last executing test programs:

2.54415701s ago: executing program 2 (id=5426):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/181, 0xb5}], 0x2}, 0x5}], 0x1, 0x12000, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x240, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226de7000ffdbdf2509000000680000000000000050969a8ca40297644940d4b3575623c2ee8b8069afd7327297716a2e537416d5f323d4a92a52a62a5fca99e2eb476f6a088e47937f107d906a5ec608c9c7861bd60f07508ff9639c74333e3590d3fe1305240c6b1f34b96c0e4cb31c74ca651103e1d7eed9f175715ae1b40b828548ad1f33a18275f7c2b4e6a7e5c28666b50d0a59a18cff7b49dd46a6d0f1d7f79a9f18bdd4284b0bc1901c90088893a176e2c8c0572aba48525206f89f8f9ed52bbdaf31f9291fd60048646e9a405b48811e7a4e7605595cf1bbf38b5fbeae21f2e02b15e4eaff13e14deee8d0e9ce848c38035a1397306ee4ccf5418380f41cf8150450de001f7c48f4a30ff678e151a4241a5e3cfca01a3d0460a51f86f65efd2dcef07f347bcba10fa4621802", @ANYRES32=0x0, @ANYBLOB="08000300ac1414aa060001000a0000000800030000000000060005004e2400000800030003000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000085}, 0x800)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40016300, 0x0, 0x0)

2.37315609s ago: executing program 0 (id=5428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)=""/249, 0xf9}], 0x1, &(0x7f0000000700)=""/73, 0x49}, 0x9}], 0x1, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000180)="d77b5b37", 0x4}], 0x1, 0x0, 0x0, 0x4884}, 0x4000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000840)={@val={0xa888, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xffff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)

2.213495498s ago: executing program 0 (id=5429):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r7, 0x890c, 0x0)
write$tun(r5, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x54, r9, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x40050)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r11, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18860000000000000000000007000000180100002020702500000000402020207b1af8ff001a877b78a100000000000007050000f8ff024ef604000003000000b703000000000000850000007300010095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r13, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r13)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={<r14=>r12, 0x8000000000000001, 0x5, 0x1})
write$cgroup_subtree(r14, &(0x7f0000000080)=ANY=[@ANYRESDEC=r12, @ANYRESHEX=r0, @ANYRESOCT=r0], 0xfdef)
r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x25, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r15}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)

1.853138606s ago: executing program 0 (id=5434):
r0 = socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1) (async)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x491b, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x4004000)

1.851241368s ago: executing program 0 (id=5435):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)

1.803515742s ago: executing program 0 (id=5436):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0xa, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}, 0x1, 0x0, 0x0, 0x800c}, 0x10)
r6 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0xfffffffc)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0xfff)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r12, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000040000000000000000"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001e0000000000000020001811", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.654037348s ago: executing program 2 (id=5437):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000840)={@val={0xa888, 0x800}, @val={0x6, 0x0, 0x6, 0x20, 0xffff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)

903.730563ms ago: executing program 0 (id=5438):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0xffffffcd)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff0000", @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x41}, 0x8)

832.515521ms ago: executing program 2 (id=5439):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001200e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000)

831.832624ms ago: executing program 2 (id=5440):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x18, 0x11, 0x200, 0x70bd28, 0x25dfdbfd, "", [@typed={0x5, 0xba, 0x0, 0x0, @str='\x00'}]}, 0x18}, {&(0x7f0000000080)=ANY=[@ANYBLOB="18d400004200020027bd7000fbdbdf250500620000000000"], 0x18}, {&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x148}], 0x3, 0x0, 0x0, 0x40}, 0x40000)
socket(0xa, 0x3, 0xff) (async)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x24dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800)
r4 = socket$inet6(0xa, 0x802, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
socket(0x1e, 0x4, 0x0) (async)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r6, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x14000000) (async)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x14000000)
sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000760007"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r9)
getsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, &(0x7f00000004c0))
syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0)

512.466909ms ago: executing program 2 (id=5444):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0xf, 0x3}], 0x10, 0x1}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="6802000000050300000000000000000001000001540201000300000000100000093a06005d0d180073797a3100000000000000000000000000000000000000000000000000000000f03e6a07238a81a08f959d36b691edd88717fd7d724111bb5d6b5bd9f5a1a2b34ac4921f66218931361f3194d2675e94da696038e6ac37a77f320e9ef6b39dca0200030001000000050000000000000003000000fdffffff070001000000000000000000070008000100000005000000040003000300000099080000fcff070e592de1238e9327b41b5a530001000000010000004000070001000000040000800800018003000000a30000000e00090001000000b900000000000900e2af0d1a09000000080006000100000008000000e0e1ffff01000000010000000008ff010100000003000000ff07030000000000080000000900060002000000ffffffff09000800000000000800000043dd80d80000000001040000835cff01010000000001000004000500010000000300000007008634020000000300000001000700030000000900000000000500030000009b01000000004000020000000100000055020500010000000f000000070007000000000081000000070002000200000001000080010905fd00000000050000000100070001000000030000000400060003000000dd5cc673090000800300000081000000090007000100000009000000fbff010002000000060000000080080003000000030000000700050003000000100000000400020002000000977000000008040002000000000004003400020000000100010081000000030000000600000002000d00000000000900000004400300010000000b0000000000"], 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 32)
setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000400)=0x9, 0x4) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r1}, 0x18)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)={0x14c, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2d7b}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x3d}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xcbb}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) (async, rerun: 32)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 32)
connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 64)
recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async, rerun: 64)
recvmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)

463.978573ms ago: executing program 2 (id=5446):
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x8, 0x2, 0xa000, 0x3}, 0x10)
listen(r0, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x20040000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_team\x00', {0x1}, 0xfc})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x2, 0xffffffffffffffff, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00@\x00\x00 '})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x140, r4, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa84a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x992}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xb471, @mcast2, 0x4f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81c000}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x20}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)

413.874075ms ago: executing program 1 (id=5447):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x500}, 0x57)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f00000037c0), 0x1, 0x2040000, &(0x7f0000003700)={r3, r4+60000000})

322.550398ms ago: executing program 1 (id=5448):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0x4, [0x6, 0xfffffffb], 0x100}, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x19, 0x0, &(0x7f0000000080))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d57818aa0f9bb878e6727e359b800c423ace69c1eba8d0c505baa2acddfff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231", 0x69}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597", 0x20}, {&(0x7f0000000300)="f111f39463acbac94f37eaaa931da78c8c414a4edadbcac605b6a5089e71e9b125f3a628ad2cbfd97cb9ad0e6eec571532e87f653961867d41d742ded2a2b2ae459f67d701f481c880e26696407b17b691b17a5045371c8fdcf19419", 0x5c}], 0x3, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a30000000002800000000"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffffffffff1f, 0x2, [@TCA_U32_SEL={0x4, 0x5, {0x1, 0x1, 0x0, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}]}}]}, 0x44}}, 0x24040084)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

311.439066ms ago: executing program 1 (id=5449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x2000000}}, 0xc8}}, 0x0)

311.077147ms ago: executing program 1 (id=5450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="030000001000030407000000000000000000740052a28b4e0a9f6077d7679a50f2314a54d8fe765b96e47207455d44207a1a8f7d9e682d7ccd8ce36b47d0da6f17aad5089c4d1a7497a8c192365e044a6e11e8d0b269c754fcd80b4c192b71bed2c3783252d68055708654197ed01c4771fad3018efac594c5feea5d337e005ea79bc735fa84fd1caead49f6ca6dafba40ffd38b95eae86ea2ad955b21ba866930feb22866e3706a1b79871391b886b8", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000006001800ffff0000"], 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a8004002d8000000a8000000700ff020000000000000b000000000008008100000000000700ff020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

497.042µs ago: executing program 1 (id=5451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0xffffff9f, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

0s ago: executing program 1 (id=5452):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0) (async)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1816238bd568be6027c2960000fc00000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
sendmsg$key(r5, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a00000200000000c8ce00000020"], 0x10}}, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020025bd7000f5dbdf2509000000380003800800010001000000140002006272696467655f736c6176655f30000008000300030000000500080061000000060007004e230000"], 0x4c}}, 0x48040) (async)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf250e00000008000500d70a000008000400bde60000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async)
r10 = socket(0x10, 0x80003, 0x0) (async, rerun: 32)
r11 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x1f}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000f0000000000000f00000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2040044}, 0x0) (async)
recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 64)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r14 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x4, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0x4, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xffffffea, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

kernel console output (not intermixed with test programs):

