186.707094][T12481] netlink: 'syz.1.1783': attribute type 1 has an invalid length.
[  186.934873][T12478] tipc: Resetting bearer <eth:xfrm0>
[  187.156365][T12483] gretap2: entered allmulticast mode
[  187.160552][T12483] bond19: (slave gretap2): making interface the new active one
[  187.164518][T12483] bond19: (slave gretap2): Enslaving as an active interface with an up link
[  187.184736][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.190764][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.204041][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  187.208015][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.217962][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1787'.
[  187.221360][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.224305][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  187.228122][T12497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1787'.
[  187.231492][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.234656][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.237467][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  187.241559][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.245285][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.247892][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  187.275239][T12505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1789'.
[  187.331363][   T33] audit: type=1800 audit(1778901892.900:2): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1788" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3014 res=0 errno=0
[  187.354649][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1791'.
[  187.387511][T12512] ipvl: option downdelay: invalid value (18446744073709547007)
[  187.392367][T12512] ipvl: option downdelay: allowed values 0 - 2147483647
[  187.396665][T12512] ipvl (unregistering): Released all slaves
[  187.439428][T12526] bond20: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  187.446969][T12526] bond20 (unregistering): Released all slaves
[  187.482998][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1795'.
[  187.553580][T12532] bridge11: entered promiscuous mode
[  187.557234][T12532] bridge11: entered allmulticast mode
[  187.568655][T12532] bridge12: entered promiscuous mode
[  187.570508][T12532] bridge12: entered allmulticast mode
[  187.582269][T12535] syzkaller0: entered promiscuous mode
[  187.589222][T12535] syzkaller0: entered allmulticast mode
[  187.676750][ T7097] IPVS: starting estimator thread 0...
[  187.690280][T12543] IPVS: sh: FWM 3 0x00000003 - no destination available
[  187.693452][T12543] IPVS: sh: FWM 3 0x00000003 - no destination available
[  187.752976][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'.
[  187.762965][T12544] IPVS: using max 84 ests per chain, 201600 per kthread
[  187.794336][T12547] hsr0: entered promiscuous mode
[  187.817516][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'.
[  187.822983][T12554] netlink: 'syz.0.1802': attribute type 15 has an invalid length.
[  187.826464][T12554] netlink: 'syz.0.1802': attribute type 25 has an invalid length.
[  187.831848][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'.
[  187.837134][T12548] hsr0: left promiscuous mode
[  188.100070][T12577] xt_hashlimit: size too large, truncated to 1048576
[  188.793786][T12590] syzkaller0: entered promiscuous mode
[  188.796357][T12590] syzkaller0: entered allmulticast mode
[  189.366311][T12611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.377083][T12611] tipc: Resetting bearer <eth:syzkaller0>
[  189.451580][T12618] hsr0: entered promiscuous mode
[  189.785599][T12640] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  190.025334][T12652] syzkaller0: entered promiscuous mode
[  190.042346][T12652] syzkaller0: entered allmulticast mode
[  190.196734][T12662] netlink: 'syz.0.1833': attribute type 21 has an invalid length.
[  190.204935][T12662] netlink: 'syz.0.1833': attribute type 4 has an invalid length.
[  190.442856][T12678] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  190.527121][ T7103] tipc: Node number set to 554710618
[  190.966554][T12729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.260873][T12745] vlan7: entered promiscuous mode
[  191.289186][T12747] syzkaller0: entered promiscuous mode
[  191.291085][T12747] syzkaller0: entered allmulticast mode
[  191.375563][T12754] IPVS: nq: FWM 3 0x00000003 - no destination available
[  191.488848][T12765] __nla_validate_parse: 19 callbacks suppressed
[  191.488860][T12765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1866'.
[  191.491898][T12766] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  191.650194][T12784] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  191.664743][T12787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1873'.
[  191.670342][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'.
[  191.694199][T12784] bond20 (unregistering): Released all slaves
[  191.720041][T12788] validate_nla: 2 callbacks suppressed
[  191.720052][T12788] netlink: 'syz.0.1869': attribute type 16 has an invalid length.
[  191.725422][T12788] netlink: 'syz.0.1869': attribute type 17 has an invalid length.
[  191.748961][T12788] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.755524][T12788] 8021q: adding VLAN 0 to HW filter on device team0
[  191.785693][T12788] bridge_slave_1: left allmulticast mode
[  191.809860][T12796] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1875'.
[  191.843685][T12788] veth1_vlan: left promiscuous mode
[  191.872108][T12788] vlan0: left promiscuous mode
[  191.876240][T12788] veth1_vlan: entered promiscuous mode
[  191.905116][T12788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  191.968663][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.980178][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.996058][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.001873][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.294989][T12807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1876'.
[  192.425605][T12809] gre0: MTU too low for tipc bearer
[  192.432375][T12809] tipc: Disabling bearer <eth:gre0>
[  192.509207][T12811] syzkaller1: entered promiscuous mode
[  192.511704][T12811] syzkaller1: entered allmulticast mode
[  192.819401][T12837] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  192.823312][T12837] CPU: 0 UID: 0 PID: 12837 Comm: syz.2.1884 Not tainted syzkaller #0 PREEMPT(full) 
[  192.823327][T12837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.823334][T12837] Call Trace:
[  192.823339][T12837]  <TASK>
[  192.823344][T12837]  dump_stack_lvl+0xe8/0x150
[  192.823364][T12837]  sysfs_warn_dup+0x8e/0xa0
[  192.823378][T12837]  sysfs_do_create_link_sd+0xc0/0x110
[  192.823398][T12837]  device_add_class_symlinks+0x1cf/0x240
[  192.823415][T12837]  device_add+0x475/0xbb0
[  192.823428][T12837]  wiphy_register+0x1dc5/0x2dc0
[  192.823452][T12837]  ? __pfx_wiphy_register+0x10/0x10
[  192.823465][T12837]  ? __pfx_netdev_run_todo+0x10/0x10
[  192.823480][T12837]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  192.823495][T12837]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  192.823511][T12837]  ieee80211_register_hw+0x3d82/0x4a70
[  192.823533][T12837]  ? ieee80211_register_hw+0x1931/0x4a70
[  192.823560][T12837]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  192.823575][T12837]  ? __asan_memset+0x22/0x50
[  192.823586][T12837]  ? __hrtimer_setup+0x1b7/0x260
[  192.823598][T12837]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  192.823613][T12837]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  192.823643][T12837]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  192.823654][T12837]  ? kstrndup+0xbf/0x160
[  192.823670][T12837]  hwsim_new_radio_nl+0xf6a/0x1c00
[  192.823694][T12837]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.823710][T12837]  ? rcu_is_watching+0x15/0xb0
[  192.823723][T12837]  ? trace_kmalloc+0x2a/0xf0
[  192.823765][T12837]  ? __nla_parse+0x40/0x60
[  192.823782][T12837]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  192.823793][T12837]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  192.823807][T12837]  genl_family_rcv_msg_doit+0x22a/0x330
[  192.823820][T12837]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  192.823836][T12837]  ? bpf_lsm_capable+0x9/0x20
[  192.823846][T12837]  ? security_capable+0x7e/0x2c0
[  192.823861][T12837]  genl_rcv_msg+0x61c/0x7a0
[  192.823875][T12837]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.823884][T12837]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  192.823904][T12837]  netlink_rcv_skb+0x232/0x4b0
[  192.823918][T12837]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.823929][T12837]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.823949][T12837]  ? down_read+0x270/0x2e0
[  192.823958][T12837]  ? genl_rcv+0xd/0x40
[  192.823968][T12837]  genl_rcv+0x28/0x40
[  192.823976][T12837]  netlink_unicast+0x75c/0x8e0
[  192.823993][T12837]  netlink_sendmsg+0x813/0xb40
[  192.824010][T12837]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.824024][T12837]  ? aa_sock_msg_perm+0xf1/0x1b0
[  192.824037][T12837]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  192.824051][T12837]  ____sys_sendmsg+0x972/0x9f0
[  192.824065][T12837]  ? __might_fault+0xaf/0x130
[  192.824080][T12837]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.824097][T12837]  ? import_iovec+0x73/0xa0
[  192.824140][T12837]  ___sys_sendmsg+0x2a5/0x360
[  192.824155][T12837]  ? __lock_acquire+0x6b5/0x2cf0
[  192.824170][T12837]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.824186][T12837]  ? futex_wait+0x2a2/0x390
[  192.824212][T12837]  ? __fget_files+0x2a/0x420
[  192.824223][T12837]  ? __fget_files+0x3a0/0x420
[  192.824239][T12837]  __x64_sys_sendmsg+0x1bd/0x2a0
[  192.824253][T12837]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.824277][T12837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.824286][T12837]  do_syscall_64+0x15f/0xf80
[  192.824299][T12837]  ? trace_irq_disable+0x3b/0x140
[  192.824316][T12837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.824326][T12837] RIP: 0033:0x7f3d5579ce59
[  192.824337][T12837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.824346][T12837] RSP: 002b:00007f3d56685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.824359][T12837] RAX: ffffffffffffffda RBX: 00007f3d55a16090 RCX: 00007f3d5579ce59
[  192.824366][T12837] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  192.824373][T12837] RBP: 00007f3d55832d6f R08: 0000000000000000 R09: 0000000000000000
[  192.824379][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.824384][T12837] R13: 00007f3d55a16128 R14: 00007f3d55a16090 R15: 00007ffd47392a78
[  192.824411][T12837]  </TASK>
[  193.064707][T12845] IPVS: set_ctl: invalid protocol: 48544 172.20.20.170:20003
[  193.079436][T12847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.152244][T12850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'.
[  193.561236][T12878] ipip2: entered promiscuous mode
[  193.565255][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  193.720423][T12900] sctp: [Deprecated]: syz.1.1898 (pid 12900) Use of int in maxseg socket option.
[  193.720423][T12900] Use struct sctp_assoc_value instead
[  193.771788][T12901] netlink: 'syz.2.1900': attribute type 21 has an invalid length.
[  193.775357][T12901] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1900'.
[  193.778827][T12901] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1900'.
[  193.785885][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'.
[  193.897774][T12915] syzkaller0: entered promiscuous mode
[  193.900277][T12915] syzkaller0: entered allmulticast mode
[  193.908912][T12915] netlink: 'syz.1.1903': attribute type 1 has an invalid length.
[  193.930581][T12915] 8021q: adding VLAN 0 to HW filter on device bond21
[  193.944220][T12915] bond21: (slave geneve5): making interface the new active one
[  193.950374][T12915] bond21: (slave geneve5): Enslaving as an active interface with an up link
[  194.669443][T12943] netlink: 'syz.0.1909': attribute type 12 has an invalid length.
[  194.843454][T12961] ip6tnl1: entered allmulticast mode
[  194.847394][T12961] netlink: 'syz.2.1914': attribute type 83 has an invalid length.
[  194.853357][ T5762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  194.862302][ T5762] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  194.882402][ T5697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  194.915692][T12976] rdma_rxe: rxe_newlink: failed to add bond0
[  195.035768][T12980] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  195.049008][T12982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.155744][T13000] netlink: 'syz.0.1924': attribute type 13 has an invalid length.
[  195.161361][T13000] netlink: 'syz.0.1924': attribute type 17 has an invalid length.
[  195.199709][T12998] bond22 (unregistering): Released all slaves
[  195.203011][ T5697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  195.354553][T13022] netlink: 'syz.0.1930': attribute type 13 has an invalid length.
[  195.357844][T13022] netlink: 'syz.0.1930': attribute type 17 has an invalid length.
[  195.446614][T13022] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  195.825391][ T5697] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  196.603400][T13088] syz_tun: entered allmulticast mode
[  196.718813][T13093] __nla_validate_parse: 9 callbacks suppressed
[  196.718830][T13093] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1949'.
[  196.834062][T13099] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  197.058292][T13107] validate_nla: 3 callbacks suppressed
[  197.058306][T13107] netlink: 'syz.1.1955': attribute type 1 has an invalid length.
[  197.063610][T13108] netlink: 'syz.1.1955': attribute type 1 has an invalid length.
[  197.077498][T13108] bond23: entered promiscuous mode
[  197.079882][T13108] 8021q: adding VLAN 0 to HW filter on device bond23
[  197.132332][T13111] netlink: 'syz.1.1956': attribute type 1 has an invalid length.
[  197.155292][T13111] 8021q: adding VLAN 0 to HW filter on device bond24
[  197.165696][T13111] bond0: (slave dummy0): Releasing backup interface
[  197.169972][T13111] dummy0: left promiscuous mode
[  197.178724][T13111] bond24: (slave dummy0): making interface the new active one
[  197.183257][T13111] bond24: (slave dummy0): Enslaving as an active interface with an up link
[  197.190785][T13111] nftables ruleset with unbound set
[  197.211337][T13022] Set syz1 is full, maxelem 65536 reached
[  197.241827][T13111] netlink: 'syz.1.1956': attribute type 10 has an invalid length.
[  197.247224][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1956'.
[  197.250132][T13111] dummy0: entered promiscuous mode
[  197.255819][T13111] bond24: (slave dummy0): Releasing active interface
[  197.273084][T13116] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  197.297457][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1958'.
[  197.470498][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'.
[  197.499714][T13133] netlink: 'syz.0.1962': attribute type 1 has an invalid length.
[  197.576974][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'.
[  197.589557][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1964'.
[  197.611478][T13148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'.
[  197.611616][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1966'.
[  197.625742][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'.
[  197.628691][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'.
[  197.697527][T13161] nbd: nbd0 already in use
[  197.700079][T13161] block nbd2: NBD_DISCONNECT
[  197.704296][T13161] block nbd2: Send disconnect failed -32
[  197.706106][T13161] block nbd2: shutting down sockets
[  197.735382][T13161] bridge0: port 3(syz_tun) entered blocking state
[  197.738014][T13161] bridge0: port 3(syz_tun) entered forwarding state
[  197.759488][T13161] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.780747][T13161] hsr0: left promiscuous mode
[  197.785402][T13161] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  197.894174][T13172] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  198.011518][T13193] netlink: 'syz.0.1978': attribute type 3 has an invalid length.
[  198.039737][T13196] bond21: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  198.082459][T13202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.085478][T13202] IPv6: NLM_F_CREATE should be set when creating new route
[  198.087822][T13202] IPv6: NLM_F_CREATE should be set when creating new route
[  198.090044][T13202] IPv6: NLM_F_CREATE should be set when creating new route
[  198.093431][T13202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  198.110611][T13204] netlink: 'syz.2.1982': attribute type 1 has an invalid length.
[  198.117014][T13204] netlink: 'syz.2.1982': attribute type 2 has an invalid length.
[  198.119992][T13204] netlink: 'syz.2.1982': attribute type 1 has an invalid length.
[  198.123596][T13204] netlink: 'syz.2.1982': attribute type 2 has an invalid length.
[  198.204178][   T54] block nbd2: Receive control failed (result -32)
[  198.348476][T13223] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  198.450917][T13229] pimreg: entered allmulticast mode
[  198.935839][T13263] bridge0: port 3(syz_tun) entered disabled state
[  199.134873][T13263] tipc: Resetting bearer <eth:syzkaller0>
[  199.144413][T13270] tunl0: Caught tx_queue_len zero misconfig
[  199.180175][T13264] bridge0: port 3(syz_tun) entered blocking state
[  199.182325][T13264] bridge0: port 3(syz_tun) entered forwarding state
[  199.188524][T13264] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.215286][T13264] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  199.226473][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.229176][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.234700][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.240195][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.274417][T13282] openvswitch: netlink: IP tunnel dst address not specified
[  199.291292][T13282] bond22 (unregistering): Released all slaves
[  199.385894][T13291] batadv_slave_1: entered promiscuous mode
[  199.419241][T13290] batadv_slave_1: left promiscuous mode
[  199.441837][T13295] vlan8: entered promiscuous mode
[  199.676318][T13300] bond0 (unregistering): Released all slaves
[  200.300581][T13319] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  200.319993][T13319] tipc: Bearer <eth:vlan0>: already 2 bearers with priority 10
[  200.322725][T13319] tipc: Bearer <eth:vlan0>: trying with adjusted priority
[  200.324959][T13319] tipc: Enabling of bearer <eth:vlan0> rejected, max 3 bearers permitted
[  200.328237][T13319] syzkaller0: entered promiscuous mode
[  200.330054][T13319] syzkaller0: entered allmulticast mode
[  200.360464][T13323] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.500116][T13340] 8021q: adding VLAN 0 to HW filter on device bond22
[  200.838408][T13372] vlan2: entered promiscuous mode
[  201.317068][T13396] syzkaller0: entered promiscuous mode
[  201.318886][T13396] syzkaller0: entered allmulticast mode
[  201.460398][T13404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.464053][T13406] syzkaller0: entered promiscuous mode
[  201.466486][T13406] syzkaller0: entered allmulticast mode
[  201.490834][T13404] tipc: Resetting bearer <eth:syzkaller0>
[  201.498723][T13402] tipc: Resetting bearer <eth:syzkaller0>
[  201.518389][T13402] tipc: Disabling bearer <eth:syzkaller0>
[  201.575904][T13415] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  201.609414][T13415] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.633954][T13415] bond0: (slave veth21): Enslaving as an active interface with a down link
[  201.696893][T13420] bond25: Removing last arp target with arp_interval on
[  201.821184][T13427] __nla_validate_parse: 28 callbacks suppressed
[  201.821196][T13427] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2048'.
[  201.908835][T13431] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2050'.
[  201.918804][T13429] lo: Caught tx_queue_len zero misconfig
[  201.934199][T13429] syzkaller0: entered promiscuous mode
[  201.936373][T13429] syzkaller0: entered allmulticast mode
[  201.960553][T13429] bond26: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  201.966423][T13429] bond26 (unregistering): Released all slaves
[  202.174844][T13444] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2054'.
[  202.261896][T13447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2054'.
[  202.473178][T13461] validate_nla: 19 callbacks suppressed
[  202.473191][T13461] netlink: 'syz.2.2056': attribute type 4 has an invalid length.
[  202.578598][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'.
[  202.591869][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2061'.
[  202.698397][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'.
[  202.725271][T13484] bond22: option ad_select: invalid value (34)
[  202.729646][T13484] bond22 (unregistering): Released all slaves
[  202.740692][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2065'.
[  202.797397][T13484] netlink: 'syz.2.2064': attribute type 1 has an invalid length.
[  202.800089][T13484] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2064'.
[  202.956190][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2072'.
[  203.212839][T13539] bond22: option min_links: invalid value (18446744073709551612)
[  203.222238][T13539] bond22: option min_links: allowed values 0 - 2147483647
[  203.226863][T13539] bond22 (unregistering): Released all slaves
[  203.356510][T13544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.920266][T13553] netlink: 'syz.1.2083': attribute type 1 has an invalid length.
[  204.016639][T13561] hmac(sha224: entered promiscuous mode
[  204.020352][T13561] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  204.036338][T13561] 8021q: adding VLAN 0 to HW filter on device bond22
[  204.079424][T13567] rdma_op ffff8881bfdcf1f0 conn xmit_rdma 0000000000000000
[  204.187929][T13578] IPVS: length: 153 != 24
[  204.189976][T13579] openvswitch: netlink: Key type 6125 is out of range max 32
[  204.195746][T13564] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  204.267599][T13581] xt_cgroup: invalid path, errno=-2
[  204.833273][T13599] nbd: nbd0 already in use
[  205.229489][T13611] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  205.258221][T13615] netlink: 'syz.2.2101': attribute type 58 has an invalid length.
[  205.385124][T13627] netlink: 'syz.0.2105': attribute type 12 has an invalid length.
[  205.415354][T13631] netlink: 'syz.0.2106': attribute type 1 has an invalid length.
[  205.464449][T13633] xt_cgroup: invalid path, errno=-2
[  206.547595][T13665] xt_hashlimit: invalid rate
[  206.560642][T13665] openvswitch: netlink: Message has 3 unknown bytes.
[  206.611315][T13667] netlink: 'syz.0.2117': attribute type 10 has an invalid length.
[  206.919802][T13694] __nla_validate_parse: 19 callbacks suppressed
[  206.919815][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2125'.
[  206.956520][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'.
[  206.977552][T13694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2125'.
[  207.056519][T13708] netlink: 'syz.2.2129': attribute type 1 has an invalid length.
[  207.060973][T13708] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  207.145614][T13716] syzkaller1: entered promiscuous mode
[  207.152521][T13716] syzkaller1: entered allmulticast mode
[  207.155693][T13719] syz_tun: left allmulticast mode
[  207.177290][T13721] netlink: 'syz.2.2133': attribute type 1 has an invalid length.
[  207.217335][T13721] 8021q: adding VLAN 0 to HW filter on device bond23
[  207.224915][T13716] syzkaller0: entered promiscuous mode
[  207.228442][T13716] syzkaller0: entered allmulticast mode
[  207.398425][T13733] syzkaller0: entered promiscuous mode
[  207.400553][T13733] syzkaller0: entered allmulticast mode
[  207.509584][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2137'.
[  207.542455][T13737] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004
[  207.569235][T13739] : renamed from veth0_to_bond (while UP)
[  207.659704][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'.
[  207.664473][T13747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.668240][T13747] netlink: 'syz.0.2141': attribute type 1 has an invalid length.
[  207.856534][T13755] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  207.934455][T13757] netlink: 'syz.0.2144': attribute type 1 has an invalid length.
[  207.968769][T13757] 8021q: adding VLAN 0 to HW filter on device bond24
[  208.052520][T13757] bond24: (slave geneve8): making interface the new active one
[  208.077633][T13757] bond24: (slave geneve8): Enslaving as an active interface with an up link
[  208.109880][T13757] syz.0.2144 (13757) used greatest stack depth: 19296 bytes left
[  208.113165][T13767] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  208.155800][T13767] bond26: entered promiscuous mode
[  208.158131][T13767] 8021q: adding VLAN 0 to HW filter on device bond26
[  208.209616][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2150'.
[  208.237858][T13786] bond24: option primary_reselect: invalid value (133)
[  208.243093][T13786] bond24 (unregistering): Released all slaves
[  208.276479][T13794] syzkaller0: entered promiscuous mode
[  208.278417][T13794] syzkaller0: entered allmulticast mode
[  208.629379][T13823] netlink: 'syz.0.2160': attribute type 7 has an invalid length.
[  208.669275][T13823] vlan0 (unregistering): left allmulticast mode
[  208.672192][T13823] veth0_vlan (unregistering): left allmulticast mode
[  208.675150][T13823] team0: Port device vlan0 removed
[  208.686287][T13827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'.
[  208.696764][T13827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2162'.
[  208.707753][T13829] netlink: 'syz.2.2161': attribute type 2 has an invalid length.
[  208.808580][T13828] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.829867][T13829] bridge0: port 3(syz_tun) entered disabled state
[  208.870672][T13829] gtp1: left promiscuous mode
[  208.873994][T13829] bond14: left promiscuous mode
[  208.875578][T13829] bridge11: left promiscuous mode
[  208.877649][T13829] ip6gre2: left promiscuous mode
[  208.879192][T13829] ip6gre2: left allmulticast mode
[  208.881007][T13829] vlan1: left promiscuous mode
[  208.883582][T13829] bond18: left promiscuous mode
[  208.885231][T13829] geneve3: left promiscuous mode
[  208.887508][T13829] tipc: Resetting bearer <eth:syzkaller0>
[  208.890046][T13829] syzkaller0: left promiscuous mode
[  208.891730][T13829] syzkaller0: left allmulticast mode
[  208.894269][T13829] ip6tnl1: left allmulticast mode
[  208.903471][ T5762] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.907728][ T5762] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.912576][T13828] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.921597][ T5762] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.926191][ T5762] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.021612][T13828] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.096575][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2165'.
[  209.148001][T13856] vlan3: entered promiscuous mode
[  209.167320][T13828] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.185721][T13858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2167'.
[  209.297818][ T6756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.321224][ T6756] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.342874][ T5762] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.357242][ T5762] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.472774][T13881] vlan0: entered promiscuous mode
[  209.734134][T13900] bond27: entered allmulticast mode
[  209.886192][T13909] openvswitch: netlink: Flow actions attr not present in new flow.