][T14630] syz.1.2725 (14630) used obsolete PPPIOCDETACH ioctl
[  254.054356][T14635] lo speed is unknown, defaulting to 1000
[  254.060664][T14635] lo speed is unknown, defaulting to 1000
[  254.118719][T14649] netlink: 'syz.1.2732': attribute type 1 has an invalid length.
[  254.186937][T14650] lo speed is unknown, defaulting to 1000
[  254.319825][T14650] lo speed is unknown, defaulting to 1000
[  254.401709][T14676] netlink: 'syz.0.2737': attribute type 5 has an invalid length.
[  254.717470][T14700] netlink: 'syz.0.2740': attribute type 10 has an invalid length.
[  254.778170][T14706] bridge0: entered allmulticast mode
[  254.782981][T14706] bridge0: entered promiscuous mode
[  254.789607][T14706] pim6reg: entered allmulticast mode
[  254.794544][T14705] bridge0: left promiscuous mode
[  255.154757][T14723] bridge0: port 1(veth0_to_bridge) entered blocking state
[  255.157792][T14723] bridge0: port 1(veth0_to_bridge) entered disabled state
[  255.160830][T14723] veth0_to_bridge: entered allmulticast mode
[  255.227759][T14727] syzkaller1: entered promiscuous mode
[  255.230025][T14727] syzkaller1: entered allmulticast mode
[  255.435545][T14746] bond0: (slave wlan1): Releasing backup interface
[  255.439795][T14746] bond30: (slave ip6gretap1): Removing an active aggregator
[  255.448215][T14746] bond30: (slave ip6gretap1): Releasing backup interface
[  255.450547][T14746] bond30: (slave ip6gretap1): the permanent HWaddr of slave - 3e:03:9a:e8:88:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  255.460162][T14746] bond30: (slave veth31): Releasing backup interface
[  255.486159][T14746] netlink: 'syz.0.2755': attribute type 10 has an invalid length.
[  255.489105][T14746] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  255.494265][T14746] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.497971][T14746] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  255.500637][T14746] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  255.507205][T14746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  255.510227][T14746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.959156][T14751] __nla_validate_parse: 4 callbacks suppressed
[  255.959249][T14751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2757'.
[  256.344842][T14767] lo speed is unknown, defaulting to 1000
[  256.348384][T14767] lo speed is unknown, defaulting to 1000
[  256.480025][T14774] netlink: 'syz.1.2764': attribute type 4 has an invalid length.
[  256.480974][T14771] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  256.724415][T14795] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2772'.
[  256.811850][T14802] pim6reg1: entered promiscuous mode
[  256.815181][T14802] pim6reg1: entered allmulticast mode
[  257.832764][T14823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2782'.
[  257.902566][T14829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2786'.
[  257.945038][T14831] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2787'.
[  258.018141][T14831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2787'.
[  258.085773][T14841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2790'.
[  258.156887][T14845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2792'.
[  258.186884][T14847] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2793'.
[  258.765663][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2799'.
[  259.394937][T14899] netlink: 'syz.0.2809': attribute type 1 has an invalid length.
[  259.437808][T14899] 8021q: adding VLAN 0 to HW filter on device bond32
[  259.462630][T14899] bond32: entered promiscuous mode
[  259.599192][T14909] lo speed is unknown, defaulting to 1000
[  259.603159][T14909] lo speed is unknown, defaulting to 1000
[  259.753725][T14922] IPVS: ip_vs_add_dest(): server weight less than zero
[  259.801462][T14914] block nbd1: server does not support multiple connections per device.
[  259.806216][T14914] block nbd1: shutting down sockets
[  259.990517][T14929] lo speed is unknown, defaulting to 1000
[  259.994608][T14929] lo speed is unknown, defaulting to 1000
[  260.225933][T14936] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  260.582132][T14948] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.615108][T14952] netlink: 'syz.2.2826': attribute type 1 has an invalid length.
[  260.617669][T14952] netlink: 'syz.2.2826': attribute type 10 has an invalid length.
[  260.624234][T14952] netlink: 'syz.2.2826': attribute type 1 has an invalid length.
[  260.663800][T14952] 8021q: adding VLAN 0 to HW filter on device bond24
[  260.738339][T14957] syzkaller0: entered promiscuous mode
[  260.740128][T14957] syzkaller0: entered allmulticast mode
[  260.954611][T14971] IPVS: ip_vs_add_dest(): server weight less than zero
[  262.501971][T15002] IPVS: ip_vs_add_dest(): server weight less than zero
[  262.514090][T15002] __nla_validate_parse: 5 callbacks suppressed
[  262.514101][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2840'.
[  262.780060][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'.
[  262.782930][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'.
[  262.785868][T15006] netlink: 'syz.2.2843': attribute type 11 has an invalid length.
[  263.117458][T15008] netlink: 'syz.0.2844': attribute type 10 has an invalid length.
[  263.262082][T15016] netlink: 552 bytes leftover after parsing attributes in process `syz.0.2848'.
[  263.485469][T15035] IPVS: ip_vs_add_dest(): server weight less than zero
[  263.923773][T15047] veth53: entered allmulticast mode
[  264.012985][T15049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2857'.
[  264.070762][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2857'.
[  264.368570][T15076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.378842][T15076] syzkaller0: entered promiscuous mode
[  264.382381][T15076] syzkaller0: entered allmulticast mode
[  264.398392][T15078] IPVS: ip_vs_add_dest(): server weight less than zero
[  264.404824][T15076] tipc: Resetting bearer <eth:syzkaller0>
[  264.471263][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'.
[  264.531870][T15083] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.2868'.
[  265.097126][T15095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2873'.
[  265.140695][T15069] tipc: Resetting bearer <eth:syzkaller0>
[  265.153526][T15069] tipc: Disabling bearer <eth:syzkaller0>
[  265.324190][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'.
[  265.328942][T15109] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  265.458459][T15118] netlink: 'syz.2.2882': attribute type 1 has an invalid length.
[  265.464036][T15118] netlink: 'syz.2.2882': attribute type 1 has an invalid length.
[  265.618923][T15125] lo speed is unknown, defaulting to 1000
[  265.624592][T15125] lo speed is unknown, defaulting to 1000
[  265.696072][T15131] veth0_to_team: left allmulticast mode
[  265.862769][ T5893] IPVS: starting estimator thread 0...
[  265.952752][T15141] IPVS: using max 62 ests per chain, 148800 per kthread
[  266.192845][ T5738] IPVS: stop unused estimator thread 0...
[  266.558526][T15195] netlink: 'syz.1.2905': attribute type 29 has an invalid length.
[  266.694125][T15205] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.698138][T15205] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20001
[  267.018993][T15235] netlink: 'syz.2.2918': attribute type 10 has an invalid length.
[  267.026179][T15235] netlink: 'syz.2.2918': attribute type 10 has an invalid length.
[  267.028784][T15235] batadv0: entered promiscuous mode
[  267.030524][T15235] batadv0: entered allmulticast mode
[  267.032638][T15235] bridge0: port 1(batadv0) entered blocking state
[  267.034920][T15235] bridge0: port 1(batadv0) entered disabled state
[  267.482515][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  267.486504][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  267.833471][T15265] __nla_validate_parse: 11 callbacks suppressed
[  267.833486][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'.
[  267.999804][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'.
[  268.192555][T15286] netlink: 'syz.1.2931': attribute type 27 has an invalid length.
[  268.207410][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'.
[  268.252444][T15289] netlink: 'syz.1.2932': attribute type 1 has an invalid length.
[  268.265728][T15289] netlink: 'syz.1.2932': attribute type 10 has an invalid length.
[  268.278818][T15289] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2932'.
[  268.290383][T15289] netlink: 'syz.1.2932': attribute type 1 has an invalid length.
[  268.353468][T15289] 8021q: adding VLAN 0 to HW filter on device bond24
[  268.358943][T15302] xt_socket: unknown flags 0xd0
[  268.673746][T15325] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2941'.
[  268.679073][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'.
[  268.682648][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'.
[  268.692959][T15325] netlink: 'syz.2.2941': attribute type 10 has an invalid length.
[  268.696339][T15325] batadv0: left allmulticast mode
[  268.698401][T15325] batadv0: left promiscuous mode
[  268.700590][T15325] bridge0: port 1(batadv0) entered disabled state
[  268.719637][T15325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2941'.
[  268.730073][T15325] batadv0: entered promiscuous mode
[  268.734069][T15325] batadv0: entered allmulticast mode
[  268.736477][T15325] bridge0: port 1(batadv0) entered blocking state
[  268.739202][T15325] bridge0: port 1(batadv0) entered disabled state
[  268.831930][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'.
[  268.839974][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'.
[  268.868894][ T5860] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.874556][ T5860] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.877685][ T5860] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.888702][ T5860] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  269.095487][T15353] IPv6: syztnl1: Disabled Multicast RS
[  269.507891][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.514579][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.664321][T15404] 8021q: adding VLAN 0 to HW filter on device team0
[  270.222110][T15431] lo speed is unknown, defaulting to 1000
[  270.226279][T15431] lo speed is unknown, defaulting to 1000
[  270.471724][T15439] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  270.725308][T15446] validate_nla: 3 callbacks suppressed
[  270.725322][T15446] netlink: 'syz.2.2978': attribute type 1 has an invalid length.
[  270.799549][T15449] bond26: (slave geneve5): making interface the new active one
[  270.805852][T15449] bond26: (slave geneve5): Enslaving as an active interface with an up link
[  270.809873][ T5738] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  270.823116][ T5738] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  270.825807][ T5738] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  270.828862][ T5738] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  270.907946][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.913330][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.077824][T15467] vlan4: entered promiscuous mode
[  271.080212][T15467] vlan4: entered allmulticast mode
[  271.083047][T15467] hsr_slave_1: entered allmulticast mode
[  271.297498][T15482] IPVS: ip_vs_add_dest(): server weight less than zero
[  271.728565][T15488] IPVS: ip_vs_add_dest(): server weight less than zero
[  271.824208][T15494] bond0: peer notification delay (198) is not a multiple of miimon (100), value rounded to 100 ms
[  271.828255][T15494] bond0: entered promiscuous mode
[  271.830170][T15494] bond0: entered allmulticast mode
[  272.057234][T15514] gretap0: entered promiscuous mode
[  272.088914][T15514] 8021q: adding VLAN 0 to HW filter on device bond25
[  272.100586][T15514] 0{X: renamed from gretap0
[  272.105322][T15514] 0{X: left promiscuous mode
[  272.107494][T15514] 0{X: entered allmulticast mode
[  272.110778][T15514] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  272.122473][T15518] 0{X: entered promiscuous mode
[  272.125342][T15518] 0{X: left allmulticast mode
[  272.137179][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.139623][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.664355][   T55] block nbd1: Receive control failed (result -32)
[  273.175906][T15570] __nla_validate_parse: 15 callbacks suppressed
[  273.175918][T15570] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3017'.
[  273.266927][T15574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.275092][T15573] tipc: Disabling bearer <eth:syzkaller0>
[  273.604834][ T6055] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  274.644844][T15622] netlink: 'syz.1.3034': attribute type 39 has an invalid length.
[  274.762385][ T6055] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  275.468326][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'.
[  275.512361][T15646] bond0: option xmit_hash_policy: invalid value (8)
[  275.664753][T15653] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3045'.
[  275.814628][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'.
[  275.977915][T15672] netlink: 'syz.1.3050': attribute type 1 has an invalid length.
[  275.980520][T15672] netlink: 'syz.1.3050': attribute type 10 has an invalid length.
[  275.983940][T15672] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3050'.
[  275.989946][T15672] netlink: 'syz.1.3050': attribute type 1 has an invalid length.
[  276.015012][T15672] 8021q: adding VLAN 0 to HW filter on device bond26
[  276.140542][T15679] lo speed is unknown, defaulting to 1000
[  276.144410][T15679] lo speed is unknown, defaulting to 1000
[  276.439739][T15687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'.
[  276.450076][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  276.579311][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'.
[  276.592631][T15699] netlink: 'syz.1.3058': attribute type 1 has an invalid length.
[  276.617292][T15699] 8021q: adding VLAN 0 to HW filter on device bond27
[  276.655985][T15699] bond27: (slave veth39): Enslaving as an active interface with a down link
[  276.675762][T15699] 8021q: adding VLAN 0 to HW filter on device batadv1
[  276.678311][T15699] bond27: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  276.799863][T15708] netlink: 'syz.0.3063': attribute type 10 has an invalid length.
[  276.829989][T15710] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  276.875134][T15710] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  276.891632][T15714] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3062'.
[  276.903024][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'.
[  276.905790][T15714] netlink: 'syz.2.3062': attribute type 5 has an invalid length.
[  276.916809][T15710] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  276.975963][T15710] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  277.062178][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  277.088161][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  277.116007][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  277.127110][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  277.137120][T15733] nbd: couldn't find device at index 0
[  277.205883][T15740] tipc: Failed to remove unknown binding: 66,1,1/0:3607214048/3607214050
[  277.210171][T15739] tipc: Failed to remove unknown binding: 66,1,1/0:3607214048/3607214050
[  277.219232][T15739] tipc: Failed to remove unknown binding: 66,1,1/0:3607214048/3607214050
[  277.223579][T15739] tipc: Failed to remove unknown binding: 66,1,1/0:3607214048/3607214050
[  277.496341][T15764] lo speed is unknown, defaulting to 1000
[  277.499916][T15764] lo speed is unknown, defaulting to 1000
[  277.850148][T15785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.855517][T15785] syzkaller0: entered promiscuous mode
[  277.857850][T15785] syzkaller0: entered allmulticast mode
[  277.897668][T15785] tipc: Resetting bearer <eth:syzkaller0>
[  277.904797][T15784] tipc: Resetting bearer <eth:syzkaller0>
[  277.927107][T15784] tipc: Disabling bearer <eth:syzkaller0>
[  278.569261][T15803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.727669][T15810] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  279.187062][T15825] netlink: 'syz.2.3103': attribute type 32 has an invalid length.
[  279.190205][T15825] __nla_validate_parse: 5 callbacks suppressed
[  279.190219][T15825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3103'.
[  279.242125][T15832] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3103'.
[  279.274813][T15831] lo speed is unknown, defaulting to 1000
[  279.282735][T15831] lo speed is unknown, defaulting to 1000
[  279.507472][T15844] IPVS: ip_vs_add_dest(): server weight less than zero
[  279.511902][T15842] netlink: 'syz.0.3101': attribute type 1 has an invalid length.
[  279.553475][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'.
[  279.559685][T15847] IPVS: ip_vs_add_dest(): server weight less than zero
[  279.560675][T15842] vlan0: entered allmulticast mode
[  279.564963][T15842] bond33: entered allmulticast mode
[  280.007872][T15876] sctp: [Deprecated]: syz.0.3113 (pid 15876) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.007872][T15876] Use struct sctp_sack_info instead
[  280.189635][T15883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3115'.