[  210.180088][T13952] syzkaller1: entered promiscuous mode
[  210.181878][T13952] syzkaller1: entered allmulticast mode
[  210.204600][T13954] netlink: 'syz.1.2192': attribute type 16 has an invalid length.
[  210.209963][T13954] netlink: 'syz.1.2192': attribute type 3 has an invalid length.
[  210.313229][T13962] netlink: 'syz.1.2196': attribute type 29 has an invalid length.
[  210.317075][T13962] netlink: 'syz.1.2196': attribute type 29 has an invalid length.
[  210.320315][T13962] netlink: 'syz.1.2196': attribute type 29 has an invalid length.
[  210.332152][T13962] hsr0: entered promiscuous mode
[  210.399651][T13964] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  210.403404][T13964] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  210.406478][T13964] veth0_virt_wifi: entered allmulticast mode
[  210.410000][T13964] veth0_virt_wifi: entered promiscuous mode
[  211.273307][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.276957][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  211.280862][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.286671][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.298360][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  211.303098][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.309568][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.322511][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  211.326575][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.374832][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.377673][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  211.380434][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.410419][T13988] veth15: entered allmulticast mode
[  211.419790][T13988] bond24: (slave veth15): Enslaving as an active interface with an up link
[  212.023828][T14032] vlan0: entered promiscuous mode
[  212.146211][T14040] __nla_validate_parse: 69 callbacks suppressed
[  212.146224][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'.
[  212.217463][T14040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2217'.
[  212.223174][T14040] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2217'.
[  212.279885][T14045] team0: left allmulticast mode
[  212.322649][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'.
[  212.399273][T14045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2218'.
[  212.412198][T14045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2218'.
[  212.416083][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'.
[  212.482830][T14066] syzkaller0: entered promiscuous mode
[  212.485307][T14066] syzkaller0: entered allmulticast mode
[  212.589493][T14069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2223'.
[  212.694911][T14072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2224'.
[  212.830333][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2227'.
[  212.880544][T14086] geneve4: entered promiscuous mode
[  212.883663][T14086] geneve4: entered allmulticast mode
[  212.888805][ T5673] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.898287][ T5673] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.914644][ T5673] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.918813][ T5673] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.932590][T14092] validate_nla: 52 callbacks suppressed
[  212.932601][T14092] netlink: 'syz.0.2230': attribute type 1 has an invalid length.
[  213.394139][ T5673] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.395561][T14121] netlink: 'syz.2.2239': attribute type 13 has an invalid length.
[  213.400912][T14121] netlink: 'syz.2.2239': attribute type 17 has an invalid length.
[  213.406723][ T5673] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.409765][ T5673] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  213.446996][T14121] bridge0: port 3(syz_tun) entered blocking state
[  213.449770][T14121] bridge0: port 3(syz_tun) entered forwarding state
[  213.457936][T14121] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.482902][T14121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  213.487068][T14121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.498769][T14121] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  213.505268][ T5673] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.546842][ T5673] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.549806][ T5673] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.792943][T14146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.919754][T14164] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  213.923234][T14164] gretap1: entered allmulticast mode
[  213.951906][T14166] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  213.991404][T14170] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[  214.000824][T14170] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  214.007624][T14170] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  214.013351][T14166] SET target dimension over the limit!
[  214.351776][T14188] netlink: 'syz.1.2257': attribute type 13 has an invalid length.
[  214.355084][T14188] netlink: 'syz.1.2257': attribute type 17 has an invalid length.
[  214.385731][T14188] erspan0: left promiscuous mode
[  214.405073][T14188] syz_tun: left promiscuous mode
[  214.411571][T14188] ip6gretap0: left promiscuous mode
[  214.421696][T14188] dummy0: left promiscuous mode
[  214.425992][T14188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.442786][T14188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  214.446235][T14188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  214.450305][T14188] hsr0: left promiscuous mode
[  214.456834][T14188] veth1_vlan: left promiscuous mode
[  214.459982][T14188] veth0_vlan: left promiscuous mode
[  214.463051][T14188] veth0_vlan: entered promiscuous mode
[  214.466998][T14188] veth1_vlan: entered promiscuous mode
[  214.471585][T14188] veth1_macvtap: left promiscuous mode
[  214.478837][T14188] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  214.499907][T11806] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  214.502362][T11806] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  214.524837][ T6756] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.528373][ T6756] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.534055][ T6756] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.540000][ T6756] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.649619][T14215] netlink: 'syz.2.2264': attribute type 9 has an invalid length.
[  215.019277][T14242] netlink: 'syz.0.2271': attribute type 1 has an invalid length.
[  215.057213][T14244] netlink: 'syz.2.2272': attribute type 1 has an invalid length.
[  215.264067][T14266] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  215.481196][T14301] netem: incorrect ge model size
[  215.539610][T14301] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.604971][T14301] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.688201][T14301] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.788810][T14301] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.869410][T14314] netlink: 'syz.0.2287': attribute type 16 has an invalid length.
[  215.909829][T14314] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  215.947049][ T5762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.971138][ T5762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.026128][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.044103][ T5762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.124676][T14324] syzkaller0: entered promiscuous mode
[  216.127665][T14324] syzkaller0: entered allmulticast mode
[  216.223099][T14327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.229065][T14327] syzkaller0: left allmulticast mode
[  216.623525][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881776b5c00: rx timeout, send abort
[  217.124348][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881776b4800: rx timeout, send abort
[  217.128861][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881776b5c00: abort rx timeout. Force session deactivation
[  217.627125][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881776b4800: abort rx timeout. Force session deactivation
[  217.647749][T14327] __nla_validate_parse: 28 callbacks suppressed
[  217.647767][T14327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2291'.
[  217.757124][T14339] 8021q: adding VLAN 0 to HW filter on device bond27
[  217.771059][   T33] audit: type=1800 audit(1778901923.340:3): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2294" name="memory.events" dev="tmpfs" ino=3772 res=0 errno=0
[  217.788892][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2294'.
[  217.977974][T14359] validate_nla: 2 callbacks suppressed
[  217.977986][T14359] netlink: 'syz.2.2299': attribute type 1 has an invalid length.
[  218.009807][T14364] nbd: must specify at least one socket
[  218.017165][T14359] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  218.021809][T14359] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  218.065214][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'.
[  218.117871][T14371] bond27: (slave gretap4): making interface the new active one
[  218.123757][T14371] bond27: (slave gretap4): Enslaving as an active interface with an up link
[  218.133017][T14369] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.216083][T14369] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.258947][T14369] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.309891][T14369] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.358916][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.378236][ T6756] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.391467][ T6756] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.400741][ T6756] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.458075][T14380] bridge14: entered promiscuous mode
[  218.522785][T14386] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2304'.
[  218.639117][T14396] vlan2: entered promiscuous mode
[  218.728746][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2310'.
[  218.776086][T14409] dvmrp6: entered allmulticast mode
[  218.813912][T14409] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  218.850537][T14413] openvswitch: netlink: Actions may not be safe on all matching packets
[  218.870505][T14415] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  218.888743][T14415] 8021q: adding VLAN 0 to HW filter on device bond29
[  218.897252][T14415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2315'.
[  218.907655][T14415] 8021q: adding VLAN 0 to HW filter on device batadv3
[  218.915445][T14415] bond29: (slave batadv3): making interface the new active one
[  218.921379][T14415] bond29: (slave batadv3): Enslaving as an active interface with an up link
[  218.928454][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'.
[  218.970248][T14426] vlan3: entered promiscuous mode
[  219.280502][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'.
[  219.293633][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'.
[  219.371728][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'.
[  219.521248][T14495] netlink: 'syz.1.2334': attribute type 2 has an invalid length.
[  219.711552][T14503] openvswitch: netlink: Missing key (keys=40, expected=100)
[  220.133206][T14543] syzkaller0: entered allmulticast mode
[  220.163034][T14548] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.253434][T14548] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.280111][T14554] netlink: 'syz.2.2353': attribute type 1 has an invalid length.
[  220.303031][T14554] 8021q: adding VLAN 0 to HW filter on device bond28
[  220.310248][T14548] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.356285][T14548] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.408717][T14562] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  220.421406][T14562] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20005
[  220.480514][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.488892][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.503257][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.518973][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.576687][T14568] syz.2.2356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  220.587314][T14568] CPU: 0 UID: 0 PID: 14568 Comm: syz.2.2356 Not tainted syzkaller #0 PREEMPT(full) 
[  220.587335][T14568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.587343][T14568] Call Trace:
[  220.587350][T14568]  <TASK>
[  220.587355][T14568]  dump_stack_lvl+0xe8/0x150
[  220.587377][T14568]  warn_alloc+0x249/0x340
[  220.587397][T14568]  ? stack_trace_save+0xa9/0x100
[  220.587420][T14568]  ? __pfx_warn_alloc+0x10/0x10
[  220.587439][T14568]  ? kasan_save_track+0x4f/0x80
[  220.587454][T14568]  ? kasan_save_track+0x3e/0x80
[  220.587468][T14568]  ? __kasan_kmalloc+0x93/0xb0
[  220.587482][T14568]  ? __kmalloc_cache_noprof+0x31c/0x660
[  220.587498][T14568]  ? xskq_create+0x56/0x170
[  220.587514][T14568]  ? xsk_setsockopt+0x54c/0x990
[  220.587525][T14568]  ? do_sock_setsockopt+0x17c/0x1b0
[  220.587566][T14568]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  220.587581][T14568]  ? do_syscall_64+0x15f/0xf80
[  220.587602][T14568]  __vmalloc_node_range_noprof+0x132/0x1750
[  220.587664][T14568]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  220.587685][T14568]  ? __kasan_kmalloc+0x93/0xb0
[  220.587705][T14568]  vmalloc_user_noprof+0xad/0xe0
[  220.587721][T14568]  ? xskq_create+0xbf/0x170
[  220.587736][T14568]  xskq_create+0xbf/0x170
[  220.587754][T14568]  xsk_init_queue+0x8a/0xe0
[  220.587772][T14568]  xsk_setsockopt+0x54c/0x990
[  220.587789][T14568]  ? __pfx_xsk_setsockopt+0x10/0x10
[  220.587832][T14568]  ? __pfx_aa_sk_perm+0x10/0x10
[  220.587852][T14568]  ? aa_sock_opt_perm+0xff/0x1a0
[  220.587870][T14568]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  220.587887][T14568]  ? __pfx_xsk_setsockopt+0x10/0x10
[  220.587902][T14568]  do_sock_setsockopt+0x17c/0x1b0
[  220.587921][T14568]  __x64_sys_setsockopt+0x13d/0x1b0
[  220.587945][T14568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.587959][T14568]  do_syscall_64+0x15f/0xf80
[  220.587976][T14568]  ? trace_irq_disable+0x3b/0x140
[  220.587997][T14568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.588009][T14568] RIP: 0033:0x7f3d5579ce59
[  220.588020][T14568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.588031][T14568] RSP: 002b:00007f3d566a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  220.588045][T14568] RAX: ffffffffffffffda RBX: 00007f3d55a15fa0 RCX: 00007f3d5579ce59
[  220.588054][T14568] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  220.588061][T14568] RBP: 00007f3d55832d6f R08: 0000000000000004 R09: 0000000000000000
[  220.588068][T14568] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.588075][T14568] R13: 00007f3d55a16038 R14: 00007f3d55a15fa0 R15: 00007ffd47392a78
[  220.588096][T14568]  </TASK>
[  220.588762][T14568] Mem-Info:
[  220.614099][T14570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.616291][T14568] active_anon:5562 inactive_anon:0 isolated_anon:0
[  220.616291][T14568]  active_file:12289 inactive_file:38387 isolated_file:0
[  220.616291][T14568]  unevictable:1768 dirty:76 writeback:0
[  220.616291][T14568]  slab_reclaimable:11912 slab_unreclaimable:129711
[  220.616291][T14568]  mapped:18218 shmem:2344 pagetables:1129
[  220.616291][T14568]  sec_pagetables:0 bounce:0
[  220.616291][T14568]  kernel_misc_reclaimable:0
[  220.616291][T14568]  free:1078780 free_pcp:18980 free_cma:0
[  220.722522][T14568] Node 0 active_anon:9868kB inactive_anon:0kB active_file:17792kB inactive_file:10932kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36584kB dirty:144kB writeback:0kB shmem:4436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4288kB pagetables:2640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  220.736237][T14568] Node 1 active_anon:12664kB inactive_anon:0kB active_file:31364kB inactive_file:142616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36288kB dirty:160kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11780kB pagetables:1876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  220.750146][T14568] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  220.762551][T14568] lowmem_reserve[]: 0 1587 2117 2117 2117
[  220.764928][T14568] Node 0 DMA32 free:1504932kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625312kB mlocked:0kB bounce:0kB free_pcp:8940kB local_pcp:2560kB free_cma:0kB
[  220.778269][T14568] lowmem_reserve[]: 0 0 530 530 530
[  220.780504][T14568] Node 0 Normal free:14956kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9760kB inactive_anon:0kB active_file:17792kB inactive_file:10932kB unevictable:3536kB writepending:144kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:12084kB local_pcp:512kB free_cma:0kB
[  220.793445][T14568] lowmem_reserve[]: 0 0 0 0 0
[  220.795522][T14568] Node 1 Normal free:2779576kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12676kB inactive_anon:0kB active_file:31364kB inactive_file:142616kB unevictable:3536kB writepending:160kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:54704kB local_pcp:23560kB free_cma:0kB
[  220.806416][T14568] lowmem_reserve[]: 0 0 0 0 0
[  220.808402][T14568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  220.812545][T14568] Node 0 DMA32: 9*4kB (UM) 22*8kB (UME) 15*16kB (UM) 53*32kB (UME) 47*64kB (UM) 29*128kB (UME) 18*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 8*2048kB (UM) 358*4096kB (UM) = 1504932kB
[  220.818231][T14568] Node 0 Normal: 303*4kB (UM) 524*8kB (UME) 337*16kB (UM) 2*32kB (M) 5*64kB (M) 9*128kB (M) 8*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 14892kB
[  220.823341][T14568] Node 1 Normal: 3306*4kB (UME) 1164*8kB (UME) 929*16kB (UME) 713*32kB (UM) 592*64kB (UM) 157*128kB (UME) 68*256kB (UM) 10*512kB (UME) 23*1024kB (UME) 11*2048kB (UM) 633*4096kB (UM) = 2779576kB
[  220.829075][T14568] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.831900][T14568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.834776][T14568] 53022 total pagecache pages
[  220.836431][T14568] 0 pages in swap cache
[  220.837724][T14568] Free swap  = 124996kB
[  220.839022][T14568] Total swap = 124996kB
[  220.840288][T14568] 1834877 pages RAM
[  220.841442][T14568] 0 pages HighMem/MovableOnly
[  220.843063][T14568] 390250 pages reserved
[  220.844404][T14568] 0 pages cma reserved
[  220.949159][T14586] pim6reg1: entered promiscuous mode
[  220.953554][T14586] pim6reg1: entered allmulticast mode
[  220.959071][T14585] syzkaller0: entered promiscuous mode
[  220.961336][T14585] syzkaller0: entered allmulticast mode
[  221.068189][T14595] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  221.350636][T14622] bond30: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  221.358767][T14622] bond30: (slave lo): Enslaving as an active interface with an up link
[  221.364015][T14622] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  221.571584][T14639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.579008][T14641] netlink: 'syz.0.2376': attribute type 1 has an invalid length.