[  280.365686][T15895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3119'.
[  280.527198][T15902] netlink: 'syz.0.3121': attribute type 1 has an invalid length.
[  280.529700][T15902] netlink: 'syz.0.3121': attribute type 10 has an invalid length.
[  280.532246][T15902] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3121'.
[  280.552203][T15902] 8021q: adding VLAN 0 to HW filter on device bond34
[  280.599239][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'.
[  280.628129][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3122'.
[  280.633280][T15905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.639187][   T24] lo speed is unknown, defaulting to 1000
[  280.642255][   T24] syz1: Port: 1 Link DOWN
[  280.770386][T15915] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3124'.
[  280.915876][T15925] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3129'.
[  280.934801][T15925] batadv0: left allmulticast mode
[  280.936824][T15925] batadv0: left promiscuous mode
[  280.938951][T15925] bridge0: port 1(batadv0) entered disabled state
[  280.961380][T15925] batadv0: entered promiscuous mode
[  280.963503][T15925] batadv0: entered allmulticast mode
[  280.965862][T15925] bridge0: port 1(batadv0) entered blocking state
[  280.969679][T15925] bridge0: port 1(batadv0) entered disabled state
[  281.338645][T15957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.345312][T15957] syzkaller0: entered promiscuous mode
[  281.347736][T15957] syzkaller0: entered allmulticast mode
[  281.369772][T15957] tipc: Resetting bearer <eth:syzkaller0>
[  281.386921][T15957] tipc: Resetting bearer <eth:syzkaller0>
[  281.397373][T15957] tipc: Disabling bearer <eth:syzkaller0>
[  282.502214][T15974] batadv0: left promiscuous mode
[  282.544443][T15974] veth31: left promiscuous mode
[  282.547886][T15974] bond32: left promiscuous mode
[  282.550416][T15974] vlan0: left allmulticast mode
[  282.553297][T15974] bond33: left allmulticast mode
[  282.611255][T15982] validate_nla: 3 callbacks suppressed
[  282.611266][T15982] netlink: 'syz.2.3147': attribute type 1 has an invalid length.
[  282.632852][T15982] netlink: 'syz.2.3147': attribute type 1 has an invalid length.
[  282.872716][T16010] bridge0: port 2(ipvlan0) entered blocking state
[  282.875020][T16010] bridge0: port 2(ipvlan0) entered disabled state
[  282.877167][T16010] ipvlan0: entered allmulticast mode
[  282.878862][T16010] bridge0: entered allmulticast mode
[  282.882018][T16010] ipvlan0: left allmulticast mode
[  282.883623][T16010] bridge0: left allmulticast mode
[  283.439320][T16035] netlink: 'syz.1.3165': attribute type 1 has an invalid length.
[  283.443474][T16035] netlink: 'syz.1.3165': attribute type 10 has an invalid length.
[  283.449378][T16035] netlink: 'syz.1.3165': attribute type 1 has an invalid length.
[  283.475595][T16035] 8021q: adding VLAN 0 to HW filter on device bond28
[  283.592685][T16043] netlink: 'syz.0.3168': attribute type 10 has an invalid length.
[  283.595767][T16042] netlink: 'syz.0.3168': attribute type 10 has an invalid length.
[  286.624822][T16056] 0{X: left promiscuous mode
[  286.665963][T16056] bond0: left promiscuous mode
[  286.667954][T16056] bond0: left allmulticast mode
[  286.687121][T16056] netdevsim0: left promiscuous mode
[  286.692020][T16056] gretap3: left promiscuous mode
[  286.693685][T16056] gretap3: left allmulticast mode
[  286.724146][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.727853][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.731638][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.736655][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  290.002906][T16086] netlink: 'syz.1.3181': attribute type 10 has an invalid length.
[  293.886983][T16128] 8021q: VLANs not supported on sit0
[  294.206453][T16156] __nla_validate_parse: 9 callbacks suppressed
[  294.206470][T16156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3204'.
[  298.036214][T16220] IPVS: ip_vs_add_dest(): server weight less than zero
[  298.047213][T16216] lo speed is unknown, defaulting to 1000
[  298.055067][T16217] lo speed is unknown, defaulting to 1000
[  298.055142][T16216] lo speed is unknown, defaulting to 1000
[  298.226957][T16217] lo speed is unknown, defaulting to 1000
[  298.241435][T16229] IPVS: ip_vs_add_dest(): server weight less than zero
[  298.270708][T16234] netlink: 'syz.0.3230': attribute type 10 has an invalid length.
[  298.274120][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3230'.
[  298.778821][T16257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3238'.
[  299.139678][T16286] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  299.177060][T16286] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  299.275664][T16286] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  299.280971][T16292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3246'.
[  299.324149][T16286] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  299.373871][ T7686] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  299.382739][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  299.392092][ T7686] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  299.402378][ T7686] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  299.478504][T16297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3251'.
[  299.643344][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3253'.
[  299.893760][T16318] netlink: 'syz.2.3258': attribute type 1 has an invalid length.
[  299.924295][T16318] vlan5: entered allmulticast mode
[  299.926569][T16318] bond27: entered allmulticast mode
[  300.274584][T16342] syzkaller1: entered promiscuous mode
[  300.276608][T16342] syzkaller1: entered allmulticast mode
[  300.280167][T16344] netlink: 'syz.1.3265': attribute type 10 has an invalid length.
[  300.644026][T16364] netlink: 'syz.0.3274': attribute type 4 has an invalid length.
[  300.651230][   T24] lo speed is unknown, defaulting to 1000
[  300.653099][   T24] syz1: Port: 1 Link ACTIVE
[  302.617028][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'.
[  303.281571][T16433] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  303.541677][T16449] syzkaller1: entered promiscuous mode
[  303.548087][T16449] syzkaller1: entered allmulticast mode
[  303.635231][T16457] netlink: 'syz.1.3304': attribute type 1 has an invalid length.
[  303.638419][T16457] netlink: 'syz.1.3304': attribute type 10 has an invalid length.
[  303.641962][T16457] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3304'.
[  303.647451][T16457] netlink: 'syz.1.3304': attribute type 1 has an invalid length.
[  303.668225][T16457] 8021q: adding VLAN 0 to HW filter on device bond29
[  303.677985][T16460] veth0_to_team: left promiscuous mode
[  303.688594][T16460] bond9: left promiscuous mode
[  303.692139][T16460] ip6gre1: left allmulticast mode
[  303.702906][T16460] vlan2: left allmulticast mode
[  303.705134][T16460] bridge0: left allmulticast mode
[  303.707812][T16460] geneve4: left promiscuous mode
[  303.710365][T16460] geneve4: left allmulticast mode
[  303.744678][T16460] veth53: left allmulticast mode
[  303.760488][T16460] vlan4: left promiscuous mode
[  303.762535][T16460] vlan4: left allmulticast mode
[  303.764169][T16460] hsr_slave_1: left allmulticast mode
[  303.769126][ T5860] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.773479][ T5860] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.777714][ T5860] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.788208][ T5860] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.847384][T16472] netlink: 'syz.2.3309': attribute type 1 has an invalid length.
[  303.950281][T16473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.027465][T16487] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.3312'.
[  304.185110][T16507] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3319'.
[  304.213887][T16511] netlink: 'syz.2.3322': attribute type 10 has an invalid length.
[  304.526759][T16541] bond30: entered promiscuous mode
[  304.528387][T16541] bond30: entered allmulticast mode
[  304.530240][T16541] 8021q: adding VLAN 0 to HW filter on device bond30
[  304.838632][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'.
[  304.979254][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3345'.
[  304.998376][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'.
[  305.054387][T16591] netlink: 'syz.1.3346': attribute type 1 has an invalid length.
[  305.104332][T16598] sock: sock_set_timeout: `syz.1.3350' (pid 16598) tries to set negative timeout
[  305.150512][T16603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.156286][T16603] syzkaller0: entered promiscuous mode
[  305.163364][T16603] syzkaller0: entered allmulticast mode
[  305.360689][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.367096][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.388825][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.392743][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.396527][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.400294][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.404425][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  305.660975][T16644] IPVS: ip_vs_add_dest(): server weight less than zero
[  305.918238][T16592] tipc: Resetting bearer <eth:syzkaller0>
[  305.936182][T16592] tipc: Disabling bearer <eth:syzkaller0>
[  306.632385][T16692] lo speed is unknown, defaulting to 1000
[  306.635155][T16692] lo speed is unknown, defaulting to 1000
[  306.686487][T16697] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  306.693209][T16697] openvswitch: netlink: Duplicate key (type 0).
[  307.143732][T16719] netlink: 'syz.2.3392': attribute type 5 has an invalid length.
[  307.307345][T16728] netlink: 'syz.0.3394': attribute type 13 has an invalid length.
[  307.365592][T16733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.436013][ T6950] lo speed is unknown, defaulting to 1000
[  307.438432][ T6950] syz1: Port: 1 Link DOWN
[  307.508460][T16741] netlink: 'syz.2.3396': attribute type 16 has an invalid length.
[  307.736985][T16764] netlink: 'syz.2.3403': attribute type 13 has an invalid length.
[  307.790408][T16767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.848807][T16769] netlink: zone id is out of range
[  307.869094][T16769] netlink: zone id is out of range
[  307.876633][T16769] netlink: zone id is out of range
[  307.878377][T16769] netlink: zone id is out of range
[  307.880058][T16769] netlink: zone id is out of range
[  307.945528][T16780] Unsupported xt match
[  307.945541][T16780] unable to load match
[  308.091238][T10690] page_pool_release_retry() stalled pool shutdown: id 127, 1 inflight 60 sec
[  308.625872][T16810] lo speed is unknown, defaulting to 1000
[  308.629658][T16810] lo speed is unknown, defaulting to 1000
[  309.005320][T16823] validate_nla: 1 callbacks suppressed
[  309.005336][T16823] netlink: 'syz.2.3422': attribute type 13 has an invalid length.
[  309.106574][T16829] can: request_module (can-proto-4) failed.
[  309.138107][T16833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.140955][T16833] syzkaller0: entered promiscuous mode
[  309.143036][T16833] syzkaller0: entered allmulticast mode
[  309.148142][T16833] tipc: Resetting bearer <eth:syzkaller0>
[  309.158391][T16832] tipc: Resetting bearer <eth:syzkaller0>
[  309.175237][T16832] tipc: Disabling bearer <eth:syzkaller0>
[  309.307342][T16839] netlink: 'syz.1.3428': attribute type 83 has an invalid length.
[  309.838001][T16844] netlink: 'syz.0.3430': attribute type 1 has an invalid length.
[  310.155843][T16854] __nla_validate_parse: 74 callbacks suppressed
[  310.155868][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'.
[  310.163401][T16854] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3433'.
[  310.166993][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3433'.
[  310.228942][T16858] netlink: 'syz.2.3435': attribute type 1 has an invalid length.
[  310.233338][T16858] netlink: 'syz.2.3435': attribute type 10 has an invalid length.
[  310.236627][T16858] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3435'.
[  310.245465][T16858] netlink: 'syz.2.3435': attribute type 1 has an invalid length.
[  310.269631][T16858] 8021q: adding VLAN 0 to HW filter on device bond28
[  310.566176][T16887] netlink: 'syz.2.3447': attribute type 10 has an invalid length.
[  310.596632][T16889] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3446'.
[  310.600866][T16889] 0: renamed from hsr0
[  310.604998][T16889] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  310.609005][T16889] 0: entered allmulticast mode
[  310.612375][T16889] hsr_slave_0: entered allmulticast mode
[  310.616261][T16889] net_ratelimit: 12 callbacks suppressed
[  310.616276][T16889] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  310.933441][T16903] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  310.937458][T16903] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  311.031772][T16908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  311.437669][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3460'.
[  311.457579][T16923] lo speed is unknown, defaulting to 1000
[  311.461787][T16923] lo speed is unknown, defaulting to 1000
[  311.554409][T16928] syzkaller0: entered promiscuous mode
[  311.556364][T16928] syzkaller0: entered allmulticast mode
[  311.613542][T16928] geneve1: entered allmulticast mode
[  311.767945][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'.
[  311.874773][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'.
[  311.941876][T16940] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  312.066302][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3468'.
[  312.093805][T16950] lo speed is unknown, defaulting to 1000
[  312.100262][T16950] lo speed is unknown, defaulting to 1000
[  313.301915][T16980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3475'.
[  313.306298][T16980] netlink: 'syz.2.3475': attribute type 6 has an invalid length.
[  313.309442][T16980] netlink: 'syz.2.3475': attribute type 5 has an invalid length.
[  313.368442][T16981] netlink: 'syz.2.3475': attribute type 7 has an invalid length.
[  313.791929][T16982] syzkaller1: entered promiscuous mode
[  313.800790][T16982] syzkaller1: entered allmulticast mode
[  313.998702][T16993] lo speed is unknown, defaulting to 1000
[  314.005259][T16993] lo speed is unknown, defaulting to 1000
[  314.487803][T17022] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  314.505727][T17025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.509253][T17025] syzkaller0: entered promiscuous mode
[  314.511641][T17025] syzkaller0: entered allmulticast mode
[  314.541292][T17025] tipc: Resetting bearer <eth:syzkaller0>
[  314.561963][T17024] tipc: Resetting bearer <eth:syzkaller0>
[  314.619217][T17024] tipc: Disabling bearer <eth:syzkaller0>
[  314.637283][T17035] validate_nla: 1 callbacks suppressed
[  314.637294][T17035] netlink: 'syz.2.3489': attribute type 4 has an invalid length.
[  314.673666][T17038] IPVS: ip_vs_add_dest(): server weight less than zero
[  314.908617][T17044] lo speed is unknown, defaulting to 1000
[  314.921869][T17044] lo speed is unknown, defaulting to 1000
[  315.176431][T17070] __nla_validate_parse: 8 callbacks suppressed
[  315.176449][T17070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3498'.
[  315.257120][T17073] lo speed is unknown, defaulting to 1000
[  315.266662][T17073] lo speed is unknown, defaulting to 1000
[  315.271994][T17072] lo speed is unknown, defaulting to 1000
[  315.402903][T17082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3502'.
[  315.498010][T17072] lo speed is unknown, defaulting to 1000
[  315.579381][T17085] netlink: 'syz.2.3502': attribute type 11 has an invalid length.
[  315.583476][T17085] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3502'.
[  315.587830][T17085] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3502'.
[  315.747994][T17095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3504'.
[  316.130287][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'.
[  316.350271][T17117] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3509'.
[  316.484202][T17117] netlink: 'syz.0.3509': attribute type 11 has an invalid length.
[  316.490112][T17117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3509'.
[  316.498157][T17117] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3509'.
[  316.804359][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3514'.
[  318.013217][T17191] netlink: 'syz.0.3525': attribute type 1 has an invalid length.
[  318.124022][T17186] netlink: 'syz.1.3519': attribute type 11 has an invalid length.
[  318.268370][T17208] dvmrp1: entered allmulticast mode
[  318.280471][T17208] dvmrp1: left allmulticast mode
[  318.338423][T17217] netlink: 'syz.0.3527': attribute type 1 has an invalid length.
[  318.342036][T17217] netlink: 'syz.0.3527': attribute type 10 has an invalid length.
[  318.354840][T17217] netlink: 'syz.0.3527': attribute type 1 has an invalid length.
[  318.388310][T17217] 8021q: adding VLAN 0 to HW filter on device bond35
[  318.500667][T17228] bond0: entered promiscuous mode
[  318.508932][T17228] bond0: left promiscuous mode
[  318.706191][T17237] netlink: 'syz.0.3531': attribute type 11 has an invalid length.
[  318.776744][T17236] syzkaller1: entered promiscuous mode
[  318.778998][T17236] syzkaller1: entered allmulticast mode
[  318.879031][T17252] delete_channel: no stack
[  318.958901][T17262] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  319.343399][T17280] netlink: 'syz.2.3542': attribute type 11 has an invalid length.
[  319.952809][T17335] netlink: 'syz.1.3551': attribute type 1 has an invalid length.
[  319.959283][T17335] netlink: 'syz.1.3551': attribute type 10 has an invalid length.
[  319.972159][T17335] netlink: 'syz.1.3551': attribute type 1 has an invalid length.
[  319.994426][T17335] 8021q: adding VLAN 0 to HW filter on device bond32
[  320.766836][T17397] netlink: 'syz.0.3566': attribute type 1 has an invalid length.
[  320.804654][T17396] netlink: 'syz.2.3567': attribute type 10 has an invalid length.
[  320.843459][T17384] __nla_validate_parse: 12 callbacks suppressed
[  320.843472][T17384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3563'.
[  320.939486][T17407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3568'.
[  321.030831][T17415] sit7: entered promiscuous mode
[  321.122616][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'.
[  321.126258][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'.
[  321.135516][T17425] batadv0: entered promiscuous mode
[  321.138411][T17425] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  321.141979][T17425] batadv0: left promiscuous mode
[  321.164191][T17424] batadv0: entered promiscuous mode
[  321.167369][T17424] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  321.170573][T17424] batadv0: left promiscuous mode
[  321.446916][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3575'.
[  321.916599][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'.
[  322.149982][T17476] netlink: 'syz.0.3588': attribute type 9 has an invalid length.
[  322.153692][T17476] netlink: 'syz.0.3588': attribute type 9 has an invalid length.
[  322.237848][T17482] bridge7: entered allmulticast mode
[  322.248926][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3590'.
[  322.253887][T17482] bridge7: left allmulticast mode
[  322.462258][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'.
[  322.465761][T17493] bridge_slave_1: default FDB implementation only supports local addresses
[  322.471702][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3594'.
[  322.476453][T17493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3594'.
[  323.044906][T17533] lo speed is unknown, defaulting to 1000
[  323.050681][T17534] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  323.057729][T17533] lo speed is unknown, defaulting to 1000
[  323.352247][T17558] netlink: 'syz.2.3612': attribute type 9 has an invalid length.
[  323.354797][T17558] netlink: 'syz.2.3612': attribute type 9 has an invalid length.
[  323.368415][T17536] can: request_module (can-proto-5) failed.
[  323.399898][T17562] syzkaller1: entered promiscuous mode
[  323.404363][T17562] syzkaller1: entered allmulticast mode
[  324.218936][T17613] netlink: 'syz.2.3621': attribute type 2 has an invalid length.
[  324.357452][T17623] vlan1: entered promiscuous mode
[  324.364678][T17623] vlan1: entered allmulticast mode
[  324.369304][T17623] hsr_slave_1: entered allmulticast mode
[  324.983513][T17637] netlink: 'syz.1.3628': attribute type 9 has an invalid length.
[  324.986648][T17637] netlink: 'syz.1.3628': attribute type 9 has an invalid length.
[  325.059287][T17648] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  325.070442][T17649] netlink: 'syz.0.3630': attribute type 2 has an invalid length.
[  325.074572][T17648] netlink: 'syz.0.3630': attribute type 2 has an invalid length.
[  325.283088][T17670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.556056][T17684] netlink: 'syz.2.3642': attribute type 1 has an invalid length.
[  325.674078][T17690] netlink: 'syz.2.3644': attribute type 32 has an invalid length.
[  325.677653][T17690] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  325.769648][T17695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.013407][T17718] netlink: 'syz.2.3653': attribute type 1 has an invalid length.
[  326.016528][T17718] netlink: 'syz.2.3653': attribute type 10 has an invalid length.
[  326.019699][T17718] __nla_validate_parse: 18 callbacks suppressed
[  326.019711][T17718] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3653'.
[  326.027640][T17718] netlink: 'syz.2.3653': attribute type 1 has an invalid length.
[  326.056443][T17721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3654'.
[  326.064568][T17718] 8021q: adding VLAN 0 to HW filter on device bond30
[  326.118128][T17726] netlink: 'syz.0.3656': attribute type 9 has an invalid length.
[  326.160548][T17728] lo speed is unknown, defaulting to 1000
[  326.166084][T17728] lo speed is unknown, defaulting to 1000
[  326.284264][T17729] 8021q: adding VLAN 0 to HW filter on device team0
[  326.289710][T17729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.329548][T17729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  326.333076][T17729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.355436][T17729] 8021q: adding VLAN 0 to HW filter on device bond1
[  326.395318][T17729] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.399147][T17729] 8021q: adding VLAN 0 to HW filter on device bond2
[  326.416563][T17729] 8021q: adding VLAN 0 to HW filter on device bond3
[  326.423990][T17729] 8021q: adding VLAN 0 to HW filter on device bond4
[  326.437309][T17729] 8021q: adding VLAN 0 to HW filter on device bond5
[  326.449529][T17729] 8021q: adding VLAN 0 to HW filter on device bond6
[  326.472533][T17729] 8021q: adding VLAN 0 to HW filter on device bond7
[  326.476409][T17729] 8021q: adding VLAN 0 to HW filter on device bond8
[  326.480317][T17729] 8021q: adding VLAN 0 to HW filter on device bond9
[  326.491266][T17729] 8021q: adding VLAN 0 to HW filter on device bond10
[  326.518145][T17729] 8021q: adding VLAN 0 to HW filter on device bond11
[  326.526730][T17729] 8021q: adding VLAN 0 to HW filter on device bond12
[  326.531148][T17729] 8021q: adding VLAN 0 to HW filter on device bond13
[  326.538377][T17729] 8021q: adding VLAN 0 to HW filter on device bond14
[  326.545906][T17729] 8021q: adding VLAN 0 to HW filter on device bond15
[  326.551491][T17729] 8021q: adding VLAN 0 to HW filter on device bond16
[  326.571348][T17729] bridge0: entered promiscuous mode
[  326.670227][T17729] 8021q: adding VLAN 0 to HW filter on device bond17
[  326.683865][T17729] 8021q: adding VLAN 0 to HW filter on device bond18
[  326.687796][T17729] 8021q: adding VLAN 0 to HW filter on device bond19
[  326.699827][T17729] 8021q: adding VLAN 0 to HW filter on device batadv1
[  326.705106][T17729] 8021q: adding VLAN 0 to HW filter on device bond20
[  326.708598][T17729] 8021q: adding VLAN 0 to HW filter on device bond21
[  326.717592][T17729] 8021q: adding VLAN 0 to HW filter on device bond22
[  326.722078][T17729] 8021q: adding VLAN 0 to HW filter on device bond23
[  326.753963][T17729] 8021q: adding VLAN 0 to HW filter on device bond24
[  326.761235][T17729] 8021q: adding VLAN 0 to HW filter on device bond25
[  326.772973][T17729] 8021q: adding VLAN 0 to HW filter on device bond26
[  326.847805][T17729] 8021q: adding VLAN 0 to HW filter on device bond27
[  326.863041][T17729] sit7: left promiscuous mode
[  326.868953][T17729] 8021q: adding VLAN 0 to HW filter on device bond29
[  326.939472][ T5860] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.942326][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.944933][ T5860] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  326.947349][ T5860] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  326.949873][ T5860] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.954076][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.961285][ T5860] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  326.963830][ T5860] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  326.970501][ T5860] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.974452][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.977134][ T5860] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  326.979654][ T5860] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  327.033442][ T5860] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.041209][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.046617][ T5860] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  327.049169][ T5860] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  327.299512][T17769] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3666'.
[  327.356497][T17769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  327.578281][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'.
[  327.585380][T17792] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3670'.
[  327.776247][T17807] siw: device registration error -23
[  327.799790][T17807] 8021q: adding VLAN 0 to HW filter on device team0
[  327.808875][T17807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.814558][   T24] lo speed is unknown, defaulting to 1000
[  327.816452][   T24] syz0: Port: 1 Link ACTIVE
[  327.819840][   T24] lo speed is unknown, defaulting to 1000
[  327.868510][T17813] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3676'.
[  328.185512][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'.
[  328.821993][T17843] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3682'.
[  328.863691][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3682'.
[  328.879587][T17843] bond31: entered promiscuous mode
[  328.882380][T17843] 8021q: adding VLAN 0 to HW filter on device bond31
[  329.587704][T17912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3702'.
[  329.724887][T17924] veth0_to_team: entered promiscuous mode
[  330.158276][T17943] validate_nla: 13 callbacks suppressed
[  330.158292][T17943] netlink: 'syz.2.3711': attribute type 9 has an invalid length.
[  330.164956][T17943] netlink: 'syz.2.3711': attribute type 9 has an invalid length.
[  330.293720][T17949] IPVS: ip_vs_add_dest(): server weight less than zero
[  330.631976][T17973] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  330.805328][T17984] netpci0: tun_chr_ioctl cmd 1074025681
[  331.523107][T18004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.525958][T18004] syzkaller0: entered promiscuous mode
[  331.527647][T18004] syzkaller0: entered allmulticast mode
[  331.533038][T18004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  331.544702][T18004] tipc: Resetting bearer <eth:syzkaller0>
[  331.547861][T18003] tipc: Resetting bearer <eth:syzkaller0>
[  331.559212][T18003] tipc: Disabling bearer <eth:syzkaller0>
[  332.109412][T18060] netlink: 'syz.0.3749': attribute type 10 has an invalid length.
[  332.237997][T18068] netlink: 'syz.2.3753': attribute type 10 has an invalid length.
[  332.339216][T18076] netlink: 'syz.2.3756': attribute type 1 has an invalid length.
[  332.342813][T18076] netlink: 'syz.2.3756': attribute type 10 has an invalid length.
[  332.345323][T18076] __nla_validate_parse: 7 callbacks suppressed
[  332.345331][T18076] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3756'.
[  332.352886][T18076] netlink: 'syz.2.3756': attribute type 1 has an invalid length.
[  332.372454][T18076] 8021q: adding VLAN 0 to HW filter on device bond32
[  332.970832][T18098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3764'.
[  333.167508][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3771'.
[  333.171773][T18117] netlink: 'syz.0.3772': attribute type 10 has an invalid length.
[  333.298255][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'.
[  333.378819][T18136] syzkaller1: entered promiscuous mode
[  333.380785][T18136] syzkaller1: entered allmulticast mode
[  333.495621][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3779'.
[  333.498570][T18142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'.
[  333.503231][T18142] netlink: 'syz.0.3779': attribute type 18 has an invalid length.
[  333.510755][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3779'.
[  333.519544][T18142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'.
[  333.524958][T18142] netlink: 'syz.0.3779': attribute type 18 has an invalid length.
[  333.714882][T18154] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3783'.
[  333.844123][T18164] 8021q: adding VLAN 0 to HW filter on device bond36
[  333.857516][T18164] 8021q: adding VLAN 0 to HW filter on device bond36
[  333.859866][T18164] bond36: (slave vcan0): The slave device specified does not support setting the MAC address
[  333.864617][T18164] bond36: (slave vcan0): Error -95 calling set_mac_address
[  333.999156][T18178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3793'.
[  334.055661][T18185] syzkaller1: entered promiscuous mode
[  334.058037][T18185] syzkaller1: entered allmulticast mode
[  335.498320][T18260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.572741][T18291] validate_nla: 4 callbacks suppressed
[  335.572753][T18291] netlink: 'syz.0.3828': attribute type 9 has an invalid length.
[  335.577453][T18291] netlink: 'syz.0.3828': attribute type 9 has an invalid length.
[  335.883719][T18314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.890827][T18314] tipc: Resetting bearer <eth:syzkaller0>
[  335.894981][T18312] tipc: Disabling bearer <eth:syzkaller0>
[  336.270809][T18345] lo speed is unknown, defaulting to 1000
[  336.276791][T18345] lo speed is unknown, defaulting to 1000
[  336.639078][T18367] netlink: 'syz.1.3853': attribute type 9 has an invalid length.
[  336.762458][T18370] netlink: 'syz.0.3854': attribute type 1 has an invalid length.
[  336.765776][T18370] netlink: 'syz.0.3854': attribute type 10 has an invalid length.
[  336.775079][T18370] netlink: 'syz.0.3854': attribute type 1 has an invalid length.
[  337.169662][T18370] 8021q: adding VLAN 0 to HW filter on device bond37
[  337.562368][T18399] __nla_validate_parse: 9 callbacks suppressed
[  337.562385][T18399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3864'.
[  337.605879][T18401] netlink: 'syz.0.3865': attribute type 10 has an invalid length.
[  337.757903][T18411] netlink: 'syz.0.3869': attribute type 9 has an invalid length.
[  337.807249][T18415] netlink: 'syz.0.3870': attribute type 10 has an invalid length.
[  337.864854][T18419] bond0: (slave wlan1): Releasing backup interface
[  337.868478][T18419] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  337.905271][T18419] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.908645][T18419] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  337.917394][   T24] lo speed is unknown, defaulting to 1000
[  337.919678][   T24] syz1: Port: 1 Link ACTIVE
[  337.994970][T18423] syzkaller0: entered promiscuous mode
[  337.997227][T18423] syzkaller0: entered allmulticast mode
[  338.003319][T18423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3873'.
[  338.246212][T18436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.794734][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3881'.
[  338.885509][T18454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.224997][T18466] sctp: [Deprecated]: syz.2.3888 (pid 18466) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.224997][T18466] Use struct sctp_sack_info instead
[  339.232811][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3888'.
[  339.597930][T18488] syzkaller0: entered promiscuous mode
[  339.599708][T18488] syzkaller0: entered allmulticast mode
[  339.654635][T18488] lo speed is unknown, defaulting to 1000
[  339.662200][T18488] lo speed is unknown, defaulting to 1000
[  339.909935][T18504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3901'.
[  339.999726][T18512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.632111][T18548] netlink: 'syz.1.3916': attribute type 10 has an invalid length.
[  340.674355][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3917'.
[  340.689837][T18551] IPVS: ip_vs_add_dest(): server weight less than zero
[  340.963856][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3923'.
[  340.982416][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'.
[  341.009891][T18572] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3925'.
[  341.022938][T18572] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  341.028986][T18572] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  341.034027][T18572] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  341.136709][T18579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3927'.
[  341.140327][T18579] netlink: 'syz.2.3927': attribute type 6 has an invalid length.
[  341.144575][T18579] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  341.243958][T18589] netlink: 'syz.2.3931': attribute type 9 has an invalid length.
[  341.247132][T18589] netlink: 'syz.2.3931': attribute type 9 has an invalid length.
[  341.773992][T18623] netlink: 'syz.1.3943': attribute type 4 has an invalid length.
[  341.781568][T10690] lo speed is unknown, defaulting to 1000
[  341.784247][T10690] syz0: Port: 1 Link DOWN
[  341.787549][T10690] lo speed is unknown, defaulting to 1000
[  341.790053][T18623] netlink: 'syz.1.3943': attribute type 4 has an invalid length.
[  341.796851][T10690] lo speed is unknown, defaulting to 1000
[  341.799398][T10690] syz0: Port: 1 Link ACTIVE
[  341.802329][T10690] lo speed is unknown, defaulting to 1000
[  342.626966][T18659] __nla_validate_parse: 1 callbacks suppressed
[  342.626982][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'.