[  221.581524][T14641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.587325][T14639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.730528][T14646] syzkaller0: entered promiscuous mode
[  221.735142][T14646] syzkaller0: entered allmulticast mode
[  221.924430][T14648] netlink: 'syz.2.2379': attribute type 1 has an invalid length.
[  222.318297][T14657] xt_hashlimit: size too large, truncated to 1048576
[  223.223206][T14648] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  223.229412][T14649] gretap5: entered allmulticast mode
[  223.242446][T14657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.286395][T14664] __nla_validate_parse: 21 callbacks suppressed
[  223.286408][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'.
[  223.293287][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2383'.
[  223.345090][T14669] vlan0: entered promiscuous mode
[  223.579027][T14699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2392'.
[  223.869955][T14713] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  223.957843][T14713] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  224.070222][T14732] netlink: 'syz.0.2399': attribute type 16 has an invalid length.
[  224.086180][T14732] netlink: 'syz.0.2399': attribute type 17 has an invalid length.
[  224.379919][T14729] tipc: Resetting bearer <eth:xfrm0>
[  224.566701][T14732] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.569878][T14732] 8021q: adding VLAN 0 to HW filter on device team0
[  224.602596][T14732] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  224.787433][T14757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.789731][T14757] IPv6: NLM_F_CREATE should be set when creating new route
[  224.792444][T14757] IPv6: NLM_F_CREATE should be set when creating new route
[  224.795362][T14757] IPv6: NLM_F_CREATE should be set when creating new route
[  224.807303][T14757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.855218][T14761] tap0: tun_chr_ioctl cmd 1074025673
[  224.857556][T14761] tap0: tun_chr_ioctl cmd 1074025677
[  224.859889][T14761] tap0: linktype set to 773
[  224.898812][T14765] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  224.903598][T14765] syzkaller0: entered promiscuous mode
[  224.906304][T14765] syzkaller0: entered allmulticast mode
[  224.961778][T14769] netlink: zone id is out of range
[  224.966636][T14769] netlink: zone id is out of range
[  224.968283][T14767] sctp: [Deprecated]: syz.2.2410 (pid 14767) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.968283][T14767] Use struct sctp_sack_info instead
[  224.968706][T14769] netlink: zone id is out of range
[  224.975801][T14767] sctp: [Deprecated]: syz.2.2410 (pid 14767) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.975801][T14767] Use struct sctp_sack_info instead
[  224.990952][T14767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.099827][T14774] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2413'.
[  225.207612][T14782] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2416'.
[  225.398123][T14791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.407690][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'.
[  225.419057][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'.
[  225.430614][T14791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.434703][T14791] syzkaller0: entered promiscuous mode
[  225.437133][T14791] syzkaller0: entered allmulticast mode
[  225.443714][T14790] tipc: Resetting bearer <eth:syzkaller0>
[  225.467242][T14790] tipc: Disabling bearer <eth:syzkaller0>
[  225.890185][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'.
[  225.896327][T14813] netlink: 'syz.2.2423': attribute type 1 has an invalid length.
[  225.899486][T14813] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2423'.
[  225.905987][T14813] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2423'.
[  226.174390][T14824] net_ratelimit: 345 callbacks suppressed
[  226.174407][T14824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.860218][T14832] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  226.899622][T14835] netlink: 'syz.2.2430': attribute type 5 has an invalid length.
[  226.903629][T14835] netlink: 'syz.2.2430': attribute type 5 has an invalid length.
[  227.091606][T14841] nbd: must specify a size in bytes for the device
[  227.211498][T14853] netlink: 'syz.0.2435': attribute type 1 has an invalid length.
[  227.239250][T14853] 8021q: adding VLAN 0 to HW filter on device bond29
[  227.256692][T14853] bond29: (slave gretap1): making interface the new active one
[  227.260798][T14853] bond29: (slave gretap1): Enslaving as an active interface with an up link
[  227.926860][T14879] netlink: 'syz.2.2442': attribute type 8 has an invalid length.
[  228.145802][T14890] vlan2: entered promiscuous mode
[  228.194404][T14892] bond29: option xmit_hash_policy: invalid value (10)
[  228.197325][T14892] bond29 (unregistering): Released all slaves
[  228.293848][T14898] bond31: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  228.298554][T14898] bond31 (unregistering): Released all slaves
[  228.330322][T14901] syzkaller0: entered promiscuous mode
[  228.335671][T14901] syzkaller0: entered allmulticast mode
[  228.392292][T14905] __nla_validate_parse: 10 callbacks suppressed
[  228.392307][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'.
[  228.459570][T14908] netlink: 'syz.0.2451': attribute type 1 has an invalid length.
[  228.536576][T14908] 8021q: adding VLAN 0 to HW filter on device bond30
[  228.625503][T14923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2455'.
[  228.688632][T14935] ip6t_rpfilter: unknown options
[  228.699654][T14937] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2459'.
[  228.702987][T14935] netlink: 'syz.1.2458': attribute type 1 has an invalid length.
[  228.754726][T14935] bond31: entered promiscuous mode
[  228.756669][T14935] 8021q: adding VLAN 0 to HW filter on device bond31
[  228.790372][T14935] 8021q: adding VLAN 0 to HW filter on device bond31
[  228.793870][T14935] bond31: (slave vti0): The slave device specified does not support setting the MAC address
[  228.797905][T14935] bond31: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  228.805309][T14935] bond31: (slave vti0): making interface the new active one
[  228.808318][T14935] vti0: entered promiscuous mode
[  228.811807][T14935] bond31: (slave vti0): Enslaving as an active interface with an up link
[  228.887820][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2459'.
[  228.894874][T14937] tipc: Bearer <udp:sy{>: already 2 bearers with priority 10
[  228.902319][T14937] tipc: Bearer <udp:sy{>: trying with adjusted priority
[  228.907771][T14937] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  228.933837][T14952] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2462'.
[  228.965750][T14958] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2463'.
[  228.973320][T14958] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2463'.
[  228.983129][T14961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.988859][T14961] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2465'.
[  229.014124][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2466'.
[  229.017739][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2464'.
[  229.052875][T14965] bridge0: port 2(erspan0) entered blocking state
[  229.057310][T14965] bridge0: port 2(erspan0) entered disabled state
[  229.059985][T14965] erspan0: entered allmulticast mode
[  229.062987][T14965] erspan0: entered promiscuous mode
[  229.065730][T14965] bridge0: port 2(erspan0) entered blocking state
[  229.069796][T14965] bridge0: port 2(erspan0) entered forwarding state
[  229.090458][T14965] erspan0: left allmulticast mode
[  229.095556][T14965] erspan0: left promiscuous mode
[  229.105010][T14965] bridge0: port 2(erspan0) entered disabled state
[  229.138889][T14968] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  229.178597][T14980] netlink: 'syz.0.2471': attribute type 1 has an invalid length.
[  229.201160][T14980] 8021q: adding VLAN 0 to HW filter on device bond31
[  229.215824][T14980] vlan1: entered promiscuous mode
[  229.217578][T14980] bond31: entered promiscuous mode
[  229.219368][T14980] vlan1: entered allmulticast mode
[  229.222153][T14980] bond31: entered allmulticast mode
[  229.237439][T14980] 8021q: adding VLAN 0 to HW filter on device batadv2
[  229.242540][T14980] bond31: (slave batadv2): making interface the new active one
[  229.245859][T14988] netlink: 'syz.2.2473': attribute type 1 has an invalid length.
[  229.246631][T14980] batadv2: entered promiscuous mode
[  229.251064][T14980] batadv2: entered allmulticast mode
[  229.254569][T14980] bond31: (slave batadv2): Enslaving as an active interface with an up link
[  229.281276][T14988] 8021q: adding VLAN 0 to HW filter on device bond29
[  229.293467][T14988] vlan3: entered allmulticast mode
[  229.295360][T14988] bond29: entered allmulticast mode
[  229.314050][T14988] bond29: (slave geneve5): making interface the new active one
[  229.318376][T14988] geneve5: entered allmulticast mode
[  229.326073][T14988] bond29: (slave geneve5): Enslaving as an active interface with an up link
[  229.333636][T14994] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  229.351383][T14996] netlink: 'syz.1.2476': attribute type 1 has an invalid length.
[  229.387680][T14996] bond32: entered promiscuous mode
[  229.395065][T14996] bond32: entered allmulticast mode
[  229.398665][T15004] netlink: 'syz.2.2479': attribute type 1 has an invalid length.