[  342.898746][T18674] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3960'.
[  342.976045][T18680] netlink: 'syz.2.3964': attribute type 1 has an invalid length.
[  342.978501][T18680] netlink: 'syz.2.3964': attribute type 10 has an invalid length.
[  342.981488][T18680] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3964'.
[  342.987830][T18680] netlink: 'syz.2.3964': attribute type 1 has an invalid length.
[  343.015029][T18680] 8021q: adding VLAN 0 to HW filter on device bond33
[  343.257036][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'.
[  343.262909][T18705] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  343.273961][T18705] netlink: 'syz.0.3973': attribute type 10 has an invalid length.
[  343.277119][T18705] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  343.284694][T18705] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  343.299055][T18705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3973'.
[  343.304555][T18705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  343.308249][T18705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  343.464016][T18713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3976'.
[  343.469283][T18713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3976'.
[  343.530333][T18715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3977'.
[  343.552818][T18717] syzkaller0: entered promiscuous mode
[  343.554773][T18717] syzkaller0: entered allmulticast mode
[  343.610011][T18721] veth1: mtu greater than device maximum
[  344.164562][T18746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.167667][T18746] syzkaller0: entered promiscuous mode
[  344.170036][T18746] syzkaller0: entered allmulticast mode
[  344.186356][T18746] tipc: Resetting bearer <eth:syzkaller0>
[  344.190558][T18745] tipc: Resetting bearer <eth:syzkaller0>
[  344.204274][T18745] tipc: Disabling bearer <eth:syzkaller0>
[  344.347880][T18749] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3989'.
[  344.653897][T18767] batadv0: left allmulticast mode
[  344.655841][T18767] batadv0: left promiscuous mode
[  344.658001][T18767] bridge0: port 1(batadv0) entered disabled state
[  344.700708][T18767] bond16: (slave gretap3): Releasing active interface
[  344.724678][T18767] bond17: (slave bridge6): Releasing active interface
[  344.740936][T18767] bond26: (slave geneve5): Releasing active interface
[  344.775070][ T5872] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  344.778440][ T5872] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  344.783463][ T5872] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  344.786652][ T5872] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  344.867156][T18767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3994'.
[  344.870353][T18767] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  344.874664][T18767] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  344.963123][T18774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.987780][T18774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.993687][T18774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.858035][T18805] lo speed is unknown, defaulting to 1000
[  345.939131][T18809] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  345.952092][T18809] veth0_to_bridge: left allmulticast mode
[  345.954606][T18809] bridge0: port 1(veth0_to_bridge) entered disabled state
[  345.960625][T18809] veth0_to_bond: left allmulticast mode
[  345.965604][T18809] veth0_to_bond: left promiscuous mode
[  345.968196][T18809] bridge8: port 2(veth0_to_bond) entered disabled state
[  345.974426][T18809] veth29: left allmulticast mode
[  345.976462][T18809] veth29: left promiscuous mode
[  345.978723][T18809] bridge8: port 1(veth29) entered disabled state
[  345.993197][T18809] bond27: (slave veth39): Releasing active interface
[  346.033480][T18809] validate_nla: 7 callbacks suppressed
[  346.033502][T18809] netlink: 'syz.1.4007': attribute type 10 has an invalid length.
[  346.048141][T18809] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  346.064549][T18809] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  346.068632][T18809] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  348.388204][T18840] lo speed is unknown, defaulting to 1000
[  348.513233][T18845] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  348.525896][T18845] bond0: (slave wlan1): Releasing backup interface
[  348.539605][T18845] netlink: 'syz.0.4016': attribute type 10 has an invalid length.
[  348.547443][T18845] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  348.552871][T18845] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  348.559692][T18845] __nla_validate_parse: 2 callbacks suppressed
[  348.559701][T18845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4016'.
[  348.573827][T18845] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  348.576870][T18845] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  349.053574][T18864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4024'.
[  349.125353][T18866] lo speed is unknown, defaulting to 1000
[  349.720307][T18907] pimreg: entered allmulticast mode
[  349.868593][T18909] netlink: 'syz.2.4036': attribute type 10 has an invalid length.
[  349.924132][T18913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4036'.
[  349.932021][T18913] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.935785][T18913] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  349.965811][T18920] lo speed is unknown, defaulting to 1000
[  350.200843][T18931] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4042'.
[  350.208085][T18931] gretap0: entered promiscuous mode
[  350.339816][T18942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4045'.
[  350.647179][T18959] IPVS: ip_vs_add_dest(): server weight less than zero
[  350.660920][T18961] lo speed is unknown, defaulting to 1000
[  350.768800][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'.
[  350.808256][T18963] lo speed is unknown, defaulting to 1000
[  350.882663][T18974] pim6reg1: entered promiscuous mode
[  350.887008][T18974] pim6reg1: entered allmulticast mode
[  351.108700][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4059'.
[  351.175889][T18994] netlink: 'syz.1.4062': attribute type 9 has an invalid length.
[  351.179185][T18994] netlink: 'syz.1.4062': attribute type 9 has an invalid length.
[  351.294453][T19002] netlink: 'syz.1.4065': attribute type 9 has an invalid length.
[  351.299748][T19002] netlink: 'syz.1.4065': attribute type 9 has an invalid length.
[  351.597064][T19014] lo speed is unknown, defaulting to 1000
[  352.278816][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'.
[  352.284290][T19080] 8021q: VLANs not supported on nlmon0
[  352.496538][T19087] netlink: 'syz.1.4094': attribute type 1 has an invalid length.
[  352.499541][T19087] netlink: 'syz.1.4094': attribute type 10 has an invalid length.
[  352.507026][T19087] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4094'.
[  352.514310][T19087] netlink: 'syz.1.4094': attribute type 1 has an invalid length.
[  352.533392][T19087] 8021q: adding VLAN 0 to HW filter on device bond35
[  352.938652][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'.
[  352.942852][T19128] netlink: 'syz.2.4101': attribute type 13 has an invalid length.
[  352.945365][T19128] netlink: 'syz.2.4101': attribute type 17 has an invalid length.
[  352.947788][T19128] netlink: 'syz.2.4101': attribute type 27 has an invalid length.
[  353.025593][T19127] bond0: (slave wlan1): Releasing backup interface
[  353.065836][T19128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.133429][T19128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.175784][T19141] 8021q: adding VLAN 0 to HW filter on device bond38
[  353.916339][T19168] __nla_validate_parse: 172 callbacks suppressed
[  353.916359][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'.
[  353.944933][ T7686] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.945416][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'.
[  353.948787][ T7686] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.957586][ T7686] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.960747][ T7686] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.440804][T19199] syzkaller1: entered promiscuous mode
[  354.443589][T19199] syzkaller1: entered allmulticast mode
[  356.156637][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4139'.
[  356.912926][T19257] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4144'.
[  356.923528][T19257] batadv2: entered promiscuous mode
[  356.925575][T19257] batadv2: entered allmulticast mode
[  357.079317][T19263] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4146'.
[  357.150216][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4148'.
[  357.154457][T19271] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  357.159782][T19271] validate_nla: 5 callbacks suppressed
[  357.159795][T19271] netlink: 'syz.2.4148': attribute type 1 has an invalid length.
[  357.237313][T19272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4148'.
[  357.529451][T19286] IPVS: Error connecting to the multicast addr
[  357.762960][T19300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4158'.
[  357.856868][T19306] sock: sock_set_timeout: `syz.2.4162' (pid 19306) tries to set negative timeout
[  357.857585][T19307] sock: sock_set_timeout: `syz.2.4162' (pid 19307) tries to set negative timeout
[  357.913506][T19312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4163'.
[  358.098104][T19321] IPVS: ip_vs_add_dest(): server weight less than zero
[  358.633451][T19347] netlink: 'syz.1.4179': attribute type 9 has an invalid length.
[  358.639442][T19347] netlink: 'syz.1.4179': attribute type 9 has an invalid length.
[  358.695144][T19351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4180'.
[  360.015447][T19362] openvswitch: netlink: IP tunnel dst address not specified
[  360.239990][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4188'.
[  360.244795][T19374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4188'.
[  360.579586][T19406] gretap0: left promiscuous mode
[  360.588662][T19406] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  360.832166][T19420] pim6reg1: entered promiscuous mode
[  360.834536][T19420] pim6reg1: entered allmulticast mode
[  361.040527][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4207'.
[  361.303549][T19452] netlink: 'syz.1.4213': attribute type 1 has an invalid length.
[  361.306885][T19452] netlink: 'syz.1.4213': attribute type 10 has an invalid length.
[  361.310044][T19452] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4213'.
[  361.316624][T19452] netlink: 'syz.1.4213': attribute type 1 has an invalid length.
[  361.340695][T19452] 8021q: adding VLAN 0 to HW filter on device bond36
[  361.462922][T19459] lo speed is unknown, defaulting to 1000
[  361.664203][T19465] netlink: 'syz.2.4217': attribute type 1 has an invalid length.
[  361.667235][T19465] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4217'.
[  361.673484][T19465] netlink: 'syz.2.4217': attribute type 1 has an invalid length.
[  361.753615][T19465] bond35: (slave vxcan5): The slave device specified does not support setting the MAC address
[  361.758801][T19465] bond35: (slave vxcan5): Error -95 calling set_mac_address
[  362.028893][T19483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4222'.
[  362.033472][T19484] : renamed from batadv_slave_1 (while UP)
[  362.194292][T19500] netlink: 'syz.0.4226': attribute type 1 has an invalid length.
[  362.295772][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4230'.
[  362.303756][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4230'.
[  362.318406][T19518] netlink: 'syz.2.4233': attribute type 10 has an invalid length.
[  362.396279][T19526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4234'.
[  363.090504][T19545] netlink: 'syz.2.4240': attribute type 3 has an invalid length.
[  363.099463][T19545] siw: device registration error -23
[  363.202586][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  363.298426][T19555] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  363.300756][T19555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4245'.
[  363.476153][T19571] tipc: Trying to set illegal importance in message
[  365.481623][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4267'.
[  365.603904][T19640] netlink: 'syz.0.4272': attribute type 9 has an invalid length.
[  365.606372][T19640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4272'.
[  365.898703][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'.
[  365.944656][T19659] syzkaller1: entered promiscuous mode
[  365.946563][T19659] syzkaller1: entered allmulticast mode
[  366.346475][T19672] bridge0: failed insert local address into bridge forwarding table
[  366.384391][T19672] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  366.546960][T19687] netlink: 'syz.1.4291': attribute type 6 has an invalid length.
[  366.674128][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4295'.
[  366.847410][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'.
[  366.850215][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4296'.
[  366.853337][T19698] netlink: 'syz.0.4296': attribute type 19 has an invalid length.
[  366.917530][T19705] team_slave_0: entered promiscuous mode
[  366.920298][T19705] team_slave_0: entered allmulticast mode
[  366.964358][T19712] netlink: 'syz.0.4300': attribute type 1 has an invalid length.
[  366.981934][T19712] 8021q: adding VLAN 0 to HW filter on device bond40
[  366.988646][T19707] openvswitch: netlink: Message has 4 unknown bytes.
[  366.994610][T19707] IPVS: ip_vs_add_dest(): server weight less than zero
[  367.266787][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4307'.
[  367.327551][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4308'.
[  367.334534][T19742] netlink: 'syz.1.4309': attribute type 9 has an invalid length.
[  367.337596][T19742] netlink: 'syz.1.4309': attribute type 9 has an invalid length.
[  367.715477][T19761] netlink: 'syz.2.4314': attribute type 9 has an invalid length.
[  367.719181][   T33] audit: type=1800 audit(1755037630.743:9): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4314" name="memory.events" dev="tmpfs" ino=7080 res=0 errno=0
[  367.944408][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4319'.
[  367.950817][T19765] xfrm2: entered promiscuous mode
[  367.952814][T19765] xfrm2: entered allmulticast mode
[  368.029757][T19771] syzkaller1: entered promiscuous mode
[  368.036771][T19771] syzkaller1: entered allmulticast mode
[  368.419339][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4329'.
[  368.515853][T19805] netlink: 'syz.0.4332': attribute type 5 has an invalid length.
[  368.519000][T19804] syzkaller1: entered promiscuous mode
[  368.520971][T19804] syzkaller1: entered allmulticast mode
[  369.197906][T19844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.220713][T19844] lo speed is unknown, defaulting to 1000
[  369.578540][T19861] netlink: 'syz.1.4348': attribute type 1 has an invalid length.
[  369.582270][T19861] netlink: 'syz.1.4348': attribute type 10 has an invalid length.
[  369.587516][T19861] netlink: 'syz.1.4348': attribute type 1 has an invalid length.
[  369.613284][T19861] 8021q: adding VLAN 0 to HW filter on device bond37
[  369.691569][T19867] vlan1: entered allmulticast mode
[  369.693333][T19867] bond38: entered allmulticast mode
[  370.129021][T19880] team0: Mode changed to "activebackup"
[  370.446879][T19892] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.106774][T19927] netlink: 'syz.2.4369': attribute type 13 has an invalid length.
[  371.110342][T19927] netlink: 'syz.2.4369': attribute type 17 has an invalid length.
[  371.194097][T19927] bond31: left promiscuous mode
[  371.226130][T19927] 8021q: adding VLAN 0 to HW filter on device bond34
[  371.270244][T19927] 8021q: adding VLAN 0 to HW filter on device bond35
[  371.286876][T19927] xfrm2: left promiscuous mode
[  371.289031][T19927] xfrm2: left allmulticast mode
[  371.295684][   T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  371.310152][   T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  371.317795][   T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  371.328588][   T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  371.334164][T19928] lo speed is unknown, defaulting to 1000
[  371.643504][T19935] netlink: 'syz.0.4370': attribute type 10 has an invalid length.
[  371.715079][T19939] : entered promiscuous mode
[  372.013808][T19953] 8021q: adding VLAN 0 to HW filter on device bond41
[  372.042421][T19953] __nla_validate_parse: 5 callbacks suppressed
[  372.042440][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'.
[  372.048687][T19953] bond41: entered promiscuous mode
[  372.158287][T19960] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4378'.
[  372.209912][T19963] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  372.380852][T19927] syz.2.4369 (19927) used greatest stack depth: 18880 bytes left
[  372.521983][T19972] lo speed is unknown, defaulting to 1000
[  372.910093][T19989] validate_nla: 2 callbacks suppressed
[  372.910110][T19989] netlink: 'syz.1.4387': attribute type 1 has an invalid length.
[  373.449798][T20017] sock: sock_set_timeout: `syz.2.4395' (pid 20017) tries to set negative timeout