[  229.401041][T14996] 8021q: adding VLAN 0 to HW filter on device bond32
[  229.449869][T15004] bond30: (slave bridge17): making interface the new active one
[  229.460027][T15004] bond30: (slave bridge17): Enslaving as an active interface with an up link
[  229.469786][T15011] vlan2: entered promiscuous mode
[  229.528101][T15020] netlink: 'syz.1.2485': attribute type 4 has an invalid length.
[  229.532667][T15017] netlink: 'syz.2.2484': attribute type 9 has an invalid length.
[  229.532804][T15020] netlink: 'syz.1.2485': attribute type 4 has an invalid length.
[  229.538849][T15015] batadv3: entered promiscuous mode
[  229.540492][T15015] batadv3: entered allmulticast mode
[  229.607555][T15026] netlink: 'syz.2.2486': attribute type 1 has an invalid length.
[  229.629841][T15026] 8021q: adding VLAN 0 to HW filter on device bond31
[  229.634933][T15026] bond31: option tlb_dynamic_lb: unable to set because the bond device is up
[  229.638450][T15027] bond31: option tlb_dynamic_lb: unable to set because the bond device is up
[  229.770564][T15042] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  229.830461][T15047] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.890636][T15047] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.969541][T15047] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.007425][T15067] netlink: 'syz.1.2501': attribute type 13 has an invalid length.
[  230.020052][T15067] netlink: 'syz.1.2501': attribute type 17 has an invalid length.
[  230.070644][T15066] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  230.308734][T15067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.333707][T15067] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  230.336144][T15067] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  230.338910][T15067] veth1_vlan: left promiscuous mode
[  230.341320][T15067] veth0_vlan: left promiscuous mode
[  230.344349][T15067] veth0_vlan: entered promiscuous mode
[  230.348288][T15067] veth1_vlan: entered promiscuous mode
[  230.360410][T15067] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  230.390152][T15047] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.466191][ T5673] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.477040][ T5673] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.489537][ T5673] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.498094][ T5673] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.564097][T15092] bond33: (slave vxcan1): The slave device specified does not support setting the MAC address
[  230.568459][T15092] bond33: (slave vxcan1): Error -95 calling set_mac_address
[  230.646599][T15092] bond33: (slave bridge15): Enslaving as an active interface with a down link
[  230.667159][T15092] macvlan2: entered promiscuous mode
[  230.672360][T15092] macvlan2: entered allmulticast mode
[  230.674615][T15092] bond33: entered promiscuous mode
[  230.679729][T15092] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  230.686809][T15092] bond33: left promiscuous mode
[  230.708622][T15103] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  230.711705][T15103] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  231.736209][T15175] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  232.688924][T15178] bridge21: entered promiscuous mode
[  232.716731][T15178] bridge21: left promiscuous mode
[  232.748432][T15185] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  232.894505][T15203] nbd: must specify a device to reconfigure
[  233.264114][T15244] 8021q: adding VLAN 0 to HW filter on device bond32
[  233.275766][T15244] sctp: [Deprecated]: syz.0.2555 (pid 15244) Use of int in maxseg socket option.
[  233.275766][T15244] Use struct sctp_assoc_value instead
[  233.466562][T15260] __nla_validate_parse: 33 callbacks suppressed
[  233.466577][T15260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2558'.
[  233.797071][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'.
[  234.967967][T15255] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  235.001794][T15260] dummy0: entered promiscuous mode
[  235.099803][T15277] validate_nla: 9 callbacks suppressed
[  235.099813][T15277] netlink: 'syz.0.2563': attribute type 1 has an invalid length.
[  235.135201][T15277] bond33: (slave bridge23): Enslaving as a backup interface with an up link
[  235.143149][T15277] macvlan0: entered promiscuous mode
[  235.149202][T15277] macvlan0: entered allmulticast mode
[  235.152823][T15277] bond33: entered promiscuous mode
[  235.158393][T15277] bridge23: entered promiscuous mode
[  235.164581][T15277] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  235.168027][T15280] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2565'.
[  235.179011][T15277] bond33: left promiscuous mode
[  235.180990][T15277] bridge23: left promiscuous mode
[  235.187244][T15284] netlink: 'syz.1.2564': attribute type 1 has an invalid length.
[  235.227659][T15284] bond34: entered promiscuous mode
[  235.230256][T15284] 8021q: adding VLAN 0 to HW filter on device bond34
[  235.268229][T15284] bond34: (slave bridge16): making interface the new active one
[  235.271567][T15284] bridge16: entered promiscuous mode
[  235.275669][T15284] bond34: (slave bridge16): Enslaving as an active interface with an up link
[  235.338297][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2566'.
[  235.405280][T15302] netlink: 'syz.0.2569': attribute type 1 has an invalid length.
[  235.431485][T15302] 8021q: adding VLAN 0 to HW filter on device bond34
[  235.453720][T15302] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2569'.
[  235.505283][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'.
[  235.606978][T15310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2573'.
[  235.671803][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2574'.
[  235.884034][T15343] netlink: 'syz.2.2583': attribute type 1 has an invalid length.
[  235.887403][T15343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'.
[  235.893811][T15344] netlink: 'syz.2.2583': attribute type 13 has an invalid length.
[  236.110395][T15365] netlink: 'syz.0.2587': attribute type 1 has an invalid length.
[  236.129481][T15366] bond35: entered promiscuous mode
[  236.131242][T15366] bond35: entered allmulticast mode
[  236.134244][T15366] 8021q: adding VLAN 0 to HW filter on device bond35
[  236.150745][T15365] bridge24: entered promiscuous mode
[  236.153685][T15365] bridge24: entered allmulticast mode
[  236.156340][T15365] bond35: (slave bridge24): Enslaving as a backup interface with an up link
[  236.167541][T15366] bridge25: entered promiscuous mode
[  236.169477][T15366] bridge25: entered allmulticast mode
[  236.173856][T15366] bond35: (slave bridge25): Enslaving as a backup interface with a down link
[  236.214270][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'.
[  236.220398][T15370] netlink: 'syz.2.2589': attribute type 13 has an invalid length.
[  236.244349][ T5762] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  236.314766][T15378] syzkaller0: Caught tx_queue_len zero misconfig
[  236.362426][ T5673] bond35: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  236.505501][T15391] xt_hl: Unknown TTL match mode: 237
[  236.524570][T15388] nbd: must specify at least one socket
[  236.527045][T15389] nbd: must specify at least one socket
[  236.619242][T15394] netlink: 'syz.0.2594': attribute type 1 has an invalid length.
[  237.018670][T15423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.519089][T15460] netem: change failed
[  237.750564][T15482] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20002
[  237.947057][T15498] netlink: 'syz.0.2618': attribute type 1 has an invalid length.
[  237.964998][T15498] vti0: entered promiscuous mode
[  238.494550][T15524] __nla_validate_parse: 22 callbacks suppressed
[  238.494565][T15524] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2627'.
[  238.511785][T15524] batadv0: entered promiscuous mode
[  238.515872][T15524] batadv0: left promiscuous mode
[  238.629260][T15532] netlink: 'syz.0.2629': attribute type 10 has an invalid length.
[  238.675668][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'.
[  238.711045][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'.
[  238.714712][T15537] netlink: 121 bytes leftover after parsing attributes in process `syz.1.2630'.
[  238.718307][T15537] netlink: 'syz.1.2630': attribute type 11 has an invalid length.
[  238.721193][T15537] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.2630'.
[  238.843307][T15553] syzkaller0: entered promiscuous mode
[  238.845723][T15553] syzkaller0: entered allmulticast mode
[  238.978132][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'.
[  238.992287][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'.
[  238.993911][T15563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2638'.
[  239.007181][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2639'.
[  239.168418][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'.
[  239.329734][T15594] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  239.598369][T15630] syzkaller0: entered promiscuous mode
[  239.604674][T15630] syzkaller0: entered allmulticast mode
[  239.659947][T15635] sch_tbf: burst 3 is lower than device syzkaller0 mtu (313) !
[  239.963633][T15666] vlan4: entered promiscuous mode
[  240.050207][T15668] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  240.057597][T15668] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  240.407306][T15676] syzkaller0: entered promiscuous mode
[  240.409267][T15676] syzkaller0: entered allmulticast mode
[  240.611515][T15689] validate_nla: 3 callbacks suppressed
[  240.611527][T15689] netlink: 'syz.0.2679': attribute type 4 has an invalid length.
[  240.629903][T15689] netlink: 'syz.0.2679': attribute type 4 has an invalid length.
[  240.717998][T15695] netlink: 'syz.1.2682': attribute type 1 has an invalid length.
[  240.777054][T15697] netlink: 'syz.0.2683': attribute type 1 has an invalid length.
[  240.926443][T15714] netlink: 'syz.1.2688': attribute type 4 has an invalid length.
[  240.960085][T15723] syzkaller1: entered promiscuous mode
[  240.964275][T15723] syzkaller1: entered allmulticast mode
[  241.100488][T15735] netlink: 'syz.1.2692': attribute type 9 has an invalid length.
[  241.108964][T15735] erspan0: entered promiscuous mode
[  241.114194][T15735] macvlan2: entered promiscuous mode
[  241.116111][T15735] macvlan2: entered allmulticast mode
[  241.118244][T15735] erspan0: entered allmulticast mode
[  241.127845][T15735] ipvlan4: entered promiscuous mode
[  241.226839][T15746] syzkaller0: entered promiscuous mode
[  241.229092][T15746] syzkaller0: entered allmulticast mode
[  241.249705][T15746] bridge0: port 1(vlan9) entered blocking state
[  241.252712][T15746] bridge0: port 1(vlan9) entered disabled state
[  241.255399][T15746] vlan9: entered allmulticast mode
[  241.257639][T15746] bridge0: entered allmulticast mode
[  241.261891][T15746] vlan9: left allmulticast mode
[  241.264359][T15746] bridge0: left allmulticast mode
[  241.275057][T15748] netlink: 'syz.1.2695': attribute type 10 has an invalid length.
[  241.277873][T15748] syz_tun: entered promiscuous mode
[  241.858906][T15777] syzkaller0: entered promiscuous mode
[  241.860951][T15777] syzkaller0: entered allmulticast mode
[  242.080491][T15779] netlink: 'syz.0.2704': attribute type 1 has an invalid length.
[  242.106478][T15779] 8021q: adding VLAN 0 to HW filter on device bond36
[  242.129290][T15779] bond36: (slave veth13): Enslaving as an active interface with a down link
[  242.135038][T15779] dummy0: left promiscuous mode
[  242.144491][T15779] bond36: (slave dummy0): making interface the new active one
[  242.148515][T15779] dummy0: entered promiscuous mode
[  242.151191][T15779] bond36: (slave dummy0): Enslaving as an active interface with an up link
[  242.163638][T15779] bond36: (slave dummy0): Releasing active interface
[  242.168164][T15779] dummy0 (unregistering): left promiscuous mode
[  242.448910][T15809] syzkaller0: entered promiscuous mode
[  242.450741][T15809] syzkaller0: entered allmulticast mode
[  242.908853][T15823] netlink: 'syz.1.2716': attribute type 10 has an invalid length.
[  242.926762][T15823] veth0_vlan: left promiscuous mode
[  242.931169][T15823] veth0_vlan: entered promiscuous mode
[  242.935965][T15823] team0: Device veth0_vlan failed to register rx_handler
[  243.168424][T15836] vlan9: entered promiscuous mode
[  243.563577][T15854] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  243.585676][T15856] __nla_validate_parse: 26 callbacks suppressed
[  243.585689][T15856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2726'.
[  243.591086][T15856] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  243.594562][T15856] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.2726'.
[  243.598804][T15856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2726'.
[  243.601744][T15856] `: renamed from team0 (while UP)
[  243.682712][T15865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2729'.
[  243.686405][T15866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2729'.
[  243.717895][T15869] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  243.723658][T15869] gretap5: entered allmulticast mode
[  243.740729][T15870] vlan2: entered promiscuous mode
[  243.744098][T15872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2732'.
[  243.821474][T15877] 8021q: adding VLAN 0 to HW filter on device bond37
[  243.824948][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'.
[  243.923838][T15893] 8021q: adding VLAN 0 to HW filter on device bond32
[  243.958934][T15893] bond32: (slave veth19): Enslaving as an active interface with a down link
[  243.961840][   T33] audit: type=1800 audit(1778901949.530:4): pid=15891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2738" name="memory.events" dev="tmpfs" ino=4804 res=0 errno=0
[  243.985933][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'.