[  373.508415][T20022] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001
[  373.567545][T20029] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4399'.
[  373.837327][T20049] netlink: 'syz.1.4403': attribute type 1 has an invalid length.
[  374.150010][T20074] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4414'.
[  374.157271][T20075] netlink: 'syz.1.4414': attribute type 6 has an invalid length.
[  374.742863][T20103] netlink: 'syz.1.4423': attribute type 83 has an invalid length.
[  374.830766][T20107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4425'.
[  374.894468][T20107] netlink: 'syz.1.4425': attribute type 1 has an invalid length.
[  374.940027][T20112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4426'.
[  375.239624][T20124] IPVS: ip_vs_add_dest(): server weight less than zero
[  375.267910][T20126] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  375.563512][T20138] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.612454][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4438'.
[  375.616415][T20140] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4438'.
[  375.620159][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4438'.
[  375.632961][T20138] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.676600][T20138] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.745162][T20138] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.752464][T20144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4439'.
[  375.803131][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.814688][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.832012][ T5872] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  375.847844][ T5738] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  375.875973][T20150] netlink: 'syz.0.4440': attribute type 9 has an invalid length.
[  375.879178][T20150] netlink: 'syz.0.4440': attribute type 9 has an invalid length.
[  376.248147][T20166] netlink: 'syz.2.4446': attribute type 9 has an invalid length.
[  376.280246][T20166] hsr0: entered promiscuous mode
[  376.284529][T20166] macvlan0: entered promiscuous mode
[  376.286793][T20166] macvlan0: entered allmulticast mode
[  376.288912][T20166] hsr0: entered allmulticast mode
[  376.290903][T20166] hsr_slave_0: entered allmulticast mode
[  376.293553][T20166] hsr_slave_1: entered allmulticast mode
[  376.295575][T20170] netlink: 'syz.0.4447': attribute type 9 has an invalid length.
[  376.305448][T20170] netlink: 'syz.0.4447': attribute type 9 has an invalid length.
[  376.418689][T20177] 8021q: adding VLAN 0 to HW filter on device bond25
[  376.426572][T20178] syz.0.4448 uses old SIOCAX25GETINFO
[  376.505132][T20184] sctp: [Deprecated]: syz.2.4449 (pid 20184) Use of int in max_burst socket option.
[  376.505132][T20184] Use struct sctp_assoc_value instead
[  376.786006][T20202] 8021q: adding VLAN 0 to HW filter on device bond36
[  376.931850][T20217] team0: Port device 0! added
[  376.940860][T20217] team0: Port device 0! removed
[  376.947698][T20217] bond0: (slave 0!): Enslaving as an active interface with an up link
[  377.087832][T20226] __nla_validate_parse: 1 callbacks suppressed
[  377.087845][T20226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4465'.
[  377.127592][T20231] bond38: option mode: unable to set because the bond device is up
[  377.223986][T20238] bond38: option mode: unable to set because the bond device is up
[  377.384368][T20250] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  377.392321][T20250] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4476'.
[  377.496867][T20258] syzkaller1: entered promiscuous mode
[  377.499530][T20258] syzkaller1: entered allmulticast mode
[  377.692498][T20272] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4479'.
[  377.717837][T20272] 8021q: adding VLAN 0 to HW filter on device bond37
[  377.969203][T20296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4482'.
[  378.001913][T20290] validate_nla: 7 callbacks suppressed
[  378.001936][T20290] netlink: 'syz.2.4481': attribute type 10 has an invalid length.
[  378.009569][T20290] netlink: 'syz.2.4481': attribute type 10 has an invalid length.
[  378.086274][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.227608][T20322] netlink: 'syz.1.4490': attribute type 10 has an invalid length.
[  378.356072][T20336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4493'.
[  378.410303][T20334] netlink: 'syz.1.4495': attribute type 10 has an invalid length.
[  378.416874][T20334] netlink: 'syz.1.4495': attribute type 10 has an invalid length.
[  378.600761][T20355] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.4503'.
[  378.604928][T20355] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  378.696628][T20361] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.707398][T20360] netlink: 'syz.1.4505': attribute type 10 has an invalid length.
[  378.825653][T20373] C: renamed from lo (while UP)
[  378.828856][T20373] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  378.939053][T20379] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4509'.
[  379.158258][T20389] lo speed is unknown, defaulting to 1000
[  379.266241][T20398] hsr0: entered promiscuous mode
[  379.269038][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4515'.
[  379.277244][T20398] hsr_slave_0: left promiscuous mode
[  379.297643][T20398] hsr0 (unregistering): left promiscuous mode
[  379.444674][T20408] openvswitch: netlink: Multiple metadata blocks provided
[  379.903190][T20428] IPVS: length: 136 != 8
[  380.498755][T20456] netlink: 'syz.2.4535': attribute type 1 has an invalid length.
[  380.526936][T20456] 8021q: adding VLAN 0 to HW filter on device bond38
[  380.546107][T20456] bond38: entered promiscuous mode
[  380.595423][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4537'.
[  380.713597][T20469] Unsupported ieee802154 address type: 0
[  381.909961][T20513] netlink: 'syz.1.4552': attribute type 3 has an invalid length.
[  381.914208][T20513] netlink: 'syz.1.4552': attribute type 3 has an invalid length.
[  382.018788][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'.
[  382.170620][T20528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4554'.
[  382.523637][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4559'.
[  382.648061][T20551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4562'.
[  382.696079][T20553] vxcan1: entered allmulticast mode
[  382.785608][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4566'.
[  383.053076][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4567'.
[  383.194235][T20583] netlink: 'syz.1.4572': attribute type 9 has an invalid length.
[  383.196694][T20583] netlink: 'syz.1.4572': attribute type 9 has an invalid length.
[  383.399111][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4579'.
[  383.403917][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4579'.
[  383.484528][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'.
[  383.488686][T20615] netlink: 'syz.0.4580': attribute type 9 has an invalid length.
[  383.492933][T20615] netlink: 'syz.0.4580': attribute type 9 has an invalid length.
[  383.515916][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4578'.
[  383.643958][T20630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4586'.
[  383.758074][T20624] lo speed is unknown, defaulting to 1000
[  384.075947][T20663] netlink: 'syz.1.4593': attribute type 5 has an invalid length.
[  384.085213][T20663] geneve4: entered promiscuous mode
[  384.088329][T20663] geneve4: entered allmulticast mode
[  384.094599][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  384.103721][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  384.115961][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  384.128405][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  384.458368][T20691] xfrm1: entered promiscuous mode
[  384.460528][T20691] xfrm1: entered allmulticast mode
[  384.611631][T20701] netlink: 'syz.1.4605': attribute type 1 has an invalid length.
[  384.746365][T20717] netlink: 'syz.2.4609': attribute type 26 has an invalid length.
[  384.866924][T20725] netlink: 'syz.1.4610': attribute type 1 has an invalid length.
[  384.869458][T20725] netlink: 'syz.1.4610': attribute type 10 has an invalid length.
[  384.877145][T20725] netlink: 'syz.1.4610': attribute type 1 has an invalid length.
[  384.897491][T20725] 8021q: adding VLAN 0 to HW filter on device bond39
[  384.986305][T20731] lo speed is unknown, defaulting to 1000
[  386.251407][T20799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.263639][T20799] syzkaller0: entered promiscuous mode
[  386.265399][T20799] syzkaller0: entered allmulticast mode
[  386.271869][T20799] tipc: Resetting bearer <eth:syzkaller0>
[  386.273952][T20794] lo speed is unknown, defaulting to 1000
[  386.276577][T20799] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  386.282740][T20799] netdevsim0: entered promiscuous mode
[  386.284659][T20799] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  386.298484][T20798] tipc: Resetting bearer <eth:syzkaller0>
[  386.390822][T20798] tipc: Disabling bearer <eth:syzkaller0>
[  386.469190][T20808] pimreg: entered allmulticast mode
[  386.472846][T20808] pimreg: left allmulticast mode
[  386.535532][T20815] IPVS: Error connecting to the multicast addr
[  386.541449][T20810] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.545014][T20810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  386.628378][T20810] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.639571][T20810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  386.768273][T20810] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.771692][T20810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  386.968630][T20810] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  386.974602][T20810] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  386.990564][T20829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  387.064975][ T5860] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  387.067694][ T5860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  387.080584][ T5860] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  387.084488][ T5860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  387.109451][ T5860] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  387.112221][ T5860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  387.128619][ T5860] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  387.131262][ T5860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  387.394841][T20853] lo speed is unknown, defaulting to 1000
[  388.159298][T20892] 8021q: adding VLAN 0 to HW filter on device bond40
[  388.179137][T20892] bond40: entered promiscuous mode
[  388.410949][T20913] validate_nla: 4 callbacks suppressed
[  388.415166][T20913] netlink: 'syz.1.4670': attribute type 10 has an invalid length.
[  388.514982][T20920] __nla_validate_parse: 15 callbacks suppressed
[  388.514998][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4673'.
[  388.519810][T20920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4673'.
[  388.600890][T20924] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4675'.
[  388.814097][T20935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4680'.
[  388.876070][T20935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4680'.
[  390.018112][T21007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4704'.
[  390.098015][T21010] netlink: 'syz.0.4705': attribute type 10 has an invalid length.
[  390.100518][T21010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4705'.
[  390.103463][T21010] !: entered promiscuous mode
[  390.106082][T21010] bond0: (slave 0!): Releasing backup interface
[  390.110929][T21010] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  390.248568][T21029] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4713'.
[  390.252287][T21029] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4713'.
[  390.255317][T21029] netlink: 'syz.0.4713': attribute type 6 has an invalid length.
[  390.258166][T21029] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4713'.
[  390.265929][T21029] netlink: 'syz.0.4713': attribute type 21 has an invalid length.
[  390.268351][T21029] netlink: 'syz.0.4713': attribute type 22 has an invalid length.
[  390.270746][T21029] netlink: 'syz.0.4713': attribute type 23 has an invalid length.
[  390.866446][T21085] lo speed is unknown, defaulting to 1000
[  390.894511][T21087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.897228][T21087] syzkaller0: entered promiscuous mode
[  390.899027][T21087] syzkaller0: entered allmulticast mode
[  390.917784][T21087] tipc: Resetting bearer <eth:syzkaller0>
[  390.923036][T21087] nbd: must specify an index to disconnect
[  390.925305][T21087] netlink: 'syz.2.4736': attribute type 9 has an invalid length.
[  390.927962][T21087] netlink: 'syz.2.4736': attribute type 9 has an invalid length.
[  390.934253][T21086] tipc: Resetting bearer <eth:syzkaller0>
[  390.944429][T21086] tipc: Disabling bearer <eth:syzkaller0>
[  391.157871][T21099] netlink: 'syz.2.4741': attribute type 10 has an invalid length.
[  391.915826][T21148] netlink: 'syz.1.4756': attribute type 7 has an invalid length.
[  391.937746][T21148] : entered promiscuous mode
[  392.292383][T21186] 8021q: adding VLAN 0 to HW filter on device bond41
[  392.298266][T21183] lo speed is unknown, defaulting to 1000
[  392.743524][T21212] tun0: tun_chr_ioctl cmd 2148553947
[  393.167385][T21251] 8021q: adding VLAN 0 to HW filter on device bond39
[  393.175732][T21251] bond39: entered promiscuous mode
[  393.195904][T21257] 8021q: adding VLAN 0 to HW filter on device bond42
[  393.500567][T21282] lo speed is unknown, defaulting to 1000
[  393.523659][T21284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.526771][T21284] syzkaller0: entered promiscuous mode
[  393.528602][T21284] syzkaller0: entered allmulticast mode
[  393.558042][T21285] tipc: Resetting bearer <eth:syzkaller0>
[  393.613675][T21283] tipc: Resetting bearer <eth:syzkaller0>
[  393.648431][T21283] tipc: Disabling bearer <eth:syzkaller0>
[  393.837793][T21304] validate_nla: 8 callbacks suppressed
[  393.837806][T21304] netlink: 'syz.2.4803': attribute type 10 has an invalid length.
[  393.886773][T21306] __nla_validate_parse: 18 callbacks suppressed
[  393.886785][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4805'.
[  393.996763][T21319] netlink: 'syz.0.4810': attribute type 1 has an invalid length.
[  394.027312][T21319] 8021q: adding VLAN 0 to HW filter on device bond43
[  394.086281][T21319] 8021q: adding VLAN 0 to HW filter on device bond43
[  394.089503][T21319] bond43: (slave vxcan1): The slave device specified does not support setting the MAC address
[  394.096560][T21319] bond43: (slave vxcan1): Error -95 calling set_mac_address
[  394.119417][T21325] bond43: (slave bridge6): Enslaving as an active interface with a down link
[  394.199377][T21328] netlink: 'syz.2.4813': attribute type 2 has an invalid length.
[  394.358436][T21340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4817'.
[  394.362446][T21340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4817'.
[  394.365468][T21340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4817'.
[  394.368326][T21340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4817'.
[  394.434957][T21342] syzkaller1: entered promiscuous mode
[  394.438239][T21342] syzkaller1: entered allmulticast mode
[  394.580783][T21357] IPv6: NLM_F_REPLACE set, but no existing node found!
[  394.589120][T21349] netlink: 'syz.0.4818': attribute type 6 has an invalid length.
[  394.604547][T21357] pim6reg1: entered promiscuous mode
[  394.606919][T21357] pim6reg1: entered allmulticast mode
[  395.335560][T21370] hsr0: left allmulticast mode
[  395.337608][T21370] hsr_slave_0: left allmulticast mode
[  395.342991][T21370] hsr_slave_1: left allmulticast mode
[  395.345124][T21370] macvlan0: left promiscuous mode
[  395.347008][T21370] macvlan0: left allmulticast mode
[  395.356312][T21370] bond38: left promiscuous mode
[  395.358934][T21370] bond39: left promiscuous mode
[  395.360826][ T5738] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.364263][ T5738] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.366942][ T5738] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  395.370876][ T5738] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  395.379238][ T5738] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.388867][ T5738] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.393767][ T5738] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  395.396432][ T5738] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  395.399477][ T5738] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.404114][ T5738] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.406861][ T5738] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  395.409603][ T5738] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  395.416118][ T5738] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.418678][ T5738] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  395.424154][ T5738] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  395.426739][ T5738] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  395.437599][T21385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4834'.
[  395.493353][T21387] lo speed is unknown, defaulting to 1000