[  243.990601][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2740'.
[  243.996256][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'.
[  244.053337][T15877] nbd4: detected capacity change from 0 to 63
[  244.061908][ T6387] block nbd4: Receive control failed (result -32)
[  244.065675][   T55] block nbd4: Receive control failed (result -32)
[  244.070069][T14906] block nbd4: Send control failed (result -32)
[  244.075271][T14906] block nbd4: Request send failed, requeueing
[  244.088576][  T135] block nbd4: Dead connection, failed to find a fallback
[  244.090805][  T135] block nbd4: shutting down sockets
[  244.092800][  T135] blk_print_req_error: 138 callbacks suppressed
[  244.092808][  T135] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.097556][  T135] buffer_io_error: 138 callbacks suppressed
[  244.097565][  T135] Buffer I/O error on dev nbd4, logical block 0, async page read
[  244.103641][T14906] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.109038][T14906] Buffer I/O error on dev nbd4, logical block 1, async page read
[  244.115707][T14906] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.118287][T15903] : entered promiscuous mode
[  244.124204][T14906] Buffer I/O error on dev nbd4, logical block 2, async page read
[  244.130727][T14906] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.131264][T15903] openvswitch: : Dropping previously announced user features
[  244.139505][T14906] Buffer I/O error on dev nbd4, logical block 3, async page read
[  244.143897][T14906] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.147468][T14906] Buffer I/O error on dev nbd4, logical block 0, async page read
[  244.152667][T14906] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.157804][T14906] Buffer I/O error on dev nbd4, logical block 1, async page read
[  244.161110][T14906] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.166898][T14906] Buffer I/O error on dev nbd4, logical block 2, async page read
[  244.170342][T14906] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.175621][T14906] Buffer I/O error on dev nbd4, logical block 3, async page read
[  244.180206][T14906] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.184262][T15906] syzkaller0: entered promiscuous mode
[  244.186586][T14906] Buffer I/O error on dev nbd4, logical block 0, async page read
[  244.189882][T14906] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  244.193144][T15906] syzkaller0: entered allmulticast mode
[  244.195347][T14906] Buffer I/O error on dev nbd4, logical block 1, async page read
[  244.203787][T14906] ldm_validate_partition_table(): Disk read failed.
[  244.208766][T14906] Dev nbd4: unable to read RDB block 0
[  244.223345][T14906]  nbd4: unable to read partition table
[  244.234346][T14906] ldm_validate_partition_table(): Disk read failed.
[  244.238139][T14906] Dev nbd4: unable to read RDB block 0
[  244.241313][T14906]  nbd4: unable to read partition table
[  244.310863][T15916] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  245.147393][T15976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.174254][T15976] syzkaller0: entered promiscuous mode
[  245.176098][T15976] syzkaller0: entered allmulticast mode
[  245.325967][T15994] pimreg: entered allmulticast mode
[  245.328983][T15994] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  245.445591][T16008] mac80211_hwsim hwsim25 wlan1: Caught tx_queue_len zero misconfig
[  245.507675][T16012] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  245.698315][T16028] tipc: Resetting bearer <eth:xfrm0>
[  245.730181][T16028] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  245.733641][T16028] bond7: left promiscuous mode
[  245.735806][T16028] geneve3: left promiscuous mode
[  245.738495][T16028] bond9: left promiscuous mode
[  245.740795][T16028] bridge10: left promiscuous mode
[  245.744860][T16028] vlan5: left promiscuous mode
[  245.746415][T16028] geneve1: left promiscuous mode
[  245.748036][T16028] vlan5: left allmulticast mode
[  245.749667][T16028] geneve1: left allmulticast mode
[  245.751693][T16028] erspan1: left promiscuous mode
[  245.754714][T16028] erspan1: left allmulticast mode
[  245.757345][T16028] macvlan2: left promiscuous mode
[  245.759529][T16028] macvlan2: left allmulticast mode
[  245.761921][T16028] macvlan3: left promiscuous mode
[  245.764718][T16028] macvlan3: left allmulticast mode
[  245.766366][T16028] geneve5: left promiscuous mode
[  245.767931][T16028] geneve5: left allmulticast mode
[  245.769715][T16028] bond12: left promiscuous mode
[  245.771275][T16028] bond13: left allmulticast mode
[  245.773295][T16028] macvlan6: left promiscuous mode
[  245.774922][T16028] macvlan6: left allmulticast mode
[  245.776564][T16028] macvlan7: left promiscuous mode
[  245.778122][T16028] macvlan7: left allmulticast mode
[  245.779880][T16028] vlan6: left allmulticast mode
[  245.781383][T16028] bond15: left allmulticast mode
[  245.784267][T16028] vlan7: left promiscuous mode
[  245.785910][T16028] bond17: left promiscuous mode
[  245.787914][T16028] vlan7: left allmulticast mode
[  245.789807][T16028] bond17: left allmulticast mode
[  245.792155][T16028] ip6tnl4: left allmulticast mode
[  245.794615][T16028] geneve7: left promiscuous mode
[  245.796578][T16028] geneve7: left allmulticast mode
[  245.809175][T16028] vlan1: left promiscuous mode
[  245.811096][T16028] bond31: left promiscuous mode
[  245.813368][T16028] batadv2: left promiscuous mode
[  245.815619][T16028] vlan1: left allmulticast mode
[  245.817556][T16028] bond31: left allmulticast mode
[  245.819482][T16028] batadv2: left allmulticast mode
[  245.827369][T16028] bond35: left promiscuous mode
[  245.829301][T16028] bridge24: left promiscuous mode
[  245.831371][T16028] bridge25: left promiscuous mode
[  245.833626][T16028] bond35: left allmulticast mode
[  245.835851][T16028] bridge24: left allmulticast mode
[  245.837647][T16028] bridge25: left allmulticast mode
[  245.846036][T16028] vti0: left promiscuous mode
[  245.856795][ T6756] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.859573][ T6756] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.862710][ T6756] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.865432][ T6756] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.474605][T16044] bond33: option lp_interval: invalid value (0)
[  246.476633][T16044] bond33: option lp_interval: allowed values 1 - 2147483647
[  246.479827][T16044] bond33 (unregistering): Released all slaves
[  246.623460][T16049] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  247.537836][T16071] validate_nla: 7 callbacks suppressed
[  247.537856][T16071] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  247.615356][T16077] netlink: 'syz.2.2785': attribute type 5 has an invalid length.
[  247.817167][T16083] sctp: [Deprecated]: syz.1.2788 (pid 16083) Use of int in max_burst socket option.
[  247.817167][T16083] Use struct sctp_assoc_value instead
[  247.880806][T16094] syzkaller0: entered promiscuous mode
[  247.883101][T16094] syzkaller0: entered allmulticast mode
[  247.967102][T16101] batadv_slave_1: entered promiscuous mode
[  248.027323][T16101] batadv_slave_1: left promiscuous mode
[  248.108621][T16117] veth1_to_bond: entered allmulticast mode
[  248.131900][T16116] veth1_to_bond: left allmulticast mode
[  248.145713][T16119] xt_cgroup: invalid path, errno=-2
[  248.425719][T16142] dvmrp0: entered allmulticast mode
[  248.858949][T16160] __nla_validate_parse: 21 callbacks suppressed
[  248.858960][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2810'.
[  248.864183][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2810'.
[  249.044398][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  249.134102][T16173] syzkaller0: entered promiscuous mode
[  249.135875][T16173] syzkaller0: entered allmulticast mode
[  249.151094][T16173] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2816'.
[  249.179814][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'.
[  249.317818][T16179] vlan4: entered promiscuous mode
[  249.409002][T16184] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.424784][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2819'.
[  249.513101][T16197] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.2823'.
[  249.525873][T16199] netlink: 'syz.2.2824': attribute type 1 has an invalid length.
[  249.551766][T16199] 8021q: adding VLAN 0 to HW filter on device bond33
[  249.658422][T16202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.663959][T16202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.760701][T16209] pimreg9: entered allmulticast mode
[  249.779327][T16210] tipc: Resetting bearer <eth:xfrm0>
[  249.952330][T16215] ip6tnl0: Caught tx_queue_len zero misconfig
[  249.975323][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'.
[  250.473921][T16224] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2832'.
[  250.479962][T16224] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2832'.
[  250.815135][T16233] syzkaller0: entered promiscuous mode
[  250.817132][T16233] syzkaller0: entered allmulticast mode
[  250.965504][T16247] sctp: [Deprecated]: syz.0.2839 (pid 16247) Use of int in max_burst socket option deprecated.
[  250.965504][T16247] Use struct sctp_assoc_value instead
[  251.289830][T16273] syzkaller0: entered promiscuous mode
[  251.291703][T16273] syzkaller0: entered allmulticast mode
[  251.487016][T16278] bond38: entered promiscuous mode
[  251.488973][T16278] 8021q: adding VLAN 0 to HW filter on device bond38
[  251.528684][T16288] netem: invalid attributes len -1
[  251.530512][T16288] netem: change failed
[  251.579508][T16296] netlink: 'syz.1.2852': attribute type 2 has an invalid length.
[  251.611144][T16298] syzkaller0: entered promiscuous mode
[  251.621273][T16298] syzkaller0: entered allmulticast mode
[  251.637394][T16300] batadv_slave_0: Caught tx_queue_len zero misconfig
[  251.654375][T16300] openvswitch: netlink: VXLAN extension 55 out of range max 1
[  251.669055][T16300] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  251.673078][T16300] CPU: 1 UID: 0 PID: 16300 Comm: syz.1.2854 Not tainted syzkaller #0 PREEMPT(full) 
[  251.673093][T16300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.673101][T16300] Call Trace:
[  251.673107][T16300]  <TASK>
[  251.673115][T16300]  dump_stack_lvl+0xe8/0x150
[  251.673138][T16300]  sysfs_warn_dup+0x8e/0xa0
[  251.673155][T16300]  sysfs_do_create_link_sd+0xc0/0x110
[  251.673174][T16300]  device_add_class_symlinks+0x1cf/0x240
[  251.673192][T16300]  device_add+0x475/0xbb0
[  251.673210][T16300]  wiphy_register+0x1dc5/0x2dc0
[  251.673240][T16300]  ? __pfx_wiphy_register+0x10/0x10
[  251.673257][T16300]  ? __pfx_netdev_run_todo+0x10/0x10
[  251.673275][T16300]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  251.673297][T16300]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  251.673317][T16300]  ieee80211_register_hw+0x3d82/0x4a70
[  251.673344][T16300]  ? ieee80211_register_hw+0x1931/0x4a70
[  251.673377][T16300]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  251.673396][T16300]  ? __asan_memset+0x22/0x50
[  251.673412][T16300]  ? __hrtimer_setup+0x1b7/0x260
[  251.673426][T16300]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  251.673475][T16300]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  251.673529][T16300]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  251.673544][T16300]  ? kstrndup+0xbf/0x160
[  251.673571][T16300]  hwsim_new_radio_nl+0xf6a/0x1c00
[  251.673600][T16300]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  251.673622][T16300]  ? rcu_is_watching+0x15/0xb0
[  251.673638][T16300]  ? trace_kmalloc+0x2a/0xf0
[  251.673662][T16300]  ? __nla_parse+0x40/0x60
[  251.673685][T16300]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  251.673696][T16300]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  251.673715][T16300]  genl_family_rcv_msg_doit+0x22a/0x330
[  251.673731][T16300]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  251.673753][T16300]  ? bpf_lsm_capable+0x9/0x20
[  251.673763][T16300]  ? security_capable+0x7e/0x2c0
[  251.673783][T16300]  genl_rcv_msg+0x61c/0x7a0
[  251.673800][T16300]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.673812][T16300]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  251.673835][T16300]  netlink_rcv_skb+0x232/0x4b0
[  251.673850][T16300]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.673864][T16300]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  251.673889][T16300]  ? down_read+0x270/0x2e0
[  251.673901][T16300]  ? genl_rcv+0xd/0x40
[  251.673913][T16300]  genl_rcv+0x28/0x40
[  251.673923][T16300]  netlink_unicast+0x75c/0x8e0
[  251.673944][T16300]  netlink_sendmsg+0x813/0xb40
[  251.673966][T16300]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.673983][T16300]  ? aa_sock_msg_perm+0xf1/0x1b0
[  251.674001][T16300]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  251.674019][T16300]  ____sys_sendmsg+0x972/0x9f0
[  251.674035][T16300]  ? __might_fault+0xaf/0x130
[  251.674054][T16300]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.674075][T16300]  ? import_iovec+0x73/0xa0
[  251.674095][T16300]  ___sys_sendmsg+0x2a5/0x360
[  251.674109][T16300]  ? __lock_acquire+0x6b5/0x2cf0
[  251.674127][T16300]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.674146][T16300]  ? futex_wake+0x4ac/0x580
[  251.674180][T16300]  ? __fget_files+0x2a/0x420
[  251.674194][T16300]  ? __fget_files+0x3a0/0x420
[  251.674215][T16300]  __x64_sys_sendmsg+0x1bd/0x2a0
[  251.674233][T16300]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.674254][T16300]  ? rcu_is_watching+0x15/0xb0
[  251.674275][T16300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.674287][T16300]  do_syscall_64+0x15f/0xf80
[  251.674309][T16300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.674319][T16300] RIP: 0033:0x7f388df9ce59
[  251.674334][T16300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.674343][T16300] RSP: 002b:00007f388ef16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.674357][T16300] RAX: ffffffffffffffda RBX: 00007f388e215fa0 RCX: 00007f388df9ce59
[  251.674365][T16300] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  251.674372][T16300] RBP: 00007f388e032d6f R08: 0000000000000000 R09: 0000000000000000
[  251.674378][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.674385][T16300] R13: 00007f388e216038 R14: 00007f388e215fa0 R15: 00007ffc41888218
[  251.674409][T16300]  </TASK>
[  251.919867][T16307] netlink: 'syz.1.2856': attribute type 10 has an invalid length.
[  252.082564][T16340] netlink: 'syz.0.2862': attribute type 1 has an invalid length.
[  252.104760][T16340] 8021q: adding VLAN 0 to HW filter on device bond39
[  252.119504][T16340] vlan9: entered allmulticast mode
[  252.121993][T16340] bond39: entered allmulticast mode
[  252.275390][T16358] netlink: 'syz.1.2865': attribute type 1 has an invalid length.
[  252.288302][T16358] netlink: 'syz.1.2865': attribute type 2 has an invalid length.
[  252.492192][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.501482][T16371] netlink: 'syz.1.2870': attribute type 4 has an invalid length.
[  252.509228][T16371] netlink: 'syz.1.2870': attribute type 4 has an invalid length.
[  252.515507][T16371] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  252.542162][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.732313][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.776198][T16387] netlink: 'syz.2.2875': attribute type 30 has an invalid length.
[  252.783964][ T6756] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.786694][T16387] netlink: 'syz.2.2875': attribute type 30 has an invalid length.
[  252.791224][ T6756] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.802247][ T6756] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.806351][ T6756] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.056216][T16410] bond34: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  253.060529][T16410] bond34 (unregistering): Released all slaves
[  253.270465][T16423] netlink: 'syz.0.2885': attribute type 1 has an invalid length.
[  253.310208][T16425] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  253.389655][T16434] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  253.802362][T16456] batman_adv: batadv0: Adding interface: gretap2
[  253.804464][T16456] batman_adv: batadv0: The MTU of interface gretap2 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  253.817936][T16456] batman_adv: batadv0: Interface activated: gretap2
[  253.908314][T16464] netlink: 'syz.0.2897': attribute type 9 has an invalid length.
[  253.956044][T16467] syzkaller0: entered promiscuous mode
[  253.958462][T16467] syzkaller0: entered allmulticast mode
[  254.028050][T16470] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  254.030520][T16470] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  254.037353][T16470] veth0_virt_wifi: entered allmulticast mode
[  254.041794][T16470] veth0_virt_wifi: entered promiscuous mode
[  254.063106][T16472] __nla_validate_parse: 18 callbacks suppressed
[  254.063117][T16472] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2899'.
[  254.079016][T16472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2899'.
[  254.216857][T16490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2904'.
[  254.389877][T16501] syzkaller0: entered promiscuous mode
[  254.394946][T16501] 0: reclassify loop, rule prio 0, protocol 700
[  254.462169][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2909'.
[  254.466529][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'.
[  254.490855][T16511] veth27: entered allmulticast mode
[  254.498484][T16511] bond35: (slave veth27): Enslaving as an active interface with an up link
[  254.505250][T16511] bond35 (unregistering): (slave veth27): Releasing backup interface
[  254.511325][T16511] bond35 (unregistering): Released all slaves
[  254.630242][T16527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.778161][T16535] bridge0: port 3(syz_tun) entered disabled state
[  254.807031][T16537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.937192][T16535] tipc: Resetting bearer <eth:syzkaller0>
[  255.038782][ T5762] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.044219][ T5762] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.051530][ T5762] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.054642][ T5762] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.057834][ T5762] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.061271][ T5762] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.065643][ T5762] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  255.068911][ T5762] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.118933][T16551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'.
[  255.228950][T16555] netlink: 'syz.2.2919': attribute type 1 has an invalid length.
[  255.260821][T16555] gretap5: entered allmulticast mode
[  255.268047][T16555] bond34: (slave gretap5): making interface the new active one
[  255.272077][T16555] bond34: (slave gretap5): Enslaving as an active interface with an up link
[  255.364118][T16563] netlink: 'syz.0.2921': attribute type 1 has an invalid length.
[  255.398510][T16563] gretap3: entered allmulticast mode
[  255.416219][T16563] bond40: (slave gretap3): making interface the new active one
[  255.425753][T16563] bond40: (slave gretap3): Enslaving as an active interface with an up link
[  255.488597][ T7103] IPVS: starting estimator thread 0...
[  255.491428][T16571] IPVS: sh: FWM 3 0x00000003 - no destination available
[  255.528959][T16582] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.529078][T16581] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.538312][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'.
[  255.544844][T16582] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  255.572663][T16574] IPVS: using max 82 ests per chain, 196800 per kthread
[  255.592699][T16577] netlink: 'syz.0.2923': attribute type 1 has an invalid length.
[  255.698574][ T5762] IPVS: stop unused estimator thread 0...
[  255.777408][T16593] bond41 (unregistering): Released all slaves
[  255.819228][T16600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2927'.
[  255.848873][T16602] netlink: 'syz.1.2926': attribute type 10 has an invalid length.
[  255.851918][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'.
[  255.881579][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2929'.
[  256.767902][T16642] "syz.1.2940" (16642) uses obsolete ecb(arc4) skcipher
[  256.868032][T16651] syzkaller0: entered promiscuous mode
[  256.870349][T16651] syzkaller0: entered allmulticast mode
[  256.981124][T16654] vlan2: entered promiscuous mode
[  257.176833][T16669] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  258.001284][T16679] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.006529][T16679] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  258.154500][T16687] vlan2: entered promiscuous mode
[  258.475278][T16699] syzkaller0: entered promiscuous mode
[  258.477823][T16699] syzkaller0: entered allmulticast mode
[  258.967922][T16716] vlan10: entered promiscuous mode
[  259.062995][T16725] syzkaller0: entered promiscuous mode
[  259.065227][T16725] syzkaller0: entered allmulticast mode
[  259.473608][T16741] geneve1: entered promiscuous mode
[  259.522256][    C1] net_ratelimit: 3 callbacks suppressed
[  259.522269][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.592160][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.684049][T16761] vlan2: entered promiscuous mode
[  259.788080][T16770] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  259.801911][T16771] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan0, syncid = 4, id = 0
[  260.100445][T16786] netlink: 'syz.1.2977': attribute type 1 has an invalid length.
[  260.112446][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.132448][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.273974][T16793] __nla_validate_parse: 7 callbacks suppressed
[  260.274035][T16793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2979'.
[  260.279664][   T55] block nbd5: Receive control failed (result -32)
[  260.306496][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'.
[  260.317881][T16796] openvswitch: netlink: Flow actions attr not present in new flow.
[  260.344198][T16800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'.
[  260.355843][T16800] netlink: 'syz.2.2982': attribute type 4 has an invalid length.
[  260.358842][T16800] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2982'.
[  260.363558][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'.
[  260.376887][T16800] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2982'.
[  260.384039][T16800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.401834][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'.
[  260.436735][T16809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2986'.
[  260.442903][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2986'.
[  260.458261][T16813] bridge28: the hash_elasticity option has been deprecated and is always 16
[  260.480047][T16811] vlan2: entered promiscuous mode
[  260.486001][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2988'.
[  260.494947][T16815] netlink: 'syz.2.2989': attribute type 7 has an invalid length.
[  260.696815][T16840] netem: invalid attributes len -1
[  260.698835][T16840] netem: change failed
[  260.706372][T16840] netlink: 'syz.0.2995': attribute type 4 has an invalid length.
[  260.731115][T16841] bond35: entered promiscuous mode
[  260.733355][T16841] 8021q: adding VLAN 0 to HW filter on device bond35
[  260.745148][T16841] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  260.750561][T16847] netlink: 'syz.1.2998': attribute type 9 has an invalid length.
[  260.779165][T16847] macvlan3: entered promiscuous mode
[  260.785493][T16847] macvlan3: entered allmulticast mode
[  260.815653][T16853] syzkaller0: entered promiscuous mode
[  260.817925][T16853] syzkaller0: entered allmulticast mode
[  260.830028][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  260.836384][T16852] vti3: entered promiscuous mode
[  260.838198][T16852] vti3: entered allmulticast mode
[  260.840372][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  260.848964][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  261.017946][T16869] block nbd0: reconnected socket
[  261.724527][   T54] block nbd0: Receive control failed (result -32)
[  262.367184][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.469463][T16879] netlink: 'syz.2.3009': attribute type 4 has an invalid length.
[  262.576535][T16887] bond36: entered promiscuous mode
[  262.668143][T16900] netlink: 'syz.1.3013': attribute type 1 has an invalid length.
[  262.814828][T16913] netlink: 'syz.0.3018': attribute type 32 has an invalid length.
[  262.854123][T16915] 8021q: VLANs not supported on sit0
[  263.306278][T16936] netlink: 'syz.2.3022': attribute type 27 has an invalid length.
[  263.410191][T16943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.443493][T16947] netlink: 'syz.2.3025': attribute type 4 has an invalid length.
[  263.781417][T16968] syzkaller0: entered promiscuous mode
[  263.783612][T16968] syzkaller0: entered allmulticast mode
[  264.138982][T16983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.212736][T17025] netlink: 'syz.2.3045': attribute type 11 has an invalid length.
[  265.377111][T17037] netlink: 'syz.2.3049': attribute type 1 has an invalid length.
[  265.396035][T17037] 8021q: adding VLAN 0 to HW filter on device bond37
[  265.442939][T17037] __nla_validate_parse: 66 callbacks suppressed
[  265.442951][T17037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3049'.
[  265.549173][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3051'.
[  265.552710][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3051'.
[  265.693645][T17068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3055'.
[  265.792118][T17081] batman_adv: batadv0: Adding interface: ipvlan4
[  265.794165][T17081] batman_adv: batadv0: Interface activated: ipvlan4
[  265.875811][T17088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3059'.
[  265.881464][T17091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3060'.
[  266.075472][T17101] netlink: 'syz.0.3062': attribute type 1 has an invalid length.
[  266.100843][T17101] bond41: entered promiscuous mode
[  266.103461][T17101] 8021q: adding VLAN 0 to HW filter on device bond41
[  266.109563][T17101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3062'.
[  266.115301][T17101] bond41: entered allmulticast mode
[  266.198724][T17113] bond41: (slave bridge30): making interface the new active one
[  266.204124][T17113] bridge30: entered promiscuous mode
[  266.205917][T17113] bridge30: entered allmulticast mode
[  266.210747][T17113] bond41: (slave bridge30): Enslaving as an active interface with an up link
[  266.368251][T17134] netlink: 'syz.2.3072': attribute type 1 has an invalid length.