[  395.585813][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4835'.
[  395.608948][T21395] netlink: 'syz.0.4838': attribute type 1 has an invalid length.
[  395.619889][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4838'.
[  395.652179][T21397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4839'.
[  395.656506][T21395] IPVS: ip_vs_add_dest(): server weight less than zero
[  396.041065][T21428] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  396.165537][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4852'.
[  396.183558][T21436] netlink: 'syz.1.4852': attribute type 1 has an invalid length.
[  396.187148][T21436] netlink: 'syz.1.4852': attribute type 1 has an invalid length.
[  396.329905][T21442] lo speed is unknown, defaulting to 1000
[  397.061430][T21464] lo speed is unknown, defaulting to 1000
[  397.437913][T21489] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  397.583738][T21499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.589959][T21499] syzkaller0: entered promiscuous mode
[  397.593856][T21499] syzkaller0: entered allmulticast mode
[  397.608244][T21499] tipc: Resetting bearer <eth:syzkaller0>
[  397.615997][T21498] tipc: Resetting bearer <eth:syzkaller0>
[  397.627529][T21498] tipc: Disabling bearer <eth:syzkaller0>
[  397.890722][T21521] tap0: tun_chr_ioctl cmd 1074025677
[  397.893034][T21521] tap0: linktype set to 804
[  397.927456][T21523] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  398.081971][ T5844] Bluetooth: hci0: command tx timeout
[  398.090444][T21535] netlink: 'syz.1.4887': attribute type 5 has an invalid length.
[  398.126125][T21535] lo speed is unknown, defaulting to 1000
[  398.220545][T21541] : entered promiscuous mode
[  398.386237][T21550] bridge10: entered promiscuous mode
[  398.450842][T21552] netlink: 'syz.0.4894': attribute type 1 has an invalid length.
[  398.483727][T21552] netlink: 'syz.0.4894': attribute type 10 has an invalid length.
[  398.537714][T21552] 8021q: adding VLAN 0 to HW filter on device bond45
[  398.850689][T21589] validate_nla: 61 callbacks suppressed
[  398.850704][T21589] netlink: 'syz.0.4905': attribute type 13 has an invalid length.
[  398.864012][T21589] netlink: 'syz.0.4905': attribute type 13 has an invalid length.
[  398.869688][T21589] netlink: 'syz.0.4905': attribute type 13 has an invalid length.
[  398.885929][T21589] netlink: 'syz.0.4905': attribute type 13 has an invalid length.
[  398.888989][T21589] netlink: 'syz.0.4905': attribute type 13 has an invalid length.
[  398.998199][T21603] bond43: (slave bridge6): Releasing active interface
[  399.000761][T21604] netlink: 'syz.2.4910': attribute type 10 has an invalid length.
[  399.107908][T21611] vlan1: entered promiscuous mode
[  399.113262][T21611] bond0: entered promiscuous mode
[  399.179346][T21614] __nla_validate_parse: 144 callbacks suppressed
[  399.179356][T21614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4913'.
[  399.445555][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4921'.
[  399.509690][T21639] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4921'.
[  399.571279][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4923'.
[  400.052082][T21666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4931'.
[  401.648297][T21691] bond0: entered promiscuous mode
[  401.650647][T21691] batadv0: entered promiscuous mode
[  401.654456][T21691] debugfs: 'hsr1' already exists in 'hsr'
[  401.656254][T21691] Cannot create hsr debugfs directory
[  401.658043][T21691] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  401.661584][T21691] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  401.664734][T21691] hsr1: entered allmulticast mode
[  401.666313][T21691] bond0: entered allmulticast mode
[  401.667890][T21691] batadv0: entered allmulticast mode
[  401.670400][T21691] 8021q: adding VLAN 0 to HW filter on device hsr1
[  401.675161][T21691] bond0: left promiscuous mode
[  401.677071][T21691] batadv0: left promiscuous mode
[  401.734041][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4943'.
[  401.910895][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4947'.
[  401.935850][T21724] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4949'.
[  401.978791][T21717] lo speed is unknown, defaulting to 1000
[  402.101349][T21729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4950'.
[  402.157908][T21732] sctp: [Deprecated]: syz.0.4951 (pid 21732) Use of int in maxseg socket option.
[  402.157908][T21732] Use struct sctp_assoc_value instead
[  402.430781][T21747] IPVS: ip_vs_add_dest(): server weight less than zero
[  402.521369][T21749] nbd0: detected capacity change from 0 to 63
[  402.523778][T21750] block nbd0: NBD_DISCONNECT
[  402.526890][T21750] block nbd0: Disconnected due to user request.
[  402.529539][T20641] blk_print_req_error: 137 callbacks suppressed
[  402.529549][T20641] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.532374][T21750] block nbd0: shutting down sockets
[  402.537021][T20641] buffer_io_error: 138 callbacks suppressed
[  402.537030][T20641] Buffer I/O error on dev nbd0, logical block 0, async page read
[  402.547825][T20641] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.550737][T20641] Buffer I/O error on dev nbd0, logical block 1, async page read
[  402.554712][T20641] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.558967][T20641] Buffer I/O error on dev nbd0, logical block 2, async page read
[  402.561666][T20641] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.569078][T20641] Buffer I/O error on dev nbd0, logical block 3, async page read
[  402.576810][T20641] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.579985][T20641] Buffer I/O error on dev nbd0, logical block 0, async page read
[  402.582953][T20641] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.585766][T20641] Buffer I/O error on dev nbd0, logical block 1, async page read
[  402.588243][T20641] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.591542][T20641] Buffer I/O error on dev nbd0, logical block 2, async page read
[  402.594084][T20641] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.596804][T20641] Buffer I/O error on dev nbd0, logical block 3, async page read
[  402.599210][T20641] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.602412][T20641] Buffer I/O error on dev nbd0, logical block 0, async page read
[  402.604942][T20641] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  402.607684][T20641] Buffer I/O error on dev nbd0, logical block 1, async page read
[  402.613462][T20641] ldm_validate_partition_table(): Disk read failed.
[  402.616550][T20641] Dev nbd0: unable to read RDB block 0
[  402.619777][T20641]  nbd0: unable to read partition table
[  402.627187][T20641] ldm_validate_partition_table(): Disk read failed.
[  402.630147][T20641] Dev nbd0: unable to read RDB block 0
[  402.633109][T20641]  nbd0: unable to read partition table
[  402.691946][T21761] netlink: 'syz.0.4960': attribute type 1 has an invalid length.
[  402.747128][T21761] 8021q: adding VLAN 0 to HW filter on device bond46
[  402.896011][T21771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4962'.
[  403.013283][T21774] bond0: entered promiscuous mode
[  403.015524][T21774] batadv0: entered promiscuous mode
[  403.017693][T21774] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  403.020749][T21774] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  403.026589][T21774] hsr0: entered allmulticast mode
[  403.029401][T21774] bond0: entered allmulticast mode
[  403.031565][T21774] batadv0: entered allmulticast mode
[  403.033640][T21774] 8021q: adding VLAN 0 to HW filter on device hsr0
[  403.036641][T21774] bond0: left promiscuous mode
[  403.038819][T21774] batadv0: left promiscuous mode
[  403.276561][T21787] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  403.279063][T21787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.688274][T21808] bond0: entered promiscuous mode
[  403.690581][T21808] batadv0: entered promiscuous mode
[  403.694594][T21808] debugfs: 'hsr1' already exists in 'hsr'
[  403.696597][T21808] Cannot create hsr debugfs directory
[  403.698419][T21808] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  403.702939][T21808] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  403.706221][T21808] hsr1: entered allmulticast mode
[  403.708427][T21808] 8021q: adding VLAN 0 to HW filter on device hsr1
[  403.712528][T21808] bond0: left promiscuous mode
[  403.715865][T21808] batadv0: left promiscuous mode
[  403.905269][T21828] netlink: 'syz.1.4980': attribute type 1 has an invalid length.
[  403.942170][T21828] 8021q: adding VLAN 0 to HW filter on device bond44
[  404.046431][T21840] bond0: entered promiscuous mode
[  404.048749][T21840] batadv0: entered promiscuous mode
[  404.051501][T21840] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  404.054776][T21840] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  404.057978][T21840] hsr0: entered allmulticast mode
[  404.059914][T21840] 8021q: adding VLAN 0 to HW filter on device hsr0
[  404.064450][T21840] bond0: left promiscuous mode
[  404.066499][T21840] batadv0: left promiscuous mode
[  404.159589][T21844] syzkaller1: entered promiscuous mode
[  404.163942][T21844] syzkaller1: entered allmulticast mode
[  404.165963][T21846] netlink: 'syz.1.4986': attribute type 9 has an invalid length.
[  404.169625][T21846] netlink: 'syz.1.4986': attribute type 9 has an invalid length.
[  404.733583][T21883] netlink: 'syz.2.4999': attribute type 1 has an invalid length.
[  404.733639][T21884] netlink: 'syz.2.4999': attribute type 1 has an invalid length.
[  404.992114][T21899] __nla_validate_parse: 4 callbacks suppressed
[  404.992126][T21899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5004'.
[  405.082919][T21903] ip6gre3: entered allmulticast mode
[  405.115663][T21907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'.
[  405.118425][T21907] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  405.298607][T21922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5011'.
[  405.505839][T21935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.555281][T21937] netlink: 'syz.1.5016': attribute type 1 has an invalid length.
[  405.557935][T21937] netlink: 'syz.1.5016': attribute type 10 has an invalid length.
[  405.560407][T21937] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5016'.
[  405.569387][T21937] netlink: 'syz.1.5016': attribute type 1 has an invalid length.
[  405.602202][T21937] 8021q: adding VLAN 0 to HW filter on device bond45
[  406.052295][T21973] netlink: 'syz.2.5025': attribute type 1 has an invalid length.
[  406.055500][T21973] netlink: 'syz.2.5025': attribute type 10 has an invalid length.
[  406.058160][T21973] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5025'.
[  406.095802][T21973] 8021q: adding VLAN 0 to HW filter on device bond41
[  406.125508][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5027'.
[  406.199443][T21982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.205953][T21982] syzkaller0: entered promiscuous mode
[  406.208161][T21982] syzkaller0: entered allmulticast mode
[  406.215533][T21982] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  406.248621][T21982] tipc: Resetting bearer <eth:syzkaller0>
[  406.254482][T21981] tipc: Resetting bearer <eth:syzkaller0>
[  406.270731][T21981] tipc: Disabling bearer <eth:syzkaller0>
[  406.278244][T21986] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  406.335647][T21992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5032'.
[  406.880071][T22028] syzkaller0: entered promiscuous mode
[  406.882196][T22028] syzkaller0: entered allmulticast mode
[  408.526235][T22060] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5050'.
[  408.533017][T22060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5050'.
[  408.586147][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5051'.
[  408.880785][T22082] 0: left allmulticast mode
[  408.887289][T22082] hsr_slave_0: left allmulticast mode
[  408.897417][T22082] bond46 (unregistering): Released all slaves
[  409.297449][T22105] IPv6: Can't replace route, no match found
[  409.681734][T22137] validate_nla: 4 callbacks suppressed
[  409.681745][T22137] netlink: 'syz.1.5078': attribute type 3 has an invalid length.
[  409.685846][T22137] netlink: 'syz.1.5078': attribute type 1 has an invalid length.
[  410.007766][T22153] __nla_validate_parse: 5 callbacks suppressed
[  410.007777][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5085'.
[  410.024200][T22153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5085'.
[  410.187316][T22164] bond0: entered promiscuous mode
[  410.190141][T22164] batadv0: entered promiscuous mode
[  410.194941][T22164] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  410.198161][T22164] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  410.202222][T22164] hsr0: entered allmulticast mode
[  410.204238][T22164] 8021q: adding VLAN 0 to HW filter on device hsr0
[  410.207180][T22164] bond0: left promiscuous mode
[  410.209231][T22164] batadv0: left promiscuous mode
[  410.672383][T22197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5100'.
[  410.712952][T22199] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4)
[  410.923599][T22209] lo speed is unknown, defaulting to 1000
[  411.380616][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5104'.
[  411.785754][T22251] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5116'.
[  411.985223][T22274] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  412.066183][T22278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5125'.
[  412.492952][T22317] netlink: 'syz.1.5135': attribute type 1 has an invalid length.
[  412.495535][T22317] netlink: 'syz.1.5135': attribute type 10 has an invalid length.
[  412.497882][T22317] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5135'.
[  412.504618][T22317] netlink: 'syz.1.5135': attribute type 1 has an invalid length.
[  412.523994][T22317] 8021q: adding VLAN 0 to HW filter on device bond46
[  412.664473][T22326] pim6reg1: entered promiscuous mode
[  412.666559][T22326] pim6reg1: entered allmulticast mode
[  412.876496][T22343] netlink: 'syz.0.5145': attribute type 1 has an invalid length.
[  412.938550][T22351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5147'.
[  412.966836][T22356] netlink: 'syz.2.5148': attribute type 10 has an invalid length.
[  413.015168][T22359] netlink: 'syz.0.5149': attribute type 1 has an invalid length.
[  413.037329][T22359] 8021q: adding VLAN 0 to HW filter on device bond47
[  413.046945][T22360] pim6reg1: entered promiscuous mode
[  413.048811][T22360] pim6reg1: entered allmulticast mode
[  413.072623][T22359] vlan2: entered promiscuous mode
[  413.074588][T22359] bond47: entered promiscuous mode
[  413.076679][T22359] vlan2: entered allmulticast mode
[  413.078679][T22359] bond47: entered allmulticast mode
[  413.137574][T22372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5152'.
[  413.205703][T22380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5155'.
[  413.317539][T22385] syzkaller0: entered promiscuous mode
[  413.319682][T22385] syzkaller0: entered allmulticast mode
[  413.479424][T22395] netlink: 'syz.0.5158': attribute type 1 has an invalid length.
[  414.620770][T22457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.627164][T22450] netlink: 'syz.0.5177': attribute type 142 has an invalid length.
[  414.637725][T22449] tipc: Disabling bearer <eth:syzkaller0>
[  414.868371][T22469] pim6reg1: entered promiscuous mode
[  414.870434][T22469] pim6reg1: entered allmulticast mode
[  415.042660][T22489] netlink: 'syz.2.5193': attribute type 1 has an invalid length.
[  415.045234][T22489] netlink: 'syz.2.5193': attribute type 10 has an invalid length.
[  415.047633][T22489] __nla_validate_parse: 1 callbacks suppressed
[  415.047640][T22489] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5193'.
[  415.056429][T22489] netlink: 'syz.2.5193': attribute type 1 has an invalid length.
[  415.075575][T22489] 8021q: adding VLAN 0 to HW filter on device bond42
[  415.194634][T22500] vxcan4: entered promiscuous mode
[  415.275736][T22504] netlink: 'syz.2.5199': attribute type 21 has an invalid length.
[  415.614892][T22526] netlink: 'syz.2.5207': attribute type 1 has an invalid length.
[  415.617359][T22526] netlink: 'syz.2.5207': attribute type 10 has an invalid length.
[  415.620231][T22526] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5207'.
[  415.998340][T22551] netlink: 'syz.0.5216': attribute type 1 has an invalid length.
[  416.000953][T22551] netlink: 'syz.0.5216': attribute type 2 has an invalid length.
[  416.119455][T22554] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  416.172287][T22557] lo speed is unknown, defaulting to 1000
[  416.384744][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5219'.
[  416.396397][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5219'.
[  416.400891][T22565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5219'.
[  416.775814][T22590] lo speed is unknown, defaulting to 1000
[  416.989153][T22596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5225'.
[  417.060723][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5225'.
[  417.285083][T22605] netlink: 'syz.1.5229': attribute type 10 has an invalid length.
[  417.843738][T22628] netlink: 'syz.2.5235': attribute type 1 has an invalid length.
[  417.870495][T22628] 8021q: adding VLAN 0 to HW filter on device bond43
[  417.889087][T22628] bond43: (slave ip6erspan1): making interface the new active one
[  417.894287][T22628] bond43: (slave ip6erspan1): Enslaving as an active interface with an up link
[  418.245545][T22644] syzkaller1: entered promiscuous mode
[  418.247240][T22644] syzkaller1: entered allmulticast mode
[  418.250042][T22644] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  418.456397][T22659] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5246'.
[  418.493920][T22659] 8021q: adding VLAN 0 to HW filter on device bond47
[  418.525705][T22668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5247'.
[  418.529095][T22668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5247'.
[  418.655374][T22677] syzkaller0: entered promiscuous mode
[  418.657201][T22677] syzkaller0: entered allmulticast mode
[  418.659614][T22677] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  418.709112][T22677] 8021q: adding VLAN 0 to HW filter on device bond44
[  418.970274][T22710] lo speed is unknown, defaulting to 1000
[  419.077741][T22716] sit7: entered promiscuous mode
[  419.327311][T22730] sock: sock_set_timeout: `syz.0.5265' (pid 22730) tries to set negative timeout
[  420.544825][T22760] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.548937][T22760] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  420.604327][T22760] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.608297][T22760] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  420.690522][T22760] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.697373][T22760] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  420.765716][T22760] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.769863][T22760] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  420.867667][ T5860] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.874535][ T5860] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  420.891453][ T5860] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.894176][ T5860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  420.915210][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.919630][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  420.940947][ T7686] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  420.944658][ T7686] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  421.126671][T22790] __nla_validate_parse: 6 callbacks suppressed
[  421.126685][T22790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5283'.
[  421.133193][T22790] validate_nla: 6 callbacks suppressed
[  421.133203][T22790] netlink: 'syz.2.5283': attribute type 4 has an invalid length.
[  421.298520][T22801] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  421.305307][T22801] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5286'.
[  421.660574][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5294'.
[  421.666426][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5294'.
[  421.673858][T22823] netlink: 'syz.2.5294': attribute type 19 has an invalid length.
[  421.683887][T22826] IPVS: ip_vs_add_dest(): server weight less than zero
[  421.740442][T22832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5298'.
[  421.875384][T22843] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  422.016772][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'.
[  422.023301][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'.
[  422.197518][T22871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5313'.
[  422.254053][T22873] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  422.292787][T22875] netlink: 'syz.1.5314': attribute type 9 has an invalid length.
[  422.297503][T22875] netlink: 'syz.1.5314': attribute type 9 has an invalid length.
[  422.753660][T22900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5321'.
[  422.757184][T22900] netlink: 'syz.2.5321': attribute type 7 has an invalid length.
[  422.760184][T22900] netlink: 'syz.2.5321': attribute type 8 has an invalid length.
[  422.765738][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5321'.
[  422.934021][T22904] netlink: 'syz.2.5323': attribute type 1 has an invalid length.
[  422.937417][T22904] netlink: 'syz.2.5323': attribute type 10 has an invalid length.
[  423.298862][T22928] netlink: 'syz.1.5333': attribute type 1 has an invalid length.
[  423.324554][T22928] 8021q: adding VLAN 0 to HW filter on device bond48
[  423.352903][T22928] 8021q: adding VLAN 0 to HW filter on device bond48
[  423.355730][T22928] bond48: (slave vxcan3): The slave device specified does not support setting the MAC address
[  423.360930][T22928] bond48: (slave vxcan3): Error -95 calling set_mac_address
[  423.392868][T22935] veth63: entered promiscuous mode
[  423.396539][T22935] bond48: (slave veth63): Enslaving as an active interface with a down link
[  423.408816][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.412994][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.764258][T22946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.767641][T22946] syzkaller0: entered promiscuous mode
[  423.770673][T22946] syzkaller0: entered allmulticast mode
[  423.789850][T22947] tipc: Resetting bearer <eth:syzkaller0>
[  423.806175][T22947] tipc: Disabling bearer <eth:syzkaller0>
[  424.074210][T22960] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  424.319279][T22975] netlink: 'syz.2.5348': attribute type 9 has an invalid length.
[  424.968194][T23001] bond49: entered promiscuous mode
[  424.970737][T23001] 8021q: adding VLAN 0 to HW filter on device bond49
[  424.989238][T23001] bond49: (slave bridge11): making interface the new active one
[  424.992994][T23001] bridge11: entered promiscuous mode
[  424.996154][T23001] bond49: (slave bridge11): Enslaving as an active interface with an up link
[  425.094344][T23007] bond50: entered promiscuous mode
[  425.096730][T23007] 8021q: adding VLAN 0 to HW filter on device bond50
[  425.100189][T23009] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  425.325747][T23024] 8021q: adding VLAN 0 to HW filter on device bond51
[  425.370842][T23027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.373699][T23028] syzkaller0: entered promiscuous mode
[  425.375407][T23028] syzkaller0: entered allmulticast mode
[  425.394615][T23029] tipc: Resetting bearer <eth:syzkaller0>
[  425.416187][T23029] tipc: Disabling bearer <eth:syzkaller0>
[  425.465110][T23034] pimreg3: entered allmulticast mode
[  425.690592][T23052] gretap0: entered promiscuous mode
[  426.071858][T23072] lo speed is unknown, defaulting to 1000
[  426.346248][T23082] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  426.877625][T23102] __nla_validate_parse: 7 callbacks suppressed
[  426.877645][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5392'.
[  426.908746][T23102] team0: entered promiscuous mode
[  426.910814][T23102] team0: entered allmulticast mode
[  427.078539][T23113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5396'.
[  427.082391][T23113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5396'.
[  427.089229][T23113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5396'.
[  427.157622][T23118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5398'.
[  427.348541][T23134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.355642][T23135] tipc: Resetting bearer <eth:syzkaller0>
[  427.384502][T23134] tipc: Disabling bearer <eth:syzkaller0>
[  427.436068][T23141] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20003
[  427.442630][T23141] validate_nla: 7 callbacks suppressed
[  427.442647][T23141] netlink: 'syz.0.5406': attribute type 4 has an invalid length.
[  427.560627][T23149] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5410'.
[  427.565266][T23149] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5410'.
[  427.635238][T23154] netlink: 'syz.0.5412': attribute type 1 has an invalid length.
[  427.665761][T23154] 8021q: adding VLAN 0 to HW filter on device bond48
[  427.694728][T23160] IPVS: ip_vs_add_dest(): server weight less than zero
[  427.821983][T23166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5415'.
[  428.461321][T10691] tipc: Node number set to 2204648042
[  428.567035][T23197] sctp: [Deprecated]: syz.2.5424 (pid 23197) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.567035][T23197] Use struct sctp_sack_info instead
[  428.766564][T23206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5427'.
[  429.203540][T23212] block nbd0: server does not support multiple connections per device.
[  429.206801][T23212] block nbd0: shutting down sockets
[  429.209476][T23213] netlink: 'syz.0.5429': attribute type 12 has an invalid length.
[  429.213707][T23213] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5429'.
[  430.397882][T23245] netlink: 'syz.2.5440': attribute type 20 has an invalid length.
[  430.397896][T23246] netlink: 'syz.2.5440': attribute type 20 has an invalid length.
[  430.412677][T23246] netlink: 'syz.2.5440': attribute type 20 has an invalid length.
[  430.415931][ T7686] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  430.418435][ T7686] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  430.421620][T23245] netlink: 'syz.2.5440': attribute type 20 has an invalid length.
[  430.424030][ T7686] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  430.426744][ T7686] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  430.606017][T23257] netlink: 'syz.1.5443': attribute type 1 has an invalid length.
[  430.688812][T23260] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  430.930897][T23277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.933915][T23277] syzkaller0: entered promiscuous mode
[  430.935690][T23277] syzkaller0: entered allmulticast mode
[  430.955272][T23277] tipc: Resetting bearer <eth:syzkaller0>
[  430.982248][T23277] tipc: Resetting bearer <ib:ip6gre0>
[  431.091495][T23277] tipc: Resetting bearer <eth:syzkaller0>
[  431.094365][ T5893] lo speed is unknown, defaulting to 1000
[  431.095506][ T5738] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.099596][ T5738] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  431.100964][ T5893] syz0: Port: 1 Link DOWN
[  431.105629][ T5738] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.108707][ T5738] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  431.112850][ T5893] lo speed is unknown, defaulting to 1000
[  431.124807][T23276] tipc: Disabling bearer <eth:syzkaller0>
[  431.129469][ T5738] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.132742][ T5738] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  431.135227][ T5738] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  431.137725][ T5738] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  431.140497][T23241] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  431.142889][T23241] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  431.150135][T23241] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  431.152345][T23241] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  431.240625][T23241] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI
[  431.244870][T23241] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67]
[  431.248085][T23241] CPU: 1 UID: 0 PID: 23241 Comm: syz.0.5438 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  431.252385][T23241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  431.255410][T23241] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  431.257133][T23241] Code: b9 fb bb f7 c6 05 58 73 89 05 01 48 c7 c7 00 90 9e 8c be 97 05 00 00 48 c7 c2 80 90 9e 8c e8 ea d5 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 24 66 1f f8 4d 8b 2c 24 4d 39 f5
[  431.263236][T23241] RSP: 0018:ffffc90020ebf7d8 EFLAGS: 00010206
[  431.265207][T23241] RAX: ffffffff8a03afbe RBX: 000000001fffe1ac RCX: 0000000000080000
[  431.267622][T23241] RDX: ffffc90003561000 RSI: 000000000004e4a2 RDI: 000000000004e4a3
[  431.269963][T23241] RBP: ffff888108358420 R08: ffffffff8f534927 R09: 1ffffffff1ea6924
[  431.272347][T23241] R10: dffffc0000000000 R11: fffffbfff1ea6925 R12: 00000000ffff0d60
[  431.274682][T23241] R13: dffffc0000000000 R14: ffff88810dad7c00 R15: 1ffff1102106b084
[  431.276995][T23241] FS:  00007fe6efff66c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  431.279682][T23241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.281614][T23241] CR2: 0000555574670808 CR3: 0000000111e02000 CR4: 00000000000006f0
[  431.283994][T23241] Call Trace:
[  431.285189][T23241]  <TASK>
[  431.286173][T23241]  inetdev_event+0x2a7/0x15b0
[  431.287858][T23241]  ? __pfx_inetdev_event+0x10/0x10
[  431.289912][T23241]  notifier_call_chain+0x1b6/0x3e0
[  431.292010][T23241]  netif_close_many+0x29c/0x410
[  431.293950][T23241]  ? __pfx_netif_close_many+0x10/0x10
[  431.296018][T23241]  ? __mutex_lock+0x335/0x1360
[  431.297936][T23241]  netif_close+0x158/0x210
[  431.299611][T23241]  ? __pfx_netif_close+0x10/0x10
[  431.301493][T23241]  ? __pfx___mutex_lock+0x10/0x10
[  431.303332][T23241]  dev_close+0x10a/0x220
[  431.304979][T23241]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[  431.307334][T23241]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  431.309364][T23241]  cfg80211_rfkill_set_block+0x2d/0x50
[  431.311106][T23241]  rfkill_set_block+0x1d2/0x440
[  431.312732][T23241]  rfkill_fop_write+0x44b/0x570
[  431.314309][T23241]  ? __pfx_rfkill_fop_write+0x10/0x10
[  431.315984][T23241]  ? security_file_permission+0x10/0x290
[  431.317807][T23241]  ? rw_verify_area+0x255/0x4d0
[  431.319352][T23241]  ? __lock_acquire+0xab9/0xd20
[  431.320922][T23241]  ? __pfx_rfkill_fop_write+0x10/0x10
[  431.322646][T23241]  vfs_write+0x27e/0xa90
[  431.324010][T23241]  ? __pfx_vfs_write+0x10/0x10
[  431.325578][T23241]  ? __fget_files+0x2a/0x420
[  431.327033][T23241]  ? __fget_files+0x2a/0x420
[  431.328528][T23241]  ? __fget_files+0x3a0/0x420
[  431.330050][T23241]  ? __fget_files+0x2a/0x420
[  431.331555][T23241]  ksys_write+0x145/0x250
[  431.332935][T23241]  ? __pfx_ksys_write+0x10/0x10
[  431.334490][T23241]  ? do_syscall_64+0xbe/0x3b0
[  431.335966][T23241]  do_syscall_64+0xfa/0x3b0
[  431.337451][T23241]  ? lockdep_hardirqs_on+0x9c/0x150
[  431.339071][T23241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.341023][T23241]  ? exc_page_fault+0x9f/0xf0
[  431.342605][T23241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.344581][T23241] RIP: 0033:0x7fe6f1d8ebe9
[  431.346001][T23241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.352058][T23241] RSP: 002b:00007fe6efff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  431.354698][T23241] RAX: ffffffffffffffda RBX: 00007fe6f1fb5fa0 RCX: 00007fe6f1d8ebe9
[  431.357163][T23241] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  431.359687][T23241] RBP: 00007fe6f1e11e19 R08: 0000000000000000 R09: 0000000000000000
[  431.362149][T23241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.364653][T23241] R13: 00007fe6f1fb6038 R14: 00007fe6f1fb5fa0 R15: 00007ffd5d8210e8
[  431.367121][T23241]  </TASK>
[  431.368141][T23241] Modules linked in:
[  431.370928][T23241] ---[ end trace 0000000000000000 ]---
[  431.374719][T23241] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690
[  431.376697][T23241] Code: b9 fb bb f7 c6 05 58 73 89 05 01 48 c7 c7 00 90 9e 8c be 97 05 00 00 48 c7 c2 80 90 9e 8c e8 ea d5 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 24 66 1f f8 4d 8b 2c 24 4d 39 f5
[  431.383488][T23241] RSP: 0018:ffffc90020ebf7d8 EFLAGS: 00010206
[  431.385520][T23241] RAX: ffffffff8a03afbe RBX: 000000001fffe1ac RCX: 0000000000080000
[  431.388169][T23241] RDX: ffffc90003561000 RSI: 000000000004e4a2 RDI: 000000000004e4a3
[  431.390630][T23241] RBP: ffff888108358420 R08: ffffffff8f534927 R09: 1ffffffff1ea6924
[  431.394241][T23241] R10: dffffc0000000000 R11: fffffbfff1ea6925 R12: 00000000ffff0d60
[  431.397152][T23241] R13: dffffc0000000000 R14: ffff88810dad7c00 R15: 1ffff1102106b084
[  431.399682][T23241] FS:  00007fe6efff66c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  431.402974][T23241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.405173][T23241] CR2: 0000555574670808 CR3: 0000000111e02000 CR4: 00000000000006f0
[  431.407671][T23241] Kernel panic - not syncing: Fatal exception
[  431.410235][T23241] Kernel Offset: disabled
[  431.411670][T23241] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:28:14  Registers:
info registers vcpu 0

CPU#0
RAX=55f42b63b6c22d00 RBX=ffffffff81968308 RCX=55f42b63b6c22d00 RDX=0000000000000001
RSI=ffffffff8be32660 RDI=ffffffff81968308 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78e3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000001fa90000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000004f770 RDI=000000000004f771 RBP=00000000000003f8 RSP=ffffc90020ebef70
R8 =ffff8881067d0237 R9 =1ffff11020cfa046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48d7 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe6efff66c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555574670808 CR3=0000000111e02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=648f4a3e36ec0ec0 9c2c73bdbdebeab0 XMM03=40643e8b79b76c64 fc0a7c5521cce256
XMM04=54e629d82c0dbbb0 0852e3a300dbfbc2 XMM05=8ca8ed3d128dd05d f7b9b851b109315c
XMM06=92a7d845b825af91 4d4d101bd52ead1e XMM07=c29e8da943066128 4ac79d64ec38240e
XMM08=4054e629d82c0dbb b00852e3a300dbfb XMM09=0000000000000000 00007f1a5b612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