[  266.390805][T17134] bond38: entered promiscuous mode
[  266.393025][T17134] 8021q: adding VLAN 0 to HW filter on device bond38
[  266.412603][T17134] ipvlan0: entered allmulticast mode
[  266.414661][T17134] bond38: entered allmulticast mode
[  266.421681][T17134] ipvlan1: entered allmulticast mode
[  266.431578][T17134] bond38: (slave bridge20): making interface the new active one
[  266.434657][T17134] bridge20: entered promiscuous mode
[  266.436420][T17134] bridge20: entered allmulticast mode
[  266.439075][T17134] bond38: (slave bridge20): Enslaving as an active interface with an up link
[  266.580677][T17148] lo: Caught tx_queue_len zero misconfig
[  266.620904][T17151] dvmrp6: entered allmulticast mode
[  266.695474][T17158] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  266.937020][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'.
[  266.940705][T17170] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  267.083280][T17175] xt_hashlimit: size too large, truncated to 1048576
[  267.189737][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'.
[  267.192620][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'.
[  267.218587][T17183] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.289725][T17194] tipc: Failed to remove unknown binding: 66,0,0/2886997007:212711822/212711824
[  267.294024][T17194] tipc: Failed to remove unknown binding: 66,0,0/2886997007:212711822/212711823
[  267.302463][T17194] tipc: Failed to remove unknown binding: 66,0,0/2886997007:212711822/212711824
[  267.307442][T17194] tipc: Failed to remove unknown binding: 66,0,0/2886997007:212711822/212711823
[  267.325426][T17199] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  267.333935][T17199] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  267.435581][T17210] batadv_slave_1: entered promiscuous mode
[  267.497140][T17210] batadv_slave_1: left promiscuous mode
[  267.587633][T17216] syz_tun (unregistering): left allmulticast mode
[  267.597731][T17216] syz_tun (unregistering): left promiscuous mode
[  267.608221][T17216] bridge0: port 3(syz_tun) entered disabled state
[  268.108693][T17235] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.128238][T17235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  268.131806][T17235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  268.139777][T17235] geneve1: left promiscuous mode
[  268.145306][T17235] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  268.151727][T17235] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  268.175941][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.183296][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.193886][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.200028][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.257394][T17248] netlink: 'syz.1.3103': attribute type 3 has an invalid length.
[  268.260123][T17248] netlink: 'syz.1.3103': attribute type 3 has an invalid length.
[  268.269801][T17248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.604027][T17265] netlink: 'syz.2.3110': attribute type 1 has an invalid length.
[  268.610864][T17265] nbd: error processing sock list
[  268.650670][T17267] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  268.665128][T17267] netlink: 'syz.2.3111': attribute type 1 has an invalid length.
[  268.667677][T17267] netlink: 'syz.2.3111': attribute type 1 has an invalid length.
[  268.670542][T17267] netlink: 'syz.2.3111': attribute type 1 has an invalid length.
[  268.791918][T17270] openvswitch: netlink: Message has 151 unknown bytes.
[  269.266329][T17285] SET target dimension over the limit!
[  269.301500][   T33] audit: type=1804 audit(1778901974.870:5): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3120" name="/newroot/1066/memory.events" dev="tmpfs" ino=5445 res=1 errno=0
[  269.324065][   T33] audit: type=1800 audit(1778901974.870:6): pid=17294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3120" name="memory.events" dev="tmpfs" ino=5445 res=0 errno=0
[  269.396949][T17305] batman_adv: batadv0: Interface deactivated: gretap2
[  269.475702][T17308] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.478929][T17308] 8021q: adding VLAN 0 to HW filter on device team0
[  269.514993][T17308] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  269.530595][ T1117] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  269.532923][ T1117] bridge0: port 1(veth0_virt_wifi) entered listening state
[  269.536062][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.552088][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.570131][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.574929][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.618634][T17311] veth1_to_team: entered promiscuous mode
[  269.624287][T17311] veth1_to_team: left promiscuous mode
[  269.714878][T17313] vlan5: entered promiscuous mode
[  270.126844][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.163567][T17336] vlan5: entered promiscuous mode
[  270.394527][T17358] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  270.467978][T17373] validate_nla: 6 callbacks suppressed
[  270.467997][T17373] netlink: 'syz.2.3143': attribute type 1 has an invalid length.
[  270.514140][T17373] 8021q: adding VLAN 0 to HW filter on device bond39
[  270.524947][T17373] __nla_validate_parse: 33 callbacks suppressed
[  270.524955][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'.
[  270.530933][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'.
[  270.673115][T17396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.698309][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'.
[  270.710145][T17403] bond35: entered promiscuous mode
[  270.715801][T17403] 8021q: adding VLAN 0 to HW filter on device bond35
[  270.770820][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'.
[  270.782278][T17411] openvswitch: netlink: Unknown nsh attribute 0
[  270.785928][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3154'.
[  270.789758][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3154'.
[  270.820710][T17421] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3156'.
[  270.826924][T17423] vlan10: entered promiscuous mode
[  270.864370][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3156'.
[  270.884619][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3156'.
[  270.925300][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3156'.
[  271.046402][T17449] sock: sock_timestamping_bind_phc: sock not bind to device
[  271.176392][T17462] netlink: 'syz.2.3168': attribute type 1 has an invalid length.
[  271.195018][T17462] bond40: (slave vxcan5): The slave device specified does not support setting the MAC address
[  271.198650][T17462] bond40: (slave vxcan5): Error -95 calling set_mac_address
[  271.723669][T17489] netlink: 'syz.2.3175': attribute type 2 has an invalid length.
[  271.753747][    C1] ------------[ cut here ]------------
[  271.757390][    C1] sk->sk_forward_alloc
[  271.757398][    C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: ksoftirqd/1/23
[  271.761713][    C1] Modules linked in:
[  271.764223][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  271.767145][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.770238][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  271.772110][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 f0 70 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 e2 70 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 d4 70 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  271.777949][    C1] RSP: 0018:ffffc900001d7ae0 EFLAGS: 00010246
[  271.779827][    C1] RAX: ffffffff8a27538c RBX: dffffc0000000000 RCX: ffff8881604ad880
[  271.782359][    C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000
[  271.784787][    C1] RBP: 0000000000000090 R08: ffff8881761d0b27 R09: 1ffff1102ec3a164
[  271.787327][    C1] R10: dffffc0000000000 R11: ffffed102ec3a165 R12: ffff8881761d0880
[  271.789788][    C1] R13: ffff8881761d0d88 R14: ffff8881761d0b0c R15: ffffffff8feaf4c0
[  271.792450][    C1] FS:  0000000000000000(0000) GS:ffff8882a928a000(0000) knlGS:0000000000000000
[  271.795281][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.797398][    C1] CR2: 00007f3d565456b8 CR3: 000000010f0f2000 CR4: 00000000000006f0
[  271.799924][    C1] Call Trace:
[  271.800929][    C1]  <TASK>
[  271.801890][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  271.803645][    C1]  __sk_destruct+0x8d/0x9d0
[  271.805102][    C1]  ? rcu_core+0x751/0x1070
[  271.806537][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  271.808173][    C1]  rcu_core+0x7cd/0x1070
[  271.809525][    C1]  ? __pfx_rcu_core+0x10/0x10
[  271.811156][    C1]  handle_softirqs+0x22a/0x840
[  271.812755][    C1]  ? schedule+0x90/0x360
[  271.814125][    C1]  ? run_ksoftirqd+0x36/0x60
[  271.815764][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  271.817442][    C1]  run_ksoftirqd+0x36/0x60
[  271.818937][    C1]  smpboot_thread_fn+0x541/0xa50
[  271.820630][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  271.822638][    C1]  kthread+0x389/0x470
[  271.824001][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  271.825721][    C1]  ? __pfx_kthread+0x10/0x10
[  271.827166][    C1]  ret_from_fork+0x514/0xb70
[  271.828785][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  271.830534][    C1]  ? __switch_to+0xc79/0x1410
[  271.832095][    C1]  ? __pfx_kthread+0x10/0x10
[  271.833564][    C1]  ret_from_fork_asm+0x1a/0x30
[  271.835084][    C1]  </TASK>
[  271.836055][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  271.838294][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  271.841234][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.844515][    C1] Call Trace:
[  271.845626][    C1]  <TASK>
[  271.846605][    C1]  vpanic+0x56c/0xa60
[  271.847926][    C1]  ? __pfx__printk+0x10/0x10
[  271.849408][    C1]  ? __pfx_vpanic+0x10/0x10
[  271.850921][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  271.852935][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  271.854638][    C1]  panic+0xc5/0xd0
[  271.855812][    C1]  ? __pfx_panic+0x10/0x10
[  271.857253][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  271.858817][    C1]  __warn+0x315/0x4c0
[  271.860067][    C1]  ? inet_sock_destruct+0x62d/0x740
[  271.861696][    C1]  ? inet_sock_destruct+0x62d/0x740
[  271.863370][    C1]  __report_bug+0x29a/0x540
[  271.864855][    C1]  ? kasan_save_track+0x3e/0x80
[  271.866455][    C1]  ? kasan_save_free_info+0x46/0x50
[  271.868229][    C1]  ? __kasan_slab_free+0x5c/0x80
[  271.869826][    C1]  ? inet_sock_destruct+0x62d/0x740
[  271.871433][    C1]  ? __pfx___report_bug+0x10/0x10
[  271.873045][    C1]  ? inet_sock_destruct+0x62d/0x740
[  271.874718][    C1]  report_bug+0x16a/0x220
[  271.876110][    C1]  ? inet_sock_destruct+0x62d/0x740
[  271.877825][    C1]  ? inet_sock_destruct+0x62f/0x740
[  271.879471][    C1]  handle_bug+0x9c/0x200
[  271.880829][    C1]  exc_invalid_op+0x1a/0x50
[  271.882337][    C1]  asm_exc_invalid_op+0x1a/0x20
[  271.883888][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  271.885809][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 f0 70 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 e2 70 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 d4 70 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  271.892082][    C1] RSP: 0018:ffffc900001d7ae0 EFLAGS: 00010246
[  271.894091][    C1] RAX: ffffffff8a27538c RBX: dffffc0000000000 RCX: ffff8881604ad880
[  271.896733][    C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000
[  271.899197][    C1] RBP: 0000000000000090 R08: ffff8881761d0b27 R09: 1ffff1102ec3a164
[  271.901735][    C1] R10: dffffc0000000000 R11: ffffed102ec3a165 R12: ffff8881761d0880
[  271.904294][    C1] R13: ffff8881761d0d88 R14: ffff8881761d0b0c R15: ffffffff8feaf4c0
[  271.906909][    C1]  ? inet_sock_destruct+0x62c/0x740
[  271.908550][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  271.910265][    C1]  __sk_destruct+0x8d/0x9d0
[  271.911726][    C1]  ? rcu_core+0x751/0x1070
[  271.913229][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  271.914896][    C1]  rcu_core+0x7cd/0x1070
[  271.916292][    C1]  ? __pfx_rcu_core+0x10/0x10
[  271.917811][    C1]  handle_softirqs+0x22a/0x840
[  271.919351][    C1]  ? schedule+0x90/0x360
[  271.920683][    C1]  ? run_ksoftirqd+0x36/0x60
[  271.922159][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  271.923726][    C1]  run_ksoftirqd+0x36/0x60
[  271.925384][    C1]  smpboot_thread_fn+0x541/0xa50
[  271.927134][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  271.928685][    C1]  kthread+0x389/0x470
[  271.930072][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  271.931758][    C1]  ? __pfx_kthread+0x10/0x10
[  271.933181][    C1]  ret_from_fork+0x514/0xb70
[  271.934896][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  271.936962][    C1]  ? __switch_to+0xc79/0x1410
[  271.938834][    C1]  ? __pfx_kthread+0x10/0x10
[  271.940652][    C1]  ret_from_fork_asm+0x1a/0x30
[  271.942550][    C1]  </TASK>
[  271.944531][    C1] Kernel Offset: disabled
[  271.946285][    C1] Rebooting in 86400 seconds..
